last executing test programs: 3.524784157s ago: executing program 0 (id=1213): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) listen(r1, 0x6) r2 = dup(r0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x400, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) close(0x3) 3.3681862s ago: executing program 4 (id=1217): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) socket$xdp(0x2c, 0x3, 0x0) open(0x0, 0x64842, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r1) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) socket$xdp(0x2c, 0x3, 0x0) 2.678552735s ago: executing program 0 (id=1220): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000003c0)='kmem_cache_free\x00', r0}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r2, 0x0, 0xb, &(0x7f00000000c0)=0x3, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x4000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.675789315s ago: executing program 2 (id=1233): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x4, 0xc7d, 0x9, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85847817353d2dbad05dd5", 0x1c, 0xffffffffffffffff) 2.421264256s ago: executing program 0 (id=1221): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r2) syz_usb_connect(0x4, 0x24, &(0x7f0000000480)=ANY=[], 0x0) ioctl$EVIOCRMFF(r2, 0x40095505, 0x0) 2.420991016s ago: executing program 2 (id=1222): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000000110000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) write$qrtrtun(0xffffffffffffffff, &(0x7f0000000200)="9bcb", 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 2.420751886s ago: executing program 4 (id=1223): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sys_enter\x00', r2}, 0x10) syz_read_part_table(0x618, &(0x7f0000002200)="$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") 2.420487286s ago: executing program 3 (id=1236): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r4], 0x1c}}, 0x0) write$nci(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="61030604030280727ce716"], 0xb) 2.272980517s ago: executing program 4 (id=1225): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x10b, &(0x7f0000000140)={0x0, 0x8b7c, 0x800, 0x200007, 0x22}, &(0x7f0000000940)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r2, 0x47f9, 0x4db, 0x0, 0x0, 0x0) clock_nanosleep(0x2, 0x37dc12502000000, &(0x7f00000000c0)={0x0, 0x989680}, 0x0) 2.179723115s ago: executing program 4 (id=1226): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x617a, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000031c0)={0x1}) 1.896892138s ago: executing program 2 (id=1227): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff}, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x52, 0x0, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 1.62432975s ago: executing program 0 (id=1229): r0 = gettid() bpf$MAP_CREATE(0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r1, 0x2) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r2, 0x2) 1.540841877s ago: executing program 3 (id=1231): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r4}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) 1.49387752s ago: executing program 1 (id=1237): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000140)={[{@grpid}, {@user_xattr}]}, 0xff, 0x48f, &(0x7f0000000b80)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) 1.462501053s ago: executing program 3 (id=1238): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) socket$xdp(0x2c, 0x3, 0x0) open(0x0, 0x64842, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r1) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) socket$xdp(0x2c, 0x3, 0x0) 1.312409385s ago: executing program 1 (id=1239): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000800)='kfree_skb\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000005c0)='kfree_skb\x00', r1}, 0x18) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, 0x0}, 0x0) 1.252950349s ago: executing program 1 (id=1240): bpf$PROG_LOAD(0x5, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x6000) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x2000414, &(0x7f0000000500)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64=0x0, @ANYRESHEX, @ANYRESHEX, @ANYRESDEC], 0x1, 0x2b8, &(0x7f0000000800)="$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") mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000f80)='./bus/file0\x00', 0x810408, 0x0, 0xff, 0x0, &(0x7f00000007c0)) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='./bus/file0/file0\x00') 1.252772689s ago: executing program 4 (id=1241): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) listen(r1, 0x6) r2 = dup(r0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x400, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) close(0x3) 1.229509222s ago: executing program 1 (id=1242): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x10b, &(0x7f0000000140)={0x0, 0x8b7c, 0x800, 0x200007, 0x22}, &(0x7f0000000940)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r2, 0x47f9, 0x4db, 0x0, 0x0, 0x0) clock_nanosleep(0x2, 0x37dc12502000000, &(0x7f00000000c0)={0x0, 0x989680}, 0x0) 844.347682ms ago: executing program 3 (id=1243): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000000110000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) write$qrtrtun(0xffffffffffffffff, &(0x7f0000000200)="9bcb", 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 843.449882ms ago: executing program 2 (id=1253): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@delchain={0x2c, 0x2e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff2, 0xffff}, {0x0, 0xd}}, [@TCA_CHAIN={0x8, 0xb, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 804.678525ms ago: executing program 2 (id=1244): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x98142, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0x6, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000540), 0x84) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1e, 0x12, r1, 0x0) 803.900646ms ago: executing program 1 (id=1255): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r2}, 0x20) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x80d, 0x0, 0x10000000, 0x5, 0x4}, 0x1, r4}}]}, {0x0, 0xa}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x1}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) 751.79634ms ago: executing program 0 (id=1245): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r2) syz_usb_connect(0x4, 0x24, &(0x7f0000000480)=ANY=[], 0x0) ioctl$EVIOCRMFF(r2, 0x40095505, 0x0) 723.841882ms ago: executing program 1 (id=1246): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r4], 0x1c}}, 0x0) write$nci(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="61030604030280727ce716"], 0xb) 610.414681ms ago: executing program 3 (id=1247): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x50) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xffef, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 582.939514ms ago: executing program 2 (id=1248): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0xd9f7, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f00000009c0)="3bf58d7d45d32cfe1da7c797b82f16713d", 0x11) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7fffeffd) 416.09µs ago: executing program 0 (id=1249): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sys_enter\x00', r2}, 0x10) syz_read_part_table(0x618, &(0x7f0000002200)="$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") 128.881µs ago: executing program 3 (id=1250): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) 0s ago: executing program 4 (id=1251): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x4d, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x18) socket(0x40000000002, 0x3, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000ff07000000000000000000008500000036000000850000001100000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) kernel console output (not intermixed with test programs): sadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.778415][ T3289] cgroup: Unknown subsys name 'cpuset' [ 28.784901][ T3289] cgroup: Unknown subsys name 'rlimit' [ 28.925630][ T29] audit: type=1400 audit(1756225523.183:65): avc: denied { setattr } for pid=3289 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.949868][ T29] audit: type=1400 audit(1756225523.183:66): avc: denied { create } for pid=3289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.970924][ T29] audit: type=1400 audit(1756225523.183:67): avc: denied { write } for pid=3289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.992076][ T29] audit: type=1400 audit(1756225523.183:68): avc: denied { read } for pid=3289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.012558][ T29] audit: type=1400 audit(1756225523.203:69): avc: denied { mounton } for pid=3289 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 29.022041][ T3296] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 29.037716][ T29] audit: type=1400 audit(1756225523.203:70): avc: denied { mount } for pid=3289 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 29.071324][ T29] audit: type=1400 audit(1756225523.313:71): avc: denied { relabelto } for pid=3296 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.110491][ T3289] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 30.327983][ T3311] chnl_net:caif_netlink_parms(): no params data found [ 30.336911][ T3302] chnl_net:caif_netlink_parms(): no params data found [ 30.367411][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 30.411732][ T3304] chnl_net:caif_netlink_parms(): no params data found [ 30.468317][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.475881][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.483132][ T3302] bridge_slave_0: entered allmulticast mode [ 30.489847][ T3302] bridge_slave_0: entered promiscuous mode [ 30.525876][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.533180][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.541641][ T3302] bridge_slave_1: entered allmulticast mode [ 30.548847][ T3302] bridge_slave_1: entered promiscuous mode [ 30.565253][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.572613][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.579942][ T3314] bridge_slave_0: entered allmulticast mode [ 30.586642][ T3314] bridge_slave_0: entered promiscuous mode [ 30.593958][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.601093][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.608581][ T3311] bridge_slave_0: entered allmulticast mode [ 30.615130][ T3311] bridge_slave_0: entered promiscuous mode [ 30.627381][ T3308] chnl_net:caif_netlink_parms(): no params data found [ 30.646640][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.653882][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.661053][ T3314] bridge_slave_1: entered allmulticast mode [ 30.667554][ T3314] bridge_slave_1: entered promiscuous mode [ 30.673938][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.681208][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.688611][ T3311] bridge_slave_1: entered allmulticast mode [ 30.695106][ T3311] bridge_slave_1: entered promiscuous mode [ 30.705636][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.716349][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.726106][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.733646][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.741088][ T3304] bridge_slave_0: entered allmulticast mode [ 30.748159][ T3304] bridge_slave_0: entered promiscuous mode [ 30.782845][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.790212][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.798738][ T3304] bridge_slave_1: entered allmulticast mode [ 30.805374][ T3304] bridge_slave_1: entered promiscuous mode [ 30.827539][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.840292][ T3302] team0: Port device team_slave_0 added [ 30.856966][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.867821][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.879063][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.889135][ T3302] team0: Port device team_slave_1 added [ 30.906283][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.921812][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.941618][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.948629][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.975455][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.991235][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.998341][ T3308] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.005604][ T3308] bridge_slave_0: entered allmulticast mode [ 31.012185][ T3308] bridge_slave_0: entered promiscuous mode [ 31.029402][ T3311] team0: Port device team_slave_0 added [ 31.035387][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.042420][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.068922][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.085287][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.092527][ T3308] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.099882][ T3308] bridge_slave_1: entered allmulticast mode [ 31.106624][ T3308] bridge_slave_1: entered promiscuous mode [ 31.123984][ T3311] team0: Port device team_slave_1 added [ 31.137775][ T3314] team0: Port device team_slave_0 added [ 31.149718][ T3304] team0: Port device team_slave_0 added [ 31.156939][ T3304] team0: Port device team_slave_1 added [ 31.169922][ T3314] team0: Port device team_slave_1 added [ 31.177455][ T3308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.202774][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.209961][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.235897][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.247818][ T3308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.273160][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.280404][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.307073][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.323411][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.331238][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.357534][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.369670][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.376642][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.403001][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.422925][ T3302] hsr_slave_0: entered promiscuous mode [ 31.429173][ T3302] hsr_slave_1: entered promiscuous mode [ 31.435576][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.443258][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.469335][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.480884][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.488139][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.514671][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.554223][ T3308] team0: Port device team_slave_0 added [ 31.580749][ T3308] team0: Port device team_slave_1 added [ 31.593738][ T3311] hsr_slave_0: entered promiscuous mode [ 31.601138][ T3311] hsr_slave_1: entered promiscuous mode [ 31.608189][ T3311] debugfs: 'hsr0' already exists in 'hsr' [ 31.614204][ T3311] Cannot create hsr debugfs directory [ 31.622451][ T3304] hsr_slave_0: entered promiscuous mode [ 31.628631][ T3304] hsr_slave_1: entered promiscuous mode [ 31.634524][ T3304] debugfs: 'hsr0' already exists in 'hsr' [ 31.640356][ T3304] Cannot create hsr debugfs directory [ 31.653024][ T3314] hsr_slave_0: entered promiscuous mode [ 31.659144][ T3314] hsr_slave_1: entered promiscuous mode [ 31.665337][ T3314] debugfs: 'hsr0' already exists in 'hsr' [ 31.671177][ T3314] Cannot create hsr debugfs directory [ 31.698299][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.705456][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.731700][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.763631][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.771164][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.797394][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.886003][ T3308] hsr_slave_0: entered promiscuous mode [ 31.892457][ T3308] hsr_slave_1: entered promiscuous mode [ 31.898603][ T3308] debugfs: 'hsr0' already exists in 'hsr' [ 31.904747][ T3308] Cannot create hsr debugfs directory [ 32.014144][ T3302] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 32.031338][ T3302] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 32.040087][ T3302] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 32.051666][ T3302] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 32.082863][ T3311] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 32.098058][ T3311] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 32.110798][ T3311] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 32.122756][ T3311] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 32.153664][ T3304] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 32.163257][ T3304] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 32.176287][ T3304] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 32.186131][ T3304] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 32.219802][ T3308] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 32.238177][ T3308] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 32.247014][ T3308] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 32.273511][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.281354][ T3308] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 32.310537][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.321707][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.337900][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.345078][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.359114][ T3314] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 32.369183][ T3314] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 32.379633][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.387420][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.397313][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.407502][ T3314] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 32.424827][ T3314] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 32.434949][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.442274][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.456463][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.469266][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.476483][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.498833][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.518340][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.525668][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.544573][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.551849][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.599383][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.617143][ T3311] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.627902][ T3311] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.657806][ T3308] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.681652][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.688951][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.704496][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.711678][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.762031][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.776775][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.806692][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.820105][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.842136][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.861837][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.869761][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.889238][ T316] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.896501][ T316] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.933734][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.966557][ T3314] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.040638][ T3311] veth0_vlan: entered promiscuous mode [ 33.060139][ T3311] veth1_vlan: entered promiscuous mode [ 33.095709][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.113093][ T3304] veth0_vlan: entered promiscuous mode [ 33.131837][ T3302] veth0_vlan: entered promiscuous mode [ 33.147882][ T3304] veth1_vlan: entered promiscuous mode [ 33.159028][ T3302] veth1_vlan: entered promiscuous mode [ 33.171519][ T3311] veth0_macvtap: entered promiscuous mode [ 33.180119][ T3308] veth0_vlan: entered promiscuous mode [ 33.195241][ T3308] veth1_vlan: entered promiscuous mode [ 33.202088][ T3311] veth1_macvtap: entered promiscuous mode [ 33.223634][ T3302] veth0_macvtap: entered promiscuous mode [ 33.236537][ T3304] veth0_macvtap: entered promiscuous mode [ 33.243762][ T3302] veth1_macvtap: entered promiscuous mode [ 33.252904][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.265136][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.274729][ T3304] veth1_macvtap: entered promiscuous mode [ 33.291264][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.300041][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.310821][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.325678][ T3314] veth0_vlan: entered promiscuous mode [ 33.332399][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.342361][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.361104][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.372703][ T3308] veth0_macvtap: entered promiscuous mode [ 33.380945][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.397012][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.409300][ T3308] veth1_macvtap: entered promiscuous mode [ 33.416071][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.434859][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.442281][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.462263][ T3311] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 33.471264][ T3314] veth1_vlan: entered promiscuous mode [ 33.487703][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.496958][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.522874][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.533385][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.551308][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.583091][ T3475] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5'. [ 33.604465][ T3475] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5'. [ 33.612734][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.637164][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.648488][ T3314] veth0_macvtap: entered promiscuous mode [ 33.657800][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 33.657877][ T29] audit: type=1400 audit(1756225527.923:104): avc: denied { create } for pid=3477 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 33.666141][ T3314] veth1_macvtap: entered promiscuous mode [ 33.696288][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.698097][ T29] audit: type=1400 audit(1756225527.953:105): avc: denied { create } for pid=3481 comm="syz.4.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 33.724912][ T29] audit: type=1400 audit(1756225527.953:106): avc: denied { setopt } for pid=3481 comm="syz.4.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 33.736283][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.744174][ T29] audit: type=1400 audit(1756225527.953:107): avc: denied { connect } for pid=3481 comm="syz.4.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 33.772563][ T29] audit: type=1400 audit(1756225527.953:108): avc: denied { connect } for pid=3477 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 33.793627][ T2181] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.804505][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.812852][ T57] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.824849][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.852063][ T57] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.866687][ T29] audit: type=1400 audit(1756225528.123:109): avc: denied { open } for pid=3485 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 33.886036][ T29] audit: type=1400 audit(1756225528.123:110): avc: denied { kernel } for pid=3485 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 33.919855][ T57] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.938953][ T57] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.950028][ T57] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.968562][ T29] audit: type=1400 audit(1756225528.173:111): avc: denied { create } for pid=3485 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.989503][ T29] audit: type=1400 audit(1756225528.173:112): avc: denied { write } for pid=3485 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.009747][ T29] audit: type=1400 audit(1756225528.173:113): avc: denied { read } for pid=3485 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.092246][ T3497] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 34.108089][ T3497] FAT-fs (loop5): unable to read boot sector [ 34.301772][ T3526] loop1: detected capacity change from 0 to 128 [ 34.351977][ T3528] netlink: 20 bytes leftover after parsing attributes in process `syz.1.25'. [ 34.536725][ T3546] loop4: detected capacity change from 0 to 512 [ 34.594333][ T3546] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.33: casefold flag without casefold feature [ 34.624816][ T3546] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.33: couldn't read orphan inode 15 (err -117) [ 34.699476][ T3546] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.130534][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.145437][ T3590] netlink: 'syz.1.54': attribute type 39 has an invalid length. [ 35.202408][ T3594] netlink: 8 bytes leftover after parsing attributes in process `syz.4.53'. [ 35.219221][ T3596] loop0: detected capacity change from 0 to 512 [ 35.242793][ T3596] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.267258][ T3596] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.282833][ T3598] loop2: detected capacity change from 0 to 164 [ 35.320308][ T3598] Unable to read rock-ridge attributes [ 35.334821][ T3598] Unable to read rock-ridge attributes [ 35.347501][ T3598] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 35.359732][ T3606] process 'syz.4.59' launched './file0' with NULL argv: empty string added [ 35.466097][ T3616] pim6reg1: entered promiscuous mode [ 35.472094][ T3616] pim6reg1: entered allmulticast mode [ 35.492656][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.609286][ T3626] loop3: detected capacity change from 0 to 1024 [ 35.651347][ T3626] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.778484][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.901381][ T3661] capability: warning: `syz.2.81' uses 32-bit capabilities (legacy support in use) [ 36.066407][ T3682] syz.0.88 (3682) used greatest stack depth: 10888 bytes left [ 36.170470][ T3703] cgroup: Unknown subsys name 'cpuset' [ 36.338246][ T3716] loop0: detected capacity change from 0 to 512 [ 36.357218][ T3716] EXT4-fs: Ignoring removed mblk_io_submit option [ 36.449271][ T3716] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 36.462682][ T3716] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 36.556291][ T3716] EXT4-fs (loop0): 1 truncate cleaned up [ 36.570569][ T3723] tipc: Started in network mode [ 36.575569][ T3723] tipc: Node identity 72b8f7d23b5f, cluster identity 4711 [ 36.583118][ T3723] tipc: Enabled bearer , priority 0 [ 36.604274][ T3718] syz.4.97 (3718) used greatest stack depth: 10176 bytes left [ 36.613630][ T3716] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.663752][ T3728] tipc: Disabling bearer [ 36.888229][ T3733] loop4: detected capacity change from 0 to 164 [ 37.092142][ T3733] syz.4.102: attempt to access beyond end of device [ 37.092142][ T3733] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 37.113095][ T3733] syz.4.102: attempt to access beyond end of device [ 37.113095][ T3733] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 37.169732][ T3742] loop2: detected capacity change from 0 to 512 [ 37.211320][ T3742] journal_path: Non-blockdev passed as './bus' [ 37.217672][ T3742] EXT4-fs: error: could not find journal device path [ 37.351447][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.368290][ T3748] loop3: detected capacity change from 0 to 512 [ 37.409594][ T3748] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.433770][ T3748] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.455573][ T3748] EXT4-fs error (device loop3): ext4_empty_dir:3080: inode #12: comm syz.3.105: Directory hole found for htree leaf block 0 [ 37.470982][ T3754] SELinux: Context @ is not valid (left unmapped). [ 37.481969][ T3748] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 37.528580][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.618121][ T3763] hub 6-0:1.0: USB hub found [ 37.633475][ T3763] hub 6-0:1.0: 8 ports detected [ 37.684513][ T3774] sch_tbf: burst 1821 is lower than device lo mtu (65550) ! [ 37.975724][ T3811] loop3: detected capacity change from 0 to 128 [ 38.004524][ T3811] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 38.025837][ T3811] ext4 filesystem being mounted at /20/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 38.054437][ T3815] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 38.055827][ T3811] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 38.193756][ T3825] netlink: 96 bytes leftover after parsing attributes in process `syz.1.142'. [ 38.248743][ T3834] netlink: 4 bytes leftover after parsing attributes in process `syz.1.146'. [ 38.275634][ T3836] ======================================================= [ 38.275634][ T3836] WARNING: The mand mount option has been deprecated and [ 38.275634][ T3836] and is ignored by this kernel. Remove the mand [ 38.275634][ T3836] option from the mount to silence this warning. [ 38.275634][ T3836] ======================================================= [ 38.322185][ T3838] @0Ù: renamed from bond_slave_1 (while UP) [ 38.530146][ T3854] loop0: detected capacity change from 0 to 512 [ 38.600387][ T3857] ref_ctr increment failed for inode: 0x83 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff88810a1e5640 [ 38.622865][ T3854] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.662431][ T3856] uprobe: syz.1.157:3856 failed to unregister, leaking uprobe [ 38.760463][ T3854] ext4 filesystem being mounted at /36/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.831518][ T29] kauditd_printk_skb: 1051 callbacks suppressed [ 38.831532][ T29] audit: type=1400 audit(1756225533.093:1165): avc: denied { name_connect } for pid=3862 comm="syz.2.159" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 38.862733][ T29] audit: type=1400 audit(1756225533.123:1166): avc: denied { listen } for pid=3862 comm="syz.2.159" lport=38206 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 38.902499][ T3854] syz.0.155 (3854) used greatest stack depth: 10008 bytes left [ 38.933005][ T29] audit: type=1400 audit(1756225533.193:1167): avc: denied { accept } for pid=3862 comm="syz.2.159" lport=38206 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 38.956030][ T29] audit: type=1400 audit(1756225533.193:1168): avc: denied { setopt } for pid=3862 comm="syz.2.159" lport=38206 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 39.031913][ T29] audit: type=1400 audit(1756225533.293:1169): avc: denied { mounton } for pid=3869 comm="syz.1.160" path="/23/file0" dev="tmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 39.076699][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.163456][ T29] audit: type=1400 audit(1756225533.423:1170): avc: denied { compute_member } for pid=3879 comm="syz.2.165" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 39.213201][ T29] audit: type=1400 audit(1756225533.463:1171): avc: denied { mount } for pid=3885 comm="syz.3.168" name="/" dev="ramfs" ino=5564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 39.236153][ T29] audit: type=1400 audit(1756225533.463:1172): avc: denied { read } for pid=3882 comm="syz.0.167" name="usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 39.260053][ T29] audit: type=1400 audit(1756225533.463:1173): avc: denied { open } for pid=3882 comm="syz.0.167" path="/dev/usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 39.284778][ T29] audit: type=1400 audit(1756225533.473:1174): avc: denied { ioctl } for pid=3882 comm="syz.0.167" path="/dev/usbmon7" dev="devtmpfs" ino=163 ioctlcmd=0x9206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 39.481514][ T3919] openvswitch: netlink: Message has 6 unknown bytes. [ 39.510523][ T3923] netlink: 24 bytes leftover after parsing attributes in process `syz.4.185'. [ 39.821128][ T3953] loop1: detected capacity change from 0 to 128 [ 39.849945][ T3953] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 39.882826][ T3953] ext4 filesystem being mounted at /32/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 39.931886][ T3314] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 39.974979][ T3964] netlink: 360 bytes leftover after parsing attributes in process `syz.2.201'. [ 40.015441][ T3970] loop4: detected capacity change from 0 to 128 [ 40.028920][ T3970] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 40.049658][ T3970] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 40.077451][ T3975] pim6reg1: entered promiscuous mode [ 40.082854][ T3975] pim6reg1: entered allmulticast mode [ 40.114582][ T37] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 40.125787][ T3982] netlink: 24 bytes leftover after parsing attributes in process `syz.3.210'. [ 40.294382][ T4004] loop4: detected capacity change from 0 to 8192 [ 40.361338][ T4010] loop4: detected capacity change from 0 to 2048 [ 40.408203][ T4010] loop4: p1 < > p4 [ 40.415973][ T4010] loop4: p4 size 8388608 extends beyond EOD, truncated [ 40.557052][ T4024] loop0: detected capacity change from 0 to 512 [ 40.572100][ T2957] kernel write not supported for file bpf-prog (pid: 2957 comm: kworker/0:2) [ 40.591767][ T4024] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 40.602174][ T4024] EXT4-fs (loop0): orphan cleanup on readonly fs [ 40.620731][ T4024] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.229: Failed to acquire dquot type 1 [ 40.687113][ T4024] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.229: bg 0: block 40: padding at end of block bitmap is not set [ 40.738011][ T4024] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 40.766749][ T4024] EXT4-fs (loop0): 1 truncate cleaned up [ 40.775220][ T4034] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 40.781775][ T4034] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 40.789881][ T4034] vhci_hcd vhci_hcd.0: Device attached [ 40.809515][ T4024] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 40.871789][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.077688][ T1036] usb 6-1: SetAddress Request (2) to port 0 [ 41.083843][ T1036] usb 6-1: new SuperSpeed USB device number 2 using vhci_hcd [ 41.465029][ T4122] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 649 [ 41.633927][ T4155] loop3: detected capacity change from 0 to 128 [ 41.734527][ T4155] syz.3.252: attempt to access beyond end of device [ 41.734527][ T4155] loop3: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 41.751079][ T4155] syz.3.252: attempt to access beyond end of device [ 41.751079][ T4155] loop3: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 41.765181][ T4155] syz.3.252: attempt to access beyond end of device [ 41.765181][ T4155] loop3: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 41.778468][ T4181] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 41.780828][ T4155] syz.3.252: attempt to access beyond end of device [ 41.780828][ T4155] loop3: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 41.802908][ T4155] syz.3.252: attempt to access beyond end of device [ 41.802908][ T4155] loop3: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 41.816896][ T4155] syz.3.252: attempt to access beyond end of device [ 41.816896][ T4155] loop3: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 41.833117][ T4155] syz.3.252: attempt to access beyond end of device [ 41.833117][ T4155] loop3: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 41.847151][ T4155] syz.3.252: attempt to access beyond end of device [ 41.847151][ T4155] loop3: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 41.964040][ T4202] loop3: detected capacity change from 0 to 1024 [ 41.980533][ T4202] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.032782][ T4216] netlink: 32 bytes leftover after parsing attributes in process `syz.0.262'. [ 42.070404][ T4221] vlan2: entered allmulticast mode [ 42.147086][ C1] hrtimer: interrupt took 41820 ns [ 42.157232][ T31] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 42.173743][ T31] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 320 with error 28 [ 42.186530][ T31] EXT4-fs (loop3): This should not happen!! Data will be lost [ 42.186530][ T31] [ 42.196251][ T31] EXT4-fs (loop3): Total free blocks count 0 [ 42.202474][ T31] EXT4-fs (loop3): Free/Dirty block details [ 42.208714][ T31] EXT4-fs (loop3): free_blocks=68451041280 [ 42.214830][ T31] EXT4-fs (loop3): dirty_blocks=320 [ 42.220666][ T31] EXT4-fs (loop3): Block reservation details [ 42.226724][ T31] EXT4-fs (loop3): i_reserved_data_blocks=20 [ 42.259273][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.421460][ T4261] netlink: 14 bytes leftover after parsing attributes in process `syz.1.273'. [ 42.450785][ T4035] vhci_hcd: connection reset by peer [ 42.458387][ T4261] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 42.469074][ T31] vhci_hcd: stop threads [ 42.473477][ T31] vhci_hcd: release socket [ 42.478057][ T31] vhci_hcd: disconnect device [ 42.486804][ T4261] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 42.502543][ T4261] bond0 (unregistering): Released all slaves [ 42.573686][ T4284] loop1: detected capacity change from 0 to 512 [ 42.584691][ T4284] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 42.628302][ T4284] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 42.644153][ T4284] EXT4-fs (loop1): 1 truncate cleaned up [ 42.650916][ T4284] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.703660][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.915903][ T37] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 43.209734][ T4394] netlink: 'syz.1.302': attribute type 30 has an invalid length. [ 43.287934][ T4394] Zero length message leads to an empty skb [ 43.371688][ T4406] cgroup: Unknown subsys name '¬§@﬽æì¦4*oäÂÒ£hÓîºoþüíUÜ' [ 43.405022][ T4406] loop3: detected capacity change from 0 to 2048 [ 43.424972][ T4406] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.442964][ T4406] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 43.475526][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.850252][ T29] kauditd_printk_skb: 266 callbacks suppressed [ 43.850268][ T29] audit: type=1326 audit(1756225538.113:1439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4428 comm="syz.1.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f08c3f25ba7 code=0x7ffc0000 [ 43.887859][ T29] audit: type=1326 audit(1756225538.143:1440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4428 comm="syz.1.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f08c3ecade9 code=0x7ffc0000 [ 43.911826][ T29] audit: type=1326 audit(1756225538.143:1441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4428 comm="syz.1.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f08c3f25ba7 code=0x7ffc0000 [ 43.935615][ T29] audit: type=1326 audit(1756225538.143:1442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4428 comm="syz.1.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f08c3ecade9 code=0x7ffc0000 [ 43.959669][ T29] audit: type=1326 audit(1756225538.143:1443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4428 comm="syz.1.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08c3f2ebe9 code=0x7ffc0000 [ 43.983431][ T29] audit: type=1326 audit(1756225538.143:1444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4428 comm="syz.1.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08c3f2ebe9 code=0x7ffc0000 [ 44.007268][ T29] audit: type=1326 audit(1756225538.143:1445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4428 comm="syz.1.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f08c3f2ebe9 code=0x7ffc0000 [ 44.032131][ T29] audit: type=1326 audit(1756225538.143:1446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4428 comm="syz.1.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f08c3f25ba7 code=0x7ffc0000 [ 44.055817][ T29] audit: type=1326 audit(1756225538.143:1447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4428 comm="syz.1.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f08c3ecade9 code=0x7ffc0000 [ 44.079101][ T29] audit: type=1326 audit(1756225538.143:1448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4428 comm="syz.1.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08c3f2ebe9 code=0x7ffc0000 [ 44.108043][ T4430] loop4: detected capacity change from 0 to 1024 [ 44.154357][ T4433] loop1: detected capacity change from 0 to 2048 [ 44.172864][ T4433] EXT4-fs: inline encryption not supported [ 44.195279][ T4430] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.242100][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.254681][ T4433] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.325689][ T4444] vlan2: entered allmulticast mode [ 44.427999][ T4449] EXT4-fs error (device loop1): ext4_ext_precache:632: inode #2: comm syz.1.317: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 44.549188][ T4454] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.602508][ T4454] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.620368][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.710955][ T4454] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.794998][ T4454] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.851026][ T4353] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.873568][ T4346] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.892578][ T4346] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.901557][ T4346] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.966406][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.985266][ T10] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 44.999575][ T4491] loop2: detected capacity change from 0 to 512 [ 45.023750][ T4491] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 45.038890][ T4495] syz.3.343 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 45.055358][ T4491] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.341: Failed to acquire dquot type 1 [ 45.070695][ T4491] EXT4-fs (loop2): 1 truncate cleaned up [ 45.090469][ T4491] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.143272][ T4505] vlan2: entered allmulticast mode [ 45.154530][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.174265][ T4511] syz.1.350 uses obsolete (PF_INET,SOCK_PACKET) [ 45.221156][ T4519] pim6reg: entered allmulticast mode [ 45.250737][ T4519] bridge0: entered allmulticast mode [ 45.315449][ T4531] netlink: 'syz.2.358': attribute type 1 has an invalid length. [ 45.337979][ T4533] loop1: detected capacity change from 0 to 2048 [ 45.353976][ T4531] 8021q: adding VLAN 0 to HW filter on device bond1 [ 45.361841][ T4533] loop1: p1 < > p4 [ 45.367304][ T4533] loop1: p4 size 8388608 extends beyond EOD, truncated [ 45.379330][ T4539] netlink: 24 bytes leftover after parsing attributes in process `syz.3.355'. [ 45.402060][ T4538] bond1: (slave veth3): Enslaving as an active interface with a down link [ 45.438651][ T4543] netlink: 96 bytes leftover after parsing attributes in process `syz.4.363'. [ 45.477326][ T4531] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 45.484717][ T4531] bond1: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 45.620369][ T4562] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 45.652736][ T4562] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 45.703483][ T4571] loop4: detected capacity change from 0 to 128 [ 45.717069][ T4573] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4573 comm=syz.0.377 [ 46.119698][ T4611] loop0: detected capacity change from 0 to 512 [ 46.147962][ T1036] usb 6-1: device descriptor read/8, error -110 [ 46.156165][ T4611] EXT4-fs: Ignoring removed nobh option [ 46.254135][ T4611] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm syz.0.393: corrupted inode contents [ 46.266079][ T1036] usb 6-1: new SuperSpeed USB device number 2 using vhci_hcd [ 46.288082][ T1036] usb 6-1: enqueue for inactive port 0 [ 46.289117][ T4611] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #3: comm syz.0.393: mark_inode_dirty error [ 46.293695][ T1036] usb 6-1: enqueue for inactive port 0 [ 46.323675][ T1036] usb 6-1: enqueue for inactive port 0 [ 46.356339][ T4611] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm syz.0.393: corrupted inode contents [ 46.390681][ T4611] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.393: mark_inode_dirty error [ 46.426438][ T4611] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.393: Failed to acquire dquot type 0 [ 46.467899][ T4611] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.393: corrupted inode contents [ 46.500596][ T4611] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #16: comm syz.0.393: mark_inode_dirty error [ 46.533956][ T4611] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.393: corrupted inode contents [ 46.564700][ T4638] loop2: detected capacity change from 0 to 1024 [ 46.586939][ T4611] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.393: mark_inode_dirty error [ 46.603402][ T4611] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.393: corrupted inode contents [ 46.620082][ T4641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.621089][ T4638] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 46.635403][ T4641] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.645787][ T4611] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 46.675393][ T4641] netlink: 'syz.4.406': attribute type 10 has an invalid length. [ 46.679790][ T4611] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.393: corrupted inode contents [ 46.702410][ T4638] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.705548][ T4611] EXT4-fs error (device loop0): ext4_truncate:4666: inode #16: comm syz.0.393: mark_inode_dirty error [ 46.733141][ T4611] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 46.757036][ T4611] EXT4-fs (loop0): 1 truncate cleaned up [ 46.765776][ T4611] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.790821][ T4611] ext4 filesystem being mounted at /81/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.809287][ T4638] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: inode #11: comm syz.2.405: missing EA_INODE flag [ 46.838768][ T4638] EXT4-fs (loop2): Remounting filesystem read-only [ 46.872461][ T4611] syz.0.393 (4611) used greatest stack depth: 9760 bytes left [ 46.880961][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.892396][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.918684][ T4646] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 46.974191][ T4649] serio: Serial port ptm0 [ 47.105765][ T4661] netlink: 92 bytes leftover after parsing attributes in process `syz.3.414'. [ 47.327085][ T4677] loop1: detected capacity change from 0 to 512 [ 47.354682][ T4677] EXT4-fs (loop1): too many log groups per flexible block group [ 47.362761][ T4677] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 47.370305][ T1036] usb usb6-port1: attempt power cycle [ 47.377334][ T4677] EXT4-fs (loop1): mount failed [ 47.411544][ T4687] loop4: detected capacity change from 0 to 128 [ 47.423157][ T4687] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 47.442244][ T4687] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 47.623171][ T4704] netlink: 52 bytes leftover after parsing attributes in process `syz.2.434'. [ 47.662381][ T4712] loop4: detected capacity change from 0 to 512 [ 47.686646][ T4717] netlink: 4 bytes leftover after parsing attributes in process `syz.1.438'. [ 47.696790][ T4712] EXT4-fs (loop4): orphan cleanup on readonly fs [ 47.706781][ T4712] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.436: bg 0: block 248: padding at end of block bitmap is not set [ 47.717083][ T4717] netlink: 4 bytes leftover after parsing attributes in process `syz.1.438'. [ 47.736133][ T4712] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.436: Failed to acquire dquot type 1 [ 47.749945][ T4712] EXT4-fs (loop4): 1 truncate cleaned up [ 47.756459][ T4712] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 47.787097][ T4712] syz.4.436 (4712) used greatest stack depth: 9280 bytes left [ 47.798717][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.833486][ T4728] pim6reg1: entered promiscuous mode [ 47.838907][ T4728] pim6reg1: entered allmulticast mode [ 48.000428][ T4757] netlink: 28 bytes leftover after parsing attributes in process `syz.2.456'. [ 48.009466][ T4757] netlink: 32 bytes leftover after parsing attributes in process `syz.2.456'. [ 48.018391][ T4757] netlink: 28 bytes leftover after parsing attributes in process `syz.2.456'. [ 48.028441][ T4757] netlink: 32 bytes leftover after parsing attributes in process `syz.2.456'. [ 48.113055][ T4766] 8021q: adding VLAN 0 to HW filter on device bond1 [ 48.131151][ T4766] vlan2: entered allmulticast mode [ 48.136322][ T4766] bond1: entered allmulticast mode [ 48.229714][ T4778] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 48.272794][ T4782] netlink: 'syz.2.467': attribute type 10 has an invalid length. [ 48.294392][ T4782] team0: Device dummy0 is up. Set it down before adding it as a team port [ 48.348131][ T4788] netlink: 'syz.2.470': attribute type 13 has an invalid length. [ 48.404746][ T4788] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 48.482828][ T4797] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.522129][ T4800] loop3: detected capacity change from 0 to 1024 [ 48.530117][ T4800] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 48.541152][ T4800] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 48.554904][ T4800] JBD2: no valid journal superblock found [ 48.560849][ T4800] EXT4-fs (loop3): Could not load journal inode [ 48.584161][ T4797] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.631198][ T4797] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.681909][ T4797] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.839905][ T4346] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.867643][ T4346] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.875991][ T4346] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.904610][ T4346] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.973219][ T29] kauditd_printk_skb: 188 callbacks suppressed [ 48.973237][ T29] audit: type=1400 audit(1756225543.233:1631): avc: denied { listen } for pid=4818 comm="syz.0.482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 49.068190][ T29] audit: type=1400 audit(1756225543.233:1632): avc: denied { accept } for pid=4818 comm="syz.0.482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 49.088455][ T29] audit: type=1400 audit(1756225543.303:1633): avc: denied { mount } for pid=4823 comm="syz.2.485" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 49.179227][ T4829] loop0: detected capacity change from 0 to 2048 [ 49.203257][ T4831] pim6reg1: entered promiscuous mode [ 49.208862][ T4831] pim6reg1: entered allmulticast mode [ 49.217614][ T4829] EXT4-fs (loop0): failed to initialize system zone (-117) [ 49.225001][ T4829] EXT4-fs (loop0): mount failed [ 49.258045][ T1036] usb usb6-port1: unable to enumerate USB device [ 49.332587][ T4840] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.467000][ T4840] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.498045][ T29] audit: type=1326 audit(1756225543.763:1634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4844 comm="syz.1.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08c3f2ebe9 code=0x7ffc0000 [ 49.521732][ T29] audit: type=1326 audit(1756225543.763:1635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4844 comm="syz.1.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08c3f2ebe9 code=0x7ffc0000 [ 49.548310][ T29] audit: type=1326 audit(1756225543.813:1636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4844 comm="syz.1.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f08c3f2ebe9 code=0x7ffc0000 [ 49.572050][ T29] audit: type=1326 audit(1756225543.813:1637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4844 comm="syz.1.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08c3f2ebe9 code=0x7ffc0000 [ 49.595615][ T29] audit: type=1326 audit(1756225543.813:1638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4844 comm="syz.1.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08c3f2ebe9 code=0x7ffc0000 [ 49.619952][ T29] audit: type=1326 audit(1756225543.863:1639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4844 comm="syz.1.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f08c3f2ebe9 code=0x7ffc0000 [ 49.643755][ T29] audit: type=1326 audit(1756225543.863:1640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4844 comm="syz.1.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08c3f2ebe9 code=0x7ffc0000 [ 49.671727][ T4840] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.698235][ T24] I/O error, dev loop3, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 2 [ 49.752570][ T4840] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.815848][ T4346] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.842823][ T4352] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.851236][ T4352] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.862174][ T4352] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.021113][ T4861] 9pnet_fd: Insufficient options for proto=fd [ 50.134103][ T4865] loop2: detected capacity change from 0 to 2048 [ 50.198624][ T4865] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.240350][ T4865] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 102 with max blocks 1 with error 28 [ 50.252808][ T4865] EXT4-fs (loop2): This should not happen!! Data will be lost [ 50.252808][ T4865] [ 50.262588][ T4865] EXT4-fs (loop2): Total free blocks count 0 [ 50.268625][ T4865] EXT4-fs (loop2): Free/Dirty block details [ 50.274767][ T4865] EXT4-fs (loop2): free_blocks=0 [ 50.279947][ T4865] EXT4-fs (loop2): dirty_blocks=0 [ 50.285044][ T4865] EXT4-fs (loop2): Block reservation details [ 50.291370][ T4865] EXT4-fs (loop2): i_reserved_data_blocks=0 [ 50.378559][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.511472][ T4897] __nla_validate_parse: 4 callbacks suppressed [ 50.511488][ T4897] netlink: 12 bytes leftover after parsing attributes in process `syz.4.515'. [ 50.512240][ T4896] netlink: 292 bytes leftover after parsing attributes in process `syz.3.516'. [ 50.517935][ T4897] netlink: 'syz.4.515': attribute type 11 has an invalid length. [ 50.562120][ T4897] netlink: 12 bytes leftover after parsing attributes in process `syz.4.515'. [ 50.571374][ T4897] netlink: 'syz.4.515': attribute type 11 has an invalid length. [ 50.665297][ T4893] SELinux: Context system_u:object_r:usbtty_device_t:s0 is not valid (left unmapped). [ 50.712316][ T4910] netlink: 36 bytes leftover after parsing attributes in process `syz.0.521'. [ 50.760797][ T4918] loop0: detected capacity change from 0 to 512 [ 50.777104][ T4918] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 50.793195][ T4918] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.526: invalid indirect mapped block 83886080 (level 1) [ 50.810166][ T4918] EXT4-fs (loop0): Remounting filesystem read-only [ 50.816939][ T4918] EXT4-fs (loop0): 1 orphan inode deleted [ 50.822841][ T4918] EXT4-fs (loop0): 1 truncate cleaned up [ 50.829627][ T4918] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.916313][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.993652][ T4936] loop3: detected capacity change from 0 to 512 [ 51.010530][ T4936] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.026004][ T4936] ext4 filesystem being mounted at /104/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.091193][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.227997][ T4962] serio: Serial port ptm0 [ 51.260553][ T4966] netlink: 'syz.4.547': attribute type 13 has an invalid length. [ 51.319606][ T4966] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 51.350615][ T4976] loop3: detected capacity change from 0 to 512 [ 51.359952][ T4976] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.551: casefold flag without casefold feature [ 51.372952][ T4976] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.551: couldn't read orphan inode 15 (err -117) [ 51.386770][ T4976] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.406112][ T4979] netlink: 4 bytes leftover after parsing attributes in process `syz.4.552'. [ 51.420992][ T4979] team0 (unregistering): Port device team_slave_0 removed [ 51.431584][ T4979] team0 (unregistering): Port device team_slave_1 removed [ 51.512412][ T4981] netlink: 12 bytes leftover after parsing attributes in process `syz.2.553'. [ 51.653757][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.859864][ T5004] loop1: detected capacity change from 0 to 512 [ 51.869676][ T5008] netlink: 12 bytes leftover after parsing attributes in process `syz.3.566'. [ 51.894126][ T5004] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.916153][ T5015] netlink: 12 bytes leftover after parsing attributes in process `syz.4.568'. [ 51.920505][ T5004] ext4 filesystem being mounted at /120/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.967267][ T5015] 8021q: adding VLAN 0 to HW filter on device bond1 [ 51.979476][ T5004] EXT4-fs: Ignoring removed orlov option [ 51.983898][ T5020] vlan2: entered allmulticast mode [ 51.987395][ T5004] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 51.990720][ T5020] bond1: entered allmulticast mode [ 51.999835][ T5024] loop0: detected capacity change from 0 to 512 [ 52.017249][ T5004] EXT4-fs (loop1): can't enable nombcache during remount [ 52.044867][ T5024] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.570: casefold flag without casefold feature [ 52.059059][ T5024] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.570: couldn't read orphan inode 15 (err -117) [ 52.079149][ T5024] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.089879][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.117095][ T5032] netlink: 12 bytes leftover after parsing attributes in process `syz.4.575'. [ 52.162610][ T5036] netlink: 'syz.3.577': attribute type 10 has an invalid length. [ 52.180152][ T5034] vhci_hcd: invalid port number 96 [ 52.185486][ T5034] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 52.199388][ T5036] team0: Device hsr_slave_0 failed to register rx_handler [ 52.292340][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.363249][ T5050] netlink: 24 bytes leftover after parsing attributes in process `syz.1.583'. [ 52.499099][ T5066] syzkaller0: entered allmulticast mode [ 52.510853][ T5066] syzkaller0 (unregistering): left allmulticast mode [ 52.943938][ T5099] serio: Serial port ttyS3 [ 52.961959][ T5097] loop2: detected capacity change from 0 to 8192 [ 53.000585][ T5102] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 53.015821][ T5102] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.023076][ T5102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.281129][ T5130] netlink: 'syz.2.617': attribute type 6 has an invalid length. [ 53.520298][ T5161] netlink: 'syz.2.625': attribute type 30 has an invalid length. [ 53.676670][ T5181] loop3: detected capacity change from 0 to 1024 [ 53.697415][ T5181] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.738204][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.783683][ T5187] loop3: detected capacity change from 0 to 512 [ 53.910190][ T5187] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.934537][ T5187] ext4 filesystem being mounted at /133/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.097974][ T3405] usb usb6-port1: attempt power cycle [ 54.304194][ T5200] loop1: detected capacity change from 0 to 1024 [ 54.322224][ T5200] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 54.351262][ T5200] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.723022][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.773844][ T5212] Driver unsupported XDP return value 0 on prog (id 549) dev N/A, expect packet loss! [ 54.804693][ T5215] loop2: detected capacity change from 0 to 1024 [ 54.849711][ T5217] loop3: detected capacity change from 0 to 512 [ 54.878063][ T29] kauditd_printk_skb: 228 callbacks suppressed [ 54.878081][ T29] audit: type=1400 audit(1756225549.113:1869): avc: denied { watch_reads } for pid=5218 comm="syz.0.649" path="/114" dev="tmpfs" ino=616 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 54.932560][ T5215] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.945322][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.948837][ T5217] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.983216][ T29] audit: type=1326 audit(1756225549.243:1870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5220 comm="syz.0.650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6396ecebe9 code=0x7ffc0000 [ 55.006924][ T29] audit: type=1326 audit(1756225549.243:1871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5220 comm="syz.0.650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f6396ecebe9 code=0x7ffc0000 [ 55.030635][ T29] audit: type=1326 audit(1756225549.243:1872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5220 comm="syz.0.650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6396ecebe9 code=0x7ffc0000 [ 55.054564][ T29] audit: type=1326 audit(1756225549.243:1873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5220 comm="syz.0.650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f6396ecebe9 code=0x7ffc0000 [ 55.063247][ T5217] ext4 filesystem being mounted at /135/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.078418][ T29] audit: type=1326 audit(1756225549.243:1874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5220 comm="syz.0.650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6396ecebe9 code=0x7ffc0000 [ 55.134912][ T29] audit: type=1326 audit(1756225549.383:1875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5220 comm="syz.0.650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=232 compat=0 ip=0x7f6396ecebe9 code=0x7ffc0000 [ 55.158403][ T29] audit: type=1326 audit(1756225549.383:1876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5220 comm="syz.0.650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6396ecebe9 code=0x7ffc0000 [ 55.182572][ T29] audit: type=1326 audit(1756225549.383:1877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5220 comm="syz.0.650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6396ecebe9 code=0x7ffc0000 [ 55.225570][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.232734][ T29] audit: type=1400 audit(1756225549.423:1878): avc: denied { append } for pid=5216 comm="syz.3.648" name="file2" dev="loop3" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 55.270341][ T5232] netlink: 'syz.0.654': attribute type 5 has an invalid length. [ 55.400350][ T5246] team0 (unregistering): Port device team_slave_0 removed [ 55.420431][ T5246] team0 (unregistering): Port device team_slave_1 removed [ 55.437764][ T5250] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.499079][ T5250] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.516627][ T5215] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 18: block 369:freeing already freed block (bit 23); block bitmap corrupt. [ 55.574879][ T5250] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.593928][ T5260] loop0: detected capacity change from 0 to 1024 [ 55.601325][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.618095][ T5260] EXT4-fs: Ignoring removed bh option [ 55.624030][ T5260] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 55.639418][ T5250] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.660991][ T5260] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.736223][ T51] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.776137][ T51] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.808930][ T51] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.833085][ T51] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.891754][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.934970][ T2957] kernel write not supported for file [eventfd] (pid: 2957 comm: kworker/0:2) [ 56.057908][ T3405] usb usb6-port1: unable to enumerate USB device [ 56.150672][ T5306] __nla_validate_parse: 5 callbacks suppressed [ 56.150687][ T5306] netlink: 12 bytes leftover after parsing attributes in process `syz.4.684'. [ 56.234270][ T5313] pimreg: entered allmulticast mode [ 56.270465][ T5313] pimreg: left allmulticast mode [ 56.563196][ T5339] loop1: detected capacity change from 0 to 8192 [ 56.641058][ T5351] loop2: detected capacity change from 0 to 7 [ 56.696691][ T5363] loop2: detected capacity change from 0 to 1024 [ 56.711794][ T5363] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 56.786661][ T5363] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.811140][ T5369] loop3: detected capacity change from 0 to 512 [ 56.876070][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.881900][ T5369] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.923274][ T5369] ext4 filesystem being mounted at /151/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 56.954787][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.020258][ T5385] netlink: 'syz.4.715': attribute type 13 has an invalid length. [ 57.036884][ T5382] netlink: 12 bytes leftover after parsing attributes in process `syz.3.716'. [ 57.046060][ T5382] netlink: 12 bytes leftover after parsing attributes in process `syz.3.716'. [ 57.066457][ T5385] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 57.082857][ T5389] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5389 comm=syz.2.718 [ 57.098835][ T5382] bridge0: port 3(vlan2) entered blocking state [ 57.105251][ T5382] bridge0: port 3(vlan2) entered disabled state [ 57.118349][ T5382] vlan2: entered allmulticast mode [ 57.123731][ T5382] bridge0: entered allmulticast mode [ 57.168918][ T5382] vlan2: left allmulticast mode [ 57.173994][ T5382] bridge0: left allmulticast mode [ 57.325372][ T5405] vlan2: entered allmulticast mode [ 57.352932][ T5405] dummy0: entered allmulticast mode [ 57.922510][ T5458] loop4: detected capacity change from 0 to 164 [ 57.935714][ T5462] netlink: 12 bytes leftover after parsing attributes in process `syz.2.748'. [ 57.951852][ T5458] rock: directory entry would overflow storage [ 57.953623][ T5461] 9pnet: p9_errstr2errno: server reported unknown error [ 57.958294][ T5458] rock: sig=0x66, size=4, remaining=3 [ 57.990836][ T5458] rock: directory entry would overflow storage [ 57.997166][ T5458] rock: sig=0x66, size=4, remaining=3 [ 58.046187][ T5473] loop3: detected capacity change from 0 to 1024 [ 58.061890][ T5473] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 58.078966][ T5473] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #3: block 1: comm syz.3.753: lblock 1 mapped to illegal pblock 1 (length 1) [ 58.093422][ T5473] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.753: Failed to acquire dquot type 0 [ 58.105470][ T5473] EXT4-fs error (device loop3): ext4_free_blocks:6696: comm syz.3.753: Freeing blocks not in datazone - block = 0, count = 4096 [ 58.120218][ T5473] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.753: Invalid inode bitmap blk 0 in block_group 0 [ 58.135117][ T5473] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 58.145520][ T57] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 58.160891][ T5473] EXT4-fs (loop3): 1 orphan inode deleted [ 58.167178][ T57] EXT4-fs error (device loop3): ext4_release_dquot:6973: comm kworker/u8:4: Failed to release dquot type 0 [ 58.184776][ T5473] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.217111][ T5473] program syz.3.753 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 58.248556][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.288992][ T5499] bridge0: entered promiscuous mode [ 58.294285][ T3405] IPVS: starting estimator thread 0... [ 58.312236][ T5499] bridge0: port 3(macvtap0) entered blocking state [ 58.319010][ T5499] bridge0: port 3(macvtap0) entered disabled state [ 58.336473][ T5499] macvtap0: entered allmulticast mode [ 58.348028][ T5499] macvtap0: left allmulticast mode [ 58.364585][ T5499] bridge0: left promiscuous mode [ 58.372509][ T5509] netlink: 'syz.2.769': attribute type 10 has an invalid length. [ 58.387656][ T5500] IPVS: using max 1824 ests per chain, 91200 per kthread [ 58.407851][ T5509] team0: Port device dummy0 added [ 58.423853][ T5509] netlink: 'syz.2.769': attribute type 10 has an invalid length. [ 58.434494][ T5509] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 58.457968][ T5509] team0: Failed to send options change via netlink (err -105) [ 58.466117][ T5509] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 58.477504][ T5509] team0: Port device dummy0 removed [ 58.487452][ T5509] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 58.583508][ T5526] netlink: 4 bytes leftover after parsing attributes in process `syz.2.776'. [ 58.663522][ T5532] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.779'. [ 58.679874][ T5532] netlink: zone id is out of range [ 58.698004][ T5532] netlink: zone id is out of range [ 58.703195][ T5532] netlink: del zone limit has 8 unknown bytes [ 58.767058][ T5537] loop4: detected capacity change from 0 to 512 [ 58.798429][ T5537] EXT4-fs (loop4): orphan cleanup on readonly fs [ 58.806202][ T5537] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.781: bad orphan inode 13 [ 58.828818][ T5537] ext4_test_bit(bit=12, block=18) = 1 [ 58.834453][ T5537] is_bad_inode(inode)=0 [ 58.838769][ T5537] NEXT_ORPHAN(inode)=2130706432 [ 58.843726][ T5537] max_ino=32 [ 58.846940][ T5537] i_nlink=1 [ 58.850832][ T5537] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 58.891204][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.209978][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 59.217481][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 59.224967][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 59.234448][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 59.242086][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 59.249593][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 59.257262][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 59.264820][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 59.272306][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 59.279868][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 59.289220][ T10] hid-generic 0000:0000:0000.0002: hidraw0: HID v8.00 Device [syz0] on syz0 [ 59.489306][ T5594] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.549432][ T5594] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.589257][ T5594] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.619264][ T5609] netlink: 4 bytes leftover after parsing attributes in process `syz.4.811'. [ 59.629125][ T5609] netlink: 12 bytes leftover after parsing attributes in process `syz.4.811'. [ 59.644133][ T5594] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.718271][ T4329] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.729441][ T4329] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.751379][ T4329] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.768495][ T4329] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.123569][ T5640] netlink: 12 bytes leftover after parsing attributes in process `syz.4.825'. [ 60.159327][ T29] kauditd_printk_skb: 424 callbacks suppressed [ 60.159346][ T29] audit: type=1326 audit(1756225554.423:2300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5643 comm="syz.3.827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9f63bebe9 code=0x7ffc0000 [ 60.189797][ T29] audit: type=1326 audit(1756225554.423:2301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5643 comm="syz.3.827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7fa9f63bebe9 code=0x7ffc0000 [ 60.213260][ T29] audit: type=1326 audit(1756225554.423:2302): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5643 comm="syz.3.827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9f63bebe9 code=0x7ffc0000 [ 60.237085][ T29] audit: type=1326 audit(1756225554.423:2303): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5643 comm="syz.3.827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa9f63bebe9 code=0x7ffc0000 [ 60.260847][ T29] audit: type=1326 audit(1756225554.423:2304): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5643 comm="syz.3.827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9f63bebe9 code=0x7ffc0000 [ 60.306826][ T29] audit: type=1326 audit(1756225554.423:2305): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5643 comm="syz.3.827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa9f63bebe9 code=0x7ffc0000 [ 60.330599][ T29] audit: type=1326 audit(1756225554.423:2306): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5643 comm="syz.3.827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9f63bebe9 code=0x7ffc0000 [ 60.354680][ T29] audit: type=1326 audit(1756225554.423:2307): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5643 comm="syz.3.827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7fa9f63bebe9 code=0x7ffc0000 [ 60.378625][ T29] audit: type=1326 audit(1756225554.423:2308): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5643 comm="syz.3.827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9f63bebe9 code=0x7ffc0000 [ 60.402675][ T29] audit: type=1326 audit(1756225554.423:2309): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5643 comm="syz.3.827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9f63bebe9 code=0x7ffc0000 [ 60.496127][ T5667] netlink: 24 bytes leftover after parsing attributes in process `syz.3.836'. [ 60.529942][ T5667] netlink: 'syz.3.836': attribute type 2 has an invalid length. [ 60.562078][ T5677] netlink: 'syz.3.840': attribute type 7 has an invalid length. [ 60.631314][ T5686] IPVS: Error joining to the multicast group [ 60.643288][ T5689] serio: Serial port ptm1 [ 60.720517][ T5701] loop4: detected capacity change from 0 to 512 [ 60.738329][ T5708] loop3: detected capacity change from 0 to 1024 [ 60.741465][ T5701] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.745798][ T5708] EXT4-fs: Ignoring removed oldalloc option [ 60.759047][ T5701] ext4 filesystem being mounted at /183/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.763499][ T5708] EXT4-fs: Ignoring removed bh option [ 60.800020][ T5708] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.815497][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.929986][ T5708] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 15: block 369:freeing already freed block (bit 23); block bitmap corrupt. [ 61.013563][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.038627][ T5730] loop1: detected capacity change from 0 to 164 [ 61.056208][ T5730] bio_check_eod: 48 callbacks suppressed [ 61.056257][ T5730] syz.1.862: attempt to access beyond end of device [ 61.056257][ T5730] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 61.084131][ T5730] syz.1.862: attempt to access beyond end of device [ 61.084131][ T5730] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 61.159478][ T5743] __nla_validate_parse: 4 callbacks suppressed [ 61.159496][ T5743] netlink: 36 bytes leftover after parsing attributes in process `syz.1.868'. [ 61.592602][ T5767] netlink: 24 bytes leftover after parsing attributes in process `syz.1.879'. [ 61.820073][ T5777] loop2: detected capacity change from 0 to 1024 [ 61.835389][ T5777] EXT4-fs: Ignoring removed nobh option [ 61.841173][ T5777] EXT4-fs: Ignoring removed bh option [ 61.863166][ T5777] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.926203][ T5777] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.884: Allocating blocks 385-513 which overlap fs metadata [ 61.954270][ T5777] EXT4-fs (loop2): pa ffff8881059807e0: logic 16, phys. 129, len 24 [ 61.962635][ T5777] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 62.022118][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.283103][ T5791] netlink: 'syz.0.889': attribute type 21 has an invalid length. [ 62.291175][ T5791] netlink: 164 bytes leftover after parsing attributes in process `syz.0.889'. [ 62.566189][ T5817] ip6gre1: entered allmulticast mode [ 62.601400][ T5823] netem: incorrect ge model size [ 62.606479][ T5823] netem: change failed [ 62.613988][ T5821] loop2: detected capacity change from 0 to 512 [ 62.622379][ T5821] EXT4-fs: Ignoring removed nobh option [ 62.629107][ T5821] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 62.641789][ T5821] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.903: iget: bad i_size value: 38620345925642 [ 62.655370][ T5821] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.903: couldn't read orphan inode 15 (err -117) [ 62.668957][ T5821] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.696957][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.144045][ T5885] bridge: RTM_NEWNEIGH with invalid ether address [ 63.152917][ C1] vcan0: j1939_tp_rxtimer: 0xffff888119d73200: rx timeout, send abort [ 63.161333][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888119d73200: 0x3f002: (3) A timeout occurred and this is the connection abort to close the session. [ 63.175858][ C1] vcan0: j1939_tp_rxtimer: 0xffff888119d73800: rx timeout, send abort [ 63.184276][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888119d73800: 0x3fe01: (3) A timeout occurred and this is the connection abort to close the session. [ 63.245441][ T5893] loop2: detected capacity change from 0 to 2048 [ 63.307908][ T10] usb usb6-port1: attempt power cycle [ 63.420345][ T5910] netlink: 24 bytes leftover after parsing attributes in process `syz.0.939'. [ 63.486620][ T5915] netlink: 332 bytes leftover after parsing attributes in process `syz.2.942'. [ 63.529731][ T5918] wg2: entered promiscuous mode [ 63.534847][ T5918] wg2: entered allmulticast mode [ 63.606233][ T5930] netlink: 'syz.2.949': attribute type 27 has an invalid length. [ 63.606864][ T5928] netlink: 36 bytes leftover after parsing attributes in process `syz.1.948'. [ 63.654676][ T5930] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.662153][ T5930] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.706564][ T5930] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.717546][ T5930] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.763594][ T5930] ip6gre1: left allmulticast mode [ 63.798012][ T5932] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.805484][ T5932] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.858938][ T5932] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.870627][ T5932] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.934334][ T5935] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.944741][ T5935] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.955195][ T5935] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 63.990689][ T4345] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.011096][ T4345] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.023111][ T4345] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.033779][ T4345] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.044681][ T4345] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.054429][ T4345] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.065919][ T4345] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.093080][ T5955] loop2: detected capacity change from 0 to 2048 [ 64.099672][ T4345] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.135450][ T5962] loop4: detected capacity change from 0 to 164 [ 64.147224][ T5962] syz.4.964: attempt to access beyond end of device [ 64.147224][ T5962] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 64.147785][ T5955] loop2: p2 p3 p7 [ 64.166496][ T5962] syz.4.964: attempt to access beyond end of device [ 64.166496][ T5962] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 64.200517][ T5955] netlink: 36 bytes leftover after parsing attributes in process `syz.2.961'. [ 64.246738][ T5971] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 64.265075][ T5972] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5972 comm=syz.4.969 [ 64.375577][ T5983] serio: Serial port ptm0 [ 64.551025][ T5998] netlink: 'syz.1.980': attribute type 3 has an invalid length. [ 65.029348][ T6019] loop1: detected capacity change from 0 to 1024 [ 65.138586][ T10] usb usb6-port1: unable to enumerate USB device [ 65.159249][ T6029] hub 6-0:1.0: USB hub found [ 65.171187][ T6029] hub 6-0:1.0: 8 ports detected [ 65.230568][ T29] kauditd_printk_skb: 271 callbacks suppressed [ 65.230585][ T29] audit: type=1326 audit(1756225559.483:2581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6037 comm="syz.4.997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2678cebe9 code=0x7ffc0000 [ 65.260305][ T29] audit: type=1326 audit(1756225559.483:2582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6037 comm="syz.4.997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2678cebe9 code=0x7ffc0000 [ 65.284085][ T29] audit: type=1326 audit(1756225559.493:2583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6037 comm="syz.4.997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7fc2678cebe9 code=0x7ffc0000 [ 65.326073][ T29] audit: type=1326 audit(1756225559.583:2584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6037 comm="syz.4.997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2678cebe9 code=0x7ffc0000 [ 65.349960][ T29] audit: type=1326 audit(1756225559.583:2585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6037 comm="syz.4.997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2678cebe9 code=0x7ffc0000 [ 65.602362][ T6049] netlink: 28 bytes leftover after parsing attributes in process `syz.4.999'. [ 65.611435][ T6049] netlink: 32 bytes leftover after parsing attributes in process `syz.4.999'. [ 65.620525][ T6049] netlink: 28 bytes leftover after parsing attributes in process `syz.4.999'. [ 65.666349][ T6051] netlink: 'syz.4.1000': attribute type 39 has an invalid length. [ 65.994161][ T6055] netlink: 'syz.1.1003': attribute type 10 has an invalid length. [ 66.023917][ T6055] team0: Device dummy0 is up. Set it down before adding it as a team port [ 66.043278][ T29] audit: type=1400 audit(1756225560.303:2586): avc: denied { mounton } for pid=6056 comm="syz.3.1004" path="/188/file0" dev="tmpfs" ino=1001 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 66.103699][ T29] audit: type=1326 audit(1756225560.363:2587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6060 comm="syz.1.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08c3f2ebe9 code=0x7ffc0000 [ 66.141801][ T29] audit: type=1326 audit(1756225560.393:2588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6060 comm="syz.1.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f08c3f2ebe9 code=0x7ffc0000 [ 66.165611][ T29] audit: type=1326 audit(1756225560.393:2589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6060 comm="syz.1.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08c3f2ebe9 code=0x7ffc0000 [ 66.189335][ T29] audit: type=1326 audit(1756225560.393:2590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6060 comm="syz.1.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f08c3f2ebe9 code=0x7ffc0000 [ 66.225111][ T6063] serio: Serial port ttyS3 [ 66.249811][ T6066] loop3: detected capacity change from 0 to 2048 [ 66.278450][ T6066] loop3: p1 < > p4 [ 66.285588][ T6066] loop3: p4 size 8388608 extends beyond EOD, truncated [ 66.318498][ T6072] loop2: detected capacity change from 0 to 128 [ 66.325619][ T6072] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 66.339228][ T6072] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 66.376615][ T4346] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 66.440603][ T6082] openvswitch: netlink: Message has 6 unknown bytes. [ 66.595683][ T6090] __nla_validate_parse: 2 callbacks suppressed [ 66.595698][ T6090] netlink: 360 bytes leftover after parsing attributes in process `syz.4.1019'. [ 67.523863][ T6110] loop2: detected capacity change from 0 to 512 [ 67.550966][ T6110] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 67.567824][ T6110] EXT4-fs (loop2): orphan cleanup on readonly fs [ 67.574913][ T6110] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.1028: Failed to acquire dquot type 1 [ 67.587027][ T6110] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1028: bg 0: block 40: padding at end of block bitmap is not set [ 67.601818][ T6110] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 67.611951][ T6110] EXT4-fs (loop2): 1 truncate cleaned up [ 67.622354][ T6110] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 67.638080][ T23] usb usb6-port1: attempt power cycle [ 67.658283][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.065562][ T6149] netlink: 29 bytes leftover after parsing attributes in process `syz.2.1040'. [ 68.129599][ T6159] loop3: detected capacity change from 0 to 512 [ 68.136954][ T6159] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 68.150582][ T6159] EXT4-fs (loop3): 1 truncate cleaned up [ 68.596283][ T6183] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 68.603104][ T6183] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 68.610871][ T6183] vhci_hcd vhci_hcd.0: Device attached [ 68.659513][ T6192] loop4: detected capacity change from 0 to 1024 [ 68.666362][ T6192] EXT4-fs: Ignoring removed bh option [ 68.672924][ T6192] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 68.818934][ T6209] loop2: detected capacity change from 0 to 164 [ 68.826329][ T6212] netlink: 'syz.4.1057': attribute type 10 has an invalid length. [ 68.837024][ T6212] netlink: 'syz.4.1057': attribute type 10 has an invalid length. [ 68.847041][ T6212] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 68.887833][ T10] usb 8-1: SetAddress Request (2) to port 0 [ 68.894578][ T10] usb 8-1: new SuperSpeed USB device number 2 using vhci_hcd [ 68.929319][ T6227] loop4: detected capacity change from 0 to 2048 [ 69.009162][ T6242] netlink: 'syz.4.1064': attribute type 27 has an invalid length. [ 69.046405][ T6242] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.061541][ T6242] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 69.291764][ T6268] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.299126][ T6268] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.345324][ T6268] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.370590][ T6268] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 69.417943][ T4345] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.438495][ T4345] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.458193][ T4345] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.468044][ T23] usb usb6-port1: unable to enumerate USB device [ 69.487471][ T4345] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.614937][ T6319] loop1: detected capacity change from 0 to 512 [ 69.650140][ T6319] EXT4-fs (loop1): too many log groups per flexible block group [ 69.658132][ T6319] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 69.667538][ T6319] EXT4-fs (loop1): mount failed [ 69.695554][ T6330] pimreg: entered allmulticast mode [ 69.716428][ T6334] SELinux: policydb version -299076691 does not match my version range 15-35 [ 69.716562][ T6330] pimreg: left allmulticast mode [ 69.749114][ T6334] SELinux: failed to load policy [ 69.890079][ T6359] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 69.943256][ T6369] loop1: detected capacity change from 0 to 512 [ 69.962878][ T6375] loop4: detected capacity change from 0 to 128 [ 69.971774][ T6369] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 70.001900][ T6369] EXT4-fs mount: 4 callbacks suppressed [ 70.001916][ T6369] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.028960][ T6375] syz.4.1087: attempt to access beyond end of device [ 70.028960][ T6375] loop4: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 70.066597][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.085408][ T6184] vhci_hcd: connection reset by peer [ 70.091253][ T6375] syz.4.1087: attempt to access beyond end of device [ 70.091253][ T6375] loop4: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 70.105225][ T6375] Buffer I/O error on dev loop4, logical block 69, lost async page write [ 70.114257][ T4320] vhci_hcd: stop threads [ 70.114481][ T6375] syz.4.1087: attempt to access beyond end of device [ 70.114481][ T6375] loop4: rw=2049, sector=140, nr_sectors = 2 limit=128 [ 70.118630][ T4320] vhci_hcd: release socket [ 70.132210][ T6375] Buffer I/O error on dev loop4, logical block 70, lost async page write [ 70.136630][ T4320] vhci_hcd: disconnect device [ 70.157665][ T6385] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1088'. [ 70.249010][ T6393] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1092'. [ 70.259669][ T6393] 0ªî{X¹¦: renamed from gretap0 [ 70.266827][ T6393] 0ªî{X¹¦: entered allmulticast mode [ 70.274237][ T6393] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 70.339620][ T6399] bridge0: entered promiscuous mode [ 70.346165][ T6399] bridge0: port 3(macsec1) entered blocking state [ 70.353057][ T6399] bridge0: port 3(macsec1) entered disabled state [ 70.359731][ T6399] macsec1: entered allmulticast mode [ 70.365234][ T6399] bridge0: entered allmulticast mode [ 70.371101][ T6399] macsec1: left allmulticast mode [ 70.376239][ T6399] bridge0: left allmulticast mode [ 70.382025][ T6399] bridge0: left promiscuous mode [ 70.439678][ T6402] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1096'. [ 70.449422][ T6402] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1096'. [ 70.498694][ T29] kauditd_printk_skb: 396 callbacks suppressed [ 70.498712][ T29] audit: type=1326 audit(1756225564.763:2985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6404 comm="syz.1.1097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08c3f2ebe9 code=0x7ffc0000 [ 70.535613][ T29] audit: type=1326 audit(1756225564.793:2986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6404 comm="syz.1.1097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f08c3f2ebe9 code=0x7ffc0000 [ 70.559430][ T29] audit: type=1326 audit(1756225564.793:2987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6404 comm="syz.1.1097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08c3f2ebe9 code=0x7ffc0000 [ 70.583359][ T29] audit: type=1326 audit(1756225564.793:2988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6404 comm="syz.1.1097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08c3f2ebe9 code=0x7ffc0000 [ 70.607182][ T29] audit: type=1326 audit(1756225564.793:2989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6404 comm="syz.1.1097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f08c3f2ebe9 code=0x7ffc0000 [ 70.608760][ T6410] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.631296][ T29] audit: type=1326 audit(1756225564.793:2990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6404 comm="syz.1.1097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08c3f2ebe9 code=0x7ffc0000 [ 70.664881][ T29] audit: type=1326 audit(1756225564.793:2991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6404 comm="syz.1.1097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08c3f2ebe9 code=0x7ffc0000 [ 70.689047][ T29] audit: type=1326 audit(1756225564.813:2992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6404 comm="syz.1.1097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f08c3f2ebe9 code=0x7ffc0000 [ 70.728539][ T29] audit: type=1326 audit(1756225564.953:2993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6404 comm="syz.1.1097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08c3f2ebe9 code=0x7ffc0000 [ 70.752294][ T29] audit: type=1326 audit(1756225564.953:2994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6404 comm="syz.1.1097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f08c3f25ba7 code=0x7ffc0000 [ 70.789336][ T6410] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.812604][ T6424] netlink: 'syz.1.1105': attribute type 27 has an invalid length. [ 70.821527][ T6424] 0ªî{X¹¦: left allmulticast mode [ 70.851492][ T6426] netlink: 'syz.2.1106': attribute type 13 has an invalid length. [ 70.865553][ T6424] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.875190][ T6424] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 70.893175][ T6410] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.913160][ T6426] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 70.949265][ T6410] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.965097][ T6435] loop4: detected capacity change from 0 to 128 [ 70.978059][ T6439] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1111'. [ 70.980098][ T6435] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 70.987186][ T6439] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1111'. [ 71.001780][ T6435] ext4 filesystem being mounted at /238/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 71.013651][ T6439] bridge0: port 3(vlan2) entered blocking state [ 71.025665][ T6439] bridge0: port 3(vlan2) entered disabled state [ 71.032509][ T6439] vlan2: entered allmulticast mode [ 71.037760][ T6439] bridge0: entered allmulticast mode [ 71.043760][ T6439] vlan2: left allmulticast mode [ 71.048707][ T6439] bridge0: left allmulticast mode [ 71.066227][ T4320] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.076569][ T3302] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 71.087092][ T4320] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.096090][ T4345] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.110089][ T4345] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.139574][ T6446] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 71.146293][ T6446] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 71.154137][ T6446] vhci_hcd vhci_hcd.0: Device attached [ 71.227065][ T6455] ref_ctr increment failed for inode: 0x452 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff88810370dc00 [ 71.249691][ T6454] uprobe: syz.0.1115:6454 failed to unregister, leaking uprobe [ 71.427629][ T2957] usb 10-1: SetAddress Request (2) to port 0 [ 71.436054][ T2957] usb 10-1: new SuperSpeed USB device number 2 using vhci_hcd [ 71.971901][ T6548] netlink: 'syz.3.1122': attribute type 27 has an invalid length. [ 72.013580][ T6548] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.020867][ T6548] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.120432][ T6548] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 72.145120][ T6548] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 72.274495][ T6559] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.307166][ T6559] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.336826][ T6447] vhci_hcd: connection reset by peer [ 72.342336][ T6559] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 72.354613][ T4345] vhci_hcd: stop threads [ 72.362177][ T4345] vhci_hcd: release socket [ 72.366976][ T4345] vhci_hcd: disconnect device [ 72.372422][ T4379] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.381769][ T4346] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.391542][ T4346] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.400063][ T4346] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.604144][ T6600] vlan2: entered allmulticast mode [ 72.610814][ T6600] dummy0: entered allmulticast mode [ 72.626746][ T6602] loop3: detected capacity change from 0 to 512 [ 72.635087][ T6602] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 72.643307][ T6602] EXT4-fs (loop3): orphan cleanup on readonly fs [ 72.651152][ T6602] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.1125: Failed to acquire dquot type 1 [ 72.664125][ T6602] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1125: bg 0: block 40: padding at end of block bitmap is not set [ 72.678829][ T6602] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 72.688659][ T6602] EXT4-fs (loop3): 1 truncate cleaned up [ 72.694825][ T6602] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 72.722450][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.857789][ T23] usb usb6-port1: attempt power cycle [ 72.868275][ T6613] bridge0: entered promiscuous mode [ 72.874253][ T6613] bridge0: port 3(macsec0) entered blocking state [ 72.881091][ T6613] bridge0: port 3(macsec0) entered disabled state [ 72.889128][ T6613] macsec0: entered allmulticast mode [ 72.895205][ T6613] macsec0: left allmulticast mode [ 72.901068][ T6613] bridge0: left promiscuous mode [ 72.932443][ T6618] netlink: 360 bytes leftover after parsing attributes in process `syz.0.1131'. [ 73.979123][ T6641] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 73.985727][ T6641] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 73.993751][ T6641] vhci_hcd vhci_hcd.0: Device attached [ 73.999691][ T10] usb 8-1: device descriptor read/8, error -110 [ 74.107774][ T10] usb 8-1: new SuperSpeed USB device number 2 using vhci_hcd [ 74.137623][ T10] usb 8-1: enqueue for inactive port 0 [ 74.145576][ T10] usb 8-1: enqueue for inactive port 0 [ 74.161099][ T10] usb 8-1: enqueue for inactive port 0 [ 74.194305][ T6669] loop4: detected capacity change from 0 to 512 [ 74.203037][ T6669] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 74.217447][ T6669] EXT4-fs (loop4): 1 truncate cleaned up [ 74.224141][ T6669] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.266753][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.287585][ T6686] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1145'. [ 74.287771][ T9] usb 2-1: SetAddress Request (2) to port 0 [ 74.296628][ T6686] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1145'. [ 74.311759][ T6686] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1145'. [ 74.315160][ T9] usb 2-1: new SuperSpeed USB device number 2 using vhci_hcd [ 74.322701][ T6686] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1145'. [ 74.337903][ T6686] netlink: 'syz.4.1145': attribute type 6 has an invalid length. [ 74.677912][ T23] usb usb6-port1: unable to enumerate USB device [ 74.684654][ T6438] vhci_hcd: invalid port number 96 [ 74.689854][ T6438] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 74.912120][ T6642] vhci_hcd: connection reset by peer [ 74.917670][ T4379] vhci_hcd: stop threads [ 74.922028][ T4379] vhci_hcd: release socket [ 74.926465][ T4379] vhci_hcd: disconnect device [ 75.197799][ T10] usb usb8-port1: attempt power cycle [ 75.443832][ T6789] netlink: 'syz.0.1146': attribute type 27 has an invalid length. [ 75.496052][ T6789] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.503677][ T6789] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.546641][ T6795] netlink: 'syz.2.1153': attribute type 13 has an invalid length. [ 75.574108][ T6789] wg2: left promiscuous mode [ 75.578834][ T6789] wg2: left allmulticast mode [ 75.619965][ T6789] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.636748][ T6789] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.729437][ T6797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.739292][ T6797] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 75.761013][ T6795] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 75.781040][ T4320] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.795657][ T4320] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.805959][ T4320] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.828268][ T4320] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.847138][ T6810] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1159'. [ 75.860224][ T6810] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 75.870661][ T6810] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 75.928832][ T6810] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 75.948613][ T6810] bond0 (unregistering): Released all slaves [ 76.081334][ T29] kauditd_printk_skb: 464 callbacks suppressed [ 76.081349][ T29] audit: type=1326 audit(1756225570.343:3457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6817 comm="syz.2.1162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72f900ebe9 code=0x7ffc0000 [ 76.111283][ T29] audit: type=1326 audit(1756225570.343:3458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6817 comm="syz.2.1162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f72f900ebe9 code=0x7ffc0000 [ 76.128999][ T6820] serio: Serial port ptm0 [ 76.134864][ T29] audit: type=1326 audit(1756225570.343:3459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6817 comm="syz.2.1162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72f900ebe9 code=0x7ffc0000 [ 76.163152][ T29] audit: type=1326 audit(1756225570.343:3460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6817 comm="syz.2.1162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f72f900ebe9 code=0x7ffc0000 [ 76.186829][ T29] audit: type=1326 audit(1756225570.343:3461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6817 comm="syz.2.1162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72f900ebe9 code=0x7ffc0000 [ 76.211136][ T29] audit: type=1326 audit(1756225570.413:3462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6817 comm="syz.2.1162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f72f900ebe9 code=0x7ffc0000 [ 76.234651][ T29] audit: type=1326 audit(1756225570.413:3463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6817 comm="syz.2.1162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72f900ebe9 code=0x7ffc0000 [ 76.258667][ T29] audit: type=1326 audit(1756225570.413:3464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6817 comm="syz.2.1162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7f72f900ebe9 code=0x7ffc0000 [ 76.282439][ T29] audit: type=1326 audit(1756225570.473:3465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6817 comm="syz.2.1162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72f900ebe9 code=0x7ffc0000 [ 76.305963][ T29] audit: type=1326 audit(1756225570.473:3466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6817 comm="syz.2.1162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72f900ebe9 code=0x7ffc0000 [ 76.467518][ T6829] bridge0: entered promiscuous mode [ 76.469814][ T2957] usb 10-1: device descriptor read/8, error -110 [ 76.473661][ T6829] bridge0: port 3(macsec1) entered blocking state [ 76.486181][ T6829] bridge0: port 3(macsec1) entered disabled state [ 76.493735][ T6829] macsec1: entered allmulticast mode [ 76.499193][ T6829] bridge0: entered allmulticast mode [ 76.507417][ T6829] macsec1: left allmulticast mode [ 76.512533][ T6829] bridge0: left allmulticast mode [ 76.526005][ T6829] bridge0: left promiscuous mode [ 76.587659][ T2957] usb 10-1: new SuperSpeed USB device number 2 using vhci_hcd [ 76.607802][ T2957] usb 10-1: enqueue for inactive port 0 [ 76.622092][ T2957] usb 10-1: enqueue for inactive port 0 [ 76.628440][ T2957] usb 10-1: enqueue for inactive port 0 [ 77.017926][ T10] usb usb8-port1: unable to enumerate USB device [ 77.096870][ T6874] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1185'. [ 77.110305][ T6874] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 77.121053][ T6874] bond0 (unregistering): (slave 4@0Ù): Releasing backup interface [ 77.131192][ T6874] bond0 (unregistering): Released all slaves [ 77.503905][ T6883] bridge0: entered promiscuous mode [ 77.509806][ T6883] bridge0: port 3(macsec1) entered blocking state [ 77.516394][ T6883] bridge0: port 3(macsec1) entered disabled state [ 77.525254][ T6883] macsec1: entered allmulticast mode [ 77.530949][ T6883] bridge0: entered allmulticast mode [ 77.539083][ T6883] macsec1: left allmulticast mode [ 77.544247][ T6883] bridge0: left allmulticast mode [ 77.558568][ T6883] bridge0: left promiscuous mode [ 77.648077][ T2957] usb usb10-port1: attempt power cycle [ 77.757819][ T3397] usb usb6-port1: attempt power cycle [ 78.586170][ T6898] loop2: detected capacity change from 0 to 128 [ 78.669733][ T6898] syz.2.1195: attempt to access beyond end of device [ 78.669733][ T6898] loop2: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 78.683741][ T6898] syz.2.1195: attempt to access beyond end of device [ 78.683741][ T6898] loop2: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 78.697674][ T6898] syz.2.1195: attempt to access beyond end of device [ 78.697674][ T6898] loop2: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 78.712740][ T6898] syz.2.1195: attempt to access beyond end of device [ 78.712740][ T6898] loop2: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 78.728113][ T6898] syz.2.1195: attempt to access beyond end of device [ 78.728113][ T6898] loop2: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 78.741966][ T6898] syz.2.1195: attempt to access beyond end of device [ 78.741966][ T6898] loop2: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 78.755786][ T6898] syz.2.1195: attempt to access beyond end of device [ 78.755786][ T6898] loop2: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 78.769474][ T6898] syz.2.1195: attempt to access beyond end of device [ 78.769474][ T6898] loop2: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 78.783126][ T6898] syz.2.1195: attempt to access beyond end of device [ 78.783126][ T6898] loop2: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 78.796943][ T6898] syz.2.1195: attempt to access beyond end of device [ 78.796943][ T6898] loop2: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 79.427633][ T9] usb 2-1: device descriptor read/8, error -110 [ 79.467988][ T2957] usb usb10-port1: unable to enumerate USB device [ 79.537625][ T9] usb 2-1: new SuperSpeed USB device number 2 using vhci_hcd [ 79.558571][ T9] usb 2-1: enqueue for inactive port 0 [ 79.564262][ T9] usb 2-1: enqueue for inactive port 0 [ 79.580983][ T9] usb 2-1: enqueue for inactive port 0 [ 79.607951][ T3397] usb usb6-port1: unable to enumerate USB device [ 79.867933][ T6919] loop3: detected capacity change from 0 to 8192 [ 80.428781][ T6929] loop3: detected capacity change from 0 to 128 [ 80.435525][ T6929] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 80.478910][ T6929] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 80.489808][ T6928] loop2: detected capacity change from 0 to 8192 [ 80.523258][ T4379] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 80.583864][ T6943] loop4: detected capacity change from 0 to 512 [ 80.592510][ T6940] ref_ctr increment failed for inode: 0x48f offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff88810370d640 [ 80.607806][ T9] usb usb2-port1: attempt power cycle [ 80.615917][ T6939] uprobe: syz.3.1214:6939 failed to unregister, leaking uprobe [ 80.623982][ T6943] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 80.632425][ T6943] EXT4-fs (loop4): orphan cleanup on readonly fs [ 80.639469][ T6943] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.1211: Failed to acquire dquot type 1 [ 80.651356][ T6943] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1211: bg 0: block 40: padding at end of block bitmap is not set [ 80.665921][ T6943] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 80.675082][ T6943] EXT4-fs (loop4): 1 truncate cleaned up [ 80.681514][ T6943] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 80.710273][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.693153][ T6970] loop4: detected capacity change from 0 to 2048 [ 81.735971][ T4353] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 81.759234][ T6970] loop4: p1 < > p4 [ 81.763812][ T6970] loop4: p4 size 8388608 extends beyond EOD, truncated [ 81.913664][ T29] kauditd_printk_skb: 232 callbacks suppressed [ 81.913681][ T29] audit: type=1326 audit(1756225576.173:3697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6984 comm="syz.4.1226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2678cebe9 code=0x7ffc0000 [ 81.947629][ T29] audit: type=1326 audit(1756225576.203:3698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6984 comm="syz.4.1226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fc2678cebe9 code=0x7ffc0000 [ 81.971991][ T29] audit: type=1326 audit(1756225576.203:3699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6984 comm="syz.4.1226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2678cebe9 code=0x7ffc0000 [ 81.995952][ T29] audit: type=1326 audit(1756225576.203:3700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6984 comm="syz.4.1226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2678cebe9 code=0x7ffc0000 [ 82.019627][ T29] audit: type=1326 audit(1756225576.203:3701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6984 comm="syz.4.1226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fc2678cebe9 code=0x7ffc0000 [ 82.043370][ T29] audit: type=1326 audit(1756225576.203:3702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6984 comm="syz.4.1226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2678cebe9 code=0x7ffc0000 [ 82.067431][ T29] audit: type=1326 audit(1756225576.203:3703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6984 comm="syz.4.1226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fc2678cebe9 code=0x7ffc0000 [ 82.091611][ T29] audit: type=1326 audit(1756225576.203:3704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6984 comm="syz.4.1226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2678cebe9 code=0x7ffc0000 [ 82.115564][ T29] audit: type=1326 audit(1756225576.203:3705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6984 comm="syz.4.1226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fc2678cebe9 code=0x7ffc0000 [ 82.139127][ T29] audit: type=1326 audit(1756225576.203:3706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6984 comm="syz.4.1226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2678cebe9 code=0x7ffc0000 [ 82.457912][ T9] usb usb2-port1: unable to enumerate USB device [ 82.469027][ T6991] netlink: 'syz.1.1230': attribute type 10 has an invalid length. [ 82.479354][ T6991] team0: Port device dummy0 added [ 82.488197][ T6991] netlink: 'syz.1.1230': attribute type 10 has an invalid length. [ 82.497144][ T6991] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 82.508004][ T6991] team0: Failed to send options change via netlink (err -105) [ 82.515570][ T6991] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 82.525841][ T6991] team0: Port device dummy0 removed [ 82.549929][ T6993] vlan2: entered allmulticast mode [ 83.241612][ T7017] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1253'. [ 83.286673][ T7021] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1255'. [ 83.295843][ T7021] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1255'. [ 83.304849][ T7021] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1255'. [ 83.314413][ T7021] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1255'. [ 83.325261][ T7020] ref_ctr increment failed for inode: 0x4f3 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff888103709140 [ 83.364870][ T7018] uprobe: syz.2.1244:7018 failed to unregister, leaking uprobe [ 83.432219][ T4345] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 83.473582][ T7032] netlink: 'syz.3.1247': attribute type 10 has an invalid length. [ 83.484132][ T7032] team0: Port device dummy0 added [ 83.492876][ T7032] netlink: 'syz.3.1247': attribute type 10 has an invalid length. [ 83.501570][ T7032] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 83.511381][ T7032] team0: Failed to send options change via netlink (err -105) [ 83.518991][ T7034] loop2: detected capacity change from 0 to 512 [ 83.520676][ T7032] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 83.525885][ T7034] EXT4-fs: Ignoring removed mblk_io_submit option [ 83.534467][ T7032] team0: Port device dummy0 removed [ 83.541566][ T7034] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 83.548998][ T7032] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 83.573197][ T7034] EXT4-fs (loop2): 1 truncate cleaned up [ 83.580670][ T7034] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.067194][ T7034] ================================================================== [ 84.075358][ T7034] BUG: KCSAN: data-race in __mark_inode_dirty / writeback_single_inode [ 84.083659][ T7034] [ 84.086016][ T7034] write to 0xffff88811982dbb0 of 4 bytes by task 7037 on cpu 0: [ 84.093684][ T7034] writeback_single_inode+0x14a/0x3e0 [ 84.099095][ T7034] sync_inode_metadata+0x5b/0x90 [ 84.104141][ T7034] generic_buffers_fsync_noflush+0xd9/0x120 [ 84.110048][ T7034] ext4_sync_file+0x1ab/0x690 [ 84.114756][ T7034] vfs_fsync_range+0x10d/0x130 [ 84.119619][ T7034] ext4_buffered_write_iter+0x34f/0x3c0 [ 84.125371][ T7034] ext4_file_write_iter+0xdbf/0xf00 [ 84.130597][ T7034] iter_file_splice_write+0x663/0xa60 [ 84.136098][ T7034] direct_splice_actor+0x153/0x2a0 [ 84.141308][ T7034] splice_direct_to_actor+0x30f/0x680 [ 84.146787][ T7034] do_splice_direct+0xda/0x150 [ 84.151587][ T7034] do_sendfile+0x380/0x650 [ 84.156033][ T7034] __x64_sys_sendfile64+0x105/0x150 [ 84.161328][ T7034] x64_sys_call+0x2bb0/0x2ff0 [ 84.166206][ T7034] do_syscall_64+0xd2/0x200 [ 84.170726][ T7034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.176632][ T7034] [ 84.178961][ T7034] read to 0xffff88811982dbb0 of 4 bytes by task 7034 on cpu 1: [ 84.186599][ T7034] __mark_inode_dirty+0x191/0x750 [ 84.191644][ T7034] mark_buffer_dirty+0x133/0x210 [ 84.196594][ T7034] block_write_end+0x12d/0x210 [ 84.201384][ T7034] ext4_write_end+0x134/0x730 [ 84.206080][ T7034] generic_perform_write+0x312/0x490 [ 84.211382][ T7034] ext4_buffered_write_iter+0x1ee/0x3c0 [ 84.217050][ T7034] ext4_file_write_iter+0xdbf/0xf00 [ 84.222445][ T7034] iter_file_splice_write+0x663/0xa60 [ 84.227833][ T7034] direct_splice_actor+0x153/0x2a0 [ 84.233048][ T7034] splice_direct_to_actor+0x30f/0x680 [ 84.238466][ T7034] do_splice_direct+0xda/0x150 [ 84.243326][ T7034] do_sendfile+0x380/0x650 [ 84.247761][ T7034] __x64_sys_sendfile64+0x105/0x150 [ 84.253180][ T7034] x64_sys_call+0x2bb0/0x2ff0 [ 84.257885][ T7034] do_syscall_64+0xd2/0x200 [ 84.262409][ T7034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.268316][ T7034] [ 84.270740][ T7034] value changed: 0x00000038 -> 0x00000022 [ 84.276461][ T7034] [ 84.278799][ T7034] Reported by Kernel Concurrency Sanitizer on: [ 84.284964][ T7034] CPU: 1 UID: 0 PID: 7034 Comm: syz.2.1248 Not tainted syzkaller #0 PREEMPT(voluntary) [ 84.294867][ T7034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 84.305052][ T7034] ================================================================== [ 84.459876][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.