last executing test programs: 13.904171592s ago: executing program 1 (id=2604): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r1, &(0x7f0000000380)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "d9298498abdba7f061bd1ca44c226af5160e961711a07760760beeab91e8ff0055e5c0d48bd63ffdb93bd43a847a1597c8ef03da5be42200", 0x24}, 0x60) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r2, &(0x7f0000000680)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "d9298498abdba7f061bd1ca44c226af5160beeab11e88509de7f1939e83002fa54e571398bd63ffdb93bd40100000097c8ef039a5be42200", 0x36}, 0x60) bind$nfc_llcp(r0, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "1354451b85451ad38ae6d571347862663f1a9c66806487c4ccdc9204771a3e0bdbe3050d1b44882fbf2e12d58071580083d65c443fe917d9b88d23efe6ac7b", 0xf}, 0x60) 13.770993185s ago: executing program 1 (id=2607): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000540)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) ioctl$TCSETS(r0, 0x89f2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "bb40af00008000"}) 12.987534837s ago: executing program 4 (id=2611): unshare(0x22020600) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000002200)={'filter\x00', 0x7, 0x4, 0x408, 0x210, 0x0, 0x0, 0x320, 0x320, 0x320, 0x4, 0x0, {[{{@arp={@loopback, @multicast1, 0xff000000, 0xffffffff, 0x0, 0xa, {@mac=@random="7a3e9c584425", {[0xff, 0xff, 0xff, 0xff, 0xff]}}, {@mac=@random="5d46d0c43cfb", {[0x0, 0x0, 0xff, 0x0, 0xff]}}, 0x8001, 0x4, 0x0, 0x400, 0xa00, 0x6, 'veth0_vlan\x00', 'ip6_vti0\x00', {0xff}, {}, 0x0, 0x1}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "ab873a6a7e0ccd90740f55c1ecefe9a4679399b1a8e098794820182fa2ab"}}, {{@arp={@rand_addr=0x64010102, @empty, 0x0, 0xff, 0x1, 0xf, {@empty, {[0x0, 0x0, 0xff, 0x0, 0xff]}}, {@empty, {[0xff, 0x0, 0x0, 0xff, 0x4ae0078fa17f7724, 0xff]}}, 0x3, 0x5, 0x1, 0x3, 0xfff9, 0x101, 'virt_wifi0\x00', 'bond0\x00', {0xff}, {}, 0x0, 0x2a0}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x3c}, 0xe, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @mac=@random="2b260fb01b0c", @local, @dev={0xac, 0x14, 0x14, 0x1f}, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x458) 12.923764292s ago: executing program 4 (id=2612): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x18, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000090000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='tlb_flush\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000100)='net_dev_xmit\x00', r2}, 0x18) 12.849158539s ago: executing program 4 (id=2613): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000600)="580000001500add427323b472545b45602117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffff04000000ffffe7ee000000deff0000000200000000", 0x58}], 0x1) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000940)="580000001500add427323b472545b45602117fffdfff81000e220e227f000001925aa80013007b00090080007f000001e809050000000000f03ac70bf3b206a2dce700000000c7100003ffffffffffffffffffffffe7ee00", 0x58}], 0x1) 12.538564568s ago: executing program 4 (id=2616): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x100e, &(0x7f00000006c0), 0x4, 0x456, &(0x7f0000000f80)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ec0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 12.415183779s ago: executing program 4 (id=2618): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB], 0x2c}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x3}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 10.815141746s ago: executing program 0 (id=2630): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x6215e3c3}]}}}}}}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}]}}}}}}}, 0x0) 10.7781265s ago: executing program 0 (id=2631): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x89, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='cpu<\t\t') 10.66943825s ago: executing program 0 (id=2632): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f00000001c0), 0xed) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x18, 0x0, &(0x7f0000000080)) 10.636397383s ago: executing program 0 (id=2633): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f0000000280)={[{@errors_remount}, {@nodelalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@block_validity}, {@quota}]}, 0x3, 0x44d, &(0x7f0000000a40)="$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") chdir(&(0x7f0000000000)='./file0\x00') r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) faccessat(r1, &(0x7f0000000000)='./file0\x00', 0x5) 10.412657943s ago: executing program 0 (id=2634): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = memfd_secret(0x0) fcntl$setlease(r1, 0x400, 0x1) close(r1) 10.299541273s ago: executing program 0 (id=2635): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f00000001c0)=[{{0x2, 0x0, 0x0, 0x1}, {0x0, 0x1}}, {{0x3, 0x1, 0x1, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x10) bind$can_raw(r1, &(0x7f0000000100)={0x1d, r2}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@dellink={0x20, 0x11, 0x1, 0x70bd30, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x241ba, 0x40520}}, 0x20}, 0x1, 0x0, 0x0, 0x810}, 0x400a) 9.765934153s ago: executing program 1 (id=2637): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$eJzs3cFPG9kZAPBvBgiEkEDaHNqqbdI0bVpFscFJUJRTemlVRZGqRj31kFBwEMLGCJs00BzI/1CpkXpq/4QeKvVQKae97233tpfsYaXsbrSrsNIevJqxIYRgYDcES/j3k55m3jzj7z2sec98gF8APetcRKxFxLGIuBcRo+3rSbvEzVbJHvfyxaPp9RePppNoNu98luTt2bXY8jWZE+3nHIqIP/4u4i/Jm3HrK6vzU5VKealdLzaqi8X6yurluerUbHm2vFAqTU5Mjl+/cq10YGM9W/3P89/O3frT///3k2fvr/36b1m3RtptW8dxkFpDH9iMk+mPiFvvIlgX9LXHc6zbHeE7SSPiexFxPr//R6MvfzUBgKOs2RyN5ujWOgBw1KV5DixJC+1cwEikaaHQyuGdieG0Uqs3Lt2vLS/MtHJlYzGQ3p+rlMfbucKxGEiy+kR+/qpe2la/EhGnI+Lvg8fzemG6Vpnp5hsfAOhhJ7at/18OttZ/AOCIG+p2BwCAQ2f9B4DeY/0HgN5j/QeA3mP9B4DeY/0HgN5j/QeAnvKH27ez0lxvf/71zIOV5fnag8sz5fp8obo8XZiuLS0WZmu12fwze6p7PV+lVlucuBrLD4uNcr1RrK+s3q3Wlhcad/PP9b5bHjiUUQEAuzl99umHSUSs3Tiel9iyl4O1Go62tNsdALqmr9sdALrGbl/Qu/yMD+ywRe9rOv6J0JOD7wtwOC7+UP4fepX8P/Qu+X/oXfL/0LuazcSe/wDQY+T4Ab//BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgG9vJC9JWmjvBT4SaVooRJyMiLEYSO7PVcrjEXEqIj4YHBjM6hPd7jQA8JbST5L2/l8XRy+MbG89lnw1mB8j4q//vPOPh1ONxtJEdv3zzeuNJ+3rpW70HwDYy8Y6vbGOb3j54tH0RjnM/jz/TWtz0Szueru0WvqjPz8OxUBEDH+RtOst2fuVvgOIv/Y4In6w0/iTPDcy1t75dHv8LPbJQ42fvhY/zdtax+x78f0D6Av0mqfZ/HNzp/svjXP5cef7fyifod7exvy3/sb8l27Of30d5r9z+41x9b3fd2x7HPGj/p3iJ5vxkw7xL+wz/kc//un5Tm3Nf0VcjJ3jb41VbFQXi/WV1ctz1anZ8mx5oVSanJgcv37lWqmY56iLG5nqN31649Kp3cY/3CH+0B7j/8U+x//vr+/9+We7xP/Vz3d+/c/sEj9bE3+5z/hTw//tuH13Fn+mw/j3ev0v7TP+s49XZ/b5UADgENRXVuenKpXykhMnTpxsnnR7ZgLetVc3fbd7AgAAAAAAAAAAAAAAdHIY/07U7TECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwdH0TAAD//yyP2UE=") r1 = open(&(0x7f0000000180)='./bus\x00', 0x16d27e, 0x0) fallocate(r1, 0x0, 0x0, 0x1000f4) sendfile(r1, r1, 0x0, 0x8800000) 9.527056465s ago: executing program 1 (id=2640): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0) 9.288720627s ago: executing program 1 (id=2644): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') close_range(r2, 0xffffffffffffffff, 0x0) 9.239596511s ago: executing program 1 (id=2646): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002e40)={&(0x7f0000000000)='ext4_es_lookup_extent_exit\x00'}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'\x00', 0x6132}) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfe3a) 6.656669578s ago: executing program 4 (id=2649): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f00000010c0)=0x1, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r0, &(0x7f0000000080), 0x76e5467) 1.264109014s ago: executing program 3 (id=2658): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000580)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x20, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@capable={0x1e, 0xc, 0x0, 0x3}]}}}}}}}}, 0x0) 1.204967039s ago: executing program 3 (id=2659): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xa, 0x9}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1.176190952s ago: executing program 2 (id=2660): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$eJzs3MtrXFUYAPDv3jyaNrGTiqgtggGpFcVp2hSFrlrXooIuuuyYTErI9GEmggldpHWvLkRcFKR/guDeunAluKgLrX9BEYsU3bQuInce6dBkktjO9PTx+8GZe86c6XzfN5fOPQfmJoAn1kTxkEfsjYiTWUSp9XweEcON3kjESvN1t2+eny5aFqur7/+VRRYRt26en26/V9Y6jrYGIxFx9a0snv50fdz60vJ8pVarLrTGBxdPnztYX1p+fe505VT1VPXMkak3j0y9MTXVw1qvn/vw6xd+eefli5c/m3z3q90/ZXEsxlpznXX0ykRMrH0mnQYjotLrYIkMtOrprDMbTJgQAACbyjvWcM9GKQbizuKtFD/+mjQ5AAAAoCdWByJWAQAAgMdcZv8PAAAAj7n27wBu3Tw/3W5pf5HwYN04HhHjzfrb9zc3ZwZjpXEciaGI2PV3Fp23tWbNf3bfJopI3/1cLVr06T7kzaxciIjnNzr/WaP+8cZd3OvrzyNisgfxJ+4aP0r1H+tB/NT1A/BkunK8eSFbf/3L19Y/scH1b3CDa9e9SH39a6//bq9b/92pf6DL+u+9bcbY9++rV7vNda7/Tnz++0wRvzjeV1H/w40LEfsGN6o/W6s/61L/yW3GGJ2+fqnbXFF/UW+7Pej6Vy9H7I+N62/LNvv7RAdn52rVyeZjlxj7fzhxoFv8zvNftCJ+ey/wIBTnf1eX+rc6/+e2GWP8uT/3dpvbuv78j+Hsg0ZvuPXMJ5XFxYVDEcPZ2+ufP7x5Lu3XtN+jqP+Vlzb//79R/cV3wkrrcyj2Ahdax2J88a6Yo/sPf3vv9fdXUf/MPZ7/L7YZ45vvL33UbS51/QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8GvKIGIssL6/187xcjhiNiGdiV147W198bfbsx2dmirmI8RjKZ+dq1cmIKDXHWTE+1OjfGR++azwVEXsi4svSzsa4PH22NpO6eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANaMRsRYZHk5IvKI+KeU5+Vy6qwAAACAnhtPnQAAAADQd/b/AAAA8Piz/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDP9rx45VoWEStHdzZaYbg1N5Q0M6Df8tQJAMkMpE4ASGYwdQJAMvb4QLbF/EjXmR09zwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAh9eBvVeuZRGxcnRnoxWGW3NDSTMD+i1PnQCQzEDqBIBkBlMnACRjjw9kW8yPdJ3Z0fNcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHh4jTValpcjIm/087xcjngqIsZjKJudq1UnI2J3RPxWGtpRjA+lThoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICeqy8tz1dqteqCjo6Ozlon9TcTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp1JeW5yu1WnWhnjoTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAILX60vJ8pVarLvSxk7pGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADS+S8AAP//szUGGQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x46, 0x0) pwrite64(r0, &(0x7f0000000000)='W*a', 0x3, 0x9000) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x0) sendfile(r1, r1, 0x0, 0x80000000) 1.067958772s ago: executing program 3 (id=2661): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) close(r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000002000208500000070"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000280)='tlb_flush\x00', r0}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 896.082517ms ago: executing program 2 (id=2662): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01d8784409000000000007000000140008000000000000100000000081b3bdb5000006001a004e22000005001400"], 0x38}}, 0x0) 735.636932ms ago: executing program 2 (id=2663): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x12, 0x8, 0x4, 0x7cb4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 614.846274ms ago: executing program 2 (id=2664): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_read_part_table(0x5ed, &(0x7f0000000600)="$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") 497.234694ms ago: executing program 2 (id=2665): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x4a, 0x0, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f00000002c0)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001) sendmsg$inet(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000003c0)="ef", 0x1}], 0x1}, 0x0) 428.209961ms ago: executing program 2 (id=2666): socket$inet6_dccp(0xa, 0x6, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000a80)={0x34, r1, 0x1, 0x0, 0x0, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) 422.569271ms ago: executing program 3 (id=2667): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000001480)=[{0x200000000006, 0x54, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) umount2(0x0, 0xb) signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x80000) 363.596347ms ago: executing program 3 (id=2668): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r1, &(0x7f000001d600)=""/102381, 0xec29, 0x20000004, 0x0) 0s ago: executing program 3 (id=2670): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000002c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a80016002000024006000200035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd8}], 0x1}, 0x0) kernel console output (not intermixed with test programs): vice loop3) in ext4_setattr:5523: Corrupt filesystem [ 83.114606][ T7482] EXT4-fs error (device loop3): ext4_do_update_inode:5121: inode #15: comm syz.3.1654: corrupted inode contents [ 83.134904][ T7490] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1661'. [ 83.144344][ T6910] EXT4-fs warning (device loop3): ext4_evict_inode:259: couldn't mark inode dirty (err -117) [ 83.154844][ T7490] 0·: renamed from hsr_slave_1 (while UP) [ 83.159405][ T6910] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.171145][ T7490] 0·: entered allmulticast mode [ 83.176717][ T7490] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 83.261472][ T7499] can0: slcan on ttyS3. [ 83.288781][ T7503] xt_CT: You must specify a L4 protocol and not use inversions on it [ 83.325461][ T7499] can0 (unregistered): slcan off ttyS3. [ 83.331248][ T7499] Falling back ldisc for ttyS3. [ 83.367759][ T7513] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1670'. [ 83.469402][ T7521] sit0: left promiscuous mode [ 83.527469][ T7521] sit0: entered promiscuous mode [ 83.641557][ T7531] hub 9-0:1.0: USB hub found [ 83.646325][ T7531] hub 9-0:1.0: 8 ports detected [ 83.900885][ T7540] can0: slcan on ttyS3. [ 83.945812][ T7540] can0 (unregistered): slcan off ttyS3. [ 83.951478][ T7540] Falling back ldisc for ttyS3. [ 83.977588][ T29] kauditd_printk_skb: 78 callbacks suppressed [ 83.977601][ T29] audit: type=1400 audit(1727567922.914:1948): avc: denied { bind } for pid=7547 comm="syz.1.1684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 84.051233][ T29] audit: type=1400 audit(1727567922.984:1949): avc: denied { mounton } for pid=7554 comm="syz.0.1687" path="/syzcgroup/cpu/syz0/cgroup.procs" dev="cgroup" ino=151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 84.201680][ T29] audit: type=1400 audit(1727567923.134:1950): avc: denied { listen } for pid=7571 comm="syz.2.1697" lport=50397 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 84.234318][ T29] audit: type=1400 audit(1727567923.164:1951): avc: denied { accept } for pid=7571 comm="syz.2.1697" lport=50397 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 84.257454][ T29] audit: type=1400 audit(1727567923.164:1952): avc: denied { setopt } for pid=7571 comm="syz.2.1697" lport=50397 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 84.439045][ T29] audit: type=1400 audit(1727567923.374:1953): avc: denied { create } for pid=7592 comm="syz.2.1705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 84.484972][ T7575] loop4: detected capacity change from 0 to 8192 [ 84.504420][ T29] audit: type=1400 audit(1727567923.434:1954): avc: denied { write } for pid=7592 comm="syz.2.1705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 84.602924][ T29] audit: type=1326 audit(1727567923.534:1955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7611 comm="syz.4.1712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff56380dff9 code=0x7ffc0000 [ 84.626478][ T29] audit: type=1326 audit(1727567923.534:1956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7611 comm="syz.4.1712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff56380dff9 code=0x7ffc0000 [ 84.701988][ T7619] loop2: detected capacity change from 0 to 512 [ 84.705135][ T29] audit: type=1326 audit(1727567923.534:1957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7611 comm="syz.4.1712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff56380dff9 code=0x7ffc0000 [ 84.741472][ T7619] EXT4-fs (loop2): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 84.819736][ T7619] EXT4-fs warning (device loop2): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 84.895420][ T5498] EXT4-fs (loop2): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 84.980093][ T7664] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.003475][ T7664] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.010772][ T7664] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.289409][ T7716] netlink: 268 bytes leftover after parsing attributes in process `syz.0.1744'. [ 85.298570][ T7716] unsupported nla_type 65024 [ 85.971273][ T7732] loop3: detected capacity change from 0 to 512 [ 85.978393][ T7732] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 85.991552][ T7732] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 86.008601][ T7732] EXT4-fs (loop3): 1 truncate cleaned up [ 86.014681][ T7732] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.054036][ T7742] ref_ctr_offset mismatch. inode: 0x7c7 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x82 [ 86.184337][ T7760] netlink: 'syz.2.1762': attribute type 1 has an invalid length. [ 86.232028][ T7760] bond1: (slave ipip0): The slave device specified does not support setting the MAC address [ 86.242299][ T7760] bond1: (slave ipip0): Setting fail_over_mac to active for active-backup mode [ 86.293248][ T7760] bond1: (slave ipip0): making interface the new active one [ 86.316278][ T7760] bond1: (slave ipip0): Enslaving as an active interface with an up link [ 86.324856][ T7768] netlink: 272 bytes leftover after parsing attributes in process `syz.0.1763'. [ 86.459657][ T7796] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 86.500503][ T7803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.526778][ T7803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.588423][ T7813] netlink: 'syz.1.1775': attribute type 3 has an invalid length. [ 86.651320][ T7822] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1777'. [ 86.662800][ T6910] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.760116][ T7837] netlink: 'syz.1.1785': attribute type 3 has an invalid length. [ 86.767994][ T7837] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1785'. [ 86.814066][ T7845] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1788'. [ 86.921534][ T7856] hub 2-0:1.0: USB hub found [ 86.928777][ T7856] hub 2-0:1.0: 8 ports detected [ 87.310571][ T7917] loop2: detected capacity change from 0 to 128 [ 87.313067][ T7916] IPv6: sit1: Disabled Multicast RS [ 87.323303][ T7916] sit1: entered allmulticast mode [ 87.326371][ T7917] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 87.493109][ T5498] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 87.523453][ T7933] Zero length message leads to an empty skb [ 87.687268][ T7959] loop3: detected capacity change from 0 to 512 [ 87.706873][ T7959] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (3832!=33349) [ 87.719656][ T7959] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e02c, mo2=0002] [ 87.728940][ T7959] System zones: 1-12 [ 87.732991][ T7959] EXT4-fs (loop3): orphan cleanup on readonly fs [ 87.741034][ T7959] EXT4-fs error (device loop3): ext4_read_inode_bitmap:167: comm syz.3.1834: Inode bitmap for bg 0 marked uninitialized [ 87.753973][ T7959] EXT4-fs (loop3): Remounting filesystem read-only [ 87.762415][ T7959] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 87.775152][ T7959] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 87.783615][ T7959] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.187123][ T8038] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1855'. [ 88.196757][ T8038] unsupported nlmsg_type 40 [ 88.233404][ T8041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.242831][ T8041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.391623][ T8092] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1864'. [ 89.417497][ T8090] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1865'. [ 89.544648][ T8102] netlink: 184472 bytes leftover after parsing attributes in process `syz.3.1867'. [ 89.674298][ T8110] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1870'. [ 89.959360][ T29] kauditd_printk_skb: 108 callbacks suppressed [ 89.959376][ T29] audit: type=1326 audit(1727567928.894:2065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8127 comm="syz.1.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2a2c3dff9 code=0x7ffc0000 [ 89.995124][ T8130] hub 2-0:1.0: USB hub found [ 90.021572][ T8130] hub 2-0:1.0: 8 ports detected [ 90.038874][ T8126] bond2: entered promiscuous mode [ 90.044042][ T8126] bond2: entered allmulticast mode [ 90.056513][ T29] audit: type=1326 audit(1727567928.934:2066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8127 comm="syz.1.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2a2c3dff9 code=0x7ffc0000 [ 90.080149][ T29] audit: type=1326 audit(1727567928.934:2067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8127 comm="syz.1.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe2a2c3dff9 code=0x7ffc0000 [ 90.103631][ T29] audit: type=1326 audit(1727567928.934:2068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8127 comm="syz.1.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2a2c3dff9 code=0x7ffc0000 [ 90.127083][ T29] audit: type=1326 audit(1727567928.934:2069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8127 comm="syz.1.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2a2c3dff9 code=0x7ffc0000 [ 90.144558][ T8126] 8021q: adding VLAN 0 to HW filter on device bond2 [ 90.150552][ T29] audit: type=1326 audit(1727567928.944:2070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8127 comm="syz.1.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe2a2c3dff9 code=0x7ffc0000 [ 90.180709][ T29] audit: type=1326 audit(1727567928.944:2071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8127 comm="syz.1.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2a2c3dff9 code=0x7ffc0000 [ 90.204194][ T29] audit: type=1326 audit(1727567928.944:2072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8127 comm="syz.1.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2a2c3dff9 code=0x7ffc0000 [ 90.227774][ T29] audit: type=1326 audit(1727567928.944:2073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8127 comm="syz.1.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe2a2c3dff9 code=0x7ffc0000 [ 90.251210][ T29] audit: type=1326 audit(1727567928.944:2074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8127 comm="syz.1.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2a2c3dff9 code=0x7ffc0000 [ 90.281188][ T8172] loop3: detected capacity change from 0 to 128 [ 90.289485][ T8126] bond2 (unregistering): Released all slaves [ 90.304401][ T8172] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 90.340026][ T168] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 90.373050][ T8207] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 90.379511][ T8207] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 90.392794][ T8207] hsr_slave_0: left promiscuous mode [ 90.406558][ T8207] hsr_slave_1: left promiscuous mode [ 90.440363][ T8222] can0: slcan on ttyS3. [ 90.454834][ T8222] capability: warning: `syz.3.1889' uses 32-bit capabilities (legacy support in use) [ 90.505703][ T8222] can0 (unregistered): slcan off ttyS3. [ 90.511353][ T8222] Falling back ldisc for ttyS3. [ 90.566945][ T8253] loop3: detected capacity change from 0 to 512 [ 90.584093][ T8253] EXT4-fs: Ignoring removed mblk_io_submit option [ 90.628968][ T8253] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.658207][ T8253] ext4 filesystem being mounted at /104/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.730174][ T8269] bond2: entered promiscuous mode [ 90.735252][ T8269] bond2: entered allmulticast mode [ 90.767321][ T6910] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.777347][ T8269] 8021q: adding VLAN 0 to HW filter on device bond2 [ 90.816048][ T8269] bond2 (unregistering): Released all slaves [ 90.837008][ T8307] block device autoloading is deprecated and will be removed. [ 90.858067][ T8316] netlink: '+@': attribute type 4 has an invalid length. [ 90.878616][ T8307] syz.4.1909: attempt to access beyond end of device [ 90.878616][ T8307] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 90.908974][ T8316] netlink: '+@': attribute type 4 has an invalid length. [ 91.550683][ T8256] syz.0.1899 (8256) used greatest stack depth: 8984 bytes left [ 91.615579][ T8432] syz.1.1935[8432] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 91.615692][ T8432] syz.1.1935[8432] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 91.645422][ T8432] syz.1.1935[8432] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 91.661150][ T8434] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1935'. [ 91.961757][ T8452] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1944'. [ 92.093794][ T8468] x_tables: (null)_tables: DNAT target: only valid in nat table, not syz0 [ 92.139117][ T8472] IPv6: sit1: Disabled Multicast RS [ 92.151190][ T8472] sit1: entered allmulticast mode [ 92.294108][ T8480] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 92.314453][ T8485] sd 0:0:1:0: device reset [ 93.056862][ T8504] loop3: detected capacity change from 0 to 8192 [ 93.806229][ T8251] syz.0.1899 (8251) used greatest stack depth: 6200 bytes left [ 93.962781][ T8511] IPv6: sit1: Disabled Multicast RS [ 93.969036][ T8511] sit1: entered allmulticast mode [ 94.134977][ T8543] loop2: detected capacity change from 0 to 128 [ 94.149799][ T8537] hub 8-0:1.0: USB hub found [ 94.166810][ T8537] hub 8-0:1.0: 8 ports detected [ 94.191131][ T8543] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 94.233378][ T8543] ext4 filesystem being mounted at /199/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 94.312744][ T8560] loop4: detected capacity change from 0 to 2048 [ 94.338885][ T8543] EXT4-fs error (device loop2): ext4_validate_block_bitmap:423: comm syz.2.1981: bg 0: bad block bitmap checksum [ 94.365256][ T8568] loop1: detected capacity change from 0 to 764 [ 94.383736][ T8568] Symlink component flag not implemented [ 94.389471][ T8568] Symlink component flag not implemented [ 94.406170][ T8568] Symlink component flag not implemented (129) [ 94.412575][ T8568] Symlink component flag not implemented (6) [ 94.427283][ T5498] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 94.488055][ T8579] loop1: detected capacity change from 0 to 128 [ 94.506155][ T8560] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.518898][ T8579] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 94.563561][ T168] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 94.597199][ T168] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 94.609502][ T168] EXT4-fs (loop4): This should not happen!! Data will be lost [ 94.609502][ T168] [ 94.619318][ T168] EXT4-fs (loop4): Total free blocks count 0 [ 94.625309][ T168] EXT4-fs (loop4): Free/Dirty block details [ 94.631258][ T168] EXT4-fs (loop4): free_blocks=2415919104 [ 94.637060][ T168] EXT4-fs (loop4): dirty_blocks=16 [ 94.642220][ T168] EXT4-fs (loop4): Block reservation details [ 94.648299][ T168] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 94.668802][ T6863] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.699623][ T8605] loop1: detected capacity change from 0 to 1024 [ 94.716600][ T8605] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 94.739273][ T8601] hub 6-0:1.0: USB hub found [ 94.746497][ T8601] hub 6-0:1.0: 8 ports detected [ 94.751756][ T8605] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.878861][ T3267] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.910954][ T8629] loop2: detected capacity change from 0 to 2048 [ 94.929267][ T8629] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.949713][ T8636] loop4: detected capacity change from 0 to 2048 [ 94.968233][ T29] kauditd_printk_skb: 149 callbacks suppressed [ 94.968252][ T29] audit: type=1326 audit(1727567933.894:2224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8633 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c174dff9 code=0x7ffc0000 [ 94.997806][ T29] audit: type=1326 audit(1727567933.894:2225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8633 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c174dff9 code=0x7ffc0000 [ 95.021167][ T29] audit: type=1326 audit(1727567933.894:2226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8633 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fe5c174dff9 code=0x7ffc0000 [ 95.044108][ T29] audit: type=1326 audit(1727567933.894:2227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8633 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c174dff9 code=0x7ffc0000 [ 95.067016][ T29] audit: type=1326 audit(1727567933.894:2228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8633 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7fe5c174dff9 code=0x7ffc0000 [ 95.090051][ T29] audit: type=1326 audit(1727567933.894:2229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8633 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c174dff9 code=0x7ffc0000 [ 95.119803][ T29] audit: type=1326 audit(1727567934.054:2230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8640 comm="syz.0.2013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04139adff9 code=0x7ffc0000 [ 95.143381][ T29] audit: type=1326 audit(1727567934.054:2231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8640 comm="syz.0.2013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=139 compat=0 ip=0x7f04139adff9 code=0x7ffc0000 [ 95.166830][ T29] audit: type=1326 audit(1727567934.054:2232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8640 comm="syz.0.2013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04139adff9 code=0x7ffc0000 [ 95.196393][ T5498] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.257524][ T8666] 9pnet_fd: Insufficient options for proto=fd [ 95.267917][ T8669] loop2: detected capacity change from 0 to 512 [ 95.312284][ T8669] EXT4-fs error (device loop2): ext4_orphan_get:1388: inode #15: comm syz.2.2017: casefold flag without casefold feature [ 95.369343][ T8669] EXT4-fs error (device loop2): ext4_orphan_get:1393: comm syz.2.2017: couldn't read orphan inode 15 (err -117) [ 95.388044][ T8669] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.420172][ T8692] loop1: detected capacity change from 0 to 128 [ 95.573828][ T5498] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.631214][ T8706] loop2: detected capacity change from 0 to 512 [ 95.656215][ T8706] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 95.675026][ T8706] EXT4-fs (loop2): 1 truncate cleaned up [ 95.681257][ T8706] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.702255][ T8699] loop4: detected capacity change from 0 to 8192 [ 95.719716][ T29] audit: type=1400 audit(1727567934.654:2233): avc: denied { remount } for pid=8698 comm="syz.4.2027" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 95.803300][ T5498] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.831070][ T8716] loop1: detected capacity change from 0 to 512 [ 95.866980][ T8716] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.897817][ T8716] ext4 filesystem being mounted at /451/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 95.977860][ T3267] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.016425][ T8739] loop4: detected capacity change from 0 to 256 [ 96.042962][ T8739] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 96.137013][ T8760] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2048'. [ 96.158857][ T8760] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2048'. [ 96.172660][ T8764] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2050'. [ 96.181714][ T8764] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2050'. [ 96.209423][ T8770] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2051'. [ 96.218456][ T8770] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2051'. [ 96.227480][ T8770] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2051'. [ 96.247323][ T8770] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2051'. [ 96.267479][ T8774] wireguard0: entered promiscuous mode [ 96.272984][ T8774] wireguard0: entered allmulticast mode [ 96.631408][ T8853] loop3: detected capacity change from 0 to 512 [ 96.655212][ T8853] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 96.687891][ T8853] EXT4-fs (loop3): 1 truncate cleaned up [ 96.693991][ T8853] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.762720][ T8868] hub 6-0:1.0: USB hub found [ 96.768490][ T8868] hub 6-0:1.0: 8 ports detected [ 96.794929][ T6910] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.848248][ T3344] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x4 [ 96.856051][ T3344] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x2 [ 96.864555][ T3344] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 96.872287][ T3344] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 96.880032][ T3344] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 96.887736][ T3344] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 96.895441][ T3344] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 96.903098][ T3344] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 96.911120][ T3344] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 96.919081][ T3344] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 96.926815][ T3344] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 96.934472][ T3344] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 96.942194][ T3344] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 96.949945][ T3344] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 96.957618][ T3344] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 96.965367][ T3344] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 96.976932][ T3344] hid-generic 0000:3000000:0000.0002: hidraw0: HID v0.00 Device [sy] on syz0 [ 97.599370][ T8966] loop4: detected capacity change from 0 to 512 [ 97.609193][ T8966] EXT4-fs error (device loop4): ext4_orphan_get:1388: inode #15: comm syz.4.2108: casefold flag without casefold feature [ 97.636367][ T8966] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.2108: couldn't read orphan inode 15 (err -117) [ 97.650398][ T8966] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.750558][ T8979] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2112'. [ 97.777827][ T8981] rdma_op ffff88811428e980 conn xmit_rdma 0000000000000000 [ 97.792818][ T6863] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.901605][ T8995] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2120'. [ 97.931096][ T8995] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2120'. [ 97.980250][ T9012] loop0: detected capacity change from 0 to 256 [ 98.021046][ T9012] FAT-fs (loop0): Directory bread(block 64) failed [ 98.027838][ T9012] FAT-fs (loop0): Directory bread(block 65) failed [ 98.036496][ T9012] FAT-fs (loop0): Directory bread(block 66) failed [ 98.043116][ T9012] FAT-fs (loop0): Directory bread(block 67) failed [ 98.051090][ T9012] FAT-fs (loop0): Directory bread(block 68) failed [ 98.057720][ T9012] FAT-fs (loop0): Directory bread(block 69) failed [ 98.064355][ T9012] FAT-fs (loop0): Directory bread(block 70) failed [ 98.071004][ T9012] FAT-fs (loop0): Directory bread(block 71) failed [ 98.078898][ T9012] FAT-fs (loop0): Directory bread(block 72) failed [ 98.085618][ T9012] FAT-fs (loop0): Directory bread(block 73) failed [ 98.111321][ T9016] loop2: detected capacity change from 0 to 1024 [ 98.135591][ T9016] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 98.146653][ T9016] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 98.166695][ T9016] JBD2: no valid journal superblock found [ 98.172683][ T9016] EXT4-fs (loop2): Could not load journal inode [ 98.193045][ T36] kworker/u8:2: attempt to access beyond end of device [ 98.193045][ T36] loop0: rw=1, sector=1800, nr_sectors = 4 limit=256 [ 98.231661][ T9018] tipc: Started in network mode [ 98.236600][ T9018] tipc: Node identity 4, cluster identity 4711 [ 98.242794][ T9018] tipc: Node number set to 4 [ 98.279279][ T9032] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2133'. [ 98.328108][ T9036] loop4: detected capacity change from 0 to 2048 [ 98.346859][ T9044] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2136'. [ 98.367889][ T9036] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.385216][ T9044] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2136'. [ 98.564371][ T9065] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 98.578131][ T9068] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2149'. [ 98.588349][ T9065] SELinux: failed to load policy [ 98.609644][ T6863] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.622704][ T9069] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2148'. [ 98.660853][ T3344] kernel write not supported for file task/517/attr/fscreate (pid: 3344 comm: kworker/1:5) [ 98.686227][ T9079] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 98.779729][ T9103] bridge0: port 3(vlan2) entered blocking state [ 98.786147][ T9103] bridge0: port 3(vlan2) entered disabled state [ 98.805760][ T9103] vlan2: entered allmulticast mode [ 98.823186][ T9103] vlan2: left allmulticast mode [ 98.861034][ T9119] loop1: detected capacity change from 0 to 512 [ 98.869373][ T9119] EXT4-fs: Ignoring removed oldalloc option [ 98.875852][ T9119] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 98.888446][ T9119] EXT4-fs (loop1): 1 truncate cleaned up [ 98.894541][ T9119] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.986526][ T9129] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 99.016838][ T9131] loop2: detected capacity change from 0 to 512 [ 99.123025][ T9131] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 99.132751][ T3267] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.142264][ T9131] EXT4-fs (loop2): orphan cleanup on readonly fs [ 99.152080][ T9131] EXT4-fs warning (device loop2): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 99.174584][ T9145] loop4: detected capacity change from 0 to 128 [ 99.181042][ T9131] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 99.194970][ T9131] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2168: bg 0: block 40: padding at end of block bitmap is not set [ 99.251491][ T9131] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 99.282681][ T9131] EXT4-fs (loop2): 1 truncate cleaned up [ 99.298926][ T9158] loop3: detected capacity change from 0 to 2048 [ 99.307615][ T9131] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 99.322082][ T9161] netem: incorrect gi model size [ 99.327094][ T9161] netem: change failed [ 99.339267][ T9158] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.382013][ T6910] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.405906][ T5498] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.448924][ T9171] bond2: entered promiscuous mode [ 99.454072][ T9171] bond2: entered allmulticast mode [ 99.456609][ T9212] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 99.460879][ T9171] 8021q: adding VLAN 0 to HW filter on device bond2 [ 99.481420][ T9171] bond2 (unregistering): Released all slaves [ 99.524001][ T9246] wireguard0: entered promiscuous mode [ 99.529671][ T9246] wireguard0: entered allmulticast mode [ 99.544843][ T9254] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 99.704190][ T9279] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 99.731686][ T9283] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 99.755621][ T9279] netlink: 'syz.0.2192': attribute type 10 has an invalid length. [ 99.775757][ T9279] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.783069][ T9279] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.797903][ T9279] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.805273][ T9279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.812657][ T9279] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.819930][ T9279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.820255][ T9291] loop1: detected capacity change from 0 to 2048 [ 99.835563][ T9279] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 99.877540][ T36] bond0: (slave bridge0): link status definitely up, 0 Mbps full duplex [ 99.887729][ T9294] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2199'. [ 99.890027][ T9291] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.896731][ T9294] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2199'. [ 99.922387][ T9291] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 99.937701][ T9291] EXT4-fs (loop1): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 99.950168][ T9291] EXT4-fs (loop1): This should not happen!! Data will be lost [ 99.950168][ T9291] [ 99.959986][ T9291] EXT4-fs (loop1): Total free blocks count 0 [ 99.966004][ T9291] EXT4-fs (loop1): Free/Dirty block details [ 99.971918][ T9291] EXT4-fs (loop1): free_blocks=2415919104 [ 99.977709][ T9291] EXT4-fs (loop1): dirty_blocks=16 [ 99.982833][ T9291] EXT4-fs (loop1): Block reservation details [ 99.988931][ T9291] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 100.008337][ T9291] EXT4-fs (loop1): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 100.054158][ T29] kauditd_printk_skb: 115 callbacks suppressed [ 100.054176][ T29] audit: type=1400 audit(1727567938.984:2348): avc: denied { setopt } for pid=9307 comm="syz.3.2204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 100.130153][ T9319] loop2: detected capacity change from 0 to 256 [ 100.140422][ T9319] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 100.182014][ T9328] loop2: detected capacity change from 0 to 512 [ 100.189226][ T9328] EXT4-fs (loop2): unsupported inode size: 0 [ 100.195261][ T9328] EXT4-fs (loop2): blocksize: 1024 [ 100.215146][ T29] audit: type=1326 audit(1727567939.144:2349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9327 comm="syz.3.2211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c174dff9 code=0x7ffc0000 [ 100.247796][ T29] audit: type=1326 audit(1727567939.174:2350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9327 comm="syz.3.2211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fe5c174dff9 code=0x7ffc0000 [ 100.271637][ T29] audit: type=1326 audit(1727567939.174:2351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9327 comm="syz.3.2211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c174dff9 code=0x7ffc0000 [ 100.295262][ T29] audit: type=1326 audit(1727567939.174:2352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9327 comm="syz.3.2211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7fe5c174dff9 code=0x7ffc0000 [ 100.313312][ T9337] loop2: detected capacity change from 0 to 128 [ 100.318713][ T29] audit: type=1326 audit(1727567939.174:2353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9327 comm="syz.3.2211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c174dff9 code=0x7ffc0000 [ 100.376344][ T29] audit: type=1400 audit(1727567939.314:2354): avc: denied { bind } for pid=9341 comm="syz.2.2215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 100.395963][ T29] audit: type=1400 audit(1727567939.314:2355): avc: denied { name_bind } for pid=9341 comm="syz.2.2215" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 100.416905][ T29] audit: type=1400 audit(1727567939.314:2356): avc: denied { node_bind } for pid=9341 comm="syz.2.2215" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 100.418869][ T9346] loop2: detected capacity change from 0 to 512 [ 100.454111][ T9346] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 100.470227][ T9346] EXT4-fs error (device loop2): ext4_orphan_get:1388: inode #15: comm syz.2.2217: iget: bad i_size value: -67835469387268086 [ 100.494169][ T9346] EXT4-fs error (device loop2): ext4_orphan_get:1393: comm syz.2.2217: couldn't read orphan inode 15 (err -117) [ 100.512714][ T9346] EXT4-fs (loop2): mounted filesystem f7ff0000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.529601][ T9346] ext2 filesystem being mounted at /258/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.564581][ T9346] EXT4-fs error (device loop2): ext4_add_entry:2437: inode #2: comm syz.2.2217: Directory hole found for htree leaf block 0 [ 100.617620][ T5498] EXT4-fs (loop2): unmounting filesystem f7ff0000-0000-0000-0000-000000000000. [ 100.742572][ T29] audit: type=1400 audit(1727567939.674:2357): avc: denied { lock } for pid=9387 comm="syz.4.2229" path="socket:[21326]" dev="sockfs" ino=21326 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 100.948135][ T9411] loop1: detected capacity change from 0 to 512 [ 100.973753][ T9411] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.2239: corrupted in-inode xattr: invalid ea_ino [ 100.997464][ T9411] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.2239: couldn't read orphan inode 15 (err -117) [ 101.017327][ T9411] EXT4-fs (loop1): mounted filesystem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.045577][ T9416] loop2: detected capacity change from 0 to 2048 [ 101.060201][ T9396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.071180][ T9396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.089329][ T3267] EXT4-fs (loop1): unmounting filesystem 00000007-0000-0000-0000-000000000000. [ 101.628267][ T9432] erspan0: entered promiscuous mode [ 101.667289][ T9432] erspan0: left promiscuous mode [ 101.866411][ T9448] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 101.873002][ T9448] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 101.880538][ T9448] vhci_hcd vhci_hcd.0: Device attached [ 101.915669][ T9449] vhci_hcd: connection closed [ 101.923562][ T28] vhci_hcd: stop threads [ 101.932579][ T28] vhci_hcd: release socket [ 101.937124][ T28] vhci_hcd: disconnect device [ 102.247634][ T9467] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 102.487035][ T9491] ALSA: seq fatal error: cannot create timer (-22) [ 102.606030][ T9510] syz.3.2273[9510] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 102.606139][ T9510] syz.3.2273[9510] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 102.633463][ T9510] syz.3.2273[9510] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 102.686151][ T9514] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 102.790968][ T9518] __nla_validate_parse: 4 callbacks suppressed [ 102.791028][ T9518] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2276'. [ 102.816967][ T9518] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 103.153486][ T9524] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 103.350496][ T9559] bond_slave_0: entered promiscuous mode [ 103.356266][ T9559] bond_slave_1: entered promiscuous mode [ 103.362516][ T9559] bond_slave_0: left promiscuous mode [ 103.368054][ T9559] bond_slave_1: left promiscuous mode [ 103.426014][ T9555] loop2: detected capacity change from 0 to 2048 [ 103.471075][ T9566] loop3: detected capacity change from 0 to 1024 [ 103.487535][ T9566] EXT4-fs: Ignoring removed orlov option [ 103.493370][ T9566] EXT4-fs: Ignoring removed nomblk_io_submit option [ 103.505701][ T9555] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.532610][ T9422] syz.1.2242 (9422) used greatest stack depth: 5320 bytes left [ 103.620834][ T9555] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2284: bg 0: block 274: padding at end of block bitmap is not set [ 103.646943][ T9555] EXT4-fs (loop2): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 117 [ 103.659682][ T9555] EXT4-fs (loop2): This should not happen!! Data will be lost [ 103.659682][ T9555] [ 103.691483][ T9566] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.726526][ T5498] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.737767][ T9566] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 103.829867][ T6910] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.946016][ T9609] vhci_hcd: invalid port number 97 [ 103.946028][ T9609] vhci_hcd: default hub control req: d364 v6665 i0061 l29804 [ 103.988142][ T9625] loop1: detected capacity change from 0 to 2048 [ 104.006366][ T9627] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 104.044052][ T9625] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.064068][ T9637] loop3: detected capacity change from 0 to 1024 [ 104.112497][ T9637] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.119096][ T3267] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.198492][ T6910] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.388081][ T9684] can0: slcan on ttyS3. [ 104.401358][ T9689] loop3: detected capacity change from 0 to 512 [ 104.441141][ T9689] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.445570][ T9684] can0 (unregistered): slcan off ttyS3. [ 104.466415][ T9684] Falling back ldisc for ttyS3. [ 104.474103][ T9689] ext4 filesystem being mounted at /202/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.498877][ T9698] syz.4.2333[9698] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 104.498959][ T9698] syz.4.2333[9698] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 104.526574][ T9698] syz.4.2333[9698] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 104.565972][ T9706] EXT4-fs error (device loop3): ext4_do_update_inode:5121: inode #19: comm syz.3.2331: corrupted inode contents [ 104.593329][ T9706] EXT4-fs error (device loop3): ext4_dirty_inode:5984: inode #19: comm syz.3.2331: mark_inode_dirty error [ 104.598976][ T9707] loop0: detected capacity change from 0 to 512 [ 104.605003][ T9706] EXT4-fs error (device loop3): ext4_do_update_inode:5121: inode #19: comm syz.3.2331: corrupted inode contents [ 104.626260][ T9706] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3005: inode #19: comm syz.3.2331: mark_inode_dirty error [ 104.627956][ T9707] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.640000][ T9706] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3008: inode #19: comm syz.3.2331: mark inode dirty (error -117) [ 104.651301][ T9707] ext4 filesystem being mounted at /471/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.673951][ T9706] EXT4-fs warning (device loop3): ext4_evict_inode:276: xattr delete (err -117) [ 104.727593][ T36] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.753415][ T3269] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.787928][ T6910] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.822721][ T36] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.902176][ T9730] loop2: detected capacity change from 0 to 2048 [ 104.917583][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 104.925041][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 104.932777][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 104.940458][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 104.947939][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 104.955384][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 104.962796][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 104.970366][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 104.977811][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 104.985214][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 104.992682][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 105.000201][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 105.007655][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 105.015231][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 105.022670][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 105.030155][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 105.037582][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 105.044970][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 105.052424][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 105.059832][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 105.067255][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 105.074737][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 105.077697][ T9730] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.082239][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 105.101700][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 105.109111][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 105.116542][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 105.123957][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 105.131418][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 105.138855][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 105.146289][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 105.153682][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 105.161193][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 105.169798][ T35] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz0 [ 105.210193][ T36] bond0: (slave netdevsim1): Releasing backup interface [ 105.229751][ T36] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.248596][ T29] kauditd_printk_skb: 66 callbacks suppressed [ 105.248613][ T29] audit: type=1400 audit(1727567944.184:2424): avc: denied { read } for pid=9724 comm="syz.2.2340" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 105.307265][ T9763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.316402][ T9763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.344420][ T36] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.364879][ T29] audit: type=1400 audit(1727567944.294:2425): avc: denied { ioctl } for pid=9784 comm="syz.4.2352" path="/dev/usbmon0" dev="devtmpfs" ino=117 ioctlcmd=0x9204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 105.365158][ T5498] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.467628][ T36] bridge_slave_1: left allmulticast mode [ 105.473313][ T36] bridge_slave_1: left promiscuous mode [ 105.479092][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.496848][ T36] bridge_slave_0: left allmulticast mode [ 105.502580][ T36] bridge_slave_0: left promiscuous mode [ 105.508363][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.688754][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 105.706385][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 105.719331][ T36] bond0 (unregistering): Released all slaves [ 105.731001][ T9723] chnl_net:caif_netlink_parms(): no params data found [ 105.767002][ T36] tipc: Left network mode [ 105.778845][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.786564][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.796666][ T9927] syz.4.2359[9927] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 105.796738][ T9927] syz.4.2359[9927] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 105.808262][ T9927] syz.4.2359[9927] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 105.819752][ T36] veth1_macvtap: left promiscuous mode [ 105.836688][ T36] veth0_macvtap: left promiscuous mode [ 105.842217][ T36] veth1_vlan: left promiscuous mode [ 105.847711][ T36] veth0_vlan: left promiscuous mode [ 106.002783][ T36] team0 (unregistering): Port device team_slave_1 removed [ 106.019545][ T36] team0 (unregistering): Port device team_slave_0 removed [ 106.082318][ T9946] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 106.127608][ T9723] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.134732][ T9723] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.154910][ T9723] bridge_slave_0: entered allmulticast mode [ 106.167559][ T9723] bridge_slave_0: entered promiscuous mode [ 106.182606][ T9977] loop0: detected capacity change from 0 to 256 [ 106.191949][ T9723] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.199088][ T9723] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.215922][ T9977] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 106.225732][ T9723] bridge_slave_1: entered allmulticast mode [ 106.236085][ T9723] bridge_slave_1: entered promiscuous mode [ 106.275744][ T9723] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.290166][ T9723] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.337163][ T9723] team0: Port device team_slave_0 added [ 106.380387][T10027] bond1: entered promiscuous mode [ 106.385544][T10027] bond1: entered allmulticast mode [ 106.406216][T10027] 8021q: adding VLAN 0 to HW filter on device bond1 [ 106.440647][T10080] loop3: detected capacity change from 0 to 512 [ 106.451964][T10027] bond1 (unregistering): Released all slaves [ 106.478436][T10080] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.505703][T10080] ext4 filesystem being mounted at /213/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.517181][ T9723] team0: Port device team_slave_1 added [ 108.050771][ T9723] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.057811][ T9723] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.083864][ T9723] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.095320][ T9723] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.102427][ T9723] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.128469][ T9723] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.166594][ T9723] hsr_slave_0: entered promiscuous mode [ 108.172930][ T9723] hsr_slave_1: entered promiscuous mode [ 108.179990][ T9723] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 108.180418][ T6910] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.187646][ T9723] Cannot create hsr debugfs directory [ 108.251330][T10206] syz.4.2389[10206] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 108.251405][T10206] syz.4.2389[10206] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 108.280203][T10206] syz.4.2389[10206] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 108.340219][ T29] audit: type=1400 audit(1727567947.274:2426): avc: denied { read } for pid=10262 comm="syz.3.2393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 108.396312][ T29] audit: type=1400 audit(1727567947.324:2427): avc: denied { map } for pid=10267 comm="syz.3.2395" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 108.421232][T10270] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10270 comm=syz.0.2394 [ 108.463519][ T29] audit: type=1326 audit(1727567947.394:2428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10278 comm="syz.0.2398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04139adff9 code=0x7ffc0000 [ 108.513489][ T29] audit: type=1326 audit(1727567947.394:2429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10278 comm="syz.0.2398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04139adff9 code=0x7ffc0000 [ 108.537052][ T29] audit: type=1326 audit(1727567947.394:2430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10278 comm="syz.0.2398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f04139adff9 code=0x7ffc0000 [ 108.560695][ T29] audit: type=1326 audit(1727567947.394:2431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10278 comm="syz.0.2398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04139adff9 code=0x7ffc0000 [ 108.584328][ T29] audit: type=1326 audit(1727567947.394:2432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10278 comm="syz.0.2398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04139adff9 code=0x7ffc0000 [ 108.607897][ T29] audit: type=1326 audit(1727567947.424:2433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10278 comm="syz.0.2398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f04139adff9 code=0x7ffc0000 [ 108.651063][ T9723] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 108.661707][T10304] can0: slcan on ttyS3. [ 108.662032][ T9723] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 108.679105][ T9723] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 108.688373][ T9723] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 108.705462][T10304] can0 (unregistered): slcan off ttyS3. [ 108.711168][T10304] Falling back ldisc for ttyS3. [ 108.742183][ T9723] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.761965][ T9723] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.768751][T10314] loop0: detected capacity change from 0 to 512 [ 108.777987][ T3362] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.785103][ T3362] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.794343][T10314] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.794396][ T3362] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.794427][ T3362] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.845805][T10314] ext4 filesystem being mounted at /488/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.908510][ T3269] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.964015][ T9723] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.046756][T10351] loop2: detected capacity change from 0 to 128 [ 109.065837][T10354] tls_set_device_offload: netdev not found [ 109.133313][T10351] syz.2.2417: attempt to access beyond end of device [ 109.133313][T10351] loop2: rw=2049, sector=129, nr_sectors = 912 limit=128 [ 109.158950][ T9723] veth0_vlan: entered promiscuous mode [ 109.171243][T10365] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 109.171243][T10365] program syz.4.2422 not setting count and/or reply_len properly [ 109.179336][ T9723] veth1_vlan: entered promiscuous mode [ 109.251359][T10369] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 109.270280][ T9723] veth0_macvtap: entered promiscuous mode [ 109.284472][ T9723] veth1_macvtap: entered promiscuous mode [ 109.316078][ T9723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.326595][ T9723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.336467][ T9723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.346989][ T9723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.357043][ T9723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.367542][ T9723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.377418][ T9723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.387940][ T9723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.397801][ T9723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.408434][ T9723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.419447][T10387] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2430'. [ 109.431353][ T9723] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.442321][ T9723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.452894][ T9723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.462782][ T9723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.473298][ T9723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.483306][ T9723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.493764][ T9723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.503597][ T9723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.514136][ T9723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.524006][ T9723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.534466][ T9723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.565953][ T9723] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.595808][ T9723] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.604679][ T9723] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.613489][ T9723] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.622374][ T9723] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.678108][T10405] syz.0.2438[10405] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 109.678243][T10405] syz.0.2438[10405] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 109.712265][T10405] syz.0.2438[10405] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 109.726670][T10405] serio: Serial port ptm0 [ 109.817818][T10415] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2441'. [ 109.843309][T10427] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 109.916389][T10439] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2452'. [ 110.275381][ T29] kauditd_printk_skb: 483 callbacks suppressed [ 110.275400][ T29] audit: type=1326 audit(1727567949.184:2917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10430 comm="syz.0.2448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0413949959 code=0x7ffc0000 [ 110.305128][ T29] audit: type=1326 audit(1727567949.184:2918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10430 comm="syz.0.2448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0413949959 code=0x7ffc0000 [ 110.328538][ T29] audit: type=1326 audit(1727567949.184:2919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10430 comm="syz.0.2448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0413949959 code=0x7ffc0000 [ 110.352128][ T29] audit: type=1326 audit(1727567949.184:2920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10430 comm="syz.0.2448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0413949959 code=0x7ffc0000 [ 110.375570][ T29] audit: type=1326 audit(1727567949.184:2921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10430 comm="syz.0.2448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0413949959 code=0x7ffc0000 [ 110.398981][ T29] audit: type=1326 audit(1727567949.184:2922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10430 comm="syz.0.2448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0413949959 code=0x7ffc0000 [ 110.422601][ T29] audit: type=1326 audit(1727567949.184:2923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10430 comm="syz.0.2448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0413949959 code=0x7ffc0000 [ 110.446009][ T29] audit: type=1326 audit(1727567949.184:2924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10430 comm="syz.0.2448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0413949959 code=0x7ffc0000 [ 110.469470][ T29] audit: type=1326 audit(1727567949.184:2925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10430 comm="syz.0.2448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0413949959 code=0x7ffc0000 [ 110.492911][ T29] audit: type=1326 audit(1727567949.184:2926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10430 comm="syz.0.2448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0413949959 code=0x7ffc0000 [ 111.214995][T10437] loop1: detected capacity change from 0 to 2048 [ 111.286403][T10437] loop1: p3 < > p4 < > [ 111.290587][T10437] loop1: partition table partially beyond EOD, truncated [ 111.396125][T10437] loop1: p3 start 4284289 is beyond EOD, truncated [ 112.427163][T10461] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2459'. [ 112.461915][T10472] mmap: syz.2.2463 (10472): VmData 29077504 exceed data ulimit 2. Update limits or use boot option ignore_rlimit_data. [ 112.654316][T10505] loop2: detected capacity change from 0 to 8192 [ 112.663316][T10505] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 112.733558][T10525] loop1: detected capacity change from 0 to 128 [ 112.748901][T10525] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 112.756874][T10525] FAT-fs (loop1): Filesystem has been set read-only [ 112.768134][T10527] loop2: detected capacity change from 0 to 512 [ 112.782808][ T9723] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 112.827087][T10527] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.839892][T10527] ext4 filesystem being mounted at /309/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 112.859568][T10527] EXT4-fs error (device loop2): ext4_do_update_inode:5121: inode #2: comm syz.2.2478: corrupted inode contents [ 112.873189][T10539] 9pnet: Could not find request transport: f [ 112.890028][T10527] EXT4-fs error (device loop2): ext4_dirty_inode:5984: inode #2: comm syz.2.2478: mark_inode_dirty error [ 112.912911][T10543] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2482'. [ 112.980281][T10527] EXT4-fs error (device loop2): ext4_do_update_inode:5121: inode #2: comm syz.2.2478: corrupted inode contents [ 113.004906][T10527] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #2: comm syz.2.2478: mark_inode_dirty error [ 113.058037][T10558] loop1: detected capacity change from 0 to 512 [ 113.065001][ T5498] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.081431][T10558] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 113.093519][T10558] EXT4-fs (loop1): 1 orphan inode deleted [ 113.099464][T10558] EXT4-fs (loop1): 1 truncate cleaned up [ 113.108555][T10558] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.184873][T10563] loop0: detected capacity change from 0 to 512 [ 113.194270][ T9723] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.212084][T10563] /dev/loop0: Can't open blockdev [ 113.231745][ C0] operation not supported error, dev loop0, sector 0 op 0x9:(WRITE_ZEROES) flags 0x10000800 phys_seg 0 prio class 0 [ 113.619051][T10638] loop4: detected capacity change from 0 to 512 [ 113.661306][T10638] /dev/loop4: Can't open blockdev [ 113.676864][T10640] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2506'. [ 113.695989][ C1] operation not supported error, dev loop4, sector 0 op 0x9:(WRITE_ZEROES) flags 0x10000800 phys_seg 0 prio class 0 [ 114.073300][T10672] syz.1.2519[10672] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 114.073389][T10672] syz.1.2519[10672] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 114.096945][T10672] syz.1.2519[10672] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 114.153319][T10676] loop0: detected capacity change from 0 to 512 [ 114.186278][T10678] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 114.190540][T10676] EXT4-fs: Ignoring removed bh option [ 114.207686][T10676] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.316756][T10676] loop0: detected capacity change from 512 to 0 [ 114.349646][ T3269] syz-executor: attempt to access beyond end of device [ 114.349646][ T3269] loop0: rw=12288, sector=42, nr_sectors = 2 limit=0 [ 114.391066][ T3269] EXT4-fs warning (device loop0): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -5 reading directory block [ 114.410261][ T3269] syz-executor: attempt to access beyond end of device [ 114.410261][ T3269] loop0: rw=524288, sector=12, nr_sectors = 2 limit=0 [ 114.427393][T10719] loop2: detected capacity change from 0 to 512 [ 114.434386][ T3269] syz-executor: attempt to access beyond end of device [ 114.434386][ T3269] loop0: rw=524288, sector=14, nr_sectors = 2 limit=0 [ 114.448759][ T3269] syz-executor: attempt to access beyond end of device [ 114.448759][ T3269] loop0: rw=524288, sector=16, nr_sectors = 2 limit=0 [ 114.462632][ T3269] syz-executor: attempt to access beyond end of device [ 114.462632][ T3269] loop0: rw=524288, sector=18, nr_sectors = 2 limit=0 [ 114.476656][ T3269] syz-executor: attempt to access beyond end of device [ 114.476656][ T3269] loop0: rw=524288, sector=20, nr_sectors = 2 limit=0 [ 114.503043][T10719] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.519616][T10727] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 114.530680][T10719] ext4 filesystem being mounted at /321/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 114.542384][ T3269] syz-executor: attempt to access beyond end of device [ 114.542384][ T3269] loop0: rw=524288, sector=22, nr_sectors = 2 limit=0 [ 114.559114][T10719] EXT4-fs error (device loop2): ext4_do_update_inode:5121: inode #2: comm syz.2.2531: corrupted inode contents [ 114.578991][ T3269] syz-executor: attempt to access beyond end of device [ 114.578991][ T3269] loop0: rw=524288, sector=24, nr_sectors = 2 limit=0 [ 114.601645][T10719] EXT4-fs error (device loop2): ext4_dirty_inode:5984: inode #2: comm syz.2.2531: mark_inode_dirty error [ 114.625742][T10719] EXT4-fs error (device loop2): ext4_do_update_inode:5121: inode #2: comm syz.2.2531: corrupted inode contents [ 114.642108][T10732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.650671][ T3269] syz-executor: attempt to access beyond end of device [ 114.650671][ T3269] loop0: rw=524288, sector=26, nr_sectors = 2 limit=0 [ 114.676012][T10719] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #2: comm syz.2.2531: mark_inode_dirty error [ 114.680520][ T3269] syz-executor: attempt to access beyond end of device [ 114.680520][ T3269] loop0: rw=524288, sector=28, nr_sectors = 2 limit=0 [ 114.702740][T10732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.710733][ T3269] EXT4-fs error (device loop0): ext4_get_inode_loc:4541: inode #2: block 5: comm syz-executor: unable to read itable block [ 114.734152][ T3269] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 114.747185][ T5498] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.756274][ T3269] EXT4-fs (loop0): I/O error while writing superblock [ 114.763059][ T3269] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5780: IO failure [ 114.774302][T10732] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2535'. [ 114.774337][ T3269] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 114.774357][ T3269] EXT4-fs (loop0): I/O error while writing superblock [ 114.774374][ T3269] EXT4-fs error (device loop0): ext4_dirty_inode:5984: inode #2: comm syz-executor: mark_inode_dirty error [ 114.818165][ T3269] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 114.822182][T10732] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2535'. [ 114.827941][ T3269] EXT4-fs (loop0): I/O error while writing superblock [ 114.874036][ T3362] EXT4-fs error (device loop0): __ext4_get_inode_loc_noinmem:4526: inode #2: block 5: comm kworker/u8:7: unable to read itable block [ 114.902570][ T3362] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 114.926812][ T3362] EXT4-fs (loop0): I/O error while writing superblock [ 114.938804][ T3269] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.962702][ T3269] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 114.975937][ T3269] EXT4-fs (loop0): I/O error while writing superblock [ 115.299668][ T29] kauditd_printk_skb: 783 callbacks suppressed [ 115.299685][ T29] audit: type=1400 audit(1727567954.234:3710): avc: denied { create } for pid=10783 comm="syz.3.2550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 115.350767][T10785] syzkaller1: entered promiscuous mode [ 115.356297][T10785] syzkaller1: entered allmulticast mode [ 115.369158][ T29] audit: type=1400 audit(1727567954.284:3711): avc: denied { ioctl } for pid=10783 comm="syz.3.2550" path="socket:[23527]" dev="sockfs" ino=23527 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 115.455971][T10806] loop4: detected capacity change from 0 to 512 [ 115.481613][ T29] audit: type=1400 audit(1727567954.414:3712): avc: denied { read } for pid=10812 comm="syz.3.2554" name="event0" dev="devtmpfs" ino=218 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 115.505005][ T29] audit: type=1400 audit(1727567954.414:3713): avc: denied { open } for pid=10812 comm="syz.3.2554" path="/dev/input/event0" dev="devtmpfs" ino=218 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 115.531993][ T29] audit: type=1400 audit(1727567954.474:3714): avc: denied { ioctl } for pid=10812 comm="syz.3.2554" path="/dev/input/event0" dev="devtmpfs" ino=218 ioctlcmd=0x4591 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 115.545448][T10822] loop1: detected capacity change from 0 to 512 [ 115.577282][T10806] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2842e028, mo2=0002] [ 115.585287][T10806] System zones: 1-12 [ 115.628930][T10822] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.654620][T10822] ext4 filesystem being mounted at /28/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 115.698729][ T9723] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.710349][T10776] chnl_net:caif_netlink_parms(): no params data found [ 115.717962][T10914] loop3: detected capacity change from 0 to 2048 [ 115.762214][T10806] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.2552: invalid indirect mapped block 8 (level 2) [ 115.785655][T10914] loop3: p3 < > p4 < > [ 115.789906][T10914] loop3: partition table partially beyond EOD, truncated [ 115.805611][T10914] loop3: p3 start 4284289 is beyond EOD, truncated [ 115.845898][T10806] EXT4-fs (loop4): Remounting filesystem read-only [ 115.863887][T10776] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.871085][T10776] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.878335][T10806] EXT4-fs (loop4): 1 truncate cleaned up [ 115.884415][T10806] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.885755][T10776] bridge_slave_0: entered allmulticast mode [ 115.906201][T10776] bridge_slave_0: entered promiscuous mode [ 115.907019][T10978] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2559'. [ 115.916548][T10776] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.928187][T10776] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.945571][T10776] bridge_slave_1: entered allmulticast mode [ 115.952180][T10806] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 115.952205][T10776] bridge_slave_1: entered promiscuous mode [ 115.965629][T10806] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.038352][T10776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.049206][T10776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.070602][T10776] team0: Port device team_slave_0 added [ 116.078189][T10776] team0: Port device team_slave_1 added [ 116.097259][T10806] loop4: detected capacity change from 0 to 512 [ 116.111567][T11048] loop3: detected capacity change from 0 to 1024 [ 116.126449][T11048] EXT4-fs: Ignoring removed nomblk_io_submit option [ 116.135634][T10776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.137631][T10806] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.142651][T10776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.181179][T10776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.187357][T11048] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 116.193404][T10776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.208471][T10776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.210132][T10806] ext4 filesystem being mounted at /201/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.234473][T10776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.351934][T11048] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.369061][ T6863] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.388644][T10776] hsr_slave_0: entered promiscuous mode [ 116.398848][T10776] hsr_slave_1: entered promiscuous mode [ 116.405093][ T29] audit: type=1400 audit(1727567955.334:3715): avc: denied { mounton } for pid=11047 comm="syz.3.2561" path="/259/file1/file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 116.450998][T10776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 116.468104][ T6910] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.486948][ T29] audit: type=1400 audit(1727567955.394:3716): avc: denied { remove_name } for pid=6910 comm="syz-executor" name="lost+found" dev="loop3" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 116.510337][ T29] audit: type=1400 audit(1727567955.394:3717): avc: denied { rmdir } for pid=6910 comm="syz-executor" name="lost+found" dev="loop3" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 116.533111][ T29] audit: type=1400 audit(1727567955.394:3718): avc: denied { unlink } for pid=6910 comm="syz-executor" name="file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 116.555950][ T29] audit: type=1400 audit(1727567955.394:3719): avc: denied { unlink } for pid=6910 comm="syz-executor" name="file1" dev="loop3" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 116.582675][T10776] Cannot create hsr debugfs directory [ 116.651911][T11124] loop4: detected capacity change from 0 to 512 [ 116.693200][T11152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.708276][T10776] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.719908][T11124] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.734007][T11152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.754517][T11152] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2562'. [ 116.765011][T11152] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2562'. [ 116.773649][T11124] ext4 filesystem being mounted at /202/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 116.809967][T10776] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.858443][T11124] EXT4-fs error (device loop4): ext4_do_update_inode:5121: inode #2: comm syz.4.2563: corrupted inode contents [ 116.885581][T11124] EXT4-fs error (device loop4): ext4_dirty_inode:5984: inode #2: comm syz.4.2563: mark_inode_dirty error [ 116.900790][T10776] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.943832][T11124] EXT4-fs error (device loop4): ext4_do_update_inode:5121: inode #2: comm syz.4.2563: corrupted inode contents [ 116.969338][T10776] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.013429][T11124] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #2: comm syz.4.2563: mark_inode_dirty error [ 117.090078][ T6863] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.090391][T10776] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 117.109168][T10776] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 117.118125][T10776] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 117.127443][T10776] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 117.211844][T11188] loop4: detected capacity change from 0 to 1024 [ 117.224506][T10776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.245639][T11188] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 117.255438][T10776] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.265385][ T333] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.272445][ T333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.285096][T11188] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 117.303257][T11188] EXT4-fs (loop4): orphan cleanup on readonly fs [ 117.306645][T10776] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 117.320062][T10776] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 117.345035][T11188] EXT4-fs error (device loop4): ext4_free_blocks:6589: comm syz.4.2564: Freeing blocks not in datazone - block = 0, count = 4096 [ 117.378446][T11188] EXT4-fs (loop4): 1 orphan inode deleted [ 117.391028][ T333] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.398120][ T333] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.418642][T11188] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 117.481145][T11195] loop3: detected capacity change from 0 to 1024 [ 117.548125][T10776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.557207][T11195] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0003] [ 117.571406][T11195] System zones: 0-1, 3-12 [ 117.585233][T11195] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.602016][ T6863] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.652192][T11195] EXT4-fs (loop3): shut down requested (0) [ 117.698784][ T6910] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.756063][T10776] veth0_vlan: entered promiscuous mode [ 117.781799][T11220] serio: Serial port ptm0 [ 117.796558][T10776] veth1_vlan: entered promiscuous mode [ 117.827058][T11224] IPv6: Can't replace route, no match found [ 117.838268][T10776] veth0_macvtap: entered promiscuous mode [ 117.866505][T10776] veth1_macvtap: entered promiscuous mode [ 117.901172][T10776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.911777][T10776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.921662][T10776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.932141][T10776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.942401][T10776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.952934][T10776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.962783][T10776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.973351][T10776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.983293][T10776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.993766][T10776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.003626][T10776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.014074][T10776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.065596][T11232] loop4: detected capacity change from 0 to 8192 [ 118.097569][T10776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.124076][T10776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.134682][T10776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.144560][T10776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.155054][T10776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.164948][T10776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.175450][T10776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.185289][T10776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.195821][T10776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.205673][T10776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.216129][T10776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.225982][T10776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.236432][T10776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.254443][T10776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.264419][T10776] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.273342][T10776] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.282079][T10776] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.290849][T10776] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.481512][T11258] loop0: detected capacity change from 0 to 512 [ 118.537084][T11263] xt_CT: You must specify a L4 protocol and not use inversions on it [ 118.538710][T11258] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.585582][T11258] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 118.599178][T11268] random: crng reseeded on system resumption [ 118.710394][T10776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.975058][ C0] vxcan0: j1939_xtp_rx_rts_session_active: 0xffff88812734ec00: connection exists (00 00). last cmd: 14 [ 118.986317][ C0] vxcan0: j1939_xtp_rx_rts_session_active: 0xffff888115402800: connection exists (00 00). last cmd: 14 [ 118.997450][ C0] vxcan0: j1939_xtp_rx_rts_session_active: 0xffff888115402800: connection exists (00 00). last cmd: 14 [ 119.008652][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff888115402800: 0x00000: (1) Already in one or more connection managed sessions and cannot support another. [ 119.023583][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff888115402800: 0x00000: (1) Already in one or more connection managed sessions and cannot support another. [ 119.038510][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff888115402800: 0x00000: (1) Already in one or more connection managed sessions and cannot support another. [ 119.053456][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff888115402800: 0x00000: (1) Already in one or more connection managed sessions and cannot support another. [ 119.068351][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff888115402800: 0x00000: (1) Already in one or more connection managed sessions and cannot support another. [ 119.083287][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff888115402800: 0x00000: (1) Already in one or more connection managed sessions and cannot support another. [ 119.098198][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff888115402800: 0x00000: (1) Already in one or more connection managed sessions and cannot support another. [ 119.113125][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff888115402800: 0x00000: (1) Already in one or more connection managed sessions and cannot support another. [ 119.128043][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff888115402800: 0x00000: (1) Already in one or more connection managed sessions and cannot support another. [ 119.142970][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff888115402800: 0x00000: (1) Already in one or more connection managed sessions and cannot support another. [ 119.158206][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff888115402800: 0x00000: (1) Already in one or more connection managed sessions and cannot support another. [ 119.173200][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff888115402800: 0x00000: (1) Already in one or more connection managed sessions and cannot support another. [ 119.188180][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff888115402800: 0x00000: (1) Already in one or more connection managed sessions and cannot support another. [ 119.203227][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff888115402800: 0x00000: (1) Already in one or more connection managed sessions and cannot support another. [ 119.218118][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff888115402800: 0x00000: (1) Already in one or more connection managed sessions and cannot support another. [ 119.233035][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff888115402800: 0x00000: (1) Already in one or more connection managed sessions and cannot support another. [ 119.247969][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff888115402800: 0x00000: (1) Already in one or more connection managed sessions and cannot support another. [ 119.262955][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff888115402800: 0x00000: (1) Already in one or more connection managed sessions and cannot support another. [ 119.277916][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff888115402800: 0x00000: (1) Already in one or more connection managed sessions and cannot support another. [ 119.292850][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff888115402800: 0x00000: (1) Already in one or more connection managed sessions and cannot support another. [ 119.307784][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff888115402800: 0x00000: (1) Already in one or more connection managed sessions and cannot support another. [ 119.323671][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff88811474e000: 0x00000: (1) Already in one or more connection managed sessions and cannot support another. [ 119.338649][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff88811474e000: 0x00000: (1) Already in one or more connection managed sessions and cannot support another. [ 119.353524][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff88811474e000: 0x00000: (1) Already in one or more connection managed sessions and cannot support another. [ 119.368473][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff88811474e000: 0x00000: (1) Already in one or more connection managed sessions and cannot support another. [ 119.383488][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff88811474e000: 0x00000: (1) Already in one or more connection managed sessions and cannot support another. [ 119.398409][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff88811474e000: 0x00000: (1) Already in one or more connection managed sessions and cannot support another. [ 119.413354][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff88811474e000: 0x00000: (1) Already in one or more connection managed sessions and cannot support another. [ 119.428373][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff88811474e000: 0x00000: (1) Already in one or more connection managed sessions and cannot support another. [ 119.443295][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff88811474e000: 0x00000: (1) Already in one or more connection managed sessions and cannot support another. [ 119.458335][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff88811474e000: 0x00000: (1) Already in one or more connection managed sessions and cannot support another. [ 119.473551][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff88811474e000: 0x00000: (1) Already in one or more connection managed sessions and cannot support another. [ 119.488561][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff88811474e000: 0x00000: (1) Already in one or more connection managed sessions and cannot support another. [ 119.503513][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff88811474e000: 0x00000: (1) Already in one or more connection managed sessions and cannot support another. [ 119.503700][T11298] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2597'. [ 119.518486][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff88811474e000: 0x00000: (1) Already in one or more connection managed sessions and cannot support another. [ 119.542234][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff88811474e000: 0x00000: (1) Already in one or more connection managed sessions and cannot support another. [ 119.557169][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff88811474e000: 0x00000: (1) Already in one or more connection managed sessions and cannot support another. [ 119.572281][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff88811474e000: 0x00000: (1) Already in one or more connection managed sessions and cannot support another. [ 119.587205][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff88811474e000: 0x00000: (1) Already in one or more connection managed sessions and cannot support another. [ 119.602177][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff88811474e000: 0x00000: (1) Already in one or more connection managed sessions and cannot support another. [ 119.617093][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff88811474e000: 0x00000: (1) Already in one or more connection managed sessions and cannot support another. [ 119.632064][ C0] vxcan0: j1939_tp_txtimer: 0xffff88811474e000: tx aborted with unknown reason: -2 [ 119.699845][T11306] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2599'. [ 119.794120][T11311] loop0: detected capacity change from 0 to 1024 [ 119.835109][T11308] loop2: detected capacity change from 0 to 256 [ 119.847506][T11311] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 119.951582][T11311] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 119.985499][T11311] EXT4-fs (loop0): orphan cleanup on readonly fs [ 120.012117][T11311] EXT4-fs warning (device loop0): ext4_enable_quotas:7097: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 120.026713][T11311] EXT4-fs (loop0): Cannot turn on quotas: error -5 [ 120.096115][T11311] EXT4-fs (loop0): 1 truncate cleaned up [ 120.104075][T11311] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 120.142393][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88811474e000: abort rx timeout. Force session deactivation [ 120.158209][T11311] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.2602: corrupted in-inode xattr: overlapping e_value [ 120.235316][T10776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.422745][ T29] kauditd_printk_skb: 60 callbacks suppressed [ 120.422769][ T29] audit: type=1400 audit(1727567959.354:3779): avc: denied { shutdown } for pid=11305 comm="syz.4.2598" lport=47997 faddr=::ffff:100.1.1.2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 120.527380][ T29] audit: type=1400 audit(1727567959.464:3780): avc: denied { setopt } for pid=11305 comm="syz.4.2598" lport=47997 faddr=::ffff:100.1.1.2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 120.903907][ T29] audit: type=1400 audit(1727567959.834:3781): avc: denied { name_bind } for pid=11339 comm="syz.4.2613" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 120.977209][ T29] audit: type=1400 audit(1727567959.874:3782): avc: denied { create } for pid=11339 comm="syz.4.2613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 120.997896][ T29] audit: type=1400 audit(1727567959.874:3783): avc: denied { write } for pid=11339 comm="syz.4.2613" path="socket:[25887]" dev="sockfs" ino=25887 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 121.022354][ T29] audit: type=1400 audit(1727567959.874:3784): avc: denied { nlmsg_write } for pid=11339 comm="syz.4.2613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 121.043408][ T29] audit: type=1326 audit(1727567959.894:3785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11341 comm="syz.3.2614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c174dff9 code=0x7ffc0000 [ 121.067062][ T29] audit: type=1326 audit(1727567959.894:3786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11341 comm="syz.3.2614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c174dff9 code=0x7ffc0000 [ 121.090895][ T29] audit: type=1326 audit(1727567959.904:3787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11341 comm="syz.3.2614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe5c174dff9 code=0x7ffc0000 [ 121.114430][ T29] audit: type=1326 audit(1727567959.904:3788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11341 comm="syz.3.2614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c174dff9 code=0x7ffc0000 [ 121.188591][T11344] loop4: detected capacity change from 0 to 512 [ 121.791902][T11371] loop3: detected capacity change from 0 to 128 [ 122.803573][T11383] syz.0.2610[11383] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 122.803650][T11383] syz.0.2610[11383] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 122.830453][T11383] syz.0.2610[11383] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 123.099494][T11392] loop0: detected capacity change from 0 to 512 [ 123.138402][T11392] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 123.163780][T11392] EXT4-fs (loop0): 1 orphan inode deleted [ 123.169580][T11392] EXT4-fs (loop0): 1 truncate cleaned up [ 123.189960][T11392] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.226006][T11392] EXT4-fs error (device loop0): ext4_search_dir:1505: inode #12: block 7: comm syz.0.2633: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=56 fake=0 [ 123.267810][T11392] EXT4-fs (loop0): Remounting filesystem read-only [ 123.304598][T10776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.343514][T11398] syz.0.2634[11398] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 123.343633][T11398] syz.0.2634[11398] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 123.368669][T11398] syz.0.2634[11398] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 123.983569][T11409] loop1: detected capacity change from 0 to 512 [ 124.048282][T11413] loop2: detected capacity change from 0 to 128 [ 124.064815][T11413] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 124.075825][T11409] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.110781][T11409] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.135401][T11413] bio_check_eod: 16 callbacks suppressed [ 124.135417][T11413] syz.2.2639: attempt to access beyond end of device [ 124.135417][T11413] loop2: rw=3, sector=6950, nr_sectors = 2 limit=128 [ 124.189149][ T9723] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.200775][T11413] syz.2.2639: attempt to access beyond end of device [ 124.200775][T11413] loop2: rw=2051, sector=6952, nr_sectors = 942 limit=128 [ 124.511395][T11437] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2647'. [ 124.532678][T11437] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2647'. [ 127.047832][T11379] netlink: 'syz.3.2629': attribute type 10 has an invalid length. [ 127.067695][T11379] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.074905][T11379] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.157412][ T29] kauditd_printk_skb: 69 callbacks suppressed [ 127.157429][ T29] audit: type=1400 audit(1727567966.094:3858): avc: denied { mounton } for pid=11446 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 127.264938][ T29] audit: type=1400 audit(1727567966.164:3859): avc: denied { sys_module } for pid=11446 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 127.314906][T11454] loop3: detected capacity change from 0 to 512 [ 127.321624][T11454] EXT4-fs: Ignoring removed i_version option [ 127.327681][T11454] EXT4-fs: Ignoring removed nobh option [ 127.333947][T11454] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 127.346069][T11454] EXT4-fs (loop3): 1 truncate cleaned up [ 127.352144][T11454] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.473670][T11476] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 132.627005][T11482] loop2: detected capacity change from 0 to 4096 [ 132.648727][T11482] EXT4-fs mount: 1 callbacks suppressed [ 132.648752][T11482] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.719425][ T29] audit: type=1400 audit(1727567971.654:3860): avc: denied { read write } for pid=11481 comm="syz.2.2660" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 132.742590][ T29] audit: type=1400 audit(1727567971.654:3861): avc: denied { open } for pid=11481 comm="syz.2.2660" path="/348/file0/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 132.824018][ T5498] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.147349][T11495] loop2: detected capacity change from 0 to 2048 [ 133.296068][ T29] audit: type=1400 audit(1727567972.234:3862): avc: denied { create } for pid=11500 comm="syz.2.2666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 133.355675][ T29] audit: type=1326 audit(1727567972.264:3863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11501 comm="syz.3.2667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c174dff9 code=0x7ffc0000 [ 133.379831][ T29] audit: type=1326 audit(1727567972.264:3864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11501 comm="syz.3.2667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c174dff9 code=0x7ffc0000 [ 133.403537][ T29] audit: type=1326 audit(1727567972.264:3865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11501 comm="syz.3.2667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe5c174dff9 code=0x7ffc0000 [ 133.427103][ T29] audit: type=1326 audit(1727567972.264:3866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11501 comm="syz.3.2667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c174dff9 code=0x7ffc0000 [ 133.450627][ T29] audit: type=1326 audit(1727567972.264:3867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11501 comm="syz.3.2667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c174dff9 code=0x7ffc0000 [ 133.474592][ T29] audit: type=1326 audit(1727567972.264:3868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11501 comm="syz.3.2667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe5c174dff9 code=0x7ffc0000 [ 133.498175][ T29] audit: type=1326 audit(1727567972.264:3869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11501 comm="syz.3.2667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c174dff9 code=0x7ffc0000 [ 153.768267][T11502] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.806585][T11508] netlink: 'syz.3.2670': attribute type 21 has an invalid length. [ 153.814522][T11508] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2670'. [ 160.776567][T11502] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.628675][ T50] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.091490][T11502] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.481920][T11502] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.012041][ T50] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.122264][ T50] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.170532][T11502] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.661531][ T50] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.794276][T11502] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.859375][T11502] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.940247][T11502] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.628768][ T50] bridge_slave_1: left allmulticast mode [ 232.634459][ T50] bridge_slave_1: left promiscuous mode [ 232.640449][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.667732][ T50] bridge_slave_0: left allmulticast mode [ 232.673411][ T50] bridge_slave_0: left promiscuous mode [ 232.679231][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.629154][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 243.643683][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 243.667383][ T50] bond0 (unregistering): Released all slaves [ 243.760247][ T50] hsr_slave_0: left promiscuous mode [ 243.786804][ T50] hsr_slave_1: left promiscuous mode [ 243.793671][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 243.801240][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 243.828479][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 243.835956][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 243.858237][ T50] veth1_macvtap: left promiscuous mode [ 243.863725][ T50] veth0_macvtap: left promiscuous mode [ 243.869393][ T50] veth1_vlan: left promiscuous mode [ 243.874620][ T50] veth0_vlan: left promiscuous mode [ 251.386236][ T50] team0 (unregistering): Port device team_slave_1 removed [ 251.406736][ T50] team0 (unregistering): Port device team_slave_0 removed [ 251.702324][T11721] chnl_net:caif_netlink_parms(): no params data found [ 257.799233][T11781] chnl_net:caif_netlink_parms(): no params data found [ 257.891242][T11777] chnl_net:caif_netlink_parms(): no params data found [ 280.775343][T11402] unregister_netdevice: waiting for vxcan0 to become free. Usage count = 2 [ 280.784473][T11402] ref_tracker: vxcan%d@ffff88812c470560 has 1/1 users at [ 280.784473][T11402] netdev_tracker_alloc+0x49/0x70 [ 280.784473][T11402] fib_create_info+0x14be/0x14f0 [ 280.784473][T11402] fib_table_insert+0x101/0xfa0 [ 280.784473][T11402] fib_magic+0x1a1/0x1f0 [ 280.784473][T11402] fib_add_ifaddr+0xd5/0x330 [ 280.784473][T11402] fib_inetaddr_event+0xb9/0x200 [ 280.784473][T11402] blocking_notifier_call_chain+0x94/0x200 [ 280.784473][T11402] __inet_insert_ifa+0x4cc/0x5e0 [ 280.784473][T11402] inet_rtm_newaddr+0x8d8/0xc30 [ 280.784473][T11402] rtnetlink_rcv_msg+0x6aa/0x710 [ 280.784473][T11402] netlink_rcv_skb+0x12c/0x230 [ 280.784473][T11402] rtnetlink_rcv+0x1c/0x30 [ 280.784473][T11402] netlink_unicast+0x599/0x670 [ 280.784473][T11402] netlink_sendmsg+0x5cc/0x6e0 [ 280.784473][T11402] __sock_sendmsg+0x140/0x180 [ 280.784473][T11402] __sys_sendto+0x1d6/0x260 [ 280.784473][T11402] [ 280.874236][T11402] unregister_netdevice: waiting for vxcan1 to become free. Usage count = 2 [ 280.883259][T11402] ref_tracker: vxcan1@ffff88812c478560 has 1/1 users at [ 280.883259][T11402] netdev_tracker_alloc+0x49/0x70 [ 280.883259][T11402] fib_create_info+0x14be/0x14f0 [ 280.883259][T11402] fib_table_insert+0x101/0xfa0 [ 280.883259][T11402] fib_magic+0x1a1/0x1f0 [ 280.883259][T11402] fib_add_ifaddr+0xd5/0x330 [ 280.883259][T11402] fib_inetaddr_event+0xb9/0x200 [ 280.883259][T11402] blocking_notifier_call_chain+0x94/0x200 [ 280.883259][T11402] __inet_insert_ifa+0x4cc/0x5e0 [ 280.883259][T11402] inet_rtm_newaddr+0x8d8/0xc30 [ 280.883259][T11402] rtnetlink_rcv_msg+0x6aa/0x710 [ 280.883259][T11402] netlink_rcv_skb+0x12c/0x230 [ 280.883259][T11402] rtnetlink_rcv+0x1c/0x30 [ 280.883259][T11402] netlink_unicast+0x599/0x670 [ 280.883259][T11402] netlink_sendmsg+0x5cc/0x6e0 [ 280.883259][T11402] __sock_sendmsg+0x140/0x180 [ 280.883259][T11402] __sys_sendto+0x1d6/0x260 [ 280.883259][T11402] [ 284.190584][T12097] chnl_net:caif_netlink_parms(): no params data found [ 290.529350][ T50] bond0 (unregistering): Released all slaves [ 290.547676][ T50] bond0 (unregistering): Released all slaves [ 290.566240][ T50] bond0 (unregistering): Released all slaves [ 290.585574][ T50] bond0 (unregistering): Released all slaves [ 290.606295][ T50] bond0 (unregistering): Released all slaves [ 290.626134][ T50] bond0 (unregistering): Released all slaves [ 290.646260][ T50] bond0 (unregistering): Released all slaves [ 290.687459][T12297] chnl_net:caif_netlink_parms(): no params data found [ 301.624269][T12293] chnl_net:caif_netlink_parms(): no params data found [ 301.707163][T12364] chnl_net:caif_netlink_parms(): no params data found [ 301.882334][T12297] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.889588][T12297] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.918043][T12297] bridge_slave_0: entered allmulticast mode [ 301.924796][T12297] bridge_slave_0: entered promiscuous mode [ 301.946585][T12297] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.953785][T12297] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.977472][T12297] bridge_slave_1: entered allmulticast mode [ 301.997540][T12297] bridge_slave_1: entered promiscuous mode [ 302.137430][T12097] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.144592][T12097] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.167852][T12097] bridge_slave_0: entered allmulticast mode [ 302.176204][T12097] bridge_slave_0: entered promiscuous mode [ 302.428713][T12097] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.435856][T12097] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.445536][T12097] bridge_slave_1: entered allmulticast mode [ 302.452137][T12097] bridge_slave_1: entered promiscuous mode [ 302.660436][T12297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 302.729540][T12360] chnl_net:caif_netlink_parms(): no params data found [ 302.759107][T12097] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 302.776847][T12297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 302.849882][T12293] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.856994][T12293] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.864750][T12293] bridge_slave_0: entered allmulticast mode [ 302.873506][T12293] bridge_slave_0: entered promiscuous mode [ 302.888531][T12293] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.895756][T12293] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.918104][T12293] bridge_slave_1: entered allmulticast mode [ 302.924711][T12293] bridge_slave_1: entered promiscuous mode [ 303.027960][T12097] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 303.048677][T12364] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.055941][T12364] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.075524][T12364] bridge_slave_0: entered allmulticast mode [ 303.082343][T12364] bridge_slave_0: entered promiscuous mode [ 303.135628][T12297] team0: Port device team_slave_0 added [ 303.178329][T12364] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.185480][T12364] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.227622][T12364] bridge_slave_1: entered allmulticast mode [ 303.234168][T12364] bridge_slave_1: entered promiscuous mode [ 303.261568][T12293] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 303.271482][T12297] team0: Port device team_slave_1 added [ 303.280682][T12097] team0: Port device team_slave_0 added [ 303.287596][T12097] team0: Port device team_slave_1 added [ 303.578555][T12364] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 303.591679][T12293] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 303.674957][T12364] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 303.766391][T12097] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 303.773518][T12097] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.799552][T12097] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 303.987086][T12297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 303.994065][T12297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.020191][T12297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 304.078508][T12360] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.085614][T12360] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.105570][T12360] bridge_slave_0: entered allmulticast mode [ 304.115343][T12360] bridge_slave_0: entered promiscuous mode [ 304.135851][T12360] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.143012][T12360] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.167922][T12360] bridge_slave_1: entered allmulticast mode [ 304.185313][T12360] bridge_slave_1: entered promiscuous mode [ 304.336949][T12097] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 304.343942][T12097] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.370184][T12097] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 304.432730][T12293] team0: Port device team_slave_0 added [ 304.439117][T12297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 304.446124][T12297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.472111][T12297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 304.575926][T12364] team0: Port device team_slave_0 added [ 304.582823][T12293] team0: Port device team_slave_1 added [ 304.689318][T12297] hsr_slave_0: entered promiscuous mode [ 304.699049][T12297] hsr_slave_1: entered promiscuous mode [ 304.705154][T12297] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 304.712858][T12297] Cannot create hsr debugfs directory [ 304.720412][T12360] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 304.749869][T12293] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 304.756878][T12293] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.783114][T12293] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 304.847964][T12364] team0: Port device team_slave_1 added [ 304.911252][T12097] hsr_slave_0: entered promiscuous mode [ 304.918549][T12097] hsr_slave_1: entered promiscuous mode [ 304.924680][T12097] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 304.934624][T12097] Cannot create hsr debugfs directory [ 304.941349][T12360] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 304.996403][T12293] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 305.003439][T12293] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.029441][T12293] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 305.225372][T12364] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 305.232363][T12364] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.258331][T12364] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 305.326377][T12360] team0: Port device team_slave_0 added [ 305.435315][T12364] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 305.445915][T12364] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.472041][T12364] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 305.556903][T12360] team0: Port device team_slave_1 added [ 305.598791][T12293] hsr_slave_0: entered promiscuous mode [ 305.606092][T12293] hsr_slave_1: entered promiscuous mode [ 305.614589][T12293] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 305.627886][T12293] Cannot create hsr debugfs directory [ 305.659395][T12364] hsr_slave_0: entered promiscuous mode [ 305.666094][T12364] hsr_slave_1: entered promiscuous mode [ 305.672358][T12364] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 305.682443][T12364] Cannot create hsr debugfs directory [ 305.817554][T12360] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 305.824562][T12360] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.850815][T12360] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 305.922509][T12360] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 305.929616][T12360] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.955832][T12360] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 311.921601][T12097] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.261536][T12097] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.377338][T12360] hsr_slave_0: entered promiscuous mode [ 315.405594][T12360] hsr_slave_1: entered promiscuous mode [ 315.413664][T12360] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 315.457356][T12360] Cannot create hsr debugfs directory [ 320.721398][T12097] bond0: (slave netdevsim1): Releasing backup interface [ 320.733913][T12097] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.471637][T12097] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.523417][ T28] bridge_slave_1: left allmulticast mode [ 330.529123][ T28] bridge_slave_1: left promiscuous mode [ 330.534769][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.623065][ T28] bridge_slave_0: left allmulticast mode [ 330.628877][ T28] bridge_slave_0: left promiscuous mode [ 330.634532][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.160038][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 335.180366][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 335.200534][ T28] bond0 (unregistering): Released all slaves [ 357.854739][ T28] hsr_slave_0: left promiscuous mode [ 357.861269][ T28] hsr_slave_1: left promiscuous mode [ 357.876885][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 357.897839][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 361.711291][ T28] team0 (unregistering): Port device team_slave_1 removed [ 361.738060][ T28] team0 (unregistering): Port device team_slave_0 removed [ 421.655278][T11402] unregister_netdevice: waiting for vxcan0 to become free. Usage count = 2 [ 421.664267][T11402] ref_tracker: vxcan%d@ffff88812c470560 has 1/1 users at [ 421.664267][T11402] netdev_tracker_alloc+0x49/0x70 [ 421.664267][T11402] fib_create_info+0x14be/0x14f0 [ 421.664267][T11402] fib_table_insert+0x101/0xfa0 [ 421.664267][T11402] fib_magic+0x1a1/0x1f0 [ 421.664267][T11402] fib_add_ifaddr+0xd5/0x330 [ 421.664267][T11402] fib_inetaddr_event+0xb9/0x200 [ 421.664267][T11402] blocking_notifier_call_chain+0x94/0x200 [ 421.664267][T11402] __inet_insert_ifa+0x4cc/0x5e0 [ 421.664267][T11402] inet_rtm_newaddr+0x8d8/0xc30 [ 421.664267][T11402] rtnetlink_rcv_msg+0x6aa/0x710 [ 421.664267][T11402] netlink_rcv_skb+0x12c/0x230 [ 421.664267][T11402] rtnetlink_rcv+0x1c/0x30 [ 421.664267][T11402] netlink_unicast+0x599/0x670 [ 421.664267][T11402] netlink_sendmsg+0x5cc/0x6e0 [ 421.664267][T11402] __sock_sendmsg+0x140/0x180 [ 421.664267][T11402] __sys_sendto+0x1d6/0x260 [ 421.664267][T11402] [ 421.753669][T11402] unregister_netdevice: waiting for vxcan1 to become free. Usage count = 2 [ 421.762648][T11402] ref_tracker: vxcan1@ffff88812c478560 has 1/1 users at [ 421.762648][T11402] netdev_tracker_alloc+0x49/0x70 [ 421.762648][T11402] fib_create_info+0x14be/0x14f0 [ 421.762648][T11402] fib_table_insert+0x101/0xfa0 [ 421.762648][T11402] fib_magic+0x1a1/0x1f0 [ 421.762648][T11402] fib_add_ifaddr+0xd5/0x330 [ 421.762648][T11402] fib_inetaddr_event+0xb9/0x200 [ 421.762648][T11402] blocking_notifier_call_chain+0x94/0x200 [ 421.762648][T11402] __inet_insert_ifa+0x4cc/0x5e0 [ 421.762648][T11402] inet_rtm_newaddr+0x8d8/0xc30 [ 421.762648][T11402] rtnetlink_rcv_msg+0x6aa/0x710 [ 421.762648][T11402] netlink_rcv_skb+0x12c/0x230 [ 421.762648][T11402] rtnetlink_rcv+0x1c/0x30 [ 421.762648][T11402] netlink_unicast+0x599/0x670 [ 421.762648][T11402] netlink_sendmsg+0x5cc/0x6e0 [ 421.762648][T11402] __sock_sendmsg+0x140/0x180 [ 421.762648][T11402] __sys_sendto+0x1d6/0x260 [ 421.762648][T11402] [ 435.465315][ C1] ================================================================== [ 435.473542][ C1] BUG: KCSAN: data-race in can_send / can_stat_update [ 435.480334][ C1] [ 435.482669][ C1] read-write to 0xffff88811f8a5670 of 8 bytes by interrupt on cpu 0: [ 435.490746][ C1] can_send+0x576/0x5d0 [ 435.494949][ C1] can_can_gw_rcv+0x77d/0x7e0 [ 435.499685][ C1] can_rcv_filter+0xbf/0x4c0 [ 435.504298][ C1] can_receive+0x182/0x1f0 [ 435.508736][ C1] can_rcv+0xe7/0x180 [ 435.512734][ C1] __netif_receive_skb+0x123/0x280 [ 435.517877][ C1] process_backlog+0x22e/0x440 [ 435.522658][ C1] __napi_poll+0x63/0x3c0 [ 435.527019][ C1] net_rx_action+0x3a1/0x7f0 [ 435.531631][ C1] handle_softirqs+0xbf/0x280 [ 435.536328][ C1] run_ksoftirqd+0x1c/0x30 [ 435.540763][ C1] smpboot_thread_fn+0x31c/0x4c0 [ 435.545718][ C1] kthread+0x1d1/0x210 [ 435.549805][ C1] ret_from_fork+0x4b/0x60 [ 435.554257][ C1] ret_from_fork_asm+0x1a/0x30 [ 435.559057][ C1] [ 435.561397][ C1] read to 0xffff88811f8a5670 of 8 bytes by interrupt on cpu 1: [ 435.568967][ C1] can_stat_update+0x48f/0x6b0 [ 435.573838][ C1] call_timer_fn+0x3a/0x300 [ 435.578374][ C1] __run_timer_base+0x417/0x640 [ 435.583246][ C1] run_timer_softirq+0x31/0x70 [ 435.588034][ C1] handle_softirqs+0xbf/0x280 [ 435.592814][ C1] irq_exit_rcu+0x3e/0x90 [ 435.597180][ C1] sysvec_apic_timer_interrupt+0x73/0x80 [ 435.602841][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 435.608866][ C1] _raw_spin_lock+0x18/0x50 [ 435.613390][ C1] __io_cqring_overflow_flush+0xaf/0x590 [ 435.619078][ C1] __se_sys_io_uring_enter+0x13c8/0x17b0 [ 435.624731][ C1] __x64_sys_io_uring_enter+0x78/0x90 [ 435.630123][ C1] x64_sys_call+0x2567/0x2d60 [ 435.634823][ C1] do_syscall_64+0xc9/0x1c0 [ 435.639439][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.645452][ C1] [ 435.647786][ C1] value changed: 0x000000000001163b -> 0x000000000001163c [ 435.654903][ C1] [ 435.657228][ C1] Reported by Kernel Concurrency Sanitizer on: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 435.663401][ C1] CPU: 1 UID: 0 PID: 6134 Comm: syz.4.1115 Tainted: G W 6.11.0-syzkaller-11993-g3efc57369a0c #0 [ 435.675242][ C1] Tainted: [W]=WARN [ 435.679061][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 435.689198][ C1] ================================================================== [ 435.735237][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 435.735255][ T29] audit: type=1400 audit(1727568274.634:3890): avc: denied { write } for pid=3253 comm="syz-executor" path="pipe:[1602]" dev="pipefs" ino=1602 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1