last executing test programs: 4.422194924s ago: executing program 1 (id=870): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xbb) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 3.575447175s ago: executing program 1 (id=878): io_uring_setup(0x503e, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fc, 0x301) socket$packet(0x11, 0x2, 0x300) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x0, 0xc1, &(0x7f0000000000)={0x4b5a9da54893e163, 0x14, 0x8, 0x2}, 0x8, 0x3, 0x200, 0x0, 0xfffffffc, 0x20000, 0x0}) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) syz_io_uring_setup(0x9e, 0x0, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 3.18199459s ago: executing program 4 (id=884): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = syz_io_uring_setup(0x34fc, &(0x7f0000000100)={0x0, 0x645c, 0x800, 0x400002, 0x250}, &(0x7f0000000080)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000240)=0xfffffc04, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x1c, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2}, 0x0, 0x4080}) syz_io_uring_setup(0x6d47, &(0x7f00000005c0)={0x0, 0x8ecb, 0x400, 0x1, 0x2f7}, 0x0, 0x0) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) 2.868873004s ago: executing program 4 (id=888): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @multicast2}, 0x10) sendmmsg$inet(r2, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x7e1f, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="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", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="73fd71361e8d6c80ae1bc9953e2a4aeac7a314273066fc7f65a51969b46df1774bb0be94ccd4824f2d57ad2cd37242b1258402395481f9f07e067652e52aa8ccefcd0962ba0c48757b68d493f3ad702e65d4daa7dfc1605a173185472ae12470eea64c70ef4e64793b8a830447de0f423bef3964934eef4243cac42939ba6fa68d821b9373b5f3e2c26e7ca75ed8fb3203aef3a6637cecdd0251532b99537e02f604058f50e66c8a657d59beeed127695475f082d3d2b9790181fc987ad000ac00887d1506be89f388ecb405660b4ea196ee8f5a92b12ec43bbf49567db613d478ebe2358364f7600bf4f80ef4b2756fb13416c4fa22880cc96a03f07888575aedb001d5a74bb2f906797912b5ac080a0a3d361425f1a92ab03bbe65d5dcb235f43b5ad1162a16ebdc647baac013bf076945126cdd5a080853976a97ad55184601102fbb8df86b21aa8162858d74465c5fb7dc766602a3567f6eaf441f85ec50ca7fb3a4fdb450d1420531da25d01a412958a5e3895c59542238cf8e188e7fb5641eb24a5f1819bf8d2e9dd6c1d0e93564d723e311db9cd268bb1e477036e822b135cdbaf40f812aa7db01d22c829ab01ae24997dae96ddeed49e62d285701d5419e3f94a8b95790cf5a296ed15bffae1f71470c6a6eda872528844a2df42590d898630263cab5cccec57b7cea365ad8c91bfbe7cb419635ce6bf340a56115c0ad922b6fade9538e543bc5def2a85d35ab16d20c219c4733837be2c14ba4d3d32c3a6882ce6857626f55109b4cdcb634425d710bf3108f9b31b4af0cc17a58e49e871a56126dd8bed08e038ba64008587237b3442d28032e52fc9fae1a5784ba59d0edfa03d38352724903ed6f6970b3f4dfa6e40bf933b6765c6ee648174765f1e8ec71b80cac86abd065a3005b40a43a665707cc590997c5048183006a9dd8026d39def05950183b3d4f12f4e1644ef78cddac7c5569985c2c232bb350f28857675339e53f63a868704d2e0b38993dc57a02d3e297fc9a5b9384622841018c303a05bac25d509df5a2d0e3232927283fcc3ec67e4fa7b71d22f115cf693851dcceab4bce38cbfbb32829e211cdcb6a359e14fe416663541050d340aef2555dbd292bd9cbab8fcf20378149cc994569c2bc95fb33fd2d9321b8ac8e5160b02e202492f470eb719a8f2ac3a4be37ea0918b54b14789b7aa228d47f7b13fd9af608740c5a8fe02109a7cc0e555b22628ef790e513ecadfd338d30aed8ca219e64ee4fb0bd0e21e5101bf2072ffa071eb1aa0454caccc015ff1e166813f819a142b56a22e4ff387bb319288a0ef747c6fc8fdee3a0e193b0d086eb816e97e0322fcdaa30da61cd26ac9d8d0748fccd911ce0fd4adc953e9486e137fe66bc8aedfd5b78c562ebfc578ac9f96a453311766564541e16955e30b95914e9411a0b4cd95e0d8732d5ff7a4f921ef41d986a195334266585353b16b9449955523913a30c087532bcb899f733af3abea59baea174cf04359547a633b5f8a582ae3ef12a1d0125bef8c6e8c9fb589d3597c5ab3879491b0c5e3607203f06836a6805d3f7979c4325f9fecb2aceddedb272237132460cda812ef7d613a585898d59f92ef68ec95f12b47b440f6d899ecbfab48055e0c1605ba4cd9dbc17c4cbfec8a953ebbd38c45a6737a57ee58e21a20e530171137968ae4f0d0366cdb0b9d6a4667b011fcd7cd9e77364e5221989d8f0d80793260e748e3bd394849c090c744f6044328304cd6f02e941c5405647daffc1fd2f2864b37f92bbf4931c8e4a7c6bafd0ea79d39d330e70e6776bf6a926de227e5a43653bba04883e98d67bb64aa86e8bf271ba87604bc598e47f2992c7618ad25068860a481554b53352c7339de7e79c3bd1aed5bef8f398432858c888a5d8651969ea40eb3d486e9fe61d49b20500fdfd1548f567da970103d36730657c35d03d2c36b142665f62203b1fb12d616478cfef6f38b34cda87a634dd06d359f33e98b94a5e5b46b2a8d73126352d1d5b65af75055455cc903e384c41876fbdff935d047284d9d203b147a6ba0e9cb50beef7798886c33d2f2f0c0d9abe0e32c7c809f8b0b28fc59471987353c862a311776b8275bf319d5cb9a59f8f103b6e567ef5dd8859973cc3fe41e356bf5bd3186240e49286977eca36a8ad44185973b276cd7958b73e14a221b7fd567818bebf54ad27ee95161bd2aeeb356482ff467500a7d36f0464f58a591ec6b728f984ec78d0abe14c6d3411ac3ffc4c3179d1f95d029f26cceb545723519d3d4209a2b1243e78767273c13dc2bd320512674b6f1a50313bae7b9d16aebb476dbc829e8fd8dd46a1696efaff5795cf75de57c90f05ed9ef4a5cdfbf20d3d9ed95fb4114b1d5c9ade0856212e7ba330ce5bccf2c993dff89112b28bd3b17d3fcfacef7590f62bf948977dd79e2d8025946c80bf263e34035409b5ba1443d4929727180761bd56d258c3670a0aa4de21111fc3172367582de2d164ff3a18d0696b8dd8e5c1423b2ea1e2c0cfe141e4cf04f8cdaed48976b94c40d6a581300458661bbdbfeeb4969af6319eb1798843d0872f68f0c6537bbc9c7dd1e9b0564bf442d8d25f8aa884aba1df074d374f99750d9227bb821ba0355f60de2829a5c8cd47c89d29a2e3d7d53d59db5c3ace8f484664202c210c68a3b33076fb00d59938e84fbad6d6618c0bb89cf94035fa2de4da351e0d71df416450ea7ec3af33aa5c0313c63e654bd79c73b39dc1933636956761058d76648746daca469f8fce62c17a8160cdefc6a927eef9ec4a8dd684e46f35282546ce2362ab8afedd39bf699fd7c2cde538f52ea43c08558f42ba77b2986b800c45fa76a130b30919b3e1d504573e3c1e7dd2dc5d81379df53d736511f1da4ad8791e46adb27bb5c38129e89edda0aed99dcc03fe400f7d05d48e3e9e17744e8487f8ac464c86f7332211fb9799e9d27a6832d5f17ccd1a2da255f6da047e4728dd80860c04391bca4b7833f0346866401ec20033bcf6dfa85fd1520de5a03b4f9f6f5d2f8d7b6e7d7df1cbe5c05e23e080cf335639c94c48aaeb0bfebbe79530d67d35fb101c91839954c0e50dd4b90a86428b22b0be1e906fee30f68d7ce4bf9c68eafe695f07f5e4e4d473d77104b7b1b5dcfeb84e8c83624c0068d4e1cccfe740f8e5d5699603f8481ef2a1f2d4b8fd2314c5cb1985fe34cf8ede7d2e8bddea269422490903489c7f5951114d7ccb29a19455a987d538955712a460243105b25ccb6e6f34c370a6bbb234bee150dbcea5188e45305253f1014f7c0b5d60d517d2d05707f5ca9249a921d6c5307caf41deca0509b49102d801320db65c00f6e1c05fb8c2e1cc554673bf6168dd64086b19af28eec508fd0c304837e802173ac9947c4d73929c61d9632ab929a25f2a04350954612c2de705c1c25215284fe933fc8ccfd30ab3fc9ff5e04dd68d4720d95a29d6da176ac9d332c9ce77358f3c262777ea828fe6473638bc77be2aa586a3733e275744bc42c3742c1ad8f89d25c31958902f2f498c58fc85e9b78fb7a331734cb081cfa9ccfd262df927c0ff46983f8765af4add3532de2b91f2436df028", 0x9fd}], 0x3, 0x0, 0x0, 0xffff0000}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x300}}], 0x3, 0x0) 2.815997305s ago: executing program 4 (id=889): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) 2.568404378s ago: executing program 1 (id=894): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r3, 0x0, 0xfffffffffffffffe}, 0x18) bind$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x2, {0x1, 0xff, 0x1}, 0xfd}, 0x18) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x3, {0x1, 0xff, 0x4}, 0x1}, 0x18) 1.874210697s ago: executing program 4 (id=899): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") creat(&(0x7f0000000000)='./bus\x00', 0xd931d3864d39ddd8) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) ioctl$INCFS_IOC_PERMIT_FILL(r1, 0x40046721, &(0x7f0000000080)={r1}) sendfile(r1, r0, 0x0, 0x7ffff000) 1.872618247s ago: executing program 1 (id=901): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140)) r1 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x8000f28, 0x8) splice(r3, 0x0, r1, 0x0, 0x33fde, 0x7) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 1.738655489s ago: executing program 2 (id=902): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x19, 0x4, 0x8, 0x7fff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000280)={@val={0x800e}, @void, @eth={@broadcast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @empty}, {0x0, 0x0, 0x14, 0x0, @opaque="bf9a88bd2de93553e8050000"}}}}}}, 0x3a) 1.58293496s ago: executing program 2 (id=903): r0 = io_uring_setup(0x4d1c, &(0x7f00000001c0)={0x0, 0x800000, 0x0, 0x400000, 0x137}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) write$binfmt_aout(r1, &(0x7f0000000340)=ANY=[], 0xff2e) close_range(r0, 0xffffffffffffffff, 0x0) 1.453358902s ago: executing program 2 (id=905): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000001e80)={[{@inlinecrypt}]}, 0x1, 0x549, &(0x7f0000001800)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x29fd, 0x84, 0x105, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r1}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000100)={0x0, &(0x7f0000000040)=""/129, &(0x7f0000000680), &(0x7f0000000000), 0x6c, r1}, 0x38) 940.754669ms ago: executing program 4 (id=906): io_uring_setup(0x503e, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fc, 0x301) socket$packet(0x11, 0x2, 0x300) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x0, 0xc1, &(0x7f0000000000)={0x4b5a9da54893e163, 0x14, 0x8, 0x2}, 0x8, 0x3, 0x200, 0x0, 0xfffffffc, 0x20000, 0x0}) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) syz_io_uring_setup(0x9e, 0x0, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 939.684558ms ago: executing program 1 (id=907): socket$packet(0x11, 0x2, 0x300) socket$kcm(0x11, 0xa, 0x300) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2608064c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x60, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x5}, 0x18) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000140)="d8", 0x1}], 0x1, 0x0, 0x0, 0x2663}, 0x0) 939.527578ms ago: executing program 2 (id=908): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r3, 0x0, 0xfffffffffffffffe}, 0x18) bind$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x2, {0x1, 0xff, 0x1}, 0xfd}, 0x18) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x3, {0x1, 0xff, 0x4}, 0x1}, 0x18) 939.375018ms ago: executing program 3 (id=910): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010e7010000000000000000000000000a20000000000a03000000000000000000070000000c00044000000000000000021c000000090a010400000000000000000700000008000a4000000003"], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x40d, 0x70bd25, 0x25ffdbfc, {0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x4000000000000c1, 0x0) 864.27825ms ago: executing program 2 (id=912): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000002cc0)=[{0x0}], 0x1}, 0xa1}], 0x2, 0x0, 0x0) 658.517782ms ago: executing program 1 (id=913): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x2, 0x0, 0xfffffffc, 0x8}], 0x10, 0x0, @void, @value}, 0x94) sendmsg$inet(r0, &(0x7f0000000c40)={&(0x7f0000000ac0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000bc0)=[{&(0x7f0000000b00)="b1", 0x1}], 0x1}, 0x4000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x10, &(0x7f0000000000)=r3, 0xc) 464.427575ms ago: executing program 0 (id=914): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) sendmsg$inet6(r1, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002fc0)=[@rthdr={{0x18, 0x29, 0x39, {0x87, 0x0, 0x0, 0x4}}}], 0x18}, 0x40040) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000100)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) close(r0) 464.200315ms ago: executing program 3 (id=916): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x3fe6, &(0x7f0000000180)={0x0, 0x3660, 0x800, 0x1, 0x346}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000600)=""/42, 0x2a}], 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r2, 0x0, 0x80000}, 0x18) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 406.695375ms ago: executing program 0 (id=917): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='module_request\x00', r1}, 0x10) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) 406.499385ms ago: executing program 3 (id=919): prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) add_key(&(0x7f0000000380)='asymmetric\x00', 0x0, &(0x7f0000000100)="01", 0x1, 0xfffffffffffffffe) 211.367517ms ago: executing program 0 (id=920): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000040000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x2}, 0x8) sendto$inet6(r3, &(0x7f0000000080)="be", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3b}, 0x4}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 205.350158ms ago: executing program 3 (id=921): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x304}, '\x00', "376a31a11e8e279cec092f071cc80f218d360356a936a7e3971a8c35c47e5804", '\x00', "fffffffffffffffd"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_256={{0x304}, "6a655069ade22ce4", "0d35db0d4af1cbcce779bbc24b53fc4988c215118dd14cb837de56339a336a19", "4659c03b", "a7002000"}, 0x38) 187.689958ms ago: executing program 3 (id=922): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}}], 0x1, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000080)={0x1d, 0x0, 0x2, {0x1}}, 0x18) sendmmsg(r0, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000380)='>', 0x1}], 0x1, &(0x7f00000011c0)=ANY=[], 0x210}}], 0x1, 0x40884) recvmmsg(r0, &(0x7f0000000900)=[{{0x0, 0xfffffffffffffe1f, 0x0}, 0x1}], 0x3fffffffffffd3c, 0x40018003, 0x0) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffe, 0x0, 0x0, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 184.965098ms ago: executing program 0 (id=923): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='attr/exec\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = syz_io_uring_setup(0x2e3b, &(0x7f0000000440)={0x0, 0x482b, 0x10100, 0x1}, &(0x7f0000000400)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r2, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)=""/9, 0x9}], 0x1}) io_uring_enter(r3, 0x567, 0xa1ff, 0x0, 0x0, 0x0) 154.573848ms ago: executing program 0 (id=924): add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) timer_create(0x3, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x21e}, &(0x7f00000001c0), 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000200)) ioctl$EVIOCGABS20(r1, 0x40044591, 0x0) 108.765169ms ago: executing program 3 (id=925): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") creat(&(0x7f0000000000)='./bus\x00', 0xd931d3864d39ddd8) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) ioctl$INCFS_IOC_PERMIT_FILL(r1, 0x40046721, &(0x7f0000000080)={r1}) sendfile(r1, r0, 0x0, 0x7ffff000) 62.76543ms ago: executing program 4 (id=926): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 61.919999ms ago: executing program 0 (id=936): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x10000}, 0x18) r2 = io_uring_setup(0x177d, &(0x7f00000002c0)={0x0, 0x3e92, 0x2, 0xfffffffe, 0x21f}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8aa, 0x4}, 0x10040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x6, 0xc, 0x8, 0x8}]}) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x200000000000000) 0s ago: executing program 2 (id=927): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='mm_page_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000200)={[{@max_batch_time={'max_batch_time', 0x3d, 0x358}}, {@resuid}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x3, 0x44b, &(0x7f00000004c0)="$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") r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r2, 0x2007ffc) sendfile(r2, r2, 0x0, 0x800000009) kernel console output (not intermixed with test programs): ver this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.239313][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.256187][ T3308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.271479][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.278477][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.304462][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.321569][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.328567][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.354529][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.385192][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.392170][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.418128][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.436017][ T3306] hsr_slave_0: entered promiscuous mode [ 30.442063][ T3306] hsr_slave_1: entered promiscuous mode [ 30.459901][ T3303] hsr_slave_0: entered promiscuous mode [ 30.466088][ T3303] hsr_slave_1: entered promiscuous mode [ 30.471955][ T3303] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.479631][ T3303] Cannot create hsr debugfs directory [ 30.496738][ T3308] team0: Port device team_slave_0 added [ 30.515152][ T3304] hsr_slave_0: entered promiscuous mode [ 30.521304][ T3304] hsr_slave_1: entered promiscuous mode [ 30.527272][ T3304] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.534981][ T3304] Cannot create hsr debugfs directory [ 30.541090][ T3308] team0: Port device team_slave_1 added [ 30.577099][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.584261][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.610336][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.625266][ T3305] hsr_slave_0: entered promiscuous mode [ 30.631305][ T3305] hsr_slave_1: entered promiscuous mode [ 30.637210][ T3305] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.644792][ T3305] Cannot create hsr debugfs directory [ 30.660261][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.667323][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.693278][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.791184][ T3308] hsr_slave_0: entered promiscuous mode [ 30.797397][ T3308] hsr_slave_1: entered promiscuous mode [ 30.803239][ T3308] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.810901][ T3308] Cannot create hsr debugfs directory [ 30.898908][ T3306] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.907747][ T3306] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.927082][ T3306] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.935938][ T3306] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.954484][ T3305] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.964986][ T3305] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.974348][ T3305] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.983315][ T3305] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.009845][ T3303] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.018630][ T3303] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.028256][ T3303] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.036991][ T3303] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.086100][ T3304] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.115517][ T3304] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.132870][ T3304] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.150436][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.157597][ T3304] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.179658][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.188549][ T3308] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.197758][ T3308] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.206923][ T3308] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.215805][ T3308] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.238033][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.249213][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.265250][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.273099][ T151] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.280310][ T151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.296766][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.303849][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.322998][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.330224][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.339240][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.346389][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.364896][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.390471][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.397555][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.407127][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.414198][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.467015][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.480630][ T3305] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.500781][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.517769][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.535902][ T3308] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.557735][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.565000][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.576758][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.583856][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.607162][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.617287][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.624377][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.634124][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.641201][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.677637][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.698016][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.779750][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.815998][ T3303] veth0_vlan: entered promiscuous mode [ 31.827571][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.837912][ T3303] veth1_vlan: entered promiscuous mode [ 31.850494][ T3305] veth0_vlan: entered promiscuous mode [ 31.859225][ T3305] veth1_vlan: entered promiscuous mode [ 31.887322][ T3303] veth0_macvtap: entered promiscuous mode [ 31.898854][ T3303] veth1_macvtap: entered promiscuous mode [ 31.924114][ T3305] veth0_macvtap: entered promiscuous mode [ 31.931700][ T3305] veth1_macvtap: entered promiscuous mode [ 31.940383][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.955666][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.968591][ T3303] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.977421][ T3303] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.986197][ T3303] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.994946][ T3303] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.018746][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.029366][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.040217][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.058199][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.068850][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.079496][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.087567][ T3308] veth0_vlan: entered promiscuous mode [ 32.095177][ T3306] veth0_vlan: entered promiscuous mode [ 32.103420][ T3305] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.112300][ T3305] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.121069][ T3305] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.129893][ T3305] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.143031][ T3308] veth1_vlan: entered promiscuous mode [ 32.159760][ T3306] veth1_vlan: entered promiscuous mode [ 32.181493][ T3304] veth0_vlan: entered promiscuous mode [ 32.196917][ T3304] veth1_vlan: entered promiscuous mode [ 32.206256][ T3308] veth0_macvtap: entered promiscuous mode [ 32.221988][ T3303] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.228792][ T3306] veth0_macvtap: entered promiscuous mode [ 32.244213][ T3306] veth1_macvtap: entered promiscuous mode [ 32.263278][ T3304] veth0_macvtap: entered promiscuous mode [ 32.272759][ T3308] veth1_macvtap: entered promiscuous mode [ 32.289549][ T3447] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 32.291366][ T3308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.311861][ T3308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.321785][ T3308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.332269][ T3308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.342764][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.360846][ T3304] veth1_macvtap: entered promiscuous mode [ 32.373358][ T3306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.383905][ T3306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.393757][ T3306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.404268][ T3306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.414163][ T3306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.424606][ T3306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.435317][ T3447] netlink: 'syz.1.2': attribute type 4 has an invalid length. [ 32.439368][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.461416][ T3308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.463825][ T3447] syz.1.2 (3447) used greatest stack depth: 10696 bytes left [ 32.472014][ T3308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.489312][ T3308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.499805][ T3308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.512959][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.521022][ T3306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.531625][ T3306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.541556][ T3306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.552092][ T3306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.561969][ T3306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.572590][ T3306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.579717][ T3455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.583862][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.607184][ T3308] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.616143][ T3308] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.624961][ T3308] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.627160][ T3455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.633685][ T3308] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.659952][ T3306] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.668894][ T3306] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.677947][ T3306] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.686838][ T3306] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.702252][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.712756][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.722631][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.733133][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.742959][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.753446][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.763342][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.773803][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.785261][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.801873][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.812476][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.822373][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.832929][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.842819][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.853326][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.863154][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.873674][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.885844][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.913869][ T3304] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.922714][ T3304] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.926215][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 32.926231][ T29] audit: type=1400 audit(1745656782.552:137): avc: denied { create } for pid=3459 comm="syz.0.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 32.931611][ T3304] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.965743][ T3304] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.976351][ T29] audit: type=1400 audit(1745656782.582:138): avc: denied { write } for pid=3459 comm="syz.0.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 32.995500][ T29] audit: type=1400 audit(1745656782.592:139): avc: denied { create } for pid=3462 comm="syz.0.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 33.014928][ T29] audit: type=1400 audit(1745656782.592:140): avc: denied { bind } for pid=3462 comm="syz.0.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 33.034095][ T29] audit: type=1400 audit(1745656782.592:141): avc: denied { node_bind } for pid=3462 comm="syz.0.11" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 33.053835][ T29] audit: type=1400 audit(1745656782.592:142): avc: denied { write } for pid=3462 comm="syz.0.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 33.122152][ T29] audit: type=1400 audit(1745656782.752:143): avc: denied { create } for pid=3464 comm="syz.0.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 33.203813][ T29] audit: type=1400 audit(1745656782.792:144): avc: denied { setopt } for pid=3464 comm="syz.0.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 33.247862][ T29] audit: type=1400 audit(1745656782.862:145): avc: denied { write } for pid=3464 comm="syz.0.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 33.267107][ T29] audit: type=1400 audit(1745656782.862:146): avc: denied { create } for pid=3478 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 33.665763][ T3512] loop9: detected capacity change from 0 to 7 [ 33.680788][ T3512] Buffer I/O error on dev loop9, logical block 0, async page read [ 33.691153][ T3512] Buffer I/O error on dev loop9, logical block 0, async page read [ 33.699033][ T3512] loop9: unable to read partition table [ 33.773733][ T3512] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 33.773733][ T3512] Uªÿÿÿÿÿÿ) failed (rc=-5) [ 33.788928][ T3294] Buffer I/O error on dev loop9, logical block 0, async page read [ 33.807363][ T3294] Buffer I/O error on dev loop9, logical block 0, async page read [ 33.851097][ T3294] Buffer I/O error on dev loop9, logical block 0, async page read [ 33.864024][ T3294] Buffer I/O error on dev loop9, logical block 0, async page read [ 33.872154][ T3294] Buffer I/O error on dev loop9, logical block 0, async page read [ 33.886163][ T3294] Buffer I/O error on dev loop9, logical block 0, async page read [ 33.932842][ T3294] Buffer I/O error on dev loop9, logical block 0, async page read [ 33.956059][ T3294] Buffer I/O error on dev loop9, logical block 0, async page read [ 33.984188][ T3534] loop4: detected capacity change from 0 to 512 [ 34.018081][ T3534] EXT4-fs: Ignoring removed orlov option [ 34.031494][ T3540] SELinux: Context : is not valid (left unmapped). [ 34.052430][ T3538] atomic_op ffff888118782928 conn xmit_atomic 0000000000000000 [ 34.082711][ T3534] EXT4-fs error (device loop4): ext4_iget_extra_inode:4693: inode #15: comm syz.4.35: corrupted in-inode xattr: invalid ea_ino [ 34.167603][ T3548] capability: warning: `syz.1.40' uses 32-bit capabilities (legacy support in use) [ 34.199252][ T3534] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.35: couldn't read orphan inode 15 (err -117) [ 34.255201][ T3534] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.592770][ T3585] loop1: detected capacity change from 0 to 512 [ 34.599971][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.634746][ T3585] ======================================================= [ 34.634746][ T3585] WARNING: The mand mount option has been deprecated and [ 34.634746][ T3585] and is ignored by this kernel. Remove the mand [ 34.634746][ T3585] option from the mount to silence this warning. [ 34.634746][ T3585] ======================================================= [ 34.679479][ T3585] EXT4-fs: Ignoring removed nobh option [ 34.703780][ T3590] netlink: 8 bytes leftover after parsing attributes in process `syz.2.48'. [ 34.755370][ T3585] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.776205][ T3585] ext4 filesystem being mounted at /14/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 34.800887][ T3596] loop0: detected capacity change from 0 to 164 [ 34.856625][ T3596] process 'syz.0.49' launched '/dev/fd/3' with NULL argv: empty string added [ 34.887628][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.903371][ T3602] loop4: detected capacity change from 0 to 1024 [ 34.910588][ T3596] syz.0.49: attempt to access beyond end of device [ 34.910588][ T3596] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 34.945398][ T3602] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 34.958958][ T3596] syz.0.49: attempt to access beyond end of device [ 34.958958][ T3596] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 34.977660][ T3609] loop2: detected capacity change from 0 to 512 [ 35.007208][ T3609] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 35.020396][ T3609] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 35.039611][ T3609] EXT4-fs (loop2): 1 truncate cleaned up [ 35.062746][ T3602] EXT4-fs error (device loop4): ext4_ext_check_inode:524: inode #3: comm syz.4.53: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 3(4), depth 0(0) [ 35.067467][ T3620] netlink: 100 bytes leftover after parsing attributes in process `syz.0.57'. [ 35.089770][ T3609] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.095294][ T3615] loop1: detected capacity change from 0 to 512 [ 35.127752][ T3602] EXT4-fs error (device loop4): ext4_quota_enable:7129: comm syz.4.53: Bad quota inode: 3, type: 0 [ 35.148343][ T3602] EXT4-fs warning (device loop4): ext4_enable_quotas:7170: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 35.166985][ T3615] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 35.184092][ T3615] EXT4-fs (loop1): 1 truncate cleaned up [ 35.190179][ T3615] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.204641][ T3602] EXT4-fs (loop4): mount failed [ 35.245863][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.262562][ T3625] netlink: 'syz.0.58': attribute type 13 has an invalid length. [ 35.289865][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.422451][ T3625] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.429763][ T3625] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.509936][ T3625] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 35.520099][ T3625] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 35.559963][ T3625] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.569280][ T3625] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.578415][ T3625] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.587613][ T3625] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.623097][ T3635] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 35.796387][ T3661] can0: slcan on ttyS3. [ 35.843836][ T3661] can0 (unregistered): slcan off ttyS3. [ 35.849831][ T3661] Falling back ldisc for ttyS3. [ 35.950062][ T3677] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 35.999616][ T3675] netlink: 92 bytes leftover after parsing attributes in process `syz.3.81'. [ 36.016456][ T3675] Zero length message leads to an empty skb [ 36.035162][ T3682] loop0: detected capacity change from 0 to 512 [ 36.060039][ T3682] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.84: iget: bad extended attribute block 1 [ 36.077505][ T3682] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.84: couldn't read orphan inode 15 (err -117) [ 36.077765][ T3687] netlink: 12 bytes leftover after parsing attributes in process `syz.3.86'. [ 36.089862][ T3682] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.151976][ T3682] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters [ 36.185071][ T3690] netlink: 3 bytes leftover after parsing attributes in process `syz.2.87'. [ 36.195914][ T3690] 0ªX¹¦À: renamed from caif0 [ 36.211316][ T3690] 0ªX¹¦À: entered allmulticast mode [ 36.216739][ T3690] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 36.268765][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.388950][ C1] hrtimer: interrupt took 29831 ns [ 36.439074][ T3713] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 36.445739][ T3713] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 36.454937][ T3713] vhci_hcd vhci_hcd.0: Device attached [ 36.483121][ T3711] loop1: detected capacity change from 0 to 8192 [ 36.504839][ T3717] vhci_hcd: connection closed [ 36.505036][ T151] vhci_hcd: stop threads [ 36.514194][ T151] vhci_hcd: release socket [ 36.518745][ T151] vhci_hcd: disconnect device [ 36.723950][ T3711] syz.1.97: attempt to access beyond end of device [ 36.723950][ T3711] loop1: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 36.777298][ T3737] netlink: 12 bytes leftover after parsing attributes in process `syz.3.107'. [ 36.863515][ T3739] SELinux: failed to load policy [ 37.034922][ T3761] netlink: 8 bytes leftover after parsing attributes in process `syz.1.119'. [ 37.207204][ T3787] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3787 comm=syz.1.132 [ 37.221181][ T3787] netlink: 24 bytes leftover after parsing attributes in process `syz.1.132'. [ 37.252165][ T3788] loop3: detected capacity change from 0 to 2048 [ 37.275732][ T3788] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.278898][ T3797] netlink: 96 bytes leftover after parsing attributes in process `syz.1.134'. [ 37.293415][ T3788] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.131: bg 0: block 408: padding at end of block bitmap is not set [ 37.312421][ T3788] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 37.355715][ T3804] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3804 comm=syz.2.136 [ 37.374745][ T37] EXT4-fs (loop3): Delayed block allocation failed for inode 16 at logical offset 0 with max blocks 1 with error 28 [ 37.386985][ T37] EXT4-fs (loop3): This should not happen!! Data will be lost [ 37.386985][ T37] [ 37.396679][ T37] EXT4-fs (loop3): Total free blocks count 0 [ 37.402667][ T37] EXT4-fs (loop3): Free/Dirty block details [ 37.408660][ T37] EXT4-fs (loop3): free_blocks=16 [ 37.414137][ T37] EXT4-fs (loop3): dirty_blocks=16 [ 37.419408][ T37] EXT4-fs (loop3): Block reservation details [ 37.425491][ T37] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 37.436089][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.509112][ T3814] netlink: 'syz.2.140': attribute type 39 has an invalid length. [ 37.527052][ T3814] veth1_macvtap: left promiscuous mode [ 37.573146][ T3819] SELinux: syz.1.142 (3819) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 38.051692][ T3834] netlink: 288 bytes leftover after parsing attributes in process `syz.4.149'. [ 38.168083][ T29] kauditd_printk_skb: 311 callbacks suppressed [ 38.168120][ T29] audit: type=1400 audit(1745656787.802:458): avc: denied { setopt } for pid=3841 comm="syz.4.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 38.215783][ T3844] loop0: detected capacity change from 0 to 512 [ 38.222706][ T3844] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 38.245165][ T3844] EXT4-fs (loop0): 1 truncate cleaned up [ 38.251401][ T3844] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.304843][ T29] audit: type=1400 audit(1745656787.942:459): avc: denied { ioctl } for pid=3848 comm="syz.4.156" path="socket:[5022]" dev="sockfs" ino=5022 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 38.362336][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.388185][ T3855] random: crng reseeded on system resumption [ 38.394158][ T29] audit: type=1400 audit(1745656788.022:460): avc: denied { append } for pid=3851 comm="syz.0.157" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 38.394195][ T29] audit: type=1400 audit(1745656788.022:461): avc: denied { open } for pid=3851 comm="syz.0.157" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 38.443509][ T29] audit: type=1326 audit(1745656788.082:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3851 comm="syz.0.157" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f71d005e969 code=0x0 [ 38.481192][ T29] audit: type=1400 audit(1745656788.112:463): avc: denied { read } for pid=3856 comm="syz.3.160" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 38.593863][ T29] audit: type=1400 audit(1745656788.222:464): avc: denied { cmd } for pid=3867 comm="syz.2.164" path="socket:[5569]" dev="sockfs" ino=5569 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 38.645514][ T29] audit: type=1400 audit(1745656788.262:465): avc: denied { create } for pid=3869 comm="syz.1.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 38.665179][ T29] audit: type=1400 audit(1745656788.262:466): avc: denied { read } for pid=3865 comm="syz.3.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 38.897613][ T29] audit: type=1400 audit(1745656788.532:467): avc: denied { bind } for pid=3884 comm="syz.2.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 38.942139][ T3889] capability: warning: `syz.0.173' uses deprecated v2 capabilities in a way that may be insecure [ 38.953068][ T3887] syz.1.172 uses obsolete (PF_INET,SOCK_PACKET) [ 38.999706][ T3891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.023975][ T3891] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.283226][ T3911] SELinux: ebitmap: truncated map [ 39.289174][ T3911] SELinux: failed to load policy [ 39.313690][ T3914] loop4: detected capacity change from 0 to 164 [ 39.321040][ T3914] Unable to read rock-ridge attributes [ 39.330646][ T3914] Unable to read rock-ridge attributes [ 39.337216][ T3914] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 39.344973][ T3914] syz.4.181: attempt to access beyond end of device [ 39.344973][ T3914] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 39.677868][ T3940] netlink: 'syz.3.192': attribute type 10 has an invalid length. [ 39.702634][ T3940] hsr_slave_0: left promiscuous mode [ 39.715160][ T3940] hsr_slave_1: left promiscuous mode [ 39.721743][ T3942] loop4: detected capacity change from 0 to 2048 [ 39.830111][ T3946] __nla_validate_parse: 2 callbacks suppressed [ 39.830126][ T3946] netlink: 12 bytes leftover after parsing attributes in process `syz.3.195'. [ 39.867895][ T3948] loop4: detected capacity change from 0 to 128 [ 39.932559][ T3948] syz.4.196: attempt to access beyond end of device [ 39.932559][ T3948] loop4: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 39.958257][ T3948] syz.4.196: attempt to access beyond end of device [ 39.958257][ T3948] loop4: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 39.977574][ T3955] netlink: 36 bytes leftover after parsing attributes in process `syz.1.199'. [ 40.099268][ T3966] loop3: detected capacity change from 0 to 512 [ 40.114161][ T3966] EXT4-fs: inline encryption not supported [ 40.144973][ T3960] loop2: detected capacity change from 0 to 8192 [ 40.156444][ T3966] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.173714][ T3960] syz.2.201: attempt to access beyond end of device [ 40.173714][ T3960] loop2: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 40.188695][ T3966] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.216897][ T3973] loop4: detected capacity change from 0 to 512 [ 40.229605][ T3960] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 40.237571][ T3960] FAT-fs (loop2): Filesystem has been set read-only [ 40.270263][ T3973] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 40.273568][ T3960] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 40.290630][ T3960] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 40.326059][ T3973] EXT4-fs (loop4): 1 truncate cleaned up [ 40.387674][ T3973] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.474587][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.489938][ T3983] loop2: detected capacity change from 0 to 128 [ 40.497515][ T3973] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.518115][ T3983] syz.2.208: attempt to access beyond end of device [ 40.518115][ T3983] loop2: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 40.553012][ T3983] syz.2.208: attempt to access beyond end of device [ 40.553012][ T3983] loop2: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 40.568332][ T3983] syz.2.208: attempt to access beyond end of device [ 40.568332][ T3983] loop2: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 40.582786][ T3983] syz.2.208: attempt to access beyond end of device [ 40.582786][ T3983] loop2: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 40.597566][ T3983] syz.2.208: attempt to access beyond end of device [ 40.597566][ T3983] loop2: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 40.612882][ T3983] syz.2.208: attempt to access beyond end of device [ 40.612882][ T3983] loop2: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 40.671858][ T3983] syz.2.208: attempt to access beyond end of device [ 40.671858][ T3983] loop2: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 40.675024][ T3997] loop1: detected capacity change from 0 to 512 [ 40.695860][ T3983] buffer_io_error: 2 callbacks suppressed [ 40.695876][ T3983] Buffer I/O error on dev loop2, logical block 353, lost async page write [ 40.713588][ T3997] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 40.730790][ T3983] Buffer I/O error on dev loop2, logical block 354, lost async page write [ 40.747419][ T3983] Buffer I/O error on dev loop2, logical block 355, lost async page write [ 40.748332][ T3997] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.757600][ T3983] Buffer I/O error on dev loop2, logical block 356, lost async page write [ 40.781458][ T3983] Buffer I/O error on dev loop2, logical block 357, lost async page write [ 40.782411][ T3997] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.790177][ T3983] Buffer I/O error on dev loop2, logical block 358, lost async page write [ 40.809326][ T3983] Buffer I/O error on dev loop2, logical block 359, lost async page write [ 40.860565][ T3997] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.214: corrupted xattr block 19: overlapping e_value [ 40.884911][ T3997] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 40.895065][ T4009] loop2: detected capacity change from 0 to 512 [ 40.910279][ T4009] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 40.919374][ T4009] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 40.930110][ T3997] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.214: corrupted xattr block 19: overlapping e_value [ 40.946200][ T3997] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 40.955708][ T4009] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 40.968293][ T3997] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.214: corrupted xattr block 19: overlapping e_value [ 40.968412][ T4009] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 40.991128][ T4009] System zones: 0-2, 18-18, 34-35 [ 40.996820][ T4009] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.010852][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.033867][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.047853][ T4017] netlink: 'syz.1.221': attribute type 10 has an invalid length. [ 41.055743][ T4017] netlink: 40 bytes leftover after parsing attributes in process `syz.1.221'. [ 41.065172][ T4017] dummy0: entered promiscuous mode [ 41.071547][ T4017] bridge0: port 3(dummy0) entered blocking state [ 41.078097][ T4017] bridge0: port 3(dummy0) entered disabled state [ 41.085633][ T4017] dummy0: entered allmulticast mode [ 41.091791][ T4017] bridge0: port 3(dummy0) entered blocking state [ 41.098203][ T4017] bridge0: port 3(dummy0) entered forwarding state [ 41.111512][ T4021] loop4: detected capacity change from 0 to 512 [ 41.119787][ T4021] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 41.146931][ T4021] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 41.160499][ T4021] EXT4-fs (loop4): 1 truncate cleaned up [ 41.166957][ T4021] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.220767][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.305197][ T4043] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.341696][ T4048] loop4: detected capacity change from 0 to 512 [ 41.348714][ T4048] journal_path: Non-blockdev passed as './bus' [ 41.355050][ T4048] EXT4-fs: error: could not find journal device path [ 41.367890][ T4043] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.382066][ T4053] netlink: 4 bytes leftover after parsing attributes in process `syz.0.237'. [ 41.390956][ T4053] netlink: 4 bytes leftover after parsing attributes in process `syz.0.237'. [ 41.401617][ T4053] netlink: 4 bytes leftover after parsing attributes in process `syz.0.237'. [ 41.419231][ T4053] netlink: 4 bytes leftover after parsing attributes in process `syz.0.237'. [ 41.428109][ T4053] netlink: 4 bytes leftover after parsing attributes in process `syz.0.237'. [ 41.441203][ T4043] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.443748][ T4053] netlink: 4 bytes leftover after parsing attributes in process `syz.0.237'. [ 41.477189][ T4053] netlink: 4 bytes leftover after parsing attributes in process `syz.0.237'. [ 41.494714][ T4043] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.544550][ T4043] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.558851][ T4043] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.573421][ T4043] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.587392][ T4043] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.846125][ T4103] syz.3.254 (4103) used greatest stack depth: 10136 bytes left [ 42.062400][ T3380] kernel write not supported for file /133/attr/exec (pid: 3380 comm: kworker/0:3) [ 42.134943][ T4138] can0: slcan on ptm0. [ 42.214032][ T4135] can0 (unregistered): slcan off ptm0. [ 42.328257][ T4142] loop3: detected capacity change from 0 to 128 [ 42.336954][ T4142] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 42.425776][ T4149] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 42.624879][ T4165] loop4: detected capacity change from 0 to 512 [ 42.635672][ T4166] loop1: detected capacity change from 0 to 1024 [ 42.642528][ T4165] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.281: Invalid inode bitmap blk 4 in block_group 0 [ 42.649221][ T4166] EXT4-fs: Ignoring removed bh option [ 42.662422][ T4165] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.782292][ T4166] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.837540][ T4166] EXT4-fs error (device loop1): __ext4_remount:6738: comm syz.1.282: Abort forced by user [ 42.863956][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.880404][ T4166] EXT4-fs (loop1): Remounting filesystem read-only [ 42.887001][ T4166] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 42.974556][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.007651][ T4173] block device autoloading is deprecated and will be removed. [ 43.260954][ T29] kauditd_printk_skb: 83 callbacks suppressed [ 43.260969][ T29] audit: type=1400 audit(1745656792.892:551): avc: denied { read write } for pid=3305 comm="syz-executor" name="loop0" dev="devtmpfs" ino=514 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 43.323335][ T29] audit: type=1400 audit(1745656792.932:552): avc: denied { open } for pid=3305 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=514 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 43.346530][ T29] audit: type=1400 audit(1745656792.932:553): avc: denied { ioctl } for pid=3305 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=514 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 43.396836][ T4194] loop4: detected capacity change from 0 to 512 [ 43.423574][ T4194] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 43.449113][ T29] audit: type=1400 audit(1745656793.032:554): avc: denied { read write } for pid=4193 comm="syz.4.292" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 43.473110][ T29] audit: type=1400 audit(1745656793.032:555): avc: denied { open } for pid=4193 comm="syz.4.292" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 43.499103][ T4194] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 43.523662][ T4194] System zones: 1-12 [ 43.527837][ T4194] EXT4-fs (loop4): orphan cleanup on readonly fs [ 43.536391][ T4194] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.292: bg 0: block 361: padding at end of block bitmap is not set [ 43.551286][ T4194] EXT4-fs (loop4): Remounting filesystem read-only [ 43.559357][ T4194] EXT4-fs (loop4): 1 truncate cleaned up [ 43.566393][ T4194] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 43.584317][ T4194] sg_write: data in/out 33856/8 bytes for SCSI command 0x6e-- guessing data in; [ 43.584317][ T4194] program syz.4.292 not setting count and/or reply_len properly [ 43.625992][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 43.641928][ T4203] 0·: renamed from hsr_slave_1 (while UP) [ 43.650945][ T4200] Falling back ldisc for ttyS3. [ 43.663552][ T4203] 0·: entered allmulticast mode [ 43.678780][ T4203] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 43.771849][ T29] audit: type=1326 audit(1745656793.402:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4214 comm="syz.3.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff23bebe969 code=0x7ffc0000 [ 43.795168][ T29] audit: type=1326 audit(1745656793.402:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4214 comm="syz.3.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff23bebe969 code=0x7ffc0000 [ 43.907409][ T29] audit: type=1326 audit(1745656793.402:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4214 comm="syz.3.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff23bebe969 code=0x7ffc0000 [ 43.930828][ T29] audit: type=1326 audit(1745656793.402:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4214 comm="syz.3.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff23bebe969 code=0x7ffc0000 [ 43.954337][ T29] audit: type=1326 audit(1745656793.402:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4214 comm="syz.3.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff23bebe969 code=0x7ffc0000 [ 44.057418][ T4233] vlan2: entered allmulticast mode [ 44.216324][ T4247] loop4: detected capacity change from 0 to 512 [ 44.223451][ T4247] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 44.244196][ T4247] EXT4-fs (loop4): 1 truncate cleaned up [ 44.252767][ T4247] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.292775][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.330226][ T4256] loop2: detected capacity change from 0 to 1024 [ 44.345136][ T4256] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.375261][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.526210][ T4282] serio: Serial port ptm0 [ 44.609998][ T4288] loop2: detected capacity change from 0 to 1024 [ 44.618289][ T4290] veth0_vlan: entered allmulticast mode [ 44.626866][ T4288] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.646110][ T4290] veth0_vlan: left promiscuous mode [ 44.652775][ T4290] veth0_vlan: entered promiscuous mode [ 44.674592][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.713343][ T4299] netlink: 'syz.1.345': attribute type 1 has an invalid length. [ 44.725626][ T4301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.734205][ T4301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.752419][ T4299] 8021q: adding VLAN 0 to HW filter on device bond1 [ 44.779009][ T4299] bond1: (slave veth5): Enslaving as an active interface with a down link [ 44.797329][ T4299] bridge0: port 3(dummy0) entered disabled state [ 44.804400][ T4299] dummy0: left allmulticast mode [ 44.809395][ T4299] dummy0: left promiscuous mode [ 44.814561][ T4299] bridge0: port 3(dummy0) entered disabled state [ 44.824315][ T4299] bond1: (slave dummy0): making interface the new active one [ 44.833051][ T4299] dummy0: entered promiscuous mode [ 44.838586][ T4299] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 44.978659][ T4320] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 45.471886][ T4396] __nla_validate_parse: 7 callbacks suppressed [ 45.471903][ T4396] netlink: 4 bytes leftover after parsing attributes in process `syz.1.381'. [ 45.511853][ T4396] netlink: 12 bytes leftover after parsing attributes in process `syz.1.381'. [ 45.564824][ T4396] netlink: 3 bytes leftover after parsing attributes in process `syz.1.381'. [ 45.580325][ T4405] loop2: detected capacity change from 0 to 1024 [ 45.593797][ T4405] EXT4-fs: Ignoring removed bh option [ 45.621841][ T4405] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.637288][ T4415] netlink: 20 bytes leftover after parsing attributes in process `syz.1.389'. [ 45.651138][ T4415] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 45.659588][ T4415] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 45.667892][ T4415] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 45.676153][ T4415] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 45.689542][ T4415] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 45.698109][ T4415] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 45.706621][ T4415] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 45.715042][ T4415] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 45.724184][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.779894][ T4423] all: renamed from lo (while UP) [ 45.994685][ T4447] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 46.002139][ T4447] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 46.012903][ T4447] vhci_hcd: default hub control req: 6314 v0008 i0002 l0 [ 46.061730][ T4462] loop9: detected capacity change from 0 to 7 [ 46.067955][ T4458] loop2: detected capacity change from 0 to 2048 [ 46.068287][ T4462] Buffer I/O error on dev loop9, logical block 0, async page read [ 46.082356][ T4462] Buffer I/O error on dev loop9, logical block 0, async page read [ 46.090299][ T4462] loop9: unable to read partition table [ 46.096475][ T4462] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 46.096475][ T4462] Uªÿÿÿÿÿÿ) failed (rc=-5) [ 46.096753][ T4458] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.224324][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.627695][ T4475] loop4: detected capacity change from 0 to 1024 [ 46.645862][ T4475] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.678412][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.698408][ T4482] netlink: 24 bytes leftover after parsing attributes in process `syz.4.417'. [ 46.717575][ T4484] loop3: detected capacity change from 0 to 512 [ 46.725180][ T4484] EXT4-fs: Ignoring removed orlov option [ 46.732031][ T4484] EXT4-fs error (device loop3): ext4_iget_extra_inode:4693: inode #15: comm syz.3.418: corrupted in-inode xattr: invalid ea_ino [ 46.745901][ T4484] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.418: couldn't read orphan inode 15 (err -117) [ 46.758301][ T4484] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.838374][ T4489] netlink: 'syz.0.420': attribute type 1 has an invalid length. [ 46.883388][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.913281][ T4489] 8021q: adding VLAN 0 to HW filter on device bond1 [ 46.943485][ T4500] netlink: 8 bytes leftover after parsing attributes in process `syz.3.422'. [ 46.963452][ T4502] netlink: 100 bytes leftover after parsing attributes in process `syz.1.425'. [ 46.975340][ T4498] bond1: (slave veth3): Enslaving as an active interface with a down link [ 46.993283][ T4489] bond1: (slave dummy0): making interface the new active one [ 47.002518][ T4489] dummy0: entered promiscuous mode [ 47.007856][ T4489] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 47.068347][ T4510] netlink: 96 bytes leftover after parsing attributes in process `syz.0.428'. [ 47.162730][ T4514] netlink: 4 bytes leftover after parsing attributes in process `syz.1.430'. [ 47.359834][ T4531] netlink: 8 bytes leftover after parsing attributes in process `syz.1.438'. [ 47.450567][ T4536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.451652][ T4535] netlink: 'syz.3.439': attribute type 1 has an invalid length. [ 47.460282][ T4536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.474151][ T4535] 8021q: adding VLAN 0 to HW filter on device bond1 [ 47.499175][ T4535] bond1: (slave veth5): Enslaving as an active interface with a down link [ 47.516810][ T4535] bond1: (slave dummy0): making interface the new active one [ 47.525577][ T4535] dummy0: entered promiscuous mode [ 47.530891][ T4535] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 47.698970][ T23] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 47.706832][ T23] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 47.714581][ T23] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 47.722360][ T23] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 47.730145][ T23] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 47.738062][ T23] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 47.745947][ T23] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 47.753741][ T23] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 47.761602][ T23] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 47.769392][ T23] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 47.777156][ T23] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 47.785114][ T23] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 47.792943][ T23] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 47.800756][ T23] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 47.808906][ T23] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 47.816826][ T23] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 47.824697][ T23] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 47.832426][ T23] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 47.840223][ T23] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 47.848022][ T23] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 47.855807][ T23] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 47.863556][ T23] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 47.871348][ T23] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 47.879139][ T23] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 47.886919][ T23] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 47.894722][ T23] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 47.902439][ T23] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 47.910276][ T23] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 47.918073][ T23] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 47.928007][ T23] hid-generic 0000:0000:20000000.0001: hidraw0: HID v0.01 Device [syz0] on syz1 [ 48.041934][ T4556] loop0: detected capacity change from 0 to 512 [ 48.064591][ T4556] EXT4-fs: Ignoring removed nobh option [ 48.095818][ T4556] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.126916][ T4556] ext4 filesystem being mounted at /62/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 48.161302][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.244999][ T4575] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 48.272646][ T4573] loop4: detected capacity change from 0 to 256 [ 48.326033][ T29] kauditd_printk_skb: 228 callbacks suppressed [ 48.326049][ T29] audit: type=1400 audit(1745656797.962:789): avc: denied { module_request } for pid=4569 comm="syz.4.454" kmod="arptable_vfat" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 48.372435][ T29] audit: type=1400 audit(1745656798.002:790): avc: denied { execute } for pid=4581 comm="syz.0.458" path="/65/memory.events" dev="tmpfs" ino=356 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 48.395556][ T29] audit: type=1400 audit(1745656798.002:791): avc: denied { name_bind } for pid=4581 comm="syz.0.458" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 48.482599][ T4589] netlink: 'syz.4.461': attribute type 13 has an invalid length. [ 48.528477][ T29] audit: type=1400 audit(1745656798.162:792): avc: denied { read } for pid=4592 comm="syz.1.463" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 48.551906][ T29] audit: type=1400 audit(1745656798.162:793): avc: denied { open } for pid=4592 comm="syz.1.463" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 48.608117][ T4599] loop0: detected capacity change from 0 to 512 [ 48.641323][ T29] audit: type=1400 audit(1745656798.212:794): avc: denied { ioctl } for pid=4592 comm="syz.1.463" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 48.666649][ T29] audit: type=1400 audit(1745656798.252:795): avc: denied { cpu } for pid=4597 comm="syz.1.465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 48.699348][ T4589] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.706623][ T4589] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.790019][ T4589] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 48.800034][ T4589] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 48.846968][ T4589] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.855939][ T4589] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.864929][ T4589] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.873850][ T4589] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.947295][ T29] audit: type=1400 audit(1745656798.572:796): avc: denied { mount } for pid=4601 comm="syz.3.466" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 48.969545][ T29] audit: type=1400 audit(1745656798.572:797): avc: denied { mounton } for pid=4601 comm="syz.3.466" path="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 49.001159][ T29] audit: type=1400 audit(1745656798.632:798): avc: denied { unmount } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 49.070988][ T4608] loop4: detected capacity change from 0 to 1024 [ 49.081328][ T4610] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 49.147764][ T4608] EXT4-fs: Ignoring removed bh option [ 49.181694][ T4608] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.210858][ T4608] EXT4-fs error (device loop4): __ext4_remount:6738: comm syz.4.468: Abort forced by user [ 49.376051][ T4608] EXT4-fs (loop4): Remounting filesystem read-only [ 49.382620][ T4608] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 49.413120][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.439386][ T4617] loop1: detected capacity change from 0 to 256 [ 49.534885][ T4625] loop3: detected capacity change from 0 to 1024 [ 49.541803][ T4625] EXT4-fs: Ignoring removed bh option [ 49.575214][ T4625] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.623981][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.689876][ T4639] loop3: detected capacity change from 0 to 512 [ 49.697032][ T4639] EXT4-fs: Ignoring removed nobh option [ 49.724670][ T4639] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.754368][ T4639] ext4 filesystem being mounted at /114/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 49.792684][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.798257][ T4647] loop1: detected capacity change from 0 to 1024 [ 49.811489][ T4646] loop0: detected capacity change from 0 to 256 [ 49.825078][ T4648] netlink: 'syz.2.478': attribute type 1 has an invalid length. [ 49.854386][ T4647] EXT4-fs: Ignoring removed bh option [ 49.859485][ T4648] 8021q: adding VLAN 0 to HW filter on device bond1 [ 49.875104][ T4647] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.924344][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.938367][ T4653] bond1: (slave veth3): Enslaving as an active interface with a down link [ 50.047142][ T4666] loop1: detected capacity change from 0 to 512 [ 50.068461][ T4665] loop3: detected capacity change from 0 to 1024 [ 50.077963][ T4648] bond1: (slave dummy0): making interface the new active one [ 50.086145][ T4665] EXT4-fs: Ignoring removed bh option [ 50.099206][ T4648] dummy0: entered promiscuous mode [ 50.104492][ T4648] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 50.123247][ T4665] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.139503][ T4669] loop4: detected capacity change from 0 to 2048 [ 50.152443][ T4665] EXT4-fs error (device loop3): __ext4_remount:6738: comm syz.3.483: Abort forced by user [ 50.163012][ T4665] EXT4-fs (loop3): Remounting filesystem read-only [ 50.169583][ T4665] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 50.180863][ T4669] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.201894][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.284636][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.434259][ T4701] netlink: 'syz.4.501': attribute type 1 has an invalid length. [ 50.449321][ T4701] 8021q: adding VLAN 0 to HW filter on device bond1 [ 50.473411][ T4701] bond1: (slave veth5): Enslaving as an active interface with a down link [ 50.492773][ T4701] bond1: (slave dummy0): making interface the new active one [ 50.501225][ T4701] dummy0: entered promiscuous mode [ 50.506563][ T4701] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 50.664840][ T4705] loop4: detected capacity change from 0 to 512 [ 50.706986][ T4714] loop4: detected capacity change from 0 to 1024 [ 50.714426][ T4714] EXT4-fs: Ignoring removed bh option [ 50.737637][ T4714] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.766455][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.872700][ T4735] netlink: 'syz.4.516': attribute type 1 has an invalid length. [ 50.910323][ T4735] 8021q: adding VLAN 0 to HW filter on device bond2 [ 50.967330][ T4739] bond2: (slave veth7): Enslaving as an active interface with a down link [ 51.052175][ T4735] bond1: (slave dummy0): Releasing active interface [ 51.066645][ T4735] dummy0: left promiscuous mode [ 51.085182][ T4735] bond2: (slave dummy0): making interface the new active one [ 51.099567][ T4735] dummy0: entered promiscuous mode [ 51.107044][ T4735] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 51.124069][ T4738] loop3: detected capacity change from 0 to 512 [ 51.166216][ T4746] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 51.173991][ T4746] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 51.181452][ T4746] vhci_hcd: default hub control req: 6314 v0008 i0002 l0 [ 51.206199][ T4753] netlink: 'syz.0.533': attribute type 1 has an invalid length. [ 51.229591][ T4753] 8021q: adding VLAN 0 to HW filter on device bond2 [ 51.285849][ T4753] bond2: (slave veth5): Enslaving as an active interface with a down link [ 51.301889][ T4753] bond1: (slave dummy0): Releasing active interface [ 51.308895][ T4753] dummy0: left promiscuous mode [ 51.316988][ T4753] bond2: (slave dummy0): making interface the new active one [ 51.325850][ T4753] dummy0: entered promiscuous mode [ 51.331053][ T4753] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 51.523696][ T4774] atomic_op ffff888118780928 conn xmit_atomic 0000000000000000 [ 51.734101][ T4788] netlink: 'syz.1.538': attribute type 1 has an invalid length. [ 51.756576][ T4788] 8021q: adding VLAN 0 to HW filter on device bond2 [ 51.781325][ T4788] bond2: (slave veth7): Enslaving as an active interface with a down link [ 51.797391][ T4788] bond1: (slave dummy0): Releasing active interface [ 51.804223][ T4788] dummy0: left promiscuous mode [ 51.812633][ T4788] bond2: (slave dummy0): making interface the new active one [ 51.821531][ T4788] dummy0: entered promiscuous mode [ 51.826779][ T4788] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 51.893680][ T4797] loop0: detected capacity change from 0 to 8192 [ 51.952973][ T4803] all: renamed from lo [ 52.070891][ T4815] netlink: 'syz.2.548': attribute type 13 has an invalid length. [ 52.098578][ T4818] __nla_validate_parse: 4 callbacks suppressed [ 52.098596][ T4818] netlink: 12 bytes leftover after parsing attributes in process `syz.1.550'. [ 52.126310][ T4797] bio_check_eod: 21 callbacks suppressed [ 52.126325][ T4797] syz.0.551: attempt to access beyond end of device [ 52.126325][ T4797] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 52.181614][ T4815] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.188922][ T4815] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.248609][ T4815] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.258916][ T4815] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.296016][ T4815] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.305290][ T4815] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.314384][ T4815] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.323869][ T4815] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.418610][ T4830] netlink: 3 bytes leftover after parsing attributes in process `syz.3.555'. [ 52.429111][ T4832] netlink: 12 bytes leftover after parsing attributes in process `syz.1.556'. [ 52.483495][ T4830] 0ªX¹¦À: renamed from caif0 [ 52.504104][ T4830] 0ªX¹¦À: entered allmulticast mode [ 52.509363][ T4830] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 52.587052][ T4839] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 52.593635][ T4839] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 52.602536][ T4839] vhci_hcd vhci_hcd.0: Device attached [ 52.633398][ T4840] vhci_hcd: connection closed [ 52.634178][ T151] vhci_hcd: stop threads [ 52.643233][ T151] vhci_hcd: release socket [ 52.647695][ T151] vhci_hcd: disconnect device [ 52.688049][ T4844] netlink: 3 bytes leftover after parsing attributes in process `syz.1.572'. [ 52.699466][ T4844] 0ªX¹¦À: renamed from caif0 [ 52.706339][ T4844] 0ªX¹¦À: entered allmulticast mode [ 52.711677][ T4844] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 52.738058][ T4845] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 52.745720][ T4845] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 52.753540][ T4845] vhci_hcd: default hub control req: 6314 v0008 i0002 l0 [ 52.896723][ T4849] loop2: detected capacity change from 0 to 8192 [ 53.084183][ T4849] syz.2.563: attempt to access beyond end of device [ 53.084183][ T4849] loop2: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 53.284214][ T4873] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4873 comm=syz.2.570 [ 53.308459][ T4873] netlink: 24 bytes leftover after parsing attributes in process `syz.2.570'. [ 53.459395][ T4879] netlink: 20 bytes leftover after parsing attributes in process `syz.2.575'. [ 53.475411][ T4879] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 53.484240][ T4879] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 53.492988][ T4879] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 53.501844][ T4879] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 53.531578][ T29] kauditd_printk_skb: 125 callbacks suppressed [ 53.531596][ T29] audit: type=1400 audit(1745656803.152:924): avc: denied { listen } for pid=4885 comm="syz.1.577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 53.557396][ T29] audit: type=1400 audit(1745656803.152:925): avc: denied { accept } for pid=4885 comm="syz.1.577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 53.577033][ T4879] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 53.585998][ T4879] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 53.595055][ T4879] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 53.604041][ T4879] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 53.648308][ T29] audit: type=1400 audit(1745656803.282:926): avc: denied { create } for pid=4889 comm="syz.0.580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 53.660577][ T4884] loop4: detected capacity change from 0 to 512 [ 53.675489][ T4891] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 53.688455][ T4884] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 53.699696][ T4892] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 53.706282][ T4892] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 53.708329][ T29] audit: type=1400 audit(1745656803.312:927): avc: denied { ioctl } for pid=4889 comm="syz.0.580" path="socket:[9373]" dev="sockfs" ino=9373 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 53.714326][ T4892] vhci_hcd vhci_hcd.0: Device attached [ 53.738150][ T29] audit: type=1400 audit(1745656803.312:928): avc: denied { bind } for pid=4889 comm="syz.0.580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 53.738183][ T29] audit: type=1400 audit(1745656803.312:929): avc: denied { write } for pid=4889 comm="syz.0.580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 53.759075][ T4888] loop3: detected capacity change from 0 to 8192 [ 53.792402][ T29] audit: type=1400 audit(1745656803.422:930): avc: denied { write } for pid=4895 comm="syz.0.583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 53.793271][ T4893] vhci_hcd: connection closed [ 53.813248][ T12] vhci_hcd: stop threads [ 53.822375][ T12] vhci_hcd: release socket [ 53.826885][ T12] vhci_hcd: disconnect device [ 53.833830][ T4884] EXT4-fs (loop4): 1 truncate cleaned up [ 53.839918][ T4884] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.858931][ T29] audit: type=1400 audit(1745656803.492:931): avc: denied { read write } for pid=4883 comm="syz.4.579" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 53.881616][ T29] audit: type=1400 audit(1745656803.492:932): avc: denied { open } for pid=4883 comm="syz.4.579" path="/124/bus/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 53.960697][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.050923][ T4888] syz.3.582: attempt to access beyond end of device [ 54.050923][ T4888] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 54.069585][ T4911] netlink: 'syz.0.598': attribute type 4 has an invalid length. [ 54.078831][ T29] audit: type=1400 audit(1745656803.702:933): avc: denied { ioctl } for pid=4910 comm="syz.0.598" path="socket:[8654]" dev="sockfs" ino=8654 ioctlcmd=0x8955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 54.129586][ T4915] veth0_vlan: entered allmulticast mode [ 54.137216][ T4913] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4913 comm=syz.4.589 [ 54.152085][ T4913] netlink: 24 bytes leftover after parsing attributes in process `syz.4.589'. [ 54.171477][ T4915] veth0_vlan: left promiscuous mode [ 54.183534][ T4915] veth0_vlan: entered promiscuous mode [ 54.322217][ T4933] netlink: 96 bytes leftover after parsing attributes in process `syz.3.596'. [ 54.352945][ T4935] loop4: detected capacity change from 0 to 2048 [ 54.376156][ T4935] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.392374][ T4935] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.597: bg 0: block 408: padding at end of block bitmap is not set [ 54.408298][ T4935] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 54.436986][ T151] EXT4-fs (loop4): Delayed block allocation failed for inode 16 at logical offset 0 with max blocks 1 with error 28 [ 54.449345][ T151] EXT4-fs (loop4): This should not happen!! Data will be lost [ 54.449345][ T151] [ 54.459105][ T151] EXT4-fs (loop4): Total free blocks count 0 [ 54.465165][ T151] EXT4-fs (loop4): Free/Dirty block details [ 54.471059][ T151] EXT4-fs (loop4): free_blocks=16 [ 54.476153][ T151] EXT4-fs (loop4): dirty_blocks=16 [ 54.481293][ T151] EXT4-fs (loop4): Block reservation details [ 54.487314][ T151] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 54.503441][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.542035][ T4951] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 54.571955][ T4955] netlink: 'syz.3.608': attribute type 4 has an invalid length. [ 54.598963][ T4954] loop4: detected capacity change from 0 to 8192 [ 54.630760][ T4946] netlink: 'syz.1.603': attribute type 1 has an invalid length. [ 54.638543][ T4946] netlink: 28 bytes leftover after parsing attributes in process `syz.1.603'. [ 54.655804][ T4957] loop3: detected capacity change from 0 to 512 [ 54.662755][ T4957] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 54.676606][ T4957] EXT4-fs (loop3): 1 truncate cleaned up [ 54.684239][ T4957] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.772703][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.802456][ T4954] syz.4.607: attempt to access beyond end of device [ 54.802456][ T4954] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 54.817131][ T4965] loop3: detected capacity change from 0 to 512 [ 54.825182][ T4965] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 54.842027][ T4963] loop1: detected capacity change from 0 to 1024 [ 54.849390][ T4963] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 54.850321][ T4965] EXT4-fs (loop3): 1 truncate cleaned up [ 54.861439][ T4963] EXT4-fs error (device loop1): ext4_ext_check_inode:524: inode #3: comm syz.1.612: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 3(4), depth 0(0) [ 54.867037][ T4965] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.895354][ T4963] EXT4-fs error (device loop1): ext4_quota_enable:7129: comm syz.1.612: Bad quota inode: 3, type: 0 [ 54.924714][ T4963] EXT4-fs warning (device loop1): ext4_enable_quotas:7170: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 54.953860][ T4963] EXT4-fs (loop1): mount failed [ 54.959024][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.031667][ T4981] loop3: detected capacity change from 0 to 512 [ 55.039138][ T4981] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 55.050812][ T4981] EXT4-fs (loop3): 1 truncate cleaned up [ 55.057307][ T4981] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.091269][ T4985] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 55.237627][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.331925][ T4992] netlink: 'syz.2.621': attribute type 1 has an invalid length. [ 55.339671][ T4992] netlink: 28 bytes leftover after parsing attributes in process `syz.2.621'. [ 55.906134][ T5007] loop1: detected capacity change from 0 to 512 [ 55.917115][ T5006] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 55.925945][ T5006] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 55.934914][ T5006] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 55.943739][ T5006] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 55.966397][ T5007] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 55.976715][ T5006] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 55.981805][ T5007] EXT4-fs (loop1): 1 truncate cleaned up [ 55.985834][ T5006] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 55.999912][ T5007] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.000268][ T5006] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 56.021248][ T5006] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 56.108965][ T5009] loop2: detected capacity change from 0 to 1024 [ 56.116060][ T5009] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 56.135753][ T5009] EXT4-fs error (device loop2): ext4_ext_check_inode:524: inode #3: comm syz.2.628: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 3(4), depth 0(0) [ 56.164274][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.173924][ T5009] EXT4-fs error (device loop2): ext4_quota_enable:7129: comm syz.2.628: Bad quota inode: 3, type: 0 [ 56.186268][ T5009] EXT4-fs warning (device loop2): ext4_enable_quotas:7170: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 56.201152][ T5009] EXT4-fs (loop2): mount failed [ 56.261514][ T5020] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5020 comm=syz.3.631 [ 56.470954][ T5019] netlink: 'syz.4.642': attribute type 1 has an invalid length. [ 56.488453][ T5046] loop0: detected capacity change from 0 to 512 [ 56.500183][ T5046] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 56.531106][ T5046] EXT4-fs (loop0): 1 truncate cleaned up [ 56.556463][ T5046] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.723698][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.957672][ T5056] loop0: detected capacity change from 0 to 1024 [ 56.964875][ T5056] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 56.976542][ T5056] EXT4-fs error (device loop0): ext4_ext_check_inode:524: inode #3: comm syz.0.646: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 3(4), depth 0(0) [ 56.995728][ T5056] EXT4-fs error (device loop0): ext4_quota_enable:7129: comm syz.0.646: Bad quota inode: 3, type: 0 [ 57.007038][ T5056] EXT4-fs warning (device loop0): ext4_enable_quotas:7170: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 57.023156][ T5056] EXT4-fs (loop0): mount failed [ 57.060541][ T5062] loop0: detected capacity change from 0 to 512 [ 57.067622][ T5062] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 57.088984][ T5062] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 57.098251][ T5062] System zones: 1-12 [ 57.102581][ T5062] EXT4-fs (loop0): orphan cleanup on readonly fs [ 57.109456][ T5062] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.647: bg 0: block 361: padding at end of block bitmap is not set [ 57.123905][ T5061] Falling back ldisc for ttyS3. [ 57.125948][ T5062] EXT4-fs (loop0): Remounting filesystem read-only [ 57.135567][ T5062] EXT4-fs (loop0): 1 truncate cleaned up [ 57.141913][ T5062] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 57.159245][ T5062] sg_write: data in/out 33856/8 bytes for SCSI command 0x6e-- guessing data in; [ 57.159245][ T5062] program syz.0.647 not setting count and/or reply_len properly [ 57.239814][ T5073] serio: Serial port ptm0 [ 57.325617][ T5083] loop4: detected capacity change from 0 to 512 [ 57.342592][ T5083] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 57.366051][ T5083] EXT4-fs (loop4): 1 truncate cleaned up [ 57.433941][ T5086] vlan2: entered allmulticast mode [ 58.104940][ T5100] Falling back ldisc for ttyS3. [ 58.336589][ T5118] loop1: detected capacity change from 0 to 164 [ 58.343987][ T5118] Unable to read rock-ridge attributes [ 58.354392][ T5118] Unable to read rock-ridge attributes [ 58.360317][ T5118] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 58.368210][ T5118] syz.1.669: attempt to access beyond end of device [ 58.368210][ T5118] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 59.003929][ T3392] dummy0: left promiscuous mode [ 59.269075][ T5138] loop2: detected capacity change from 0 to 164 [ 59.278680][ T5138] Unable to read rock-ridge attributes [ 59.294498][ T5138] Unable to read rock-ridge attributes [ 59.304826][ T5138] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 59.312374][ T5138] syz.2.684: attempt to access beyond end of device [ 59.312374][ T5138] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 59.364622][ T5132] loop3: detected capacity change from 0 to 1024 [ 59.371932][ T5132] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 59.383354][ T5132] EXT4-fs error (device loop3): ext4_ext_check_inode:524: inode #3: comm syz.3.671: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 3(4), depth 0(0) [ 59.408042][ T5132] EXT4-fs error (device loop3): ext4_quota_enable:7129: comm syz.3.671: Bad quota inode: 3, type: 0 [ 59.442759][ T5142] serio: Serial port ptm0 [ 59.453466][ T5132] EXT4-fs warning (device loop3): ext4_enable_quotas:7170: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 59.490605][ T5132] EXT4-fs (loop3): mount failed [ 59.571942][ T5148] vlan2: entered allmulticast mode [ 59.729362][ T29] kauditd_printk_skb: 39 callbacks suppressed [ 59.729378][ T29] audit: type=1400 audit(1745656809.362:973): avc: denied { read } for pid=5155 comm="syz.2.678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 59.777239][ T5154] loop3: detected capacity change from 0 to 1024 [ 59.792306][ T5154] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 59.945469][ T5154] EXT4-fs error (device loop3): ext4_ext_check_inode:524: inode #3: comm syz.3.692: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 3(4), depth 0(0) [ 60.027120][ T5154] EXT4-fs error (device loop3): ext4_quota_enable:7129: comm syz.3.692: Bad quota inode: 3, type: 0 [ 60.038268][ T5154] EXT4-fs warning (device loop3): ext4_enable_quotas:7170: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 60.054653][ T5154] EXT4-fs (loop3): mount failed [ 60.453928][ T5167] loop0: detected capacity change from 0 to 1024 [ 60.460979][ T5167] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 60.472120][ T5167] EXT4-fs error (device loop0): ext4_ext_check_inode:524: inode #3: comm syz.0.694: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 3(4), depth 0(0) [ 60.473830][ T5163] Falling back ldisc for ttyS3. [ 60.491573][ T5167] EXT4-fs error (device loop0): ext4_quota_enable:7129: comm syz.0.694: Bad quota inode: 3, type: 0 [ 60.518199][ T5167] EXT4-fs warning (device loop0): ext4_enable_quotas:7170: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 60.533508][ T5167] EXT4-fs (loop0): mount failed [ 60.556911][ T29] audit: type=1400 audit(1745656810.192:974): avc: denied { append } for pid=5173 comm="syz.2.697" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 60.620178][ T29] audit: type=1400 audit(1745656810.252:975): avc: denied { ioctl } for pid=5179 comm="syz.0.687" path="socket:[8997]" dev="sockfs" ino=8997 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 60.682877][ T5185] loop0: detected capacity change from 0 to 164 [ 60.688105][ T29] audit: type=1400 audit(1745656810.292:976): avc: denied { bind } for pid=5179 comm="syz.0.687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 60.711670][ T5185] Unable to read rock-ridge attributes [ 60.721621][ T5185] Unable to read rock-ridge attributes [ 60.733959][ T5185] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 60.781936][ T5193] serio: Serial port ptm0 [ 60.870120][ T5200] vlan2: entered allmulticast mode [ 60.983801][ T5206] Falling back ldisc for ttyS3. [ 61.079742][ T29] audit: type=1400 audit(1745656810.712:977): avc: denied { append } for pid=5208 comm="syz.2.700" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 61.079825][ T5209] random: crng reseeded on system resumption [ 61.102776][ T29] audit: type=1400 audit(1745656810.712:978): avc: denied { open } for pid=5208 comm="syz.2.700" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 61.242012][ T5213] loop0: detected capacity change from 0 to 1024 [ 61.264402][ T5213] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 61.321427][ T29] audit: type=1326 audit(1745656810.952:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5208 comm="syz.2.700" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7e0ac6e969 code=0x0 [ 61.359753][ T5213] EXT4-fs error (device loop0): ext4_ext_check_inode:524: inode #3: comm syz.0.702: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 3(4), depth 0(0) [ 61.405565][ T5213] EXT4-fs error (device loop0): ext4_quota_enable:7129: comm syz.0.702: Bad quota inode: 3, type: 0 [ 61.416927][ T5213] EXT4-fs warning (device loop0): ext4_enable_quotas:7170: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 61.432131][ T5213] EXT4-fs (loop0): mount failed [ 61.461236][ T29] audit: type=1400 audit(1745656811.092:980): avc: denied { read } for pid=5229 comm="syz.3.709" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 61.484544][ T29] audit: type=1400 audit(1745656811.092:981): avc: denied { open } for pid=5229 comm="syz.3.709" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 61.511820][ T29] audit: type=1400 audit(1745656811.142:982): avc: denied { mounton } for pid=5233 comm="syz.4.719" path="/156/file0" dev="tmpfs" ino=834 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 61.512003][ T5234] SELinux: security_context_str_to_sid (n/input0 [ 61.512003][ T5234] S: Sysfs=/devices/LNXSYSTM:00/LNXPWRBN:00/input/input0 [ 61.512003][ T5234] U: Uniq= [ 61.512003][ T5234] H: Handlers=kbd event0 [ 61.512003][ T5234] B: PROP=0 [ 61.512003][ T5234] B: EV=3 [ 61.512003][ T5234] B: KEY=8000 10000000000000 0 [ 61.512003][ T5234] [ 61.512003][ T5234] I: Bus=0019 Vendor=0000 Product=0003 Version=0000 [ 61.512003][ T5234] N: Name=Sleep Button [ 61.512003][ T5234] P: Phys=LNXSLPBN/button/input0 [ 61.512003][ T5234] S: Sysfs=/devices/LNXSYSTM:00/LNXSLPBN:00/input/input1 [ 61.512003][ T5234] U: Uniq= [ 61.512003][ T5234] H: Handlers=kbd event1 [ 61.512003][ T5234] B: PROP=0 [ 61.512003][ T5234] B: EV=3 [ 61.512003][ T5234] B: KEY=4000 0 0 [ 61.512003][ T5234] [ 61.512003][ T5234] I: Bus=0011 Vendor=0001 Product=0001 Version=abba [ 61.512003][ T5234] N: Name=AT Translated Set 2 keyboard [ 61.512003][ T5234] P: Phys=isa0060/serio0/input0 [ 61.512003][ T5234] S: Sysfs=/devices/platform/i8042/serio0/input/input2 [ 61.512003][ T5234] U: Uniq= [ 61.512003][ T5234] H: Handlers=kbd leds event2 [ 61.512003][ T5234] B: PROP=0 [ 61.512003][ T5234] B: EV=120013 [ 61.512003][ T5234] B: KEY=402000002 3803078f800d001 feffffdfffefffff fffffffffffffffe [ 61.512003][ T5234] B: MSC=10 [ 61.512003][ T5234] B: LED=7 [ 61.512003][ T5234] [ 61.512003][ T5234] I: Bus=0011 Vendor=0002 Product=0006 Version=0000 [ 61.512003][ T5234] N: Name=ImExPS/2 Generic Explorer Mouse [ 61.512003][ T5234] P: Phys=isa0060/serio1/input0 [ 61.512003][ T5234] S: Sysfs=/devices/platform/i8042/serio1/input/input4 [ 61.512003][ T5234] U: Uniq= [ 61.512003][ T5234] H: Handlers=event3 [ 61.512003][ T5234] B: PROP=1 [ 61.512003][ T5234] B: EV=7 [ 61.512003][ T5234] B: KEY=1f0000 0 0 0 0 [ 61.512003][ T5234] B: REL=143 [ 61.512003][ T5234] [ 61.512003][ T5234] ) failed with errno=-22 [ 61.537132][ T5231] vhci_hcd: default hub control req: 0000 v0000 i0000 l65535 [ 61.797576][ T5237] SELinux: ebitmap: truncated map [ 61.804103][ T5237] SELinux: failed to load policy [ 61.832248][ T5243] vlan2: entered allmulticast mode [ 61.837752][ T5241] Falling back ldisc for ttyS3. [ 62.483974][ T12] dummy0: left promiscuous mode [ 62.703980][ T151] dummy0: left promiscuous mode [ 62.753785][ T5282] Falling back ldisc for ttyS3. [ 62.785783][ T5296] __nla_validate_parse: 4 callbacks suppressed [ 62.785803][ T5296] netlink: 16 bytes leftover after parsing attributes in process `syz.0.733'. [ 63.154353][ T5333] loop2: detected capacity change from 0 to 512 [ 63.163820][ T5329] Falling back ldisc for ttyS3. [ 63.174145][ T5333] EXT4-fs (loop2): orphan cleanup on readonly fs [ 63.187885][ T5333] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.748: bad orphan inode 13 [ 63.198820][ T5333] ext4_test_bit(bit=12, block=18) = 1 [ 63.204281][ T5333] is_bad_inode(inode)=0 [ 63.208465][ T5333] NEXT_ORPHAN(inode)=2130706432 [ 63.213324][ T5333] max_ino=32 [ 63.216564][ T5333] i_nlink=1 [ 63.263916][ T37] dummy0: left promiscuous mode [ 63.356433][ T5344] loop2: detected capacity change from 0 to 2048 [ 63.425330][ T5344] loop2: p1 < > p4 [ 63.434905][ T5344] loop2: p4 size 8388608 extends beyond EOD, truncated [ 63.529556][ T5350] tipc: Started in network mode [ 63.534649][ T5350] tipc: Node identity ac14140f, cluster identity 4711 [ 63.541597][ T5350] tipc: New replicast peer: 255.255.255.255 [ 63.547898][ T5350] tipc: Enabled bearer , priority 10 [ 63.610851][ T5355] macvlan2: entered promiscuous mode [ 63.617487][ T5355] bridge0: port 3(macvlan2) entered blocking state [ 63.624071][ T5355] bridge0: port 3(macvlan2) entered disabled state [ 63.630805][ T5355] macvlan2: entered allmulticast mode [ 63.638031][ T5355] macvlan2: left allmulticast mode [ 63.750770][ T5361] netlink: 8 bytes leftover after parsing attributes in process `syz.4.759'. [ 63.810735][ T5364] netlink: 24 bytes leftover after parsing attributes in process `syz.4.761'. [ 63.873827][ T5365] Falling back ldisc for ttyS3. [ 63.894502][ T5367] netlink: 12 bytes leftover after parsing attributes in process `syz.0.763'. [ 64.268163][ T5407] netlink: 36 bytes leftover after parsing attributes in process `syz.2.779'. [ 64.323233][ T10] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 64.331068][ T10] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 64.338882][ T10] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 64.348129][ T10] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 64.355997][ T10] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 64.363818][ T10] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 64.371580][ T10] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 64.379515][ T10] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 64.387450][ T10] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 64.395284][ T10] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 64.403046][ T10] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 64.410841][ T10] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 64.418632][ T10] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 64.426503][ T10] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 64.434314][ T10] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 64.442073][ T10] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 64.449895][ T10] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 64.457893][ T10] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 64.465679][ T10] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 64.473451][ T10] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 64.481245][ T10] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 64.489096][ T10] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 64.496905][ T10] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 64.504695][ T10] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 64.512441][ T10] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 64.520214][ T10] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 64.528037][ T10] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 64.535876][ T10] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 64.543706][ T10] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 64.546695][ T23] tipc: Node number set to 2886997007 [ 64.551967][ T10] hid-generic 0000:0000:20000000.0002: hidraw0: HID v0.01 Device [syz0] on syz0 [ 64.596983][ T5414] loop1: detected capacity change from 0 to 512 [ 64.604242][ T5414] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 64.617685][ T5414] EXT4-fs (loop1): 1 truncate cleaned up [ 64.697880][ T5423] netlink: 'syz.2.784': attribute type 10 has an invalid length. [ 64.702134][ T5421] loop0: detected capacity change from 0 to 2048 [ 64.712313][ T5423] hsr_slave_0: left promiscuous mode [ 64.717949][ T5423] hsr_slave_1: left promiscuous mode [ 64.768944][ T29] kauditd_printk_skb: 48 callbacks suppressed [ 64.768960][ T29] audit: type=1326 audit(1745656814.402:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5428 comm="syz.0.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71d005e969 code=0x7ffc0000 [ 64.798689][ T29] audit: type=1326 audit(1745656814.402:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5428 comm="syz.0.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f71d005e969 code=0x7ffc0000 [ 64.822390][ T29] audit: type=1326 audit(1745656814.402:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5428 comm="syz.0.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f71d005e9a3 code=0x7ffc0000 [ 64.822714][ T5430] loop0: detected capacity change from 0 to 8192 [ 64.845639][ T29] audit: type=1326 audit(1745656814.412:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5428 comm="syz.0.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f71d005d41f code=0x7ffc0000 [ 64.857260][ T5430] syz.0.786: attempt to access beyond end of device [ 64.857260][ T5430] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 64.877372][ T29] audit: type=1326 audit(1745656814.442:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5428 comm="syz.0.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f71d005e9f7 code=0x7ffc0000 [ 64.911821][ T29] audit: type=1326 audit(1745656814.462:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5428 comm="syz.0.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f71d005d2d0 code=0x7ffc0000 [ 64.916247][ T5430] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000e1b1) [ 64.935243][ T29] audit: type=1326 audit(1745656814.462:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5428 comm="syz.0.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f71d005e56b code=0x7ffc0000 [ 64.942988][ T5430] FAT-fs (loop0): Filesystem has been set read-only [ 64.966243][ T29] audit: type=1326 audit(1745656814.482:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5428 comm="syz.0.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f71d005d5ca code=0x7ffc0000 [ 64.966279][ T29] audit: type=1326 audit(1745656814.482:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5428 comm="syz.0.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f71d005d5ca code=0x7ffc0000 [ 64.966310][ T29] audit: type=1326 audit(1745656814.482:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5428 comm="syz.0.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f71d005d1d7 code=0x7ffc0000 [ 65.045491][ T5430] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000e1b1) [ 65.053864][ T5430] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000e1b1) [ 65.188189][ T3380] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 65.196156][ T3380] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 65.203982][ T3380] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 65.212435][ T3380] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 65.220335][ T3380] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 65.228152][ T3380] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 65.235982][ T3380] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 65.243829][ T3380] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 65.251588][ T3380] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 65.259507][ T3380] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 65.267338][ T3380] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 65.275130][ T3380] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 65.282879][ T3380] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 65.290833][ T3380] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 65.301764][ T5461] netlink: 288 bytes leftover after parsing attributes in process `syz.2.799'. [ 65.303821][ T3380] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 65.318571][ T3380] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 65.319742][ T5461] netlink: 16 bytes leftover after parsing attributes in process `syz.2.799'. [ 65.326334][ T3380] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 65.340156][ T5464] loop0: detected capacity change from 0 to 128 [ 65.342909][ T3380] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 65.357082][ T3380] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 65.363933][ T5464] syz.0.800: attempt to access beyond end of device [ 65.363933][ T5464] loop0: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 65.364907][ T3380] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 65.386061][ T3380] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 65.393897][ T3380] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 65.401640][ T3380] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 65.409445][ T3380] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 65.413067][ T5464] syz.0.800: attempt to access beyond end of device [ 65.413067][ T5464] loop0: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 65.417199][ T3380] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 65.417227][ T3380] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 65.446195][ T3380] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 65.453961][ T3380] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 65.461752][ T3380] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 65.469947][ T5464] syz.0.800: attempt to access beyond end of device [ 65.469947][ T5464] loop0: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 65.483389][ T5464] syz.0.800: attempt to access beyond end of device [ 65.483389][ T5464] loop0: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 65.496970][ T5455] Falling back ldisc for ttyS3. [ 65.509604][ T5467] loop2: detected capacity change from 0 to 2048 [ 65.516570][ T5464] syz.0.800: attempt to access beyond end of device [ 65.516570][ T5464] loop0: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 65.530251][ T5464] syz.0.800: attempt to access beyond end of device [ 65.530251][ T5464] loop0: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 65.544802][ T3380] hid-generic 0000:0000:20000000.0003: hidraw0: HID v0.01 Device [syz0] on syz0 [ 65.555699][ T5464] syz.0.800: attempt to access beyond end of device [ 65.555699][ T5464] loop0: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 65.582646][ T5464] syz.0.800: attempt to access beyond end of device [ 65.582646][ T5464] loop0: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 65.596422][ T5464] syz.0.800: attempt to access beyond end of device [ 65.596422][ T5464] loop0: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 65.643934][ T5475] Falling back ldisc for ttyS3. [ 65.667223][ T37] Buffer I/O error on dev loop0, logical block 353, lost async page write [ 65.677324][ T37] Buffer I/O error on dev loop0, logical block 354, lost async page write [ 65.692086][ T37] Buffer I/O error on dev loop0, logical block 355, lost async page write [ 65.704569][ T37] Buffer I/O error on dev loop0, logical block 356, lost async page write [ 65.713475][ T37] Buffer I/O error on dev loop0, logical block 357, lost async page write [ 65.723141][ T37] Buffer I/O error on dev loop0, logical block 358, lost async page write [ 65.732579][ T37] Buffer I/O error on dev loop0, logical block 359, lost async page write [ 65.749562][ T5481] netlink: 'syz.4.808': attribute type 10 has an invalid length. [ 65.767556][ T5481] hsr_slave_0: left promiscuous mode [ 65.778701][ T5481] hsr_slave_1: left promiscuous mode [ 65.784040][ T5484] loop0: detected capacity change from 0 to 512 [ 65.792370][ T5484] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 65.806078][ T5484] ext4 filesystem being mounted at /138/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.819587][ T5484] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.806: corrupted xattr block 19: overlapping e_value [ 65.837076][ T5484] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 65.853832][ T5484] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.806: corrupted xattr block 19: overlapping e_value [ 65.871119][ T5484] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 65.880681][ T5484] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.806: corrupted xattr block 19: overlapping e_value [ 65.930641][ T5491] loop1: detected capacity change from 0 to 512 [ 65.941138][ T5491] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 65.950269][ T5491] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 66.003443][ T5491] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 66.013015][ T5491] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 66.023791][ T5491] System zones: 0-2, 18-18, 34-35 [ 66.276191][ T23] hid-generic 0000:0000:20000000.0004: unknown main item tag 0x0 [ 66.284148][ T23] hid-generic 0000:0000:20000000.0004: unknown main item tag 0x0 [ 66.291978][ T23] hid-generic 0000:0000:20000000.0004: unknown main item tag 0x0 [ 66.302426][ T23] hid-generic 0000:0000:20000000.0004: unknown main item tag 0x0 [ 66.310330][ T23] hid-generic 0000:0000:20000000.0004: unknown main item tag 0x0 [ 66.318124][ T23] hid-generic 0000:0000:20000000.0004: unknown main item tag 0x0 [ 66.326023][ T23] hid-generic 0000:0000:20000000.0004: unknown main item tag 0x0 [ 66.333862][ T23] hid-generic 0000:0000:20000000.0004: unknown main item tag 0x0 [ 66.341613][ T23] hid-generic 0000:0000:20000000.0004: unknown main item tag 0x0 [ 66.349373][ T23] hid-generic 0000:0000:20000000.0004: unknown main item tag 0x0 [ 66.357198][ T23] hid-generic 0000:0000:20000000.0004: unknown main item tag 0x0 [ 66.364989][ T23] hid-generic 0000:0000:20000000.0004: unknown main item tag 0x0 [ 66.372746][ T23] hid-generic 0000:0000:20000000.0004: unknown main item tag 0x0 [ 66.380505][ T23] hid-generic 0000:0000:20000000.0004: unknown main item tag 0x0 [ 66.388354][ T23] hid-generic 0000:0000:20000000.0004: unknown main item tag 0x0 [ 66.396160][ T23] hid-generic 0000:0000:20000000.0004: unknown main item tag 0x0 [ 66.403990][ T23] hid-generic 0000:0000:20000000.0004: unknown main item tag 0x0 [ 66.411729][ T23] hid-generic 0000:0000:20000000.0004: unknown main item tag 0x0 [ 66.419501][ T23] hid-generic 0000:0000:20000000.0004: unknown main item tag 0x0 [ 66.427405][ T23] hid-generic 0000:0000:20000000.0004: unknown main item tag 0x0 [ 66.435167][ T23] hid-generic 0000:0000:20000000.0004: unknown main item tag 0x0 [ 66.442977][ T23] hid-generic 0000:0000:20000000.0004: unknown main item tag 0x0 [ 66.450735][ T23] hid-generic 0000:0000:20000000.0004: unknown main item tag 0x0 [ 66.458632][ T23] hid-generic 0000:0000:20000000.0004: unknown main item tag 0x0 [ 66.466417][ T23] hid-generic 0000:0000:20000000.0004: unknown main item tag 0x0 [ 66.474186][ T23] hid-generic 0000:0000:20000000.0004: unknown main item tag 0x0 [ 66.481956][ T23] hid-generic 0000:0000:20000000.0004: unknown main item tag 0x0 [ 66.489755][ T23] hid-generic 0000:0000:20000000.0004: unknown main item tag 0x0 [ 66.497664][ T23] hid-generic 0000:0000:20000000.0004: unknown main item tag 0x0 [ 66.506128][ T23] hid-generic 0000:0000:20000000.0004: hidraw0: HID v0.01 Device [syz0] on syz0 [ 66.536075][ T5522] netlink: 'syz.0.821': attribute type 10 has an invalid length. [ 66.543875][ T5522] netlink: 40 bytes leftover after parsing attributes in process `syz.0.821'. [ 66.552885][ T5522] dummy0: entered promiscuous mode [ 66.562866][ T5522] bond2: (slave dummy0): Releasing active interface [ 66.575026][ T5522] bridge0: port 3(dummy0) entered blocking state [ 66.581555][ T5522] bridge0: port 3(dummy0) entered disabled state [ 66.589409][ T5522] dummy0: entered allmulticast mode [ 66.659748][ T5521] Falling back ldisc for ttyS3. [ 66.711605][ T5544] netlink: 'syz.2.828': attribute type 13 has an invalid length. [ 66.735097][ T5545] netlink: 4 bytes leftover after parsing attributes in process `syz.1.827'. [ 66.763884][ T5545] 8021q: adding VLAN 0 to HW filter on device team1 [ 66.794777][ T5552] loop2: detected capacity change from 0 to 164 [ 66.803130][ T5554] vlan2: entered allmulticast mode [ 66.808448][ T5554] bond0: entered allmulticast mode [ 66.813741][ T5554] bond_slave_0: entered allmulticast mode [ 66.819566][ T5554] bond_slave_1: entered allmulticast mode [ 66.955663][ T5565] netlink: 'syz.2.835': attribute type 10 has an invalid length. [ 66.963490][ T5565] netlink: 40 bytes leftover after parsing attributes in process `syz.2.835'. [ 67.014032][ T5569] SELinux: failed to load policy [ 67.019284][ T5565] bond1: (slave dummy0): Releasing active interface [ 67.038982][ T5565] bridge0: port 3(dummy0) entered blocking state [ 67.045427][ T5565] bridge0: port 3(dummy0) entered disabled state [ 67.062758][ T5565] dummy0: entered allmulticast mode [ 67.154901][ T5578] Falling back ldisc for ttyS3. [ 67.186029][ T5580] loop2: detected capacity change from 0 to 2048 [ 67.225457][ T5580] ext4 filesystem being mounted at /168/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.340554][ T5595] loop2: detected capacity change from 0 to 4096 [ 67.442547][ T5609] loop4: detected capacity change from 0 to 512 [ 67.451953][ T5609] EXT4-fs: inline encryption not supported [ 67.485392][ T5616] loop1: detected capacity change from 0 to 512 [ 67.486654][ T5609] EXT4-fs mount: 13 callbacks suppressed [ 67.486670][ T5609] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.511764][ T5616] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 67.522727][ T5609] ext4 filesystem being mounted at /185/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.537567][ T5616] EXT4-fs (loop1): 1 truncate cleaned up [ 67.545006][ T5616] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.609395][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.669325][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.749218][ T5652] netlink: 'syz.4.863': attribute type 10 has an invalid length. [ 67.757080][ T5652] dummy0: entered promiscuous mode [ 67.762995][ T5652] bond2: (slave dummy0): Releasing active interface [ 67.772307][ T5652] bridge0: port 3(dummy0) entered blocking state [ 67.778763][ T5652] bridge0: port 3(dummy0) entered disabled state [ 67.785728][ T5652] dummy0: entered allmulticast mode [ 67.838157][ T5661] can0: slcan on ttyS3. [ 67.903751][ T5661] can0 (unregistered): slcan off ttyS3. [ 67.910418][ T5661] Falling back ldisc for ttyS3. [ 67.940841][ T5668] __nla_validate_parse: 10 callbacks suppressed [ 67.940859][ T5668] netlink: 20 bytes leftover after parsing attributes in process `syz.4.872'. [ 67.959216][ T5668] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.968093][ T5668] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.976945][ T5668] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.985786][ T5668] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.995604][ T5668] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 68.004764][ T5668] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 68.013775][ T5668] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 68.022659][ T5668] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 68.392794][ T5684] loop2: detected capacity change from 0 to 1024 [ 68.399716][ T5684] EXT4-fs: Ignoring removed orlov option [ 68.419122][ T5684] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.778743][ T5692] loop3: detected capacity change from 0 to 512 [ 68.785682][ T5692] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 68.797175][ T5692] EXT4-fs (loop3): 1 truncate cleaned up [ 68.804610][ T5694] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 68.812039][ T5694] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 68.819696][ T5694] vhci_hcd: default hub control req: 6314 v0008 i0002 l0 [ 68.828506][ T5692] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.897919][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.922221][ T5697] loop3: detected capacity change from 0 to 512 [ 68.930574][ T5697] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 68.941424][ T5697] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 68.949471][ T5697] System zones: 1-12 [ 68.954071][ T5697] EXT4-fs (loop3): orphan cleanup on readonly fs [ 68.961105][ T5697] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.880: bg 0: block 361: padding at end of block bitmap is not set [ 68.976814][ T5697] EXT4-fs (loop3): Remounting filesystem read-only [ 68.983462][ T5697] EXT4-fs (loop3): 1 truncate cleaned up [ 68.990188][ T5697] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 69.005876][ T5697] sg_write: data in/out 33856/8 bytes for SCSI command 0x6e-- guessing data in; [ 69.005876][ T5697] program syz.3.880 not setting count and/or reply_len properly [ 69.037760][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 69.174807][ T5708] loop3: detected capacity change from 0 to 512 [ 69.194353][ T5708] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 69.235026][ T5708] EXT4-fs (loop3): 1 truncate cleaned up [ 69.241232][ T5708] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.368547][ T5690] syz.2.877 (5690) used greatest stack depth: 9696 bytes left [ 69.388679][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.412987][ T5713] netlink: 20 bytes leftover after parsing attributes in process `syz.0.897'. [ 69.429736][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.441949][ T5713] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.450908][ T5713] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.459685][ T5713] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.468629][ T5713] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.478997][ T5713] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 69.488058][ T5713] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 69.497187][ T5713] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 69.506116][ T5713] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 69.625136][ T5731] netlink: 20 bytes leftover after parsing attributes in process `syz.0.904'. [ 69.637937][ T5731] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.646925][ T5731] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.655746][ T5731] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.664607][ T5731] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.675452][ T5731] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 69.684417][ T5731] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 69.693322][ T5731] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 69.702251][ T5731] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 70.477501][ T5744] loop4: detected capacity change from 0 to 1024 [ 70.486594][ T5746] loop2: detected capacity change from 0 to 512 [ 70.495014][ T5746] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 70.505463][ T5744] EXT4-fs: Ignoring removed orlov option [ 70.516960][ T5748] netlink: 'syz.3.898': attribute type 10 has an invalid length. [ 70.521641][ T5746] EXT4-fs (loop2): 1 truncate cleaned up [ 70.524756][ T5748] netlink: 40 bytes leftover after parsing attributes in process `syz.3.898'. [ 70.525055][ T5748] dummy0: entered promiscuous mode [ 70.534034][ T5746] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.544149][ T5744] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.569397][ T5748] bond1: (slave dummy0): Releasing active interface [ 70.589138][ T5748] bridge0: port 3(dummy0) entered blocking state [ 70.595619][ T5748] bridge0: port 3(dummy0) entered disabled state [ 70.606162][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.615870][ T5748] dummy0: entered allmulticast mode [ 70.893750][ T5762] loop2: detected capacity change from 0 to 512 [ 70.908188][ T5762] EXT4-fs: inline encryption not supported [ 70.936814][ T5762] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.949464][ T5762] ext4 filesystem being mounted at /177/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.113906][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.396063][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.413029][ T5766] netlink: 20 bytes leftover after parsing attributes in process `syz.3.910'. [ 71.437587][ T5766] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.446410][ T5766] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.455181][ T5766] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.463956][ T5766] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.494961][ T5774] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 71.502386][ T5774] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 71.519120][ T5766] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 71.525400][ T5774] vhci_hcd: default hub control req: 6314 v0008 i0002 l0 [ 71.528127][ T5766] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 71.544096][ T5766] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 71.553051][ T5766] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 71.553513][ T29] kauditd_printk_skb: 783 callbacks suppressed [ 71.553527][ T29] audit: type=1326 audit(1745656821.182:1824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5773 comm="syz.4.906" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc8324fe969 code=0x0 [ 71.902358][ T29] audit: type=1326 audit(1745656821.532:1825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5787 comm="syz.0.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71d005e969 code=0x7ffc0000 [ 71.925762][ T29] audit: type=1326 audit(1745656821.532:1826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5787 comm="syz.0.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71d005e969 code=0x7ffc0000 [ 71.950434][ T29] audit: type=1326 audit(1745656821.542:1827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5787 comm="syz.0.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7f71d005e969 code=0x7ffc0000 [ 71.973890][ T29] audit: type=1326 audit(1745656821.542:1828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5787 comm="syz.0.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71d005e969 code=0x7ffc0000 [ 71.997249][ T29] audit: type=1326 audit(1745656821.542:1829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5787 comm="syz.0.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71d005e969 code=0x7ffc0000 [ 72.020614][ T29] audit: type=1326 audit(1745656821.542:1830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5787 comm="syz.0.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f71d005e969 code=0x7ffc0000 [ 72.043998][ T29] audit: type=1326 audit(1745656821.542:1831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5787 comm="syz.0.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71d005e969 code=0x7ffc0000 [ 72.067496][ T29] audit: type=1326 audit(1745656821.542:1832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5787 comm="syz.0.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f71d005e969 code=0x7ffc0000 [ 72.090719][ T29] audit: type=1326 audit(1745656821.542:1833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5787 comm="syz.0.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71d005e969 code=0x7ffc0000 [ 72.161117][ T2968] kernel write not supported for file /389/attr/exec (pid: 2968 comm: kworker/1:2) [ 72.236856][ T5815] loop3: detected capacity change from 0 to 1024 [ 72.243438][ T5815] EXT4-fs: Ignoring removed orlov option [ 72.251782][ T5815] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.347550][ T5824] loop2: detected capacity change from 0 to 512 [ 72.355397][ T5824] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 72.366843][ T5824] EXT4-fs (loop2): 1 truncate cleaned up [ 72.372976][ T5824] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.442729][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.668788][ T5822] ================================================================== [ 72.676908][ T5822] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark [ 72.684021][ T5822] [ 72.686337][ T5822] write to 0xffff8881061ff7e4 of 4 bytes by task 5815 on cpu 0: [ 72.693962][ T5822] xas_set_mark+0x12b/0x140 [ 72.698502][ T5822] __folio_start_writeback+0x1dd/0x430 [ 72.703950][ T5822] ext4_bio_write_folio+0x590/0x9d0 [ 72.709142][ T5822] mpage_process_page_bufs+0x46c/0x5b0 [ 72.714610][ T5822] mpage_prepare_extent_to_map+0x775/0xb80 [ 72.720448][ T5822] ext4_do_writepages+0xa25/0x2270 [ 72.725578][ T5822] ext4_writepages+0x176/0x300 [ 72.730429][ T5822] do_writepages+0x1d2/0x480 [ 72.735061][ T5822] file_write_and_wait_range+0x156/0x2c0 [ 72.740715][ T5822] generic_buffers_fsync_noflush+0x45/0x120 [ 72.746611][ T5822] ext4_sync_file+0x1ab/0x690 [ 72.751294][ T5822] vfs_fsync_range+0x10a/0x130 [ 72.756059][ T5822] ext4_buffered_write_iter+0x34f/0x3c0 [ 72.761611][ T5822] ext4_file_write_iter+0x383/0xf00 [ 72.766812][ T5822] iter_file_splice_write+0x5ef/0x970 [ 72.772183][ T5822] direct_splice_actor+0x153/0x2a0 [ 72.777307][ T5822] splice_direct_to_actor+0x30f/0x680 [ 72.782685][ T5822] do_splice_direct+0xda/0x150 [ 72.787460][ T5822] do_sendfile+0x380/0x640 [ 72.791908][ T5822] __x64_sys_sendfile64+0x105/0x150 [ 72.797113][ T5822] x64_sys_call+0xb39/0x2fb0 [ 72.801704][ T5822] do_syscall_64+0xd0/0x1a0 [ 72.806242][ T5822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.812164][ T5822] [ 72.814482][ T5822] read to 0xffff8881061ff7e4 of 4 bytes by task 5822 on cpu 1: [ 72.822019][ T5822] xas_find_marked+0x5dc/0x620 [ 72.826783][ T5822] find_get_entry+0x5d/0x380 [ 72.831376][ T5822] filemap_get_folios_tag+0x92/0x210 [ 72.836664][ T5822] filemap_fdatawait_range+0x88/0x1d0 [ 72.842042][ T5822] __writeback_single_inode+0xdb/0x7c0 [ 72.847514][ T5822] writeback_single_inode+0x167/0x3e0 [ 72.852893][ T5822] sync_inode_metadata+0x5b/0x90 [ 72.857840][ T5822] generic_buffers_fsync_noflush+0xd9/0x120 [ 72.863738][ T5822] ext4_sync_file+0x1ab/0x690 [ 72.868617][ T5822] vfs_fsync_range+0x10a/0x130 [ 72.873384][ T5822] ext4_buffered_write_iter+0x34f/0x3c0 [ 72.878936][ T5822] ext4_file_write_iter+0x383/0xf00 [ 72.884146][ T5822] iter_file_splice_write+0x5ef/0x970 [ 72.889524][ T5822] direct_splice_actor+0x153/0x2a0 [ 72.894636][ T5822] splice_direct_to_actor+0x30f/0x680 [ 72.900013][ T5822] do_splice_direct+0xda/0x150 [ 72.904776][ T5822] do_sendfile+0x380/0x640 [ 72.909201][ T5822] __x64_sys_sendfile64+0x105/0x150 [ 72.914407][ T5822] x64_sys_call+0xb39/0x2fb0 [ 72.919011][ T5822] do_syscall_64+0xd0/0x1a0 [ 72.923538][ T5822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.929430][ T5822] [ 72.931749][ T5822] value changed: 0x0a000021 -> 0x04000021 [ 72.937461][ T5822] [ 72.939779][ T5822] Reported by Kernel Concurrency Sanitizer on: [ 72.945938][ T5822] CPU: 1 UID: 0 PID: 5822 Comm: syz.3.925 Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(voluntary) [ 72.958272][ T5822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 72.968328][ T5822] ================================================================== [ 73.162932][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.