last executing test programs: 1m37.642358521s ago: executing program 0 (id=283): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000008c0), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) pipe(0x0) syz_emit_ethernet(0x5e, &(0x7f0000000580)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "000010", 0x28, 0x3c, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, {[@hopopts={0x8, 0x2, '\x00', [@hao={0xc9, 0x10, @local}]}], {0x2, 0x0, 0x8}}}}}}, 0x0) 1m37.622050682s ago: executing program 0 (id=285): mkdir(&(0x7f0000000440)='./file0\x00', 0x100) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000000)='./control\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./control\x00', 0x0, 0x2000, 0x0) 1m37.586658592s ago: executing program 0 (id=288): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') fchdir(r0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents(r1, &(0x7f0000000040)=""/61, 0x3d) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000) 1m37.570966333s ago: executing program 0 (id=289): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a95004, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') 1m37.544334053s ago: executing program 0 (id=292): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000080)=0x9, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) socket$packet(0x11, 0x3, 0x300) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 1m37.342908796s ago: executing program 0 (id=302): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000004000), &(0x7f0000004040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r1}, 0x10) io_setup(0x3, &(0x7f0000000340)) 1m37.342689366s ago: executing program 32 (id=302): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000004000), &(0x7f0000004040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r1}, 0x10) io_setup(0x3, &(0x7f0000000340)) 1m14.596943354s ago: executing program 5 (id=1071): prctl$PR_GET_FP_MODE(0x2e) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x11, 0xf, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$UHID_CREATE(r2, &(0x7f0000002a00)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0x7f, 0xfffffffe}}, 0x120) 1m14.525991515s ago: executing program 5 (id=1073): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') write$binfmt_register(r2, &(0x7f0000000540)={0x3a, 'syz0', 0x3a, 'E', 0x3a, 0xfffffffffffffffe, 0x3a, 'i\'', 0x3a, 'max_batch_time', 0x3a, './file0', 0x3a, [0x4f]}, 0x38) read$hiddev(r2, &(0x7f0000000300)=""/69, 0x45) 1m14.484701696s ago: executing program 5 (id=1075): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0xf03, 0x4, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r2}, 0x10) getcwd(&(0x7f0000000000)=""/4096, 0x1000) 1m14.308016829s ago: executing program 5 (id=1078): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) 1m14.053450413s ago: executing program 5 (id=1074): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x8, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x5}, 0x2004c000) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1m13.438761713s ago: executing program 5 (id=1083): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x40, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r1}, 0x18) r2 = socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(r2, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) 1m13.438492873s ago: executing program 33 (id=1083): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x40, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r1}, 0x18) r2 = socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(r2, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) 18.185833856s ago: executing program 4 (id=3321): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000f5ffffffffffffff000a14000000060a0000000000000000000002"], 0x3c}}, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x00\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdF\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1b\xf4\xce\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|9\x90\x8d\xf4r\xd9*\xd1\x83\n\x1a\xa8fa2\xd4:^\xd7a\x0f\x12}\a\x9d\xc9h\x02\xbe\xeb\x01\xd39LS\xefJ\xcc<\xc4\xc0\xb4A\xab{\x1b\x15<\x95\x02\xae\xfdT\x98\xf4\x85\a\x01@\x12\xe0<3\xb4\x97\xb6W\x84K\xd7\xc5\xf47\xed\xda4\xe2W\xb6r\xca\x1e\x90\xef\x13\xf1&~\x97n\x9f\x8eS\xa8R\xf6\x9d{9\x1bN\x81\x18~\xd7{', 0x42, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x6, 0x0) mq_timedreceive(r2, &(0x7f000001a3c0)=""/102381, 0xffffffffffffff32, 0x0, 0x0) 1.313668338s ago: executing program 2 (id=3923): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x65, 0xfc, 0x5, 0x0, 0x0, 0xb, 0x89008, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x1, 0x6}, 0x4200, 0x24, 0x2, 0x3, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfbfffffffffffffc}, 0x0, 0x10000000000a, 0xffffffffffffffff, 0xb) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120) write$UHID_DESTROY(r0, &(0x7f0000000080), 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000010000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) 1.069039253s ago: executing program 2 (id=3925): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f00000004c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x4800000, 0x8005, 0x0, 0x0, 0x9, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d10a00966d61fdcf335263bd9bffbcc2542ded71038259ca0400e1a311efec32d71e14ef3dc177b5b48b00", "f2fdffffffffffffff810000000000d300e6d602000000000000000000000001", [0xca4e]}) open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) 971.216404ms ago: executing program 1 (id=3927): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000c00)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) statfs(&(0x7f0000000300)='./file0\x00', 0x0) 970.815704ms ago: executing program 1 (id=3928): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x550, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x480, 0xffffffff, 0xffffffff, 0x480, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x2b4, 0x1, 0x2, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x1300, 0x4, 0x0, 'syz0\x00'}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0xfd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b0) 970.305274ms ago: executing program 6 (id=3929): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) 957.450614ms ago: executing program 1 (id=3930): setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}, 0x1, 0x0, 0x0, 0x20000805}, 0x0) r1 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r1, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001040)="5346f7f875528ef24043c68e04", 0xd}], 0x1, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x20}, 0x0) 872.946545ms ago: executing program 2 (id=3931): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x0, 0x1fc, 0x0, 0xfffffc80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3f, 0x0, 0x0, 0x2, 0xffffffff, 0x3, 0xc00, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xbab, 0x0, 0x272, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0x0, 0x1, 0x7, 0x4, 0xc, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x100, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0xfffc, 0x6}, {0xff}, 0x0, 0x7f}}]}}]}, 0x45c}}, 0x0) 859.545386ms ago: executing program 6 (id=3932): mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x6, 0x8, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000004d18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x254640343f8d0638, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000180)="74fa40b249c0d585699ce70fac7b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 859.423266ms ago: executing program 1 (id=3933): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) kcmp(0x0, 0x0, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) 829.723416ms ago: executing program 6 (id=3934): r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) 781.777317ms ago: executing program 1 (id=3935): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x18) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x787, &(0x7f0000001000)="$eJzs3ctrXNUfAPDvnSRNk/b3SwRB6yogaKB0YmpsFVxUXIhgoaBr22EyDTWTTMlMShMCtojgRlBxIeimax9159bHVv8LF9JSNS1WXEjkzqOdNjPppM3MBPL5wMmcc++dnPOdcx/nzr3MDWDPmkj/ZCIORcRHScRYfXoSEUPV3GDEidpyt9fX8mlKYmPjzT+S6jK31tfy0fSe1IF64cmI+PH9iMOZzfWWV1bnc8ViYalenqosnJ8qr6weObeQmyvMFRaPTc/MHD3+wvFjOxfrX7+sHrz+8WvPfnPin/eeuPrhT0mciIP1ec1x7JSJmKh/JkPpR3iPV3e6sj5L+t0AHkq6aQ7UtvI4FGMxUM21MdLLlgEA3fJuRGwAAHtM4vgPAHtM43uAW+tr+Ubq7zcSvXXjlYjYX4u/cX2zNmewfs1uf/U66Oit5J4rI0lEjO9A/RMR8cV3b3+Vpqj3g2tpQC9cuhwRZ8YnNu//k033LGzXc1vN3BiuvkzcN3mvHX+gn75Pxz8vthr/Ze6Mf6LF+Ge4xbb7MB68/Weu7UA1baXjv5eb7m273RR/3fhAvfS/6phvKDl7rlhI923/j4jJGBpOy9PVRVuP3CZv/nuzXf3N478/P3nny7T+9PXuEplrg8P3vmc2V8k9atwNNy5HPDXYKv7kTv8nbca/pzqs4/WXPvi83bw0/jTeRtocf3dtXIl4pmX/3+3LZMv7E6eqq8NUY6Vo4dtfPxttV39z/6cprb9xLtALaf+Pbh3/eNJ8v2Z5+3X8fGXsh3bzHhx/6/V/X/JWNb+vPu1irlJZmo7Yl7yxefrRu+9tlBvLp/FPPt16+69V23r9T88Jz3QY/+D1379++Pi7K41/dlv9v/3M1dvzA+3q76z/Z6q5yfqUTvZ/nTbwUT47AAAAAAAAAAAAAAAAAAAAAAAAAOhUJiIORpLJ3slnMtls7Rnej8doplgqVw6fLS0vzkb1WdnjMZRp/NTlWNPvoU7Xfw+/UT56X/n5iHgsIj4dHqmWs/lScbbfwQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA3YE2z/9P/Tbc79YBAF2zv98NAAB6zvEfAPae7R3/R7rWDgCgd5z/A8De0/Hx/0x32wEA9I7zfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALrs1MmTadr4e30tn5ZnL6wsz5cuHJktlOezC8v5bL60dD47VyrNFQvZfGmh7T+6VHsplkrnZ2Jx+eJUpVCuTJVXVk8vlJYXK6fPLeTmCqcLQz2LDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6V15Znc8Vi4UlmS0zI7ujGbsmMxi7ohkyXcs07yVG+reDAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjl/gsAAP//IIYqoQ==") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xfffffd26) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x401c5820, &(0x7f00000001c0)=0x8) 781.625337ms ago: executing program 6 (id=3936): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x2) 639.538279ms ago: executing program 3 (id=3939): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) 635.85972ms ago: executing program 6 (id=3940): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000100)=@req3={0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x861}, 0x1c) 516.857472ms ago: executing program 7 (id=3942): r0 = socket(0x18, 0x2, 0x0) close(r0) r1 = socket(0x800000018, 0x2, 0x0) bind$unix(r1, 0x0, 0x0) connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) getpeername$unix(r0, 0x0, &(0x7f0000000580)) 454.843502ms ago: executing program 7 (id=3943): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="020000000000000002000000e000000200e70000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000200fffc0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x190) setsockopt$inet_group_source_req(r1, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) 404.960073ms ago: executing program 7 (id=3944): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) lseek(r1, 0x3, 0x0) getdents(r1, 0x0, 0x4000) 383.577414ms ago: executing program 7 (id=3945): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'netdevsim0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2037d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x0) 314.687565ms ago: executing program 6 (id=3946): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) recvmsg(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000e40)=""/4096, 0x1000}], 0x1}, 0x0) 314.258115ms ago: executing program 3 (id=3947): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = fsopen(&(0x7f0000000580)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000540)='\x00', &(0x7f0000001c80)='n', 0x1) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000005c0)='\x00H\xeb', 0x0, r0) close(r0) 266.041616ms ago: executing program 3 (id=3948): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000380), 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) cachestat(r0, &(0x7f0000000040), &(0x7f000009de80), 0x0) 222.007456ms ago: executing program 3 (id=3949): r0 = socket(0x2, 0x3, 0xff) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x401}, 0x12) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$unix(r0, &(0x7f0000002fc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000005c0)="18fcae977278aeffab01b11015896dd2979391ede335535b8440ca4f71a0665a", 0x28}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000500)="7dcc2c9d4eaf588822e6a9cc8eec13d9754bb76c", 0x14}], 0x1}}], 0x2, 0x0) 160.072627ms ago: executing program 3 (id=3950): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1000a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x2, @perf_config_ext={0x1, 0x5}, 0x2, 0x7ff, 0x400, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_open_dev$sg(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="c50f000000000000000011"], 0x24}}, 0x0) 154.760947ms ago: executing program 1 (id=3951): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x9}, 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="160000000000000061b1000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r1, 0x0, &(0x7f0000002740)=""/4078}, 0x20) 113.778318ms ago: executing program 7 (id=3952): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r1}, 0x10) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000001300)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) 82.319559ms ago: executing program 7 (id=3953): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x18) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x40008, 0x590, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x4c58, 0x0, 0x0, 0x0, 0x8, 0xffffffff, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x300, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x9, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x5, 0x0, 0x100}, {0x5, 0xfffffffe}, {}, {0x0, 0x10}, {0x0, 0x4, 0x0, 0x8000000}, {0x0, 0xffffffff, 0x0, 0x0, 0xfffffffd}, {0x2, 0x0, 0x400000, 0x0, 0x6}, {}, {}, {0xfffffffe}, {0x0, 0x0, 0x0, 0x8000000}, {0x40}, {0x0, 0x0, 0x0, 0x0, 0x20}, {}, {0x40}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0xd, 0x0, 0x8, 0x0, 0x5}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff}, {0x4000}, {}, {}, {0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {0x80}, {0x0, 0x0, 0x0, 0x7}, {0x0, 0x1000000}, {0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x200}, {}, {0x0, 0x15, 0x0, 0x48510}, {}, {}, {0x0, 0x7}, {0x0, 0x0, 0x0, 0x0, 0xc}, {0x0, 0x0, 0x0, 0x0, 0xd, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x6}, {0xfffffffc, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {0xfffffffd}, {0x5}, {}, {0x6}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, {0xb6, 0x0, 0x200}, {}, {}, {0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfb4}, {}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x2000, 0x0, 0x0, 0x1}, {0xfffffffc, 0x0, 0x0, 0x4, 0x8}, {0xfffffffe, 0x4}, {0x3, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2, 0x0, 0x9}, {}, {}, {}, {0x800000, 0x3ff, 0x0, 0x0, 0x0, 0x56}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x6, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0xfffffffd}, {0x6, 0x6}, {0x7f}, {}, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {0x2, 0x0, 0x20000000, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x4, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x2, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0xd, 0x0, 0x0, 0xfffffffc}, {0x2, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0xfffffffe, 0x0, 0x0, 0x0, 0x7ffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf7fffffe}, {}, {}, {0x0, 0x8000}, {0x0, 0x0, 0x10000}, {0x0, 0x80000000, 0x0, 0x7dff800}], [{}, {}, {}, {}, {0x1}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x1}, {}, {0x1}, {}, {}, {}, {0x3, 0x1}, {}, {0x4}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {0x2}, {0x0, 0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {0x4, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {0x5, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {0x5}, {}, {}, {0x0, 0x1}, {}, {0x0, 0xa11b5f369cf453a6}, {}, {0x2}, {}, {}, {0x4}, {0x3, 0x1}, {}, {0x2}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) 22.79312ms ago: executing program 2 (id=3954): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x100}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 22.634049ms ago: executing program 35 (id=3954): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x100}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 3 (id=3956): io_setup(0xaea2, &(0x7f0000000000)=0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) r3 = socket$xdp(0x2c, 0x3, 0x0) io_submit(r0, 0x2, &(0x7f0000000840)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x7f, r2, 0x0, 0x0, 0x6}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8, 0x8, r3, &(0x7f0000000100)="40cd476571d2555447", 0x9, 0x4, 0x0, 0x2}]) kernel console output (not intermixed with test programs): .386571][ T9230] loop3: detected capacity change from 0 to 512 [ 91.410987][ T9230] EXT4-fs (loop3): orphan cleanup on readonly fs [ 91.421991][ T9230] EXT4-fs error (device loop3): ext4_orphan_get:1419: comm wg1: bad orphan inode 13 [ 91.441457][ T9230] ext4_test_bit(bit=12, block=18) = 1 [ 91.446912][ T9230] is_bad_inode(inode)=0 [ 91.452409][ T9230] NEXT_ORPHAN(inode)=2130706432 [ 91.457270][ T9230] max_ino=32 [ 91.460494][ T9230] i_nlink=1 [ 91.465032][ T9215] loop6: detected capacity change from 0 to 164 [ 91.473873][ T9215] Unable to read rock-ridge attributes [ 91.483373][ T9215] Unable to read rock-ridge attributes [ 91.627002][ T9239] netem: change failed [ 91.628430][ T9244] loop4: detected capacity change from 0 to 512 [ 91.652851][ T9244] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #3: comm syz.4.2418: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 91.673633][ T9244] EXT4-fs error (device loop4): ext4_quota_enable:7127: comm syz.4.2418: Bad quota inode: 3, type: 0 [ 91.702594][ T9244] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 91.717621][ T9244] EXT4-fs (loop4): mount failed [ 91.753179][ T9257] loop6: detected capacity change from 0 to 1024 [ 91.761915][ T9257] EXT4-fs: Ignoring removed orlov option [ 91.770492][ T9260] netlink: 'syz.4.2426': attribute type 4 has an invalid length. [ 91.778418][ T9257] EXT4-fs: Mount option(s) incompatible with ext3 [ 91.829049][ T9260] netlink: 'syz.4.2426': attribute type 4 has an invalid length. [ 91.847246][ T9265] SELinux: syz.6.2429 (9265) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 91.887916][ T9271] netlink: 'syz.6.2432': attribute type 1 has an invalid length. [ 91.903261][ T9271] bond1: entered promiscuous mode [ 91.913654][ T9271] 8021q: adding VLAN 0 to HW filter on device bond1 [ 91.933914][ T9271] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 91.943497][ T9271] bond1: (slave batadv1): making interface the new active one [ 91.951051][ T9271] batadv1: entered promiscuous mode [ 91.957825][ T9271] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 91.990560][ T29] kauditd_printk_skb: 180 callbacks suppressed [ 91.990575][ T29] audit: type=1326 audit(1753713114.423:2550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9277 comm="syz.6.2435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2caae9a9 code=0x7ffc0000 [ 92.040572][ T29] audit: type=1326 audit(1753713114.423:2551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9277 comm="syz.6.2435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4c2caae9a9 code=0x7ffc0000 [ 92.064132][ T29] audit: type=1326 audit(1753713114.423:2552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9277 comm="syz.6.2435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2caae9a9 code=0x7ffc0000 [ 92.067337][ T9280] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000000004 [ 92.087835][ T29] audit: type=1326 audit(1753713114.423:2553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9277 comm="syz.6.2435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2caae9a9 code=0x7ffc0000 [ 92.087882][ T29] audit: type=1326 audit(1753713114.423:2554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9277 comm="syz.6.2435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4c2caae9a9 code=0x7ffc0000 [ 92.087988][ T29] audit: type=1326 audit(1753713114.423:2555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9277 comm="syz.6.2435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2caae9a9 code=0x7ffc0000 [ 92.088014][ T29] audit: type=1326 audit(1753713114.423:2556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9277 comm="syz.6.2435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2caae9a9 code=0x7ffc0000 [ 92.088039][ T29] audit: type=1326 audit(1753713114.423:2557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9277 comm="syz.6.2435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4c2caae9a9 code=0x7ffc0000 [ 92.088092][ T29] audit: type=1326 audit(1753713114.423:2558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9277 comm="syz.6.2435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2caae9a9 code=0x7ffc0000 [ 92.088116][ T29] audit: type=1326 audit(1753713114.423:2559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9277 comm="syz.6.2435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2caae9a9 code=0x7ffc0000 [ 92.269090][ T9284] loop2: detected capacity change from 0 to 512 [ 92.287227][ T9284] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #3: comm syz.2.2438: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 92.307387][ T9284] EXT4-fs error (device loop2): ext4_quota_enable:7127: comm syz.2.2438: Bad quota inode: 3, type: 0 [ 92.341216][ T9284] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 92.343191][ T9293] loop4: detected capacity change from 0 to 512 [ 92.363588][ T9284] EXT4-fs (loop2): mount failed [ 92.381009][ T9293] EXT4-fs (loop4): orphan cleanup on readonly fs [ 92.393840][ T9293] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm wg1: bad orphan inode 13 [ 92.408146][ T9300] netlink: 'syz.6.2443': attribute type 4 has an invalid length. [ 92.417511][ T9293] ext4_test_bit(bit=12, block=18) = 1 [ 92.422954][ T9293] is_bad_inode(inode)=0 [ 92.427118][ T9293] NEXT_ORPHAN(inode)=2130706432 [ 92.432131][ T9293] max_ino=32 [ 92.435331][ T9293] i_nlink=1 [ 92.442041][ T9304] SELinux: syz.3.2445 (9304) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 92.475365][ T9300] netlink: 'syz.6.2443': attribute type 4 has an invalid length. [ 92.502554][ T9308] tipc: Enabling of bearer rejected, failed to enable media [ 92.554056][ T9313] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 92.621299][ T9316] SELinux: syz.6.2462 (9316) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 92.653378][ T9321] bond2: entered promiscuous mode [ 92.666347][ T9329] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000000004 [ 92.674579][ T9321] 8021q: adding VLAN 0 to HW filter on device bond2 [ 92.705042][ T9337] loop6: detected capacity change from 0 to 512 [ 92.711799][ T9337] journal_path: Lookup failure for './file0/../file0' [ 92.718762][ T9337] EXT4-fs: error: could not find journal device path [ 92.750302][ T9328] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 92.758726][ T9328] bond2: (slave batadv1): making interface the new active one [ 92.766239][ T9328] batadv1: entered promiscuous mode [ 92.773032][ T9328] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 92.818848][ T9340] syzkaller0: entered promiscuous mode [ 92.824608][ T9340] syzkaller0: entered allmulticast mode [ 92.841331][ T5461] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0xb [ 92.858786][ T9353] loop2: detected capacity change from 0 to 1024 [ 92.928942][ T9364] SELinux: syz.4.2471 (9364) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 92.979825][ T9371] loop6: detected capacity change from 0 to 512 [ 92.991087][ T9371] EXT4-fs warning (device loop6): read_mmp_block:115: Error -117 while reading MMP block 8 [ 93.024702][ T9378] loop2: detected capacity change from 0 to 512 [ 93.042904][ T9378] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 93.063843][ T9378] EXT4-fs (loop2): 1 truncate cleaned up [ 93.148485][ T9401] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000000004 [ 93.171948][ T9404] loop2: detected capacity change from 0 to 512 [ 93.172192][ T9404] journal_path: Lookup failure for './file0/../file0' [ 93.172225][ T9404] EXT4-fs: error: could not find journal device path [ 93.205242][ T9407] __nla_validate_parse: 1 callbacks suppressed [ 93.205257][ T9407] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2490'. [ 93.251861][ T9413] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2493'. [ 93.251913][ T9413] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2493'. [ 93.251930][ T9413] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2493'. [ 93.251984][ T9413] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2493'. [ 93.322053][ T9418] loop2: detected capacity change from 0 to 512 [ 93.427337][ T9418] ext4 filesystem being mounted at /481/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.442984][ T9418] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2496: bg 0: block 328: padding at end of block bitmap is not set [ 93.502778][ T9429] loop4: detected capacity change from 0 to 128 [ 93.515959][ T9429] ext4 filesystem being mounted at /293/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 93.553265][ T9434] ipvlan2: entered promiscuous mode [ 93.554381][ T9434] bridge0: port 3(ipvlan2) entered blocking state [ 93.565405][ T9434] bridge0: port 3(ipvlan2) entered disabled state [ 93.572446][ T9434] ipvlan2: entered allmulticast mode [ 93.572462][ T9434] bridge0: entered allmulticast mode [ 93.572845][ T9434] ipvlan2: left allmulticast mode [ 93.572859][ T9434] bridge0: left allmulticast mode [ 93.676017][ T9437] 8021q: adding VLAN 0 to HW filter on device bond3 [ 93.690351][ T9437] bond3: (slave bridge1): making interface the new active one [ 93.691639][ T9437] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 93.724892][ T9446] loop2: detected capacity change from 0 to 256 [ 93.725617][ T9446] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 93.793579][ T9451] loop2: detected capacity change from 0 to 512 [ 93.806509][ T9451] ext4 filesystem being mounted at /486/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 94.614850][ T9464] bond1: entered promiscuous mode [ 94.626930][ T9464] 8021q: adding VLAN 0 to HW filter on device bond1 [ 94.665766][ T9464] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 94.684388][ T9464] bond1: (slave batadv1): making interface the new active one [ 94.691955][ T9464] batadv1: entered promiscuous mode [ 94.715241][ T9464] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 94.817566][ T9501] SELinux: policydb version 1738335632 does not match my version range 15-34 [ 94.828313][ T9501] SELinux: failed to load policy [ 94.829679][ T9499] loop2: detected capacity change from 0 to 512 [ 94.859469][ T9499] EXT4-fs warning (device loop2): read_mmp_block:115: Error -117 while reading MMP block 8 [ 94.871769][ T9506] loop3: detected capacity change from 0 to 256 [ 94.878979][ T9506] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 94.952608][ T9520] loop3: detected capacity change from 0 to 512 [ 94.964705][ T9523] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.2537'. [ 94.965510][ T9517] bond1: entered promiscuous mode [ 94.979534][ T9517] 8021q: adding VLAN 0 to HW filter on device bond1 [ 94.981364][ T9520] EXT4-fs warning (device loop3): read_mmp_block:115: Error -117 while reading MMP block 8 [ 95.007226][ T9517] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 95.015375][ T9517] bond1: (slave batadv1): making interface the new active one [ 95.022878][ T9517] batadv1: entered promiscuous mode [ 95.029257][ T9517] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 95.079411][ T9532] loop1: detected capacity change from 0 to 128 [ 95.090567][ T9532] ext4 filesystem being mounted at /272/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 95.146818][ T9544] loop1: detected capacity change from 0 to 256 [ 95.161372][ T9544] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 95.198664][ T9548] 8021q: adding VLAN 0 to HW filter on device bond2 [ 95.250534][ T9548] bond2: (slave bridge1): making interface the new active one [ 95.259304][ T9548] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 95.291285][ T9556] bond3: entered promiscuous mode [ 95.302853][ T9556] 8021q: adding VLAN 0 to HW filter on device bond3 [ 95.324458][ T9560] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 95.348965][ T9560] bond3: (slave batadv2): making interface the new active one [ 95.356566][ T9560] batadv2: entered promiscuous mode [ 95.370796][ T9560] bond3: (slave batadv2): Enslaving as an active interface with an up link [ 95.387665][ T9565] loop4: detected capacity change from 0 to 512 [ 95.406692][ T9565] EXT4-fs warning (device loop4): read_mmp_block:115: Error -117 while reading MMP block 8 [ 95.526181][ T9582] loop4: detected capacity change from 0 to 256 [ 95.533684][ T9582] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 95.541313][ T9584] validate_nla: 12 callbacks suppressed [ 95.541328][ T9584] netlink: 'syz.3.2564': attribute type 1 has an invalid length. [ 95.568455][ T9584] 8021q: adding VLAN 0 to HW filter on device bond2 [ 95.584430][ T9586] SELinux: policydb version 1738335632 does not match my version range 15-34 [ 95.593444][ T9586] SELinux: failed to load policy [ 95.604724][ T9591] loop4: detected capacity change from 0 to 512 [ 95.622336][ T9584] bond2: (slave bridge1): making interface the new active one [ 95.631390][ T9584] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 95.657383][ T9591] ext4 filesystem being mounted at /312/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 95.689095][ T9591] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.2566: corrupted inode contents [ 95.701562][ T9591] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #2: comm syz.4.2566: mark_inode_dirty error [ 95.716865][ T9591] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.2566: corrupted inode contents [ 95.749762][ T9605] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2573'. [ 95.764205][ T9608] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2574'. [ 95.793059][ T9605] veth1_to_bond: entered promiscuous mode [ 95.798892][ T9605] macsec1: entered promiscuous mode [ 95.804583][ T9605] macsec1: entered allmulticast mode [ 95.810015][ T9605] veth1_to_bond: entered allmulticast mode [ 95.874179][ T9625] loop6: detected capacity change from 0 to 256 [ 95.895681][ T9625] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 95.947811][ T9631] loop6: detected capacity change from 0 to 764 [ 95.958697][ T9631] Symlink component flag not implemented [ 95.966623][ T9631] Symlink component flag not implemented (7) [ 96.030883][ T9638] netlink: 'syz.6.2582': attribute type 3 has an invalid length. [ 96.038713][ T9638] netlink: 130984 bytes leftover after parsing attributes in process `syz.6.2582'. [ 96.179230][ T9654] loop6: detected capacity change from 0 to 256 [ 96.187269][ T9654] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 96.292093][ T9664] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2597'. [ 96.307716][ T9664] bond4: entered promiscuous mode [ 96.312832][ T9664] bond4: entered allmulticast mode [ 96.322623][ T9664] 8021q: adding VLAN 0 to HW filter on device bond4 [ 96.465795][ T9685] loop2: detected capacity change from 0 to 512 [ 96.525412][ T9685] ext4 filesystem being mounted at /505/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 96.543600][ T9685] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.2607: corrupted inode contents [ 96.565932][ T9685] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #2: comm syz.2.2607: mark_inode_dirty error [ 96.600570][ T9685] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.2607: corrupted inode contents [ 96.665620][ T9694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.675830][ T9694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.835868][ T9714] loop4: detected capacity change from 0 to 764 [ 96.846433][ T9714] Symlink component flag not implemented [ 96.853752][ T9714] Symlink component flag not implemented (7) [ 96.854451][ T9717] loop6: detected capacity change from 0 to 1024 [ 96.872710][ T9717] EXT4-fs mount: 44 callbacks suppressed [ 96.872725][ T9717] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.967425][ T6100] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.021857][ T9735] serio: Serial port ptm0 [ 97.496692][ T29] kauditd_printk_skb: 315 callbacks suppressed [ 97.496707][ T29] audit: type=1400 audit(1753713119.923:2875): avc: denied { read } for pid=9754 comm="syz.1.2633" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 97.637797][ T29] audit: type=1400 audit(1753713120.063:2876): avc: denied { create } for pid=9763 comm="syz.6.2637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 97.637821][ T29] audit: type=1400 audit(1753713120.063:2877): avc: denied { setopt } for pid=9763 comm="syz.6.2637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 97.639574][ T3373] IPVS: starting estimator thread 0... [ 97.739695][ T9771] loop6: detected capacity change from 0 to 2048 [ 97.755101][ T9771] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.755667][ T9771] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.768293][ T29] audit: type=1400 audit(1753713120.183:2878): avc: denied { create } for pid=9777 comm="syz.1.2643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 97.797379][ T9765] IPVS: using max 2832 ests per chain, 141600 per kthread [ 97.825009][ T29] audit: type=1400 audit(1753713120.253:2879): avc: denied { connect } for pid=9777 comm="syz.1.2643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 97.920451][ T29] audit: type=1400 audit(1753713120.353:2880): avc: denied { read } for pid=9787 comm="syz.4.2648" path="socket:[25841]" dev="sockfs" ino=25841 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 98.013029][ T9803] SELinux: policydb version 1675088414 does not match my version range 15-34 [ 98.013160][ T9803] SELinux: failed to load policy [ 98.225649][ T9831] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2667'. [ 98.237434][ T9831] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2667'. [ 98.254017][ T9833] loop4: detected capacity change from 0 to 1024 [ 98.255321][ T9831] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2667'. [ 98.263650][ T9833] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.271031][ T9831] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2667'. [ 98.327754][ T9838] loop3: detected capacity change from 0 to 1024 [ 98.344416][ T9838] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.357561][ T6031] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.428901][ T9848] netlink: 'syz.2.2673': attribute type 3 has an invalid length. [ 98.433441][ T9844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.445547][ T9844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.446357][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.463793][ T9850] loop6: detected capacity change from 0 to 1024 [ 98.472996][ T9850] EXT4-fs: Ignoring removed orlov option [ 98.480232][ T9850] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 98.502910][ T9850] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.522519][ T29] audit: type=1400 audit(1753713120.953:2881): avc: denied { append } for pid=9849 comm="syz.6.2675" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 98.562808][ T6100] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.611047][ T9866] loop2: detected capacity change from 0 to 1024 [ 98.627458][ T9866] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.646502][ T29] audit: type=1400 audit(1753713121.073:2882): avc: denied { mac_admin } for pid=9872 comm="syz.6.2684" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 98.646521][ T9873] SELinux: Context :syz0:E:18446744073709551614:':max_batch_time:./file0: is not valid (left unmapped). [ 98.712298][ T9866] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 1 with error 28 [ 98.724705][ T9866] EXT4-fs (loop2): This should not happen!! Data will be lost [ 98.724705][ T9866] [ 98.734668][ T9866] EXT4-fs (loop2): Total free blocks count 0 [ 98.740704][ T9866] EXT4-fs (loop2): Free/Dirty block details [ 98.746683][ T9866] EXT4-fs (loop2): free_blocks=0 [ 98.751658][ T9866] EXT4-fs (loop2): dirty_blocks=0 [ 98.756714][ T9866] EXT4-fs (loop2): Block reservation details [ 98.762733][ T9866] EXT4-fs (loop2): i_reserved_data_blocks=0 [ 98.778710][ T9881] netlink: 'syz.3.2688': attribute type 3 has an invalid length. [ 98.792369][ T9883] usb usb1: usbfs: process 9883 (syz.6.2689) did not claim interface 0 before use [ 98.805175][ T29] audit: type=1400 audit(1753713121.233:2883): avc: denied { listen } for pid=9884 comm="syz.1.2690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 98.825645][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.865013][ T9893] loop6: detected capacity change from 0 to 1024 [ 98.872284][ T9893] EXT4-fs: Ignoring removed bh option [ 98.884775][ T9893] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 98.906346][ T9897] pimreg: entered allmulticast mode [ 98.912662][ T9897] pimreg: left allmulticast mode [ 98.928021][ T29] audit: type=1400 audit(1753713121.353:2884): avc: denied { remount } for pid=9890 comm="syz.6.2694" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 98.928144][ T9893] EXT4-fs: Ignoring removed orlov option [ 98.956142][ T9893] EXT4-fs error (device loop6): __ext4_remount:6736: comm syz.6.2694: Abort forced by user [ 98.966402][ T9893] EXT4-fs (loop6): Remounting filesystem read-only [ 98.972961][ T9893] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-001000000000. [ 98.992918][ T6100] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 99.018967][ T9901] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2698'. [ 99.028039][ T9901] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2698'. [ 99.150986][ T9912] loop4: detected capacity change from 0 to 1024 [ 99.165094][ T9912] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.198402][ T9912] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 1 with error 28 [ 99.212067][ T9912] EXT4-fs (loop4): This should not happen!! Data will be lost [ 99.212067][ T9912] [ 99.221903][ T9912] EXT4-fs (loop4): Total free blocks count 0 [ 99.227903][ T9912] EXT4-fs (loop4): Free/Dirty block details [ 99.233867][ T9912] EXT4-fs (loop4): free_blocks=0 [ 99.238816][ T9912] EXT4-fs (loop4): dirty_blocks=0 [ 99.245156][ T9912] EXT4-fs (loop4): Block reservation details [ 99.251181][ T9912] EXT4-fs (loop4): i_reserved_data_blocks=0 [ 99.296248][ T6031] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.394631][ T9925] netlink: 'syz.4.2707': attribute type 10 has an invalid length. [ 99.405181][ T9925] geneve1: entered promiscuous mode [ 99.421993][ T9925] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 99.430707][ T9928] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2708'. [ 99.457630][ T9930] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2709'. [ 99.615268][ T9948] loop3: detected capacity change from 0 to 1024 [ 99.631765][ T9948] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.661823][ T9948] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 1 with error 28 [ 99.674162][ T9948] EXT4-fs (loop3): This should not happen!! Data will be lost [ 99.674162][ T9948] [ 99.685012][ T9948] EXT4-fs (loop3): Total free blocks count 0 [ 99.691023][ T9948] EXT4-fs (loop3): Free/Dirty block details [ 99.696924][ T9948] EXT4-fs (loop3): free_blocks=0 [ 99.701866][ T9948] EXT4-fs (loop3): dirty_blocks=0 [ 99.706885][ T9948] EXT4-fs (loop3): Block reservation details [ 99.714069][ T9948] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 99.733935][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.796089][ T9965] usb usb1: usbfs: process 9965 (syz.1.2725) did not claim interface 0 before use [ 99.887382][ T9974] loop4: detected capacity change from 0 to 1024 [ 99.894332][ T9974] EXT4-fs: Ignoring removed bh option [ 99.913590][ T9974] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 99.932624][ T9978] loop6: detected capacity change from 0 to 512 [ 99.935219][ T9974] EXT4-fs: Ignoring removed orlov option [ 99.946574][ T9974] EXT4-fs error (device loop4): __ext4_remount:6736: comm syz.4.2729: Abort forced by user [ 99.947020][ T9978] EXT4-fs (loop6): orphan cleanup on readonly fs [ 99.957907][ T9974] EXT4-fs (loop4): Remounting filesystem read-only [ 99.965790][ T9978] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.2730: Failed to acquire dquot type 1 [ 99.969618][ T9974] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-001000000000. [ 99.985320][ T9978] EXT4-fs (loop6): 1 truncate cleaned up [ 99.995894][ T9978] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 100.017602][ T6031] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 100.032006][ T9978] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 100.043346][ T9978] EXT4-fs warning (device loop6): read_mmp_block:115: Error -117 while reading MMP block 8 [ 100.068831][ T6100] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.153185][ T9987] SELinux: failed to load policy [ 100.182672][ T9990] loop2: detected capacity change from 0 to 2048 [ 100.203848][ T9990] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.218827][ T9990] EXT4-fs error (device loop2): ext4_ext_precache:632: inode #2: comm syz.2.2735: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 100.237387][ T9990] EXT4-fs (loop2): Remounting filesystem read-only [ 100.258053][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.281918][ T9999] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2739'. [ 100.397831][T10008] loop2: detected capacity change from 0 to 512 [ 100.419611][T10008] EXT4-fs (loop2): orphan cleanup on readonly fs [ 100.429101][T10008] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.2744: Failed to acquire dquot type 1 [ 100.445077][T10008] EXT4-fs (loop2): 1 truncate cleaned up [ 100.451334][T10008] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 100.469178][T10008] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 100.495992][T10008] EXT4-fs warning (device loop2): read_mmp_block:115: Error -117 while reading MMP block 8 [ 100.518690][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.596334][T10016] loop2: detected capacity change from 0 to 1024 [ 100.612568][T10016] EXT4-fs: Ignoring removed orlov option [ 100.621761][ T9962] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 100.624264][T10016] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 100.681771][T10016] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.705461][T10031] netlink: 56 bytes leftover after parsing attributes in process `wޣ'. [ 100.784184][T10036] loop3: detected capacity change from 0 to 512 [ 100.788532][T10041] loop6: detected capacity change from 0 to 1024 [ 100.797693][T10041] EXT4-fs: inline encryption not supported [ 100.803672][T10041] EXT4-fs: Ignoring removed i_version option [ 100.814868][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.826304][T10041] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 100.826326][T10036] EXT4-fs (loop3): orphan cleanup on readonly fs [ 100.845570][T10036] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.2756: Failed to acquire dquot type 1 [ 100.859205][T10036] EXT4-fs (loop3): 1 truncate cleaned up [ 100.866012][T10036] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 100.866123][T10041] EXT4-fs error (device loop6): ext4_map_blocks:780: inode #3: block 2: comm syz.6.2757: lblock 2 mapped to illegal pblock 2 (length 1) [ 100.898190][T10041] EXT4-fs error (device loop6): ext4_map_blocks:780: inode #3: block 48: comm syz.6.2757: lblock 0 mapped to illegal pblock 48 (length 1) [ 100.927391][T10036] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 100.927400][T10041] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.2757: Failed to acquire dquot type 0 [ 100.938799][T10036] EXT4-fs warning (device loop3): read_mmp_block:115: Error -117 while reading MMP block 8 [ 100.963207][T10041] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 100.974216][T10041] EXT4-fs error (device loop6): ext4_evict_inode:254: inode #11: comm syz.6.2757: mark_inode_dirty error [ 100.993019][T10041] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 101.007473][T10047] pimreg: entered allmulticast mode [ 101.015485][T10047] pimreg: left allmulticast mode [ 101.023344][T10041] EXT4-fs (loop6): 1 orphan inode deleted [ 101.031748][T10041] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.049489][ T5462] EXT4-fs error (device loop6): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:62: lblock 1 mapped to illegal pblock 1 (length 1) [ 101.083840][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.084041][ T5462] EXT4-fs error (device loop6): ext4_release_dquot:6969: comm kworker/u8:62: Failed to release dquot type 0 [ 101.124028][T10051] netem: change failed [ 101.130664][T10041] EXT4-fs: Ignoring removed orlov option [ 101.136435][T10041] EXT4-fs (loop6): stripe (16) is not aligned with cluster size (4096), stripe is disabled [ 101.150870][T10041] EXT4-fs (loop6): can't enable nombcache during remount [ 101.172043][ T6100] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.181923][T10063] batadv2: entered promiscuous mode [ 101.181942][T10063] batadv2: entered allmulticast mode [ 101.196499][ T6100] EXT4-fs error (device loop6): __ext4_get_inode_loc:4792: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 101.211432][T10061] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 101.215350][ T6100] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 101.220344][T10061] SELinux: failed to load policy [ 101.230271][ T6100] EXT4-fs error (device loop6): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 101.306552][T10075] netlink: 'syz.3.2773': attribute type 10 has an invalid length. [ 101.348999][T10075] team0 (unregistering): Port device team_slave_0 removed [ 101.395755][T10075] team0 (unregistering): Port device team_slave_1 removed [ 101.552645][T10120] loop1: detected capacity change from 0 to 2048 [ 101.584477][T10120] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.607887][T10120] EXT4-fs error (device loop1): ext4_ext_precache:632: inode #2: comm syz.1.2794: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 101.629336][T10120] EXT4-fs (loop1): Remounting filesystem read-only [ 101.645688][ T6118] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.723250][T10128] SELinux: failed to load policy [ 101.768504][T10145] loop1: detected capacity change from 0 to 128 [ 101.887572][ T5450] kworker/u8:50: attempt to access beyond end of device [ 101.887572][ T5450] loop1: rw=1, sector=153, nr_sectors = 8 limit=128 [ 101.903209][ T5450] kworker/u8:50: attempt to access beyond end of device [ 101.903209][ T5450] loop1: rw=1, sector=169, nr_sectors = 8 limit=128 [ 101.918872][T10164] loop3: detected capacity change from 0 to 1024 [ 101.926726][T10164] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (12806!=20869) [ 101.938425][ T5450] kworker/u8:50: attempt to access beyond end of device [ 101.938425][ T5450] loop1: rw=1, sector=185, nr_sectors = 8 limit=128 [ 101.938471][T10164] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 101.961571][T10165] SELinux: failed to load policy [ 101.961841][T10164] System zones: 0-1, 3-36 [ 101.970969][T10164] EXT4-fs (loop3): orphan cleanup on readonly fs [ 101.977624][ T5450] kworker/u8:50: attempt to access beyond end of device [ 101.977624][ T5450] loop1: rw=1, sector=201, nr_sectors = 8 limit=128 [ 101.992455][ T5450] kworker/u8:50: attempt to access beyond end of device [ 101.992455][ T5450] loop1: rw=1, sector=217, nr_sectors = 8 limit=128 [ 102.006024][ T5450] kworker/u8:50: attempt to access beyond end of device [ 102.006024][ T5450] loop1: rw=1, sector=233, nr_sectors = 8 limit=128 [ 102.007841][T10164] EXT4-fs (loop3): 1 orphan inode deleted [ 102.019566][ T5450] kworker/u8:50: attempt to access beyond end of device [ 102.019566][ T5450] loop1: rw=1, sector=249, nr_sectors = 8 limit=128 [ 102.032735][T10164] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 102.040258][ T5450] kworker/u8:50: attempt to access beyond end of device [ 102.040258][ T5450] loop1: rw=1, sector=265, nr_sectors = 8 limit=128 [ 102.065969][ T5450] kworker/u8:50: attempt to access beyond end of device [ 102.065969][ T5450] loop1: rw=1, sector=281, nr_sectors = 8 limit=128 [ 102.079483][ T5450] kworker/u8:50: attempt to access beyond end of device [ 102.079483][ T5450] loop1: rw=1, sector=297, nr_sectors = 8 limit=128 [ 102.097713][T10171] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 102.107280][T10171] SELinux: failed to load policy [ 102.119384][T10173] loop1: detected capacity change from 0 to 1024 [ 102.127528][T10173] EXT4-fs: inline encryption not supported [ 102.135985][T10173] EXT4-fs: Ignoring removed bh option [ 102.165457][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.176990][T10173] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.255418][ T6118] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.268909][T10192] loop3: detected capacity change from 0 to 1024 [ 102.282773][T10192] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.313296][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.357576][T10208] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=10208 comm=syz.4.2833 [ 102.375743][ T3419] kernel read not supported for file /vga_arbiter (pid: 3419 comm: kworker/1:3) [ 102.379201][T10215] loop2: detected capacity change from 0 to 512 [ 102.445737][T10223] netlink: 'syz.4.2840': attribute type 10 has an invalid length. [ 102.501409][T10223] team0 (unregistering): Port device team_slave_0 removed [ 102.519275][T10223] team0 (unregistering): Port device team_slave_1 removed [ 102.542530][T10232] bridge0: entered promiscuous mode [ 102.549241][T10232] macsec1: entered promiscuous mode [ 102.556825][T10232] bridge0: port 3(macsec1) entered blocking state [ 102.563478][T10232] bridge0: port 3(macsec1) entered disabled state [ 102.572476][T10232] macsec1: entered allmulticast mode [ 102.577903][T10232] bridge0: entered allmulticast mode [ 102.585230][T10232] macsec1: left allmulticast mode [ 102.590325][T10232] bridge0: left allmulticast mode [ 102.598476][T10232] bridge0: left promiscuous mode [ 102.669100][ T29] kauditd_printk_skb: 175 callbacks suppressed [ 102.669161][ T29] audit: type=1326 audit(1753713125.093:3051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10253 comm="syz.4.2852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc15686e9a9 code=0x7ffc0000 [ 102.717634][ T29] audit: type=1326 audit(1753713125.093:3052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10253 comm="syz.4.2852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc15686e9a9 code=0x7ffc0000 [ 102.741256][ T29] audit: type=1326 audit(1753713125.133:3053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10253 comm="syz.4.2852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc15686e9a9 code=0x7ffc0000 [ 102.764628][ T29] audit: type=1326 audit(1753713125.133:3054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10253 comm="syz.4.2852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc15686e9a9 code=0x7ffc0000 [ 102.788795][ T29] audit: type=1326 audit(1753713125.133:3055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10253 comm="syz.4.2852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc15686e9a9 code=0x7ffc0000 [ 102.812452][ T29] audit: type=1326 audit(1753713125.143:3056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10253 comm="syz.4.2852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc15686e9a9 code=0x7ffc0000 [ 102.836025][ T29] audit: type=1326 audit(1753713125.143:3057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10253 comm="syz.4.2852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc15686e9a9 code=0x7ffc0000 [ 102.859773][ T29] audit: type=1326 audit(1753713125.143:3058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10253 comm="syz.4.2852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc15686e9a9 code=0x7ffc0000 [ 102.859832][T10264] netlink: 'syz.3.2858': attribute type 1 has an invalid length. [ 102.904041][T10266] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 102.913267][ T29] audit: type=1326 audit(1753713125.343:3059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10253 comm="syz.4.2852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc15686e9a9 code=0x7ffc0000 [ 102.936823][ T29] audit: type=1326 audit(1753713125.343:3060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10253 comm="syz.4.2852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc15686e9a9 code=0x7ffc0000 [ 102.974962][T10266] SELinux: failed to load policy [ 102.990215][T10271] netlink: 'syz.6.2861': attribute type 10 has an invalid length. [ 103.017497][T10271] team0 (unregistering): Port device team_slave_0 removed [ 103.028402][T10277] loop2: detected capacity change from 0 to 512 [ 103.029257][T10271] team0 (unregistering): Port device team_slave_1 removed [ 103.040062][T10277] EXT4-fs: Ignoring removed mblk_io_submit option [ 103.048781][T10277] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 103.062848][T10277] EXT4-fs (loop2): 1 truncate cleaned up [ 103.063229][T10276] bridge0: entered promiscuous mode [ 103.069062][T10277] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.086644][T10276] macsec1: entered promiscuous mode [ 103.092884][T10276] bridge0: port 3(macsec1) entered blocking state [ 103.099390][T10276] bridge0: port 3(macsec1) entered disabled state [ 103.106205][T10276] macsec1: entered allmulticast mode [ 103.111725][T10276] bridge0: entered allmulticast mode [ 103.122722][T10276] macsec1: left allmulticast mode [ 103.127847][T10276] bridge0: left allmulticast mode [ 103.148872][T10276] bridge0: left promiscuous mode [ 103.166832][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.168025][T10284] netlink: 'syz.1.2877': attribute type 10 has an invalid length. [ 103.188607][T10284] bond0: (slave team0): Releasing backup interface [ 103.203347][T10284] team0 (unregistering): Port device team_slave_0 removed [ 103.221688][T10284] team0 (unregistering): Port device team_slave_1 removed [ 103.249342][T10289] loop2: detected capacity change from 0 to 1024 [ 103.262313][T10287] loop6: detected capacity change from 0 to 4096 [ 103.269362][T10289] EXT4-fs: inline encryption not supported [ 103.278851][T10287] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.293822][T10289] EXT4-fs: Ignoring removed bh option [ 103.301520][T10287] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.321161][T10289] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.385646][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.394753][T10297] loop4: detected capacity change from 0 to 512 [ 103.411999][T10297] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #15: comm syz.4.2870: casefold flag without casefold feature [ 103.428290][T10297] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.2870: couldn't read orphan inode 15 (err -117) [ 103.440696][T10302] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=10302 comm=syz.1.2872 [ 103.460524][T10297] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.518184][ T6031] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.566878][T10315] loop6: detected capacity change from 0 to 1024 [ 103.573925][T10311] loop1: detected capacity change from 0 to 1024 [ 103.582761][T10311] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (12806!=20869) [ 103.615557][T10315] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.631916][T10311] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 103.640522][T10311] System zones: 0-1, 3-36 [ 103.646399][T10311] EXT4-fs (loop1): orphan cleanup on readonly fs [ 103.653194][T10324] __nla_validate_parse: 7 callbacks suppressed [ 103.653205][T10324] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2882'. [ 103.668635][T10311] EXT4-fs (loop1): 1 orphan inode deleted [ 103.688162][T10326] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2883'. [ 103.700906][T10311] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 103.714849][ T6100] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.740747][ T6118] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.813493][T10339] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2889'. [ 104.083801][T10372] netlink: 'syz.1.2904': attribute type 1 has an invalid length. [ 104.106480][T10374] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2905'. [ 104.133683][T10374] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2905'. [ 104.187671][T10379] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2908'. [ 104.203687][T10379] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.212469][T10379] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.224554][T10379] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.232201][T10379] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.249146][T10382] loop6: detected capacity change from 0 to 128 [ 104.711640][ T3419] kernel read not supported for file /vga_arbiter (pid: 3419 comm: kworker/1:3) [ 104.738405][T10402] loop2: detected capacity change from 0 to 1024 [ 104.746767][T10402] EXT4-fs: inline encryption not supported [ 104.748488][T10404] loop6: detected capacity change from 0 to 512 [ 104.752615][T10402] EXT4-fs: Ignoring removed i_version option [ 104.763177][T10404] EXT4-fs error (device loop6): ext4_orphan_get:1393: inode #15: comm syz.6.2919: casefold flag without casefold feature [ 104.765410][T10402] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 104.777711][T10404] EXT4-fs error (device loop6): ext4_orphan_get:1398: comm syz.6.2919: couldn't read orphan inode 15 (err -117) [ 104.801294][T10404] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.818971][T10402] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 2: comm syz.2.2918: lblock 2 mapped to illegal pblock 2 (length 1) [ 104.848817][T10402] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 48: comm syz.2.2918: lblock 0 mapped to illegal pblock 48 (length 1) [ 104.866439][T10402] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.2918: Failed to acquire dquot type 0 [ 104.878021][T10402] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 104.889662][T10402] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.2918: mark_inode_dirty error [ 104.910101][T10402] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 104.921732][T10402] EXT4-fs (loop2): 1 orphan inode deleted [ 104.927879][T10402] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.940841][ T5430] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:30: lblock 1 mapped to illegal pblock 1 (length 1) [ 104.955280][ T5430] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:30: Failed to release dquot type 0 [ 104.967790][ T6100] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.971124][T10402] EXT4-fs: Ignoring removed orlov option [ 104.984167][T10402] EXT4-fs (loop2): stripe (16) is not aligned with cluster size (4096), stripe is disabled [ 104.994486][T10402] EXT4-fs (loop2): can't enable nombcache during remount [ 104.997135][T10417] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2923'. [ 105.031134][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.044938][ T3311] EXT4-fs error (device loop2): __ext4_get_inode_loc:4792: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 105.059032][ T3311] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 105.071331][ T3311] EXT4-fs error (device loop2): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 105.086508][T10422] loop6: detected capacity change from 0 to 512 [ 105.093917][T10422] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 105.109264][T10422] EXT4-fs (loop6): 1 truncate cleaned up [ 105.121037][T10422] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.123116][T10426] loop2: detected capacity change from 0 to 1024 [ 105.154934][T10426] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.221711][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.243111][ T6100] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.255053][T10439] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 105.285193][T10444] loop6: detected capacity change from 0 to 512 [ 105.292270][T10444] EXT4-fs: Ignoring removed nobh option [ 105.307490][T10444] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #3: comm syz.6.2934: corrupted inode contents [ 105.325233][T10444] EXT4-fs error (device loop6): ext4_dirty_inode:6459: inode #3: comm syz.6.2934: mark_inode_dirty error [ 105.337649][T10444] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #3: comm syz.6.2934: corrupted inode contents [ 105.351011][T10444] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #3: comm syz.6.2934: mark_inode_dirty error [ 105.364844][T10444] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.2934: Failed to acquire dquot type 0 [ 105.376895][T10444] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #16: comm syz.6.2934: corrupted inode contents [ 105.422532][T10444] EXT4-fs error (device loop6): ext4_dirty_inode:6459: inode #16: comm syz.6.2934: mark_inode_dirty error [ 105.436165][T10444] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #16: comm syz.6.2934: corrupted inode contents [ 105.452018][T10444] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #16: comm syz.6.2934: mark_inode_dirty error [ 105.463511][T10444] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #16: comm syz.6.2934: corrupted inode contents [ 105.477396][T10444] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem [ 105.486353][T10444] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #16: comm syz.6.2934: corrupted inode contents [ 105.502214][T10444] EXT4-fs error (device loop6): ext4_truncate:4597: inode #16: comm syz.6.2934: mark_inode_dirty error [ 105.514581][T10444] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem [ 105.527724][T10444] EXT4-fs (loop6): 1 truncate cleaned up [ 105.536011][T10444] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.548568][T10444] ext4 filesystem being mounted at /404/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.577189][ T6100] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.594523][T10470] SELinux: syz.2.2948 (10470) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 105.637659][T10478] loop6: detected capacity change from 0 to 1764 [ 105.647869][T10481] SELinux: Context system_u:object_r:wireless_device_t:s0 is not valid (left unmapped). [ 105.729669][T10485] Falling back ldisc for ttyS3. [ 105.926501][T10513] netlink: 'syz.6.2965': attribute type 1 has an invalid length. [ 106.004724][T10525] loop1: detected capacity change from 0 to 512 [ 106.006399][T10523] loop4: detected capacity change from 0 to 1024 [ 106.017639][T10525] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 106.039124][T10525] SELinux: syz.1.2970 (10525) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 106.052857][T10527] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2972'. [ 106.064542][T10523] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.095269][T10534] loop6: detected capacity change from 0 to 1024 [ 106.117703][ T6031] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.128230][T10536] bridge0: entered promiscuous mode [ 106.133853][T10536] macvtap1: entered allmulticast mode [ 106.139320][T10536] bridge0: entered allmulticast mode [ 106.147253][T10536] bridge0: port 3(macvtap1) entered blocking state [ 106.153860][T10536] bridge0: port 3(macvtap1) entered disabled state [ 106.189906][T10536] bridge0: left allmulticast mode [ 106.195057][T10536] bridge0: left promiscuous mode [ 106.202717][T10534] EXT4-fs error (device loop6): mb_free_blocks:1948: group 0, inode 16: block 161:freeing already freed block (bit 10); block bitmap corrupt. [ 106.309928][T10558] loop1: detected capacity change from 0 to 512 [ 106.343417][T10558] ext4 filesystem being mounted at /363/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 106.356003][T10558] netlink: 'syz.1.2984': attribute type 4 has an invalid length. [ 106.363833][T10558] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2984'. [ 106.379965][T10558] : renamed from bond0 (while UP) [ 106.637085][T10600] loop3: detected capacity change from 0 to 128 [ 106.729641][T10616] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10616 comm=syz.1.3012 [ 106.743455][T10616] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10616 comm=syz.1.3012 [ 106.805510][T10631] loop4: detected capacity change from 0 to 128 [ 106.826203][T10631] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 106.833857][T10631] FAT-fs (loop4): Filesystem has been set read-only [ 106.881723][ T1053] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 106.906953][ T1053] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 107.182110][T10678] pim6reg: entered allmulticast mode [ 107.189081][T10678] pim6reg: left allmulticast mode [ 107.192314][T10680] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 107.364686][T10695] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 107.377535][T10694] IPVS: stopping master sync thread 10695 ... [ 107.402297][T10698] smc: net device bond0 applied user defined pnetid SYZ0 [ 107.409903][T10698] smc: net device bond0 erased user defined pnetid SYZ0 [ 107.435202][T10700] netlink: 'syz.6.3049': attribute type 3 has an invalid length. [ 107.585116][T10714] loop9: detected capacity change from 0 to 7 [ 107.592632][T10714] buffer_io_error: 24 callbacks suppressed [ 107.592644][T10714] Buffer I/O error on dev loop9, logical block 0, async page read [ 107.606646][T10714] Buffer I/O error on dev loop9, logical block 0, async page read [ 107.614543][T10714] loop9: unable to read partition table [ 107.621812][T10714] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 107.621812][T10714] ) failed (rc=-5) [ 107.670985][T10718] pimreg: entered allmulticast mode [ 107.678124][T10718] pimreg: left allmulticast mode [ 107.777137][ T29] kauditd_printk_skb: 210 callbacks suppressed [ 107.777153][ T29] audit: type=1400 audit(1753713130.203:3266): avc: denied { append } for pid=10719 comm="syz.6.3059" name="qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 107.846000][T10722] syzkaller0: entered allmulticast mode [ 107.857087][ T29] audit: type=1326 audit(1753713130.283:3267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10725 comm="syz.4.3063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc15686e9a9 code=0x7ffc0000 [ 107.881829][ T29] audit: type=1326 audit(1753713130.283:3268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10725 comm="syz.4.3063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc15686e9a9 code=0x7ffc0000 [ 107.905391][ T29] audit: type=1326 audit(1753713130.283:3269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10725 comm="syz.4.3063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc15686e9a9 code=0x7ffc0000 [ 107.930285][ T29] audit: type=1326 audit(1753713130.283:3270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10725 comm="syz.4.3063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc15686e9a9 code=0x7ffc0000 [ 107.953860][ T29] audit: type=1326 audit(1753713130.283:3271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10725 comm="syz.4.3063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc15686e9a9 code=0x7ffc0000 [ 107.977395][ T29] audit: type=1326 audit(1753713130.283:3272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10725 comm="syz.4.3063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc15686e9a9 code=0x7ffc0000 [ 108.002117][ T29] audit: type=1326 audit(1753713130.283:3273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10725 comm="syz.4.3063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc15686e9a9 code=0x7ffc0000 [ 108.026564][T10722] syzkaller0 (unregistering): left allmulticast mode [ 108.028887][ T29] audit: type=1326 audit(1753713130.313:3274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10725 comm="syz.4.3063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc15686e9a9 code=0x7ffc0000 [ 108.058057][ T29] audit: type=1326 audit(1753713130.353:3275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10725 comm="syz.4.3063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc15686e9a9 code=0x7ffc0000 [ 108.117323][T10737] loop4: detected capacity change from 0 to 1024 [ 108.148108][T10737] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 108.159080][T10737] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 108.173123][T10737] JBD2: no valid journal superblock found [ 108.178875][T10737] EXT4-fs (loop4): Could not load journal inode [ 108.199938][T10737] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 108.418929][T10779] loop3: detected capacity change from 0 to 2048 [ 108.422341][T10785] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3091'. [ 108.426645][T10779] EXT4-fs: Ignoring removed nobh option [ 108.532175][T10806] program syz.4.3099 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 108.738894][T10838] loop1: detected capacity change from 0 to 128 [ 108.773872][T10838] EXT4-fs: Ignoring removed nobh option [ 108.803969][T10838] ext4 filesystem being mounted at /390/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 108.888677][T10868] __nla_validate_parse: 1 callbacks suppressed [ 108.888693][T10868] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3128'. [ 108.904751][T10868] IPVS: Error joining to the multicast group [ 108.953195][T10874] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3132'. [ 109.093398][T10903] loop3: detected capacity change from 0 to 4096 [ 109.100760][T10904] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 109.108249][T10904] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 109.223933][T10924] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 109.239675][T10924] vhci_hcd: default hub control req: 1f07 v0017 i0001 l0 [ 109.305932][T10942] loop2: detected capacity change from 0 to 164 [ 109.325762][T10942] rock: directory entry would overflow storage [ 109.332099][T10942] rock: sig=0x4f50, size=4, remaining=3 [ 109.337693][T10942] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 109.561074][T10964] netlink: 'syz.2.3172': attribute type 1 has an invalid length. [ 109.568921][T10964] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3172'. [ 109.687431][T10980] loop2: detected capacity change from 0 to 8192 [ 109.785871][T10995] pimreg: entered allmulticast mode [ 109.792621][T10995] pimreg: left allmulticast mode [ 109.847187][T10997] loop2: detected capacity change from 0 to 512 [ 109.854602][T10997] EXT4-fs: Ignoring removed oldalloc option [ 109.860754][T10997] EXT4-fs: dax option not supported [ 109.886041][T11003] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 109.915565][T11009] loop1: detected capacity change from 0 to 1024 [ 110.014086][T11020] loop1: detected capacity change from 0 to 128 [ 110.022555][T11020] ext4 filesystem being mounted at /401/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 110.174092][T11039] xt_hashlimit: max too large, truncated to 1048576 [ 110.202208][T11044] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3208'. [ 110.203051][T11045] loop6: detected capacity change from 0 to 164 [ 110.227747][T11045] rock: directory entry would overflow storage [ 110.233996][T11045] rock: sig=0x4f50, size=4, remaining=3 [ 110.239642][T11045] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 110.298969][T11055] loop1: detected capacity change from 0 to 512 [ 110.402514][T11073] pimreg: entered allmulticast mode [ 110.405536][T11071] loop3: detected capacity change from 0 to 1024 [ 110.409850][T11073] pimreg: left allmulticast mode [ 110.435080][T11071] EXT4-fs (loop3): resizing filesystem from 512 to 0 blocks [ 110.442616][T11071] EXT4-fs warning (device loop3): ext4_resize_fs:2042: can't shrink FS - resize aborted [ 110.486058][T11077] loop3: detected capacity change from 0 to 164 [ 110.503352][T11077] rock: directory entry would overflow storage [ 110.509669][T11077] rock: sig=0x4f50, size=4, remaining=3 [ 110.515306][T11077] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 110.556845][T11082] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3226'. [ 110.571760][T11085] vlan0: entered allmulticast mode [ 110.577332][T11087] Cannot find add_set index 0 as target [ 110.675046][T11105] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3245'. [ 110.684303][T11105] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3245'. [ 110.831670][T11118] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3243'. [ 110.834732][T11120] loop4: detected capacity change from 0 to 2048 [ 110.864971][T11120] EXT4-fs: Ignoring removed nobh option [ 110.914590][T11125] loop2: detected capacity change from 0 to 764 [ 110.935754][T11125] rock: directory entry would overflow storage [ 110.942076][T11125] rock: sig=0x4654, size=5, remaining=4 [ 110.985045][T11133] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3250'. [ 111.008901][T11133] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3250'. [ 111.021619][T11135] loop4: detected capacity change from 0 to 512 [ 111.028359][T11135] EXT4-fs: Ignoring removed mblk_io_submit option [ 111.071926][T11135] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 111.095137][T11135] EXT4-fs (loop4): 1 truncate cleaned up [ 111.182066][T11144] loop1: detected capacity change from 0 to 1024 [ 111.202680][T11144] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 111.215016][T11144] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 111.227092][T11147] loop2: detected capacity change from 0 to 4096 [ 111.230698][T11144] JBD2: no valid journal superblock found [ 111.239334][T11144] EXT4-fs (loop1): Could not load journal inode [ 111.266476][T11144] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 111.311199][T11151] loop6: detected capacity change from 0 to 8192 [ 111.598355][T11187] loop3: detected capacity change from 0 to 512 [ 111.605214][T11187] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 111.615368][T11182] Falling back ldisc for ttyS3. [ 111.616052][T11187] EXT4-fs (loop3): 1 truncate cleaned up [ 111.708642][T11196] SELinux: syz.1.3275 (11196) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 112.204172][T11228] netlink: 'syz.4.3294': attribute type 1 has an invalid length. [ 112.336523][T11240] loop6: detected capacity change from 0 to 1024 [ 112.361304][T11240] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (12806!=20869) [ 112.439221][T11240] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 112.466257][T11240] System zones: 0-1, 3-36 [ 112.477057][T11240] EXT4-fs (loop6): orphan cleanup on readonly fs [ 112.485156][T11240] EXT4-fs (loop6): 1 orphan inode deleted [ 112.674823][T11268] loop3: detected capacity change from 0 to 512 [ 112.681671][T11268] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 112.696782][T11268] EXT4-fs (loop3): 1 truncate cleaned up [ 112.748355][T11277] loop6: detected capacity change from 0 to 764 [ 112.782550][T11277] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 112.800893][ T29] kauditd_printk_skb: 272 callbacks suppressed [ 112.800905][ T29] audit: type=1400 audit(1753713135.233:3548): avc: denied { mounton } for pid=11282 comm="syz.1.3317" path="/proc/935/task" dev="proc" ino=31140 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 112.831160][ T29] audit: type=1400 audit(1753713135.233:3549): avc: denied { mount } for pid=11282 comm="syz.1.3317" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 112.876163][ T29] audit: type=1400 audit(1753713135.303:3550): avc: denied { getopt } for pid=11264 comm="syz.3.3311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 112.915642][ T29] audit: type=1400 audit(1753713135.343:3551): avc: denied { create } for pid=11289 comm="syz.1.3319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 112.938445][ T29] audit: type=1400 audit(1753713135.363:3552): avc: denied { block_suspend } for pid=11289 comm="syz.1.3319" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 112.979121][T11292] loop4: detected capacity change from 0 to 1024 [ 113.006689][T11292] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 113.017736][T11292] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 113.048312][T11292] JBD2: no valid journal superblock found [ 113.054089][T11292] EXT4-fs (loop4): Could not load journal inode [ 113.073445][T11292] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 113.110050][T11297] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11297 comm=syz.3.3322 [ 113.111021][ T29] audit: type=1400 audit(1753713135.533:3553): avc: denied { shutdown } for pid=11294 comm="syz.1.3324" laddr=fe80::f lport=47039 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 113.122632][T11297] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=11297 comm=syz.3.3322 [ 113.221046][ T29] audit: type=1400 audit(1753713135.603:3554): avc: denied { name_bind } for pid=11301 comm="syz.2.3327" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 113.273043][ T29] audit: type=1400 audit(1753713135.693:3555): avc: denied { read write } for pid=11314 comm="syz.1.3332" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 113.297314][ T29] audit: type=1400 audit(1753713135.693:3556): avc: denied { open } for pid=11314 comm="syz.1.3332" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 113.336393][ T29] audit: type=1400 audit(1753713135.753:3557): avc: denied { unmount } for pid=11316 comm="syz.4.3333" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 113.433783][T11323] loop6: detected capacity change from 0 to 8192 [ 113.442229][T11323] bio_check_eod: 214 callbacks suppressed [ 113.442243][T11323] syz.6.3337: attempt to access beyond end of device [ 113.442243][T11323] loop6: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 113.449578][T11329] pim6reg: entered allmulticast mode [ 113.463652][T11323] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000e1b1) [ 113.475929][T11323] FAT-fs (loop6): Filesystem has been set read-only [ 113.484516][T11329] pim6reg: left allmulticast mode [ 113.485153][T11323] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000e1b1) [ 113.497854][T11323] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000e1b1) [ 113.794727][T11341] chnl_net:caif_netlink_parms(): no params data found [ 113.849651][T11341] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.856741][T11341] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.871846][T11341] bridge_slave_0: entered allmulticast mode [ 113.883071][T11341] bridge_slave_0: entered promiscuous mode [ 113.890375][T11341] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.897515][T11341] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.906314][T11341] bridge_slave_1: entered allmulticast mode [ 113.913335][T11341] bridge_slave_1: entered promiscuous mode [ 113.985794][T11393] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.995734][T11393] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.017398][T11393] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.026495][T11393] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.035682][T11393] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.044628][T11393] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.058822][T11393] bond1: left promiscuous mode [ 114.063671][T11393] batadv1: left promiscuous mode [ 114.073865][T11393] veth1_to_bond: left allmulticast mode [ 114.080115][T11393] macsec1: left promiscuous mode [ 114.085113][T11393] macsec1: left allmulticast mode [ 114.106408][T11341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.145073][T11341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.188386][T11341] team0: Port device team_slave_0 added [ 114.195724][T11341] team0: Port device team_slave_1 added [ 114.233942][T11407] IPVS: stopping master sync thread 11410 ... [ 114.234352][T11409] pimreg: entered allmulticast mode [ 114.249468][T11410] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 114.260840][T11341] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.267844][T11341] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.293884][T11341] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.313106][T11341] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.320202][T11341] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.346411][T11341] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.364352][T11414] random: crng reseeded on system resumption [ 114.381164][T11413] vlan0: entered allmulticast mode [ 114.386311][T11413] bridge_slave_0: entered allmulticast mode [ 114.394547][T11416] __nla_validate_parse: 2 callbacks suppressed [ 114.394559][T11416] netlink: 204 bytes leftover after parsing attributes in process `syz.3.3375'. [ 114.425160][T11409] pimreg: left allmulticast mode [ 114.444108][T11341] hsr_slave_0: entered promiscuous mode [ 114.450422][T11341] hsr_slave_1: entered promiscuous mode [ 114.458378][T11421] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3376'. [ 114.468239][T11341] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 114.478734][T11341] Cannot create hsr debugfs directory [ 114.548929][T11434] netlink: 'syz.2.3382': attribute type 13 has an invalid length. [ 114.556827][T11434] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3382'. [ 114.577929][T11433] hub 6-0:1.0: USB hub found [ 114.583443][T11433] hub 6-0:1.0: 8 ports detected [ 114.605690][T11434] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.614572][T11434] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.623330][T11434] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.633329][T11434] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.645463][T11434] netlink: 'syz.2.3382': attribute type 13 has an invalid length. [ 114.653329][T11434] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3382'. [ 114.664489][ T5436] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 114.674887][ T5436] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.708710][T11341] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 114.722534][T11341] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 114.735462][ T5436] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 114.745807][ T5436] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.757539][T11341] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 114.770197][T11341] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 114.794140][ T5436] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 114.804531][ T5436] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.835935][T11341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.848131][T11341] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.858396][ T5465] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.865507][ T5465] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.905722][ T5436] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 114.917304][ T5436] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.938042][ T5445] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.945239][ T5445] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.007404][ T5436] bridge_slave_1: left allmulticast mode [ 115.013256][ T5436] bridge_slave_1: left promiscuous mode [ 115.019036][ T5436] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.031290][ T5436] bridge_slave_0: left allmulticast mode [ 115.036966][ T5436] bridge_slave_0: left promiscuous mode [ 115.042787][ T5436] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.096836][ T5436] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 115.140659][ T5436] bond2 (unregistering): (slave bridge1): Releasing active interface [ 115.191919][ T5436] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 115.203106][ T5436] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 115.212613][ T5436] bond0 (unregistering): Released all slaves [ 115.221249][ T5436] bond1 (unregistering): (slave batadv1): Releasing backup interface [ 115.229364][ T5436] batadv1: left promiscuous mode [ 115.235273][ T5436] bond1 (unregistering): Released all slaves [ 115.243798][ T5436] bond2 (unregistering): Released all slaves [ 115.252108][T11471] netlink: 830 bytes leftover after parsing attributes in process `syz.6.3394'. [ 115.271174][T11341] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.282472][ T5436] tipc: Disabling bearer [ 115.287498][ T5436] tipc: Left network mode [ 115.302213][ T5436] hsr_slave_0: left promiscuous mode [ 115.307957][ T5436] hsr_slave_1: left promiscuous mode [ 115.316425][ T5436] veth1_macvtap: left promiscuous mode [ 115.321949][ T5436] veth0_macvtap: left promiscuous mode [ 115.327464][ T5436] veth1_vlan: left promiscuous mode [ 115.332929][ T5436] veth0_vlan: left promiscuous mode [ 115.438229][T11490] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 115.461527][T11489] IPVS: stopping master sync thread 11490 ... [ 115.505768][T11341] veth0_vlan: entered promiscuous mode [ 115.520627][T11341] veth1_vlan: entered promiscuous mode [ 115.529266][T11504] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3402'. [ 115.532828][T11341] veth0_macvtap: entered promiscuous mode [ 115.547992][T11507] loop9: detected capacity change from 0 to 7 [ 115.555744][T11507] Buffer I/O error on dev loop9, logical block 0, async page read [ 115.562083][T11341] veth1_macvtap: entered promiscuous mode [ 115.569368][T11507] Buffer I/O error on dev loop9, logical block 0, async page read [ 115.577250][T11507] loop9: unable to read partition table [ 115.581805][T11341] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.591533][T11507] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 115.591533][T11507] ) failed (rc=-5) [ 115.598222][T11341] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.617032][T11341] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.626959][T11341] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.635812][T11341] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.644573][T11341] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.690825][T11519] loop3: detected capacity change from 0 to 256 [ 115.795607][ T5436] ------------[ cut here ]------------ [ 115.801182][ T5436] WARNING: CPU: 0 PID: 5436 at net/xfrm/xfrm_state.c:3284 xfrm_state_fini+0x17c/0x1f0 [ 115.810913][ T5436] Modules linked in: [ 115.814850][ T5436] CPU: 0 UID: 0 PID: 5436 Comm: kworker/u8:36 Not tainted 6.16.0-syzkaller #0 PREEMPT(voluntary) [ 115.825539][ T5436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 115.835717][ T5436] Workqueue: netns cleanup_net [ 115.840695][ T5436] RIP: 0010:xfrm_state_fini+0x17c/0x1f0 [ 115.846268][ T5436] Code: 48 8d bb 70 0e 00 00 e8 92 5e c1 fc 48 8b bb 70 0e 00 00 e8 36 c3 cd fc 5b 41 5e 41 5f 5d e9 0b 94 b3 00 cc e8 05 4f a7 fc 90 <0f> 0b 90 e9 d9 fe ff ff e8 f7 4e a7 fc 90 0f 0b 90 4c 89 f7 e8 5b [ 115.866015][ T5436] RSP: 0018:ffffc90000e1fc60 EFLAGS: 00010293 [ 115.872454][ T5436] RAX: ffffffff84b0551b RBX: ffff88810a64bc00 RCX: ffff888118a16180 [ 115.880558][ T5436] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88810a64ca40 [ 115.888716][ T5436] RBP: ffffffff86c82460 R08: 0001ffff86848aff R09: 0000000000000000 [ 115.896971][ T5436] R10: ffffc90000e1fbe8 R11: 0001c90000e1fbe8 R12: ffffffff86c82480 [ 115.905052][ T5436] R13: ffff88810a64bc28 R14: ffff88810a64ca40 R15: ffff88810a64bc00 [ 115.913160][ T5436] FS: 0000000000000000(0000) GS:ffff8882aee2d000(0000) knlGS:0000000000000000 [ 115.922144][ T5436] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 115.928734][ T5436] CR2: 00007f17133eef98 CR3: 0000000006834000 CR4: 00000000003506f0 [ 115.936852][ T5436] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 115.944836][ T5436] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 115.952924][ T5436] Call Trace: [ 115.956245][ T5436] [ 115.959196][ T5436] xfrm_net_exit+0x2d/0x60 [ 115.963672][ T5436] ops_undo_list+0x27b/0x410 [ 115.968323][ T5436] cleanup_net+0x2de/0x4d0 [ 115.972761][ T5436] process_scheduled_works+0x4cb/0x9d0 [ 115.978271][ T5436] worker_thread+0x582/0x770 [ 115.982905][ T5436] kthread+0x486/0x510 [ 115.986986][ T5436] ? finish_task_switch+0xad/0x2b0 [ 115.992165][ T5436] ? __pfx_worker_thread+0x10/0x10 [ 115.997383][ T5436] ? __pfx_kthread+0x10/0x10 [ 116.002124][ T5436] ret_from_fork+0xda/0x150 [ 116.006614][ T5436] ? __pfx_kthread+0x10/0x10 [ 116.011204][ T5436] ret_from_fork_asm+0x1a/0x30 [ 116.015957][ T5436] [ 116.018966][ T5436] ---[ end trace 0000000000000000 ]--- [ 116.145668][T11550] loop3: detected capacity change from 0 to 1024 [ 116.173917][T11550] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 116.184976][T11550] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 116.221354][T11550] JBD2: no valid journal superblock found [ 116.227125][T11550] EXT4-fs (loop3): Could not load journal inode [ 116.236359][T11570] loop7: detected capacity change from 0 to 2048 [ 116.244409][T11570] EXT4-fs: Ignoring removed nobh option [ 116.258643][T11550] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 116.467972][T11613] loop7: detected capacity change from 0 to 512 [ 116.487307][T11613] EXT4-fs: Ignoring removed mblk_io_submit option [ 116.501746][T11613] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 116.528284][T11613] EXT4-fs (loop7): 1 truncate cleaned up [ 116.537692][T11626] netlink: 5 bytes leftover after parsing attributes in process `syz.6.3438'. [ 116.546978][T11626] 0{X: renamed from gretap0 [ 116.579142][T11626] 0{X: entered allmulticast mode [ 116.615508][T11626] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 117.027923][T11663] Set syz1 is full, maxelem 65536 reached [ 117.113999][T11721] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3464'. [ 117.172617][T11733] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 117.203038][T11740] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3469'. [ 117.251960][T11755] loop3: detected capacity change from 0 to 128 [ 117.265828][T11759] netdevsim netdevsim6: Direct firmware load for ./file0/file1 failed with error -2 [ 117.288693][ T3314] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 117.289868][ T5461] nci: nci_rx_work: unknown MT 0x6 [ 117.296749][ T3314] FAT-fs (loop3): Filesystem has been set read-only [ 117.393512][T11776] loop3: detected capacity change from 0 to 8192 [ 117.403452][T11776] syz.3.3479: attempt to access beyond end of device [ 117.403452][T11776] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 117.418395][T11776] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 117.426308][T11776] FAT-fs (loop3): Filesystem has been set read-only [ 117.434468][T11776] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 117.443143][T11776] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 117.534721][T11808] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3480'. [ 118.075518][T11812] loop7: detected capacity change from 0 to 512 [ 118.093223][T11812] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 118.122276][T11812] EXT4-fs (loop7): 1 truncate cleaned up [ 118.140886][ T29] kauditd_printk_skb: 111 callbacks suppressed [ 118.140901][ T29] audit: type=1400 audit(1753713140.573:3669): avc: denied { read write } for pid=11811 comm="syz.7.3482" name="file2" dev="loop7" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 118.171030][ T29] audit: type=1400 audit(1753713140.573:3670): avc: denied { open } for pid=11811 comm="syz.7.3482" path="/21/file2/file2" dev="loop7" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 118.271830][ T29] audit: type=1326 audit(1753713140.703:3671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11825 comm="syz.6.3487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2caae9a9 code=0x7ffc0000 [ 118.296584][ T29] audit: type=1326 audit(1753713140.703:3672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11825 comm="syz.6.3487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2caae9a9 code=0x7ffc0000 [ 118.340320][ T29] audit: type=1326 audit(1753713140.753:3673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11825 comm="syz.6.3487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f4c2caae9a9 code=0x7ffc0000 [ 118.365192][ T29] audit: type=1326 audit(1753713140.753:3674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11825 comm="syz.6.3487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2caae9a9 code=0x7ffc0000 [ 118.388689][ T29] audit: type=1326 audit(1753713140.753:3675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11825 comm="syz.6.3487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2caae9a9 code=0x7ffc0000 [ 118.466297][ T29] audit: type=1326 audit(1753713140.893:3676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11837 comm="syz.1.3493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38928ae9a9 code=0x7ffc0000 [ 118.489958][ T29] audit: type=1326 audit(1753713140.893:3677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11837 comm="syz.1.3493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38928ae9a9 code=0x7ffc0000 [ 118.518395][ T29] audit: type=1326 audit(1753713140.943:3678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11837 comm="syz.1.3493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f38928ae9a9 code=0x7ffc0000 [ 118.623066][T11843] syzkaller0: entered promiscuous mode [ 118.628572][T11843] syzkaller0: entered allmulticast mode [ 118.977587][T11891] loop7: detected capacity change from 0 to 128 [ 119.014605][T11341] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 119.022573][T11341] FAT-fs (loop7): Filesystem has been set read-only [ 119.083883][T11896] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.091056][T11896] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.163230][T11896] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.172659][T11896] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.212377][T11896] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.222662][T11896] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.231652][T11896] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.240610][T11896] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.264262][T11908] netdevsim netdevsim3: Direct firmware load for ./file0/file1 failed with error -2 [ 119.366014][T11922] loop1: detected capacity change from 0 to 128 [ 119.422124][ T6118] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 119.430195][ T6118] FAT-fs (loop1): Filesystem has been set read-only [ 119.479628][T11934] __nla_validate_parse: 1 callbacks suppressed [ 119.479644][T11934] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3532'. [ 119.524563][T11938] tunl0: left promiscuous mode [ 119.551366][T11942] usb usb5: usbfs: process 11942 (syz.1.3538) did not claim interface 0 before use [ 119.644502][T11960] netlink: 'syz.1.3544': attribute type 10 has an invalid length. [ 119.743227][T11938] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.750454][T11938] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.868287][T11938] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.882638][T11938] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.941595][T11938] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.950756][T11938] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.959663][T11938] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.968591][T11938] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.986461][T11938] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 119.995509][T11938] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 120.004553][T11938] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 120.014334][T11938] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 120.023430][T11938] vxlan0: left promiscuous mode [ 120.041258][T11938] bond1: left promiscuous mode [ 120.046077][T11938] batadv1: left promiscuous mode [ 120.103427][T11982] netlink: 'syz.1.3546': attribute type 13 has an invalid length. [ 120.111409][T11982] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3546'. [ 120.140605][T11982] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.149452][T11982] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.158200][T11982] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.168186][T11982] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.184186][T11982] netlink: 'syz.1.3546': attribute type 13 has an invalid length. [ 120.193415][T11982] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3546'. [ 120.207398][T11986] hub 9-0:1.0: USB hub found [ 120.227298][T11986] hub 9-0:1.0: 8 ports detected [ 120.543946][T12017] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3561'. [ 120.681659][T12045] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3576'. [ 121.090358][T12079] loop3: detected capacity change from 0 to 1024 [ 121.097178][T12079] EXT4-fs: Ignoring removed nomblk_io_submit option [ 121.175361][T12089] xt_hashlimit: max too large, truncated to 1048576 [ 121.214868][T12095] syzkaller1: entered promiscuous mode [ 121.220510][T12095] syzkaller1: entered allmulticast mode [ 121.324185][T12115] loop1: detected capacity change from 0 to 512 [ 121.331007][T12115] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 121.342938][T12115] EXT4-fs (loop1): orphan cleanup on readonly fs [ 121.349637][T12115] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:517: comm syz.1.3608: Block bitmap for bg 0 marked uninitialized [ 121.363023][T12115] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 121.373299][T12115] EXT4-fs (loop1): 1 orphan inode deleted [ 121.382368][T12115] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 121.391984][T12115] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 121.402738][T12115] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:517: comm syz.1.3608: Block bitmap for bg 0 marked uninitialized [ 121.417078][T12115] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:517: comm syz.1.3608: Block bitmap for bg 0 marked uninitialized [ 121.432250][T12115] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:517: comm syz.1.3608: Block bitmap for bg 0 marked uninitialized [ 121.449469][T12115] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:517: comm syz.1.3608: Block bitmap for bg 0 marked uninitialized [ 121.470146][T12115] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:517: comm syz.1.3608: Block bitmap for bg 0 marked uninitialized [ 121.487560][T12115] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:517: comm syz.1.3608: Block bitmap for bg 0 marked uninitialized [ 121.576750][T12143] xt_hashlimit: max too large, truncated to 1048576 [ 121.677543][T12157] loop6: detected capacity change from 0 to 2048 [ 121.700983][T12161] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3630'. [ 121.711985][T12161] IPVS: Error joining to the multicast group [ 121.726729][T12167] binfmt_misc: register: failed to install interpreter file ./file0 [ 121.745255][T12169] sd 0:0:1:0: device reset [ 121.824682][ T5430] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x4d [ 121.859354][T12185] loop3: detected capacity change from 0 to 128 [ 121.874839][T12187] loop6: detected capacity change from 0 to 2048 [ 121.887422][T12185] syz.3.3638: attempt to access beyond end of device [ 121.887422][T12185] loop3: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 121.910415][T12187] ext4 filesystem being mounted at /540/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.989882][T12195] loop7: detected capacity change from 0 to 8192 [ 122.002623][T12195] syz.7.3643: attempt to access beyond end of device [ 122.002623][T12195] loop7: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 122.017279][T12195] Buffer I/O error on dev loop7, logical block 57847, async page read [ 122.046041][T12207] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3648'. [ 122.158763][T12229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.172060][T12229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.178139][T12231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.190852][T12231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.915654][T12257] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=12257 comm=syz.3.3670 [ 122.928250][T12257] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=12257 comm=syz.3.3670 [ 123.029391][T12265] loop1: detected capacity change from 0 to 2048 [ 123.149521][ T29] kauditd_printk_skb: 282 callbacks suppressed [ 123.149537][ T29] audit: type=1326 audit(1753713146.568:3961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12285 comm="syz.2.3684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7d244e9a9 code=0x7ffc0000 [ 123.179407][ T29] audit: type=1326 audit(1753713146.568:3962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12285 comm="syz.2.3684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb7d244e9a9 code=0x7ffc0000 [ 123.203389][ T29] audit: type=1326 audit(1753713146.568:3963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12285 comm="syz.2.3684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7d244e9a9 code=0x7ffc0000 [ 123.227060][ T29] audit: type=1326 audit(1753713146.568:3964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12285 comm="syz.2.3684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7d244e9a9 code=0x7ffc0000 [ 123.250563][ T29] audit: type=1326 audit(1753713146.568:3965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12285 comm="syz.2.3684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb7d244e9a9 code=0x7ffc0000 [ 123.287933][ T29] audit: type=1326 audit(1753713146.708:3966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12285 comm="syz.2.3684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7d244e9a9 code=0x7ffc0000 [ 123.312929][ T29] audit: type=1326 audit(1753713146.708:3967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12285 comm="syz.2.3684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7d244e9a9 code=0x7ffc0000 [ 123.338504][ T29] audit: type=1326 audit(1753713146.748:3968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12285 comm="syz.2.3684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7fb7d244e9a9 code=0x7ffc0000 [ 123.363398][ T29] audit: type=1326 audit(1753713146.748:3969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12285 comm="syz.2.3684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7d244e9a9 code=0x7ffc0000 [ 123.387008][ T29] audit: type=1326 audit(1753713146.748:3970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12285 comm="syz.2.3684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7d244e9a9 code=0x7ffc0000 [ 123.511587][T12303] 9pnet: p9_errstr2errno: server reported unknown error pA; [ 123.908591][T12359] smc: net device bond0 applied user defined pnetid SYZ0 [ 123.922102][T12359] smc: net device bond0 erased user defined pnetid SYZ0 [ 124.103770][T12378] loop3: detected capacity change from 0 to 128 [ 124.110799][T12378] FAT-fs (loop3): Directory bread(block 162) failed [ 124.117454][T12378] FAT-fs (loop3): Directory bread(block 163) failed [ 124.124314][T12378] FAT-fs (loop3): Directory bread(block 164) failed [ 124.132056][T12378] FAT-fs (loop3): Directory bread(block 165) failed [ 124.138738][T12378] FAT-fs (loop3): Directory bread(block 166) failed [ 124.145422][T12378] FAT-fs (loop3): Directory bread(block 167) failed [ 124.152171][T12378] FAT-fs (loop3): Directory bread(block 168) failed [ 124.158802][T12378] FAT-fs (loop3): Directory bread(block 169) failed [ 124.168645][T12378] FAT-fs (loop3): Directory bread(block 162) failed [ 124.175265][T12378] FAT-fs (loop3): Directory bread(block 163) failed [ 124.182538][T12378] syz.3.3728: attempt to access beyond end of device [ 124.182538][T12378] loop3: rw=3, sector=226, nr_sectors = 6 limit=128 [ 124.196555][T12378] syz.3.3728: attempt to access beyond end of device [ 124.196555][T12378] loop3: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 124.235889][ T3400] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 124.243366][ T3400] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 124.250874][ T3400] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 124.258423][ T3400] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 124.265885][ T3400] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 124.273362][ T3400] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 124.280818][ T3400] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 124.288192][ T3400] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 124.295718][ T3400] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 124.303276][ T3400] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 124.310741][ T3400] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 124.318189][ T3400] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 124.325616][ T3400] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 124.333116][ T3400] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 124.340536][ T3400] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 124.348029][ T3400] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 124.355488][ T3400] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 124.362933][ T3400] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 124.370345][ T3400] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 124.377795][ T3400] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 124.385179][ T3400] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 124.392565][ T3400] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 124.400025][ T3400] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 124.407413][ T3400] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 124.414840][ T3400] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 124.422266][ T3400] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 124.429703][ T3400] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 124.437084][ T3400] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 124.446815][ T3400] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz0] on syz1 [ 124.475813][T12386] loop2: detected capacity change from 0 to 512 [ 124.494243][T12386] ext4 filesystem being mounted at /689/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 124.500860][T12395] 9pnet: p9_errstr2errno: server reported unknown error pA; [ 124.664352][T12423] SELinux: Context system_u:object_r:dhcpd_exec_t:s0 is not valid (left unmapped). [ 124.764020][T12433] usb usb5: usbfs: process 12433 (syz.2.3752) did not claim interface 0 before use [ 124.855612][T12446] loop2: detected capacity change from 0 to 512 [ 124.870382][T12446] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 124.878471][T12446] EXT4-fs (loop2): orphan cleanup on readonly fs [ 124.886258][T12446] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm : corrupted inode contents [ 124.898799][T12446] EXT4-fs (loop2): Remounting filesystem read-only [ 124.905506][T12446] EXT4-fs (loop2): 1 truncate cleaned up [ 124.911330][ T5445] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 124.921942][ T5445] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 124.934363][ T5445] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 124.977524][T12454] loop2: detected capacity change from 0 to 128 [ 124.986628][T12454] ext4 filesystem being mounted at /701/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 125.021214][T12461] loop2: detected capacity change from 0 to 512 [ 125.028153][T12461] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 125.038531][T12461] EXT4-fs (loop2): orphan cleanup on readonly fs [ 125.047373][T12461] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:517: comm syz.2.3765: Block bitmap for bg 0 marked uninitialized [ 125.063285][T12461] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 125.072177][T12461] EXT4-fs (loop2): 1 orphan inode deleted [ 125.081161][T12461] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 125.093648][T12461] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 125.094811][T12461] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:517: comm syz.2.3765: Block bitmap for bg 0 marked uninitialized [ 125.094943][T12461] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:517: comm syz.2.3765: Block bitmap for bg 0 marked uninitialized [ 125.095048][T12461] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:517: comm syz.2.3765: Block bitmap for bg 0 marked uninitialized [ 125.095177][T12461] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:517: comm syz.2.3765: Block bitmap for bg 0 marked uninitialized [ 125.095390][T12461] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:517: comm syz.2.3765: Block bitmap for bg 0 marked uninitialized [ 125.186918][T12461] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:517: comm syz.2.3765: Block bitmap for bg 0 marked uninitialized [ 125.312653][T12485] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3776'. [ 125.337787][T12487] all: renamed from bridge_slave_0 [ 125.371248][T12494] wg2: entered promiscuous mode [ 125.376238][T12494] wg2: entered allmulticast mode [ 125.417667][T12497] loop3: detected capacity change from 0 to 512 [ 125.424644][T12497] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 125.440104][T12497] EXT4-fs (loop3): orphan cleanup on readonly fs [ 125.446707][T12497] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.3781: Block bitmap for bg 0 marked uninitialized [ 125.465244][T12497] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 125.466597][T12501] loop7: detected capacity change from 0 to 512 [ 125.480677][T12497] EXT4-fs (loop3): 1 orphan inode deleted [ 125.499770][T12497] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 125.531613][T12497] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 125.543526][T12501] ext4 filesystem being mounted at /97/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 125.545437][T12497] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.3781: Block bitmap for bg 0 marked uninitialized [ 125.592473][T12497] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.3781: Block bitmap for bg 0 marked uninitialized [ 125.613877][T12497] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.3781: Block bitmap for bg 0 marked uninitialized [ 125.638529][T12497] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.3781: Block bitmap for bg 0 marked uninitialized [ 125.653796][T12497] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.3781: Block bitmap for bg 0 marked uninitialized [ 125.670309][T12497] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.3781: Block bitmap for bg 0 marked uninitialized [ 125.779772][T12525] serio: Serial port ptm1 [ 125.996841][T12551] loop6: detected capacity change from 0 to 2048 [ 126.279175][T12570] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 126.295908][T12570] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 126.308414][T12570] EXT4-fs (loop6): This should not happen!! Data will be lost [ 126.308414][T12570] [ 126.318204][T12570] EXT4-fs (loop6): Total free blocks count 0 [ 126.324237][T12570] EXT4-fs (loop6): Free/Dirty block details [ 126.330217][T12570] EXT4-fs (loop6): free_blocks=2415919104 [ 126.335936][T12570] EXT4-fs (loop6): dirty_blocks=8208 [ 126.341275][T12570] EXT4-fs (loop6): Block reservation details [ 126.347249][T12570] EXT4-fs (loop6): i_reserved_data_blocks=513 [ 126.381448][ T5436] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 126.395376][ T5436] EXT4-fs (loop6): This should not happen!! Data will be lost [ 126.395376][ T5436] [ 126.417484][T12598] loop2: detected capacity change from 0 to 512 [ 126.447369][T12598] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 126.483827][T12598] ext4 filesystem being mounted at /716/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 126.511697][T12607] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3828'. [ 126.548609][T12607] batadv3: entered promiscuous mode [ 126.548634][T12607] batadv3: entered allmulticast mode [ 126.657834][T12621] all: renamed from bridge_slave_0 (while UP) [ 126.715614][T12631] loop3: detected capacity change from 0 to 128 [ 126.728214][T12631] ext4 filesystem being mounted at /777/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.761097][T12637] SELinux: syz.3.3841 (12637) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 126.795643][T12642] SELinux: security_context_str_to_sid (_) failed with errno=-22 [ 126.867571][T12652] loop1: detected capacity change from 0 to 512 [ 126.875421][T12653] all: renamed from bridge_slave_0 [ 126.876230][T12652] EXT4-fs: inline encryption not supported [ 126.912770][T12652] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 126.931875][T12652] EXT4-fs (loop1): 1 truncate cleaned up [ 126.944671][T12657] wg2: left promiscuous mode [ 126.948450][T12652] EXT4-fs mount: 62 callbacks suppressed [ 126.948464][T12652] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.971071][T12657] bond2: left promiscuous mode [ 126.975891][T12657] batadv1: left promiscuous mode [ 126.994482][T12657] bond4: left promiscuous mode [ 127.003640][ T6118] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.012920][T12657] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 127.021841][T12657] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 127.031916][T12657] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 127.040951][T12657] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 127.130687][T12675] loop3: detected capacity change from 0 to 128 [ 127.143291][T12677] loop6: detected capacity change from 0 to 512 [ 127.164385][T12675] syz.3.3860: attempt to access beyond end of device [ 127.164385][T12675] loop3: rw=0, sector=121, nr_sectors = 120 limit=128 [ 127.178063][T12677] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 127.188339][T12677] EXT4-fs (loop6): orphan cleanup on readonly fs [ 127.197026][T12677] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:517: comm syz.6.3858: Block bitmap for bg 0 marked uninitialized [ 127.212374][ T5430] kworker/u8:30: attempt to access beyond end of device [ 127.212374][ T5430] loop3: rw=1, sector=241, nr_sectors = 800 limit=128 [ 127.227819][T12677] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 127.239601][T12677] EXT4-fs (loop6): 1 orphan inode deleted [ 127.251458][T12677] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 127.265063][T12694] all: renamed from bridge_slave_0 [ 127.276139][T12677] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 127.292880][T12677] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 127.325652][T12677] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:517: comm syz.6.3858: Block bitmap for bg 0 marked uninitialized [ 127.330058][T12707] loop1: detected capacity change from 0 to 128 [ 127.346650][T12677] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:517: comm syz.6.3858: Block bitmap for bg 0 marked uninitialized [ 127.361452][T12707] EXT4-fs error (device loop1): __ext4_fill_super:5500: inode #2: comm syz.1.3865: iget: checksum invalid [ 127.380029][T12707] EXT4-fs (loop1): get root inode failed [ 127.385702][T12707] EXT4-fs (loop1): mount failed [ 127.396143][T12677] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:517: comm syz.6.3858: Block bitmap for bg 0 marked uninitialized [ 127.423163][T12677] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:517: comm syz.6.3858: Block bitmap for bg 0 marked uninitialized [ 127.438581][T12677] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:517: comm syz.6.3858: Block bitmap for bg 0 marked uninitialized [ 127.460615][T12677] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:517: comm syz.6.3858: Block bitmap for bg 0 marked uninitialized [ 127.507618][ T6100] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.266720][ T29] kauditd_printk_skb: 220 callbacks suppressed [ 128.266816][ T29] audit: type=1400 audit(1753713151.688:4185): avc: denied { ioctl } for pid=12851 comm="syz.1.3879" path="socket:[35517]" dev="sockfs" ino=35517 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 128.300564][T12856] all: renamed from bridge_slave_0 [ 128.303658][ T29] audit: type=1400 audit(1753713151.728:4186): avc: denied { read } for pid=12850 comm="syz.3.3878" dev="nsfs" ino=4026532873 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 128.328433][ T29] audit: type=1400 audit(1753713151.728:4187): avc: denied { open } for pid=12850 comm="syz.3.3878" path="net:[4026532873]" dev="nsfs" ino=4026532873 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 128.354438][ T29] audit: type=1400 audit(1753713151.728:4188): avc: denied { create } for pid=12850 comm="syz.3.3878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 128.357569][T12855] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 128.374539][ T29] audit: type=1400 audit(1753713151.728:4189): avc: denied { bind } for pid=12850 comm="syz.3.3878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 128.405264][T12855] macvtap1: entered promiscuous mode [ 128.411513][T12855] macvtap1: entered allmulticast mode [ 128.416916][T12855] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 128.428889][T12861] openvswitch: netlink: Message has 6 unknown bytes. [ 128.437296][T12855] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 128.446313][ T29] audit: type=1400 audit(1753713151.878:4190): avc: denied { block_suspend } for pid=12858 comm="syz.6.3880" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 128.449632][T12855] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 128.488519][ T29] audit: type=1400 audit(1753713151.908:4191): avc: denied { read } for pid=12865 comm="syz.3.3883" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 128.513368][ T29] audit: type=1400 audit(1753713151.908:4192): avc: denied { open } for pid=12865 comm="syz.3.3883" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 128.537724][T12866] sd 0:0:1:0: device reset [ 128.543524][ T29] audit: type=1400 audit(1753713151.968:4193): avc: denied { ioctl } for pid=12865 comm="syz.3.3883" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 128.594981][ T29] audit: type=1400 audit(1753713152.018:4194): avc: denied { ioctl } for pid=12869 comm="syz.3.3885" path="socket:[34581]" dev="sockfs" ino=34581 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 128.663633][T12880] smc: net device bond0 applied user defined pnetid SYZ2 [ 128.670898][T12880] smc: net device bond0 erased user defined pnetid SYZ2 [ 128.706309][T12887] all: renamed from bridge_slave_0 [ 128.746566][T12897] loop7: detected capacity change from 0 to 512 [ 128.757248][T12897] EXT4-fs (loop7): orphan cleanup on readonly fs [ 128.764925][T12897] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.3899: bg 0: block 248: padding at end of block bitmap is not set [ 128.782269][T12897] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.3899: Failed to acquire dquot type 1 [ 128.794243][T12897] EXT4-fs (loop7): 1 truncate cleaned up [ 128.802069][T12897] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 128.816994][T12897] EXT4-fs (loop7): warning: mounting fs with errors, running e2fsck is recommended [ 128.826652][T12897] EXT4-fs warning (device loop7): read_mmp_block:115: Error -117 while reading MMP block 0 [ 128.847132][T11341] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.032798][T12933] vhci_hcd: invalid port number 96 [ 129.037957][T12933] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 129.327753][T13009] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3910'. [ 129.570247][T13060] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3916'. [ 129.596697][T13062] loop2: detected capacity change from 0 to 512 [ 129.597734][T13064] loop3: detected capacity change from 0 to 128 [ 129.609758][T13064] EXT4-fs: Ignoring removed nobh option [ 129.616701][T13064] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 129.630110][T13064] ext4 filesystem being mounted at /795/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 129.632626][T13062] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.655821][T13062] ext4 filesystem being mounted at /736/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.667727][T13062] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.678230][ T3314] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 129.697353][T13070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.706541][T13070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.792844][ T3400] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 129.800410][ T3400] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 129.807855][ T3400] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 129.815393][ T3400] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 129.822840][ T3400] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 129.830301][ T3400] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 129.837760][ T3400] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 129.845225][ T3400] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 129.852641][ T3400] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 129.860118][ T3400] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 129.867492][ T3400] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 129.874906][ T3400] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 129.882343][ T3400] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 129.889876][ T3400] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 129.897247][ T3400] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 129.904637][ T3400] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 129.912160][ T3400] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 129.919563][ T3400] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 129.926950][ T3400] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 129.934503][ T3400] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 129.941884][ T3400] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 129.949357][ T3400] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 129.956759][ T3400] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 129.964150][ T3400] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 129.971531][ T3400] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 129.978916][ T3400] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 129.986413][ T3400] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 129.993804][ T3400] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 130.001654][ T3400] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz0] on syz1 [ 130.051754][T13084] loop2: detected capacity change from 0 to 2048 [ 130.074529][T13084] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.115646][T13092] Cannot find del_set index 0 as target [ 130.129618][T13084] loop2: detected capacity change from 2048 to 0 [ 130.147035][T13084] syz.2.3925: attempt to access beyond end of device [ 130.147035][T13084] loop2: rw=12288, sector=64, nr_sectors = 4 limit=0 [ 130.160880][T13084] EXT4-fs error (device loop2): __ext4_find_entry:1615: inode #2: comm syz.2.3925: reading directory lblock 0 [ 130.173482][T13084] syz.2.3925: attempt to access beyond end of device [ 130.173482][T13084] loop2: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 130.186748][T13084] Buffer I/O error on dev loop2, logical block 0, lost sync page write [ 130.195768][T13084] EXT4-fs (loop2): I/O error while writing superblock [ 130.212797][ T3311] syz-executor: attempt to access beyond end of device [ 130.212797][ T3311] loop2: rw=12288, sector=64, nr_sectors = 4 limit=0 [ 130.248446][ T3311] syz-executor: attempt to access beyond end of device [ 130.248446][ T3311] loop2: rw=524288, sector=20, nr_sectors = 4 limit=0 [ 130.288199][ T3311] syz-executor: attempt to access beyond end of device [ 130.288199][ T3311] loop2: rw=524288, sector=24, nr_sectors = 4 limit=0 [ 130.313454][ T3311] syz-executor: attempt to access beyond end of device [ 130.313454][ T3311] loop2: rw=524288, sector=28, nr_sectors = 4 limit=0 [ 130.338636][ T3311] syz-executor: attempt to access beyond end of device [ 130.338636][ T3311] loop2: rw=524288, sector=32, nr_sectors = 4 limit=0 [ 130.346316][T13108] netlink: 'syz.3.3937': attribute type 3 has an invalid length. [ 130.359905][T13108] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.3937'. [ 130.360294][T13105] loop1: detected capacity change from 0 to 2048 [ 130.376469][ T3311] syz-executor: attempt to access beyond end of device [ 130.376469][ T3311] loop2: rw=12288, sector=16, nr_sectors = 4 limit=0 [ 130.394671][ T3311] EXT4-fs error (device loop2): ext4_get_inode_loc:4930: inode #2: block 4: comm syz-executor: unable to read itable block [ 130.408514][ T3311] Buffer I/O error on dev loop2, logical block 0, lost sync page write [ 130.416970][ T3311] EXT4-fs (loop2): I/O error while writing superblock [ 130.418656][T13105] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.424933][ T3311] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6255: IO failure [ 130.449337][ T3311] Buffer I/O error on dev loop2, logical block 0, lost sync page write [ 130.457693][ T3311] EXT4-fs (loop2): I/O error while writing superblock [ 130.464731][ T3311] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #2: comm syz-executor: mark_inode_dirty error [ 130.476575][ T3311] Buffer I/O error on dev loop2, logical block 0, lost sync page write [ 130.484959][ T3311] EXT4-fs (loop2): I/O error while writing superblock [ 130.591682][ T5461] EXT4-fs error (device loop2): __ext4_get_inode_loc_noinmem:4915: inode #2: block 4: comm kworker/u8:61: unable to read itable block [ 130.634423][ T5461] Buffer I/O error on dev loop2, logical block 0, lost sync page write [ 130.648880][ T5461] EXT4-fs (loop2): I/O error while writing superblock [ 130.663468][ T6481] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.687256][ T6481] Buffer I/O error on dev loop2, logical block 0, lost sync page write [ 130.708140][ T6481] EXT4-fs (loop2): I/O error while writing superblock [ 130.778265][T13130] macvtap1: entered promiscuous mode [ 130.785254][T13130] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 130.792732][T13130] macvtap1: entered allmulticast mode [ 130.805474][T13087] Buffer I/O error on dev loop2, logical block 64, lost sync page write [ 130.815745][T13121] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 130.832818][T13130] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 130.840299][T13121] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 130.840327][T13121] EXT4-fs (loop1): This should not happen!! Data will be lost [ 130.840327][T13121] [ 130.840347][T13121] EXT4-fs (loop1): Total free blocks count 0 [ 130.840359][T13121] EXT4-fs (loop1): Free/Dirty block details [ 130.840371][T13121] EXT4-fs (loop1): free_blocks=2415919104 [ 130.840429][T13121] EXT4-fs (loop1): dirty_blocks=8208 [ 130.840441][T13121] EXT4-fs (loop1): Block reservation details [ 130.840453][T13121] EXT4-fs (loop1): i_reserved_data_blocks=513 [ 130.903973][T13130] netdevsim netdevsim7 netdevsim0: left allmulticast mode [ 130.919670][T13130] netdevsim netdevsim7 netdevsim0: left promiscuous mode [ 130.947108][ T6481] bond0: (slave syz_tun): Releasing backup interface [ 130.950134][ T5465] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 131.021540][T13140] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3950'. [ 131.048840][T13144] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3953'. [ 131.057989][T13144] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3953'. [ 131.111366][ T6118] ================================================================== [ 131.119489][ T6118] BUG: KCSAN: data-race in __lru_add_drain_all / folio_add_lru [ 131.127076][ T6118] [ 131.129398][ T6118] read-write to 0xffff888237d25e68 of 1 bytes by task 13147 on cpu 1: [ 131.137552][ T6118] folio_add_lru+0xa5/0x1f0 [ 131.142068][ T6118] filemap_add_folio+0x129/0x1b0 [ 131.147011][ T6118] __filemap_get_folio+0x31e/0x6b0 [ 131.152135][ T6118] aio_setup_ring+0x26c/0x760 [ 131.156817][ T6118] ioctx_alloc+0x2c4/0x4e0 [ 131.161236][ T6118] __se_sys_io_setup+0x6b/0x1b0 [ 131.166096][ T6118] __x64_sys_io_setup+0x31/0x40 [ 131.170980][ T6118] x64_sys_call+0x2f0e/0x2fb0 [ 131.175653][ T6118] do_syscall_64+0xd2/0x200 [ 131.180147][ T6118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.186030][ T6118] [ 131.188341][ T6118] read to 0xffff888237d25e68 of 1 bytes by task 6118 on cpu 0: [ 131.195873][ T6118] __lru_add_drain_all+0x12b/0x3f0 [ 131.200990][ T6118] lru_add_drain_all+0x10/0x20 [ 131.205752][ T6118] invalidate_bdev+0x47/0x70 [ 131.210330][ T6118] ext4_put_super+0x624/0x7d0 [ 131.215008][ T6118] generic_shutdown_super+0xe3/0x210 [ 131.220290][ T6118] kill_block_super+0x2a/0x70 [ 131.224969][ T6118] ext4_kill_sb+0x42/0x80 [ 131.229287][ T6118] deactivate_locked_super+0x72/0x1c0 [ 131.234655][ T6118] deactivate_super+0x97/0xa0 [ 131.239328][ T6118] cleanup_mnt+0x269/0x2e0 [ 131.243741][ T6118] __cleanup_mnt+0x19/0x20 [ 131.248146][ T6118] task_work_run+0x12e/0x1a0 [ 131.252729][ T6118] exit_to_user_mode_loop+0xe4/0x100 [ 131.258010][ T6118] do_syscall_64+0x1d6/0x200 [ 131.262590][ T6118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.268488][ T6118] [ 131.270809][ T6118] value changed: 0x0a -> 0x10 [ 131.275489][ T6118] [ 131.277804][ T6118] Reported by Kernel Concurrency Sanitizer on: [ 131.283949][ T6118] CPU: 0 UID: 0 PID: 6118 Comm: syz-executor Tainted: G W 6.16.0-syzkaller #0 PREEMPT(voluntary) [ 131.296012][ T6118] Tainted: [W]=WARN [ 131.299801][ T6118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 131.309851][ T6118] ================================================================== [ 131.509969][ T5465] bridge_slave_1: left allmulticast mode [ 131.515673][ T5465] bridge_slave_1: left promiscuous mode [ 131.521494][ T5465] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.557895][ T5465] bridge_slave_0: left allmulticast mode [ 131.564916][ T5465] bridge_slave_0: left promiscuous mode [ 131.570676][ T5465] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.661431][ T5465] bond3 (unregistering): (slave bridge1): Releasing active interface [ 131.721392][ T5465] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 131.730495][ T5465] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 131.741382][ T5465] bond0 (unregistering): (slave team0): Releasing backup interface [ 131.749657][ T5465] bond0 (unregistering): Released all slaves [ 131.757092][ T5465] bond1 (unregistering): Released all slaves [ 131.766641][ T5465] bond2 (unregistering): (slave batadv1): Releasing backup interface [ 131.775185][ T5465] bond2 (unregistering): Released all slaves [ 131.783511][ T5465] bond3 (unregistering): Released all slaves [ 131.791783][ T5465] bond4 (unregistering): Released all slaves [ 131.801830][ T9774] : (slave syz_tun): Releasing backup interface [ 131.823894][ T5465] IPVS: stopping backup sync thread 4269 ... [ 131.830984][ T5465] hsr_slave_0: left promiscuous mode [ 131.836970][ T5465] hsr_slave_1: left promiscuous mode [ 131.842692][ T5465] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.867140][ T5465] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.890926][ T5465] team0 (unregistering): Port device team_slave_1 removed [ 131.902164][ T5465] team0 (unregistering): Port device team_slave_0 removed [ 132.201567][ T5465] IPVS: stop unused estimator thread 0... [ 132.443332][ T5465] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 132.453650][ T5465] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.492046][ T5465] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 132.502362][ T5465] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.542012][ T5465] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 132.552363][ T5465] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.591350][ T5465] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 132.601664][ T5465] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.851219][ T5465] bridge_slave_1: left allmulticast mode [ 132.856887][ T5465] bridge_slave_1: left promiscuous mode [ 132.862936][ T5465] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.870749][ T5465] bridge_slave_0: left allmulticast mode [ 132.876423][ T5465] bridge_slave_0: left promiscuous mode [ 132.882149][ T5465] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.890720][ T5465] bridge_slave_1: left allmulticast mode [ 132.896338][ T5465] bridge_slave_1: left promiscuous mode [ 132.902011][ T5465] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.909401][ T5465] bridge_slave_0: left allmulticast mode [ 132.915078][ T5465] bridge_slave_0: left promiscuous mode [ 132.920737][ T5465] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.961976][ T5465] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 132.972857][ T5465] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 132.981809][ T5465] bond0 (unregistering): Released all slaves [ 132.990028][ T5465] bond1 (unregistering): (slave batadv1): Releasing backup interface [ 132.998407][ T5465] bond1 (unregistering): Released all slaves [ 133.061832][ T5465]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 133.071039][ T5465]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 133.080766][ T5465]  (unregistering): Released all slaves [ 133.088501][ T5465] bond1 (unregistering): Released all slaves [ 133.096760][ T5465] bond2 (unregistering): (slave batadv1): Releasing backup interface [ 133.104908][ T5465] batadv1: left promiscuous mode [ 133.111321][ T5465] bond2 (unregistering): Released all slaves [ 133.119475][ T5465] bond3 (unregistering): (slave batadv2): Releasing backup interface [ 133.127543][ T5465] batadv2: left promiscuous mode [ 133.133868][ T5465] bond3 (unregistering): Released all slaves [ 133.181258][ T5465] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 133.190460][ T5465] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 133.199368][ T5465] bond0 (unregistering): Released all slaves [ 133.242494][ T5465] tipc: Disabling bearer [ 133.247454][ T5465] tipc: Left network mode [ 133.254442][ T5465] hsr_slave_0: left promiscuous mode [ 133.260035][ T5465] hsr_slave_1: left promiscuous mode [ 133.265498][ T5465] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 133.273331][ T5465] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 133.281176][ T5465] hsr_slave_0: left promiscuous mode [ 133.286678][ T5465] hsr_slave_1: left promiscuous mode [ 133.292422][ T5465] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 133.299930][ T5465] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 133.307281][ T5465] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.314725][ T5465] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 133.323397][ T5465] hsr_slave_0: left promiscuous mode [ 133.328893][ T5465] hsr_slave_1: left promiscuous mode [ 133.334423][ T5465] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 133.341941][ T5465] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 133.351328][ T5465] veth1_macvtap: left promiscuous mode [ 133.356901][ T5465] veth0_macvtap: left promiscuous mode [ 133.466639][ T5465] team0 (unregistering): Port device team_slave_1 removed [ 133.476185][ T5465] team0 (unregistering): Port device team_slave_0 removed [ 134.247164][ T5465] IPVS: stop unused estimator thread 0... [ 134.253277][ T5465] IPVS: stop unused estimator thread 0...