last executing test programs: 1m41.481425919s ago: executing program 3 (id=658): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f00000003c0)='io_uring_register\x00', r2}, 0x18) r3 = syz_io_uring_setup(0x371d, &(0x7f0000000440)={0x0, 0x6ef2, 0x400, 0xa, 0xffffff}, &(0x7f0000000380), &(0x7f0000000b00)) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) 1m41.409612746s ago: executing program 3 (id=660): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000d4c000/0x2000)=nil, 0x2000, &(0x7f00000002c0)='%\x92\x03\xc7\x87\xeb\xd9N\xdeZ*\bpO \x00U\xde\x18\xedI\xc9\x16S0\x01(g\x9eFNF\xdd\v\xf4\xa5 \x8atS\x85\xaf~\xe2\xee\x10\az\x99\x81\x88\xc6\xb6S\f\x10\xd6\xef\x8b\x1a\xde\xf8\xf4\x9a\x9a^\x88\xe4\xca\x94\x88\xa9^\xe6ny\xbdt\x1c\x14\xf8\x06 T+\x02\x85\x84\xcc\xbd\xa8@\xb1\xbc\xaf\xb9O\xc8~O\x00'/118) r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x1, 0x0) close(r1) socket(0x1d, 0x2, 0x6) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x10009, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000002c0)={0x80000002}) 1m41.36565277s ago: executing program 3 (id=661): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000000)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x40, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0xf5, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a30"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) 1m41.148446281s ago: executing program 3 (id=670): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000580)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x1b5008, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000540)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2145499, 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000040), 0x2000c00, 0x0) 1m41.072186039s ago: executing program 3 (id=675): r0 = fsopen(&(0x7f0000000340)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000f"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000740)='kfree\x00', r2}, 0x18) r3 = fsmount(r0, 0x0, 0x20) symlinkat(&(0x7f0000000000)='.\x00', r3, &(0x7f0000000140)='./file0\x00') openat(r3, &(0x7f0000000200)='./file0\x00', 0x414f02, 0x52abe154ad664fa4) 1m40.843211581s ago: executing program 3 (id=682): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="160000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000bc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{0x0, 0x200000, 0x0, 0x0, 0xffffffff, 0x8003}, [@TCA_NETEM_LOSS={0x4}]}}}]}, 0x50}}, 0x0) 1m40.832679472s ago: executing program 32 (id=682): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="160000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000bc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{0x0, 0x200000, 0x0, 0x0, 0xffffffff, 0x8003}, [@TCA_NETEM_LOSS={0x4}]}}}]}, 0x50}}, 0x0) 2.700137494s ago: executing program 4 (id=2967): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000240)='kfree\x00', r1, 0x0, 0x20}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = inotify_init() creat(&(0x7f00000000c0)='./file0\x00', 0x80) inotify_add_watch(r3, &(0x7f0000000080)='./file0\x00', 0x84000cdd) close_range(r2, 0xffffffffffffffff, 0x0) 2.576424776s ago: executing program 4 (id=2970): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0xf6ca, 0x80, 0x1, 0x376}, &(0x7f0000000440)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000200)=[{0x0}, {0x0}], 0x2}, 0x0, 0x3, 0x0, {0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r2, 0x47f8, 0x0, 0x0, 0x0, 0x0) 2.163939257s ago: executing program 5 (id=2974): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r2}, 0x18) inotify_init1(0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r3, 0xffffffffffffffff, 0x0) 2.067928476s ago: executing program 5 (id=2975): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000a00)='fib_table_lookup\x00', r2}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) 2.006324412s ago: executing program 5 (id=2976): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) socket$unix(0x1, 0x1, 0x0) syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x2) readv(r2, &(0x7f0000000640)=[{&(0x7f0000000400)=""/244, 0xf4}], 0x1) 1.843937418s ago: executing program 4 (id=2981): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x4bf30000) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f68737200000000140001"], 0xfc}}, 0x0) 1.782070784s ago: executing program 4 (id=2984): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r3, 0x9c3fa077fa966879, 0x70bd2c, 0x0, {{0x7e}, {@val={0x8}, @val={0xc, 0x99, {0x10, 0x6f}}}}}, 0x28}}, 0x0) 1.711676131s ago: executing program 5 (id=2986): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x800000003}, 0x18) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x2, @empty, 0xa098}, {0xa, 0x2, 0x9, @dev={0xfe, 0x80, '\x00', 0x1c}}, r4, 0x4040099d}}, 0x48) close_range(r2, 0xffffffffffffffff, 0x0) 1.588476163s ago: executing program 5 (id=2989): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x98142, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x4190, 0xaea}, 0x4105, 0x2e, 0x6, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x40000000000a9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) 1.558821376s ago: executing program 4 (id=2990): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100003}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x6, &(0x7f0000000680)=0x0) io_submit(r3, 0x2, &(0x7f0000000240)=[&(0x7f0000000000)={0x180a, 0x0, 0x3, 0x1, 0x0, r2, 0x0}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x3, r2, &(0x7f0000000580)="5810235a8c132dec85", 0x9, 0x1}]) 1.429478349s ago: executing program 4 (id=2993): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0xfffff000) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file4\x00', 0x1, 0x20) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', &(0x7f00000000c0)={0x8a001, 0x0, 0x20}, 0x18) 895.122922ms ago: executing program 1 (id=3005): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001d00)={&(0x7f00000017c0)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000500)=[@fadd={0x58, 0x114, 0x6, {{0x2e, 0x4}, &(0x7f0000000280)=0x6, 0x0, 0x97, 0x5, 0x7, 0x8000000000000000, 0x11, 0x1}}], 0x58}, 0x0) 782.240413ms ago: executing program 1 (id=3006): r0 = socket$inet_tcp(0x2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x200440c0) connect$inet(r0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) r2 = dup(r1) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000040)={0x23, 0x1, 0x8000, 0x41, 0x0, 0xffffffff, 0x0}) 717.683029ms ago: executing program 2 (id=3007): bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000005c0)='kfree_skb\x00', r2}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree_skb\x00', r3}, 0x10) close(r0) 650.527006ms ago: executing program 1 (id=3008): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000141200006c07010033d43afffb800000000000000000000000000010ff02000000000000000000000000000189"], 0x340a) 596.866381ms ago: executing program 2 (id=3009): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x20000000000000b3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r2}, &(0x7f0000000540), &(0x7f0000000100)=r3}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r2, &(0x7f0000000780)}, 0x20) 537.625777ms ago: executing program 0 (id=3010): r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580), &(0x7f00000005c0)=r2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getpeername$netlink(r0, 0x0, &(0x7f00000000c0)) 530.081028ms ago: executing program 2 (id=3011): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = add_key$fscrypt_v1(&(0x7f0000002a00), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000007c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa00", 0x28}, 0x48, 0xffffffffffffffff) r3 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r4 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f0000000480)={0x0, "6075ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x4, r4, r3, r3, 0x0) keyctl$KEYCTL_MOVE(0x4, r2, r2, 0x0, 0x0) 489.194012ms ago: executing program 2 (id=3013): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f0000000200)='skb_copy_datagram_iovec\x00', r0, 0x0, 0x6}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r1}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdc8}, 0x0) 488.675351ms ago: executing program 0 (id=3014): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f0000fcb000), 0x4) setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f0000000000)=0xfffffffe, 0x4) 399.233811ms ago: executing program 2 (id=3015): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0xd06d000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 398.894481ms ago: executing program 0 (id=3016): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000540)='kfree\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 398.447371ms ago: executing program 1 (id=3017): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000ff0f00000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000640)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x80001}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x10000, {0x0, 0x0, 0x0, r3, {0x5, 0x2}, {0x0, 0x6}, {0xfff3, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x8014}, 0x4000) 377.125423ms ago: executing program 0 (id=3018): socket(0x2, 0x80805, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='sys_enter\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) openat$vcsu(0xffffffffffffff9c, 0x0, 0xa0000, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) rt_sigaction(0x19, 0x0, 0x0, 0x8, &(0x7f0000000440)) 337.186996ms ago: executing program 0 (id=3019): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000007c5e0000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x5}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x101c0ca, &(0x7f0000000400)=ANY=[], 0x6, 0x2c0, &(0x7f0000000440)="$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") r2 = open(&(0x7f0000000140)='./file2\x00', 0x147842, 0x126) preadv2(r2, &(0x7f0000000300)=[{&(0x7f0000002200)=""/4096, 0x1000}], 0x1, 0x0, 0xffffffff, 0x7) 244.590296ms ago: executing program 0 (id=3020): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0xe8c40, 0x0) r1 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_user\x00', 0x275a, 0x0) ftruncate(r2, 0x2000009) sendfile(r1, r2, 0x0, 0x7ffff000) ppoll(&(0x7f00000000c0)=[{r1, 0xa010}], 0x1, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000200)=[{&(0x7f0000000f40)=""/4096, 0x1001}], 0x1) 222.746458ms ago: executing program 5 (id=3021): perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r1, 0x2) r2 = open(&(0x7f0000000180)='.\x00', 0x10000, 0x2) flock(r2, 0x2) 100.92967ms ago: executing program 1 (id=3022): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r2}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) 56.130084ms ago: executing program 1 (id=3023): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r0, 0x0) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002540)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = io_uring_setup(0x17f8, &(0x7f0000000080)={0x0, 0xffffafff, 0x0, 0x0, 0x33d}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 0s ago: executing program 2 (id=3024): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) kernel console output (not intermixed with test programs): onsistent configuration, please check. [ 104.508351][ T7948] team0: Mode changed to "loadbalance" [ 104.543753][ T7956] loop0: detected capacity change from 0 to 128 [ 104.553844][ T7954] siw: device registration error -23 [ 104.661674][ T7964] xt_l2tp: missing protocol rule (udp|l2tpip) [ 104.819003][ T7985] pimreg: entered allmulticast mode [ 104.828581][ T7985] pimreg: left allmulticast mode [ 104.840203][ T7987] loop2: detected capacity change from 0 to 7 [ 105.018967][ T8001] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 105.047665][ T8004] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=4 sclass=netlink_tcpdiag_socket pid=8004 comm=syz.5.1601 [ 105.084729][ T7989] loop0: detected capacity change from 0 to 512 [ 105.097365][ T7989] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 105.105717][ T7989] EXT4-fs (loop0): orphan cleanup on readonly fs [ 105.113598][ T7989] EXT4-fs error (device loop0): ext4_do_update_inode:5624: inode #16: comm syz.0.1594: corrupted inode contents [ 105.131137][ T7989] EXT4-fs (loop0): Remounting filesystem read-only [ 105.138099][ T7989] EXT4-fs (loop0): 1 truncate cleaned up [ 105.146090][ T1621] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 105.156711][ T1621] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 105.178320][ T1621] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 105.189020][ T7989] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 105.189504][ T8017] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.256730][ T8017] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.267722][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.335401][ T8025] bridge0: port 4(batadv2) entered blocking state [ 105.341945][ T8025] bridge0: port 4(batadv2) entered disabled state [ 105.353668][ T8025] batadv2: entered allmulticast mode [ 105.360190][ T8025] batadv2: entered promiscuous mode [ 105.366740][ T8017] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.416676][ T8017] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.481875][ T6000] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.493773][ T6000] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.504611][ T6000] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.524919][ T317] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.835840][ T1621] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 105.845119][ T1621] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 105.859269][ T8065] loop1: detected capacity change from 0 to 128 [ 105.999593][ T8072] gretap0: entered promiscuous mode [ 106.004984][ T8072] macsec1: entered promiscuous mode [ 106.010306][ T8072] macsec1: entered allmulticast mode [ 106.015646][ T8072] gretap0: entered allmulticast mode [ 106.022481][ T8072] gretap0: left allmulticast mode [ 106.027649][ T8072] gretap0: left promiscuous mode [ 106.146904][ T8080] loop1: detected capacity change from 0 to 128 [ 106.196393][ T8083] loop5: detected capacity change from 0 to 128 [ 106.221270][ T8083] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 106.244276][ T8083] ext4 filesystem being mounted at /231/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 106.315687][ T5189] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 107.408436][ T8125] __nla_validate_parse: 5 callbacks suppressed [ 107.408453][ T8125] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1652'. [ 107.489925][ T8132] program syz.2.1645 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.768809][ T8166] futex_wake_op: syz.5.1667 tries to shift op by 144; fix this program [ 107.796278][ T8166] netlink: 5452 bytes leftover after parsing attributes in process `syz.5.1667'. [ 107.824759][ T8171] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1671'. [ 107.889353][ T8179] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1675'. [ 107.937523][ T8183] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1678'. [ 107.971114][ T8185] lo speed is unknown, defaulting to 1000 [ 108.641450][ T8215] loop4: detected capacity change from 0 to 1024 [ 108.657041][ T8215] EXT4-fs: Ignoring removed oldalloc option [ 108.663050][ T8215] EXT4-fs: Ignoring removed bh option [ 108.697479][ T8215] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.726979][ T8215] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt. [ 108.846101][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.855229][ T29] kauditd_printk_skb: 146 callbacks suppressed [ 108.855246][ T29] audit: type=1400 audit(1760173119.153:1928): avc: denied { write } for pid=8221 comm="syz.1.1692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 109.030900][ T8235] bridge_slave_0: left promiscuous mode [ 109.036798][ T8235] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.046833][ T8237] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1700'. [ 109.048280][ T8235] bridge_slave_1: left allmulticast mode [ 109.061578][ T8235] bridge_slave_1: left promiscuous mode [ 109.067290][ T8235] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.090642][ T8235] : (slave bond_slave_0): Releasing backup interface [ 109.120860][ T8237] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1700'. [ 109.130956][ T8235] : (slave bond_slave_1): Releasing backup interface [ 109.176506][ T8235] team0: Port device team_slave_0 removed [ 109.200654][ T8235] team0: Port device team_slave_1 removed [ 109.223298][ T8235] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.230756][ T8235] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.241736][ T8235] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.249232][ T8235] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.272388][ T8235] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 109.275962][ T8245] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1703'. [ 109.303675][ T8238] team0: Mode changed to "loadbalance" [ 109.323611][ T29] audit: type=1400 audit(1760173119.633:1929): avc: denied { write } for pid=8244 comm="syz.4.1703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 109.380777][ T8247] loop1: detected capacity change from 0 to 1024 [ 109.391305][ T8251] loop4: detected capacity change from 0 to 1024 [ 109.408241][ T8251] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 109.408440][ T8247] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.432771][ T8247] ext4 filesystem being mounted at /264/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.433019][ T8251] ext4 filesystem being mounted at /328/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.471884][ T8251] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: block 3: comm syz.4.1705: lblock 3 mapped to illegal pblock 3 (length 3) [ 109.495389][ T8251] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 109.507889][ T8251] EXT4-fs (loop4): This should not happen!! Data will be lost [ 109.507889][ T8251] [ 109.528738][ T29] audit: type=1400 audit(1760173119.843:1930): avc: denied { map } for pid=8250 comm="syz.4.1705" path="/328/file1/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 109.551966][ T8251] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 3: comm syz.4.1705: lblock 3 mapped to illegal pblock 3 (length 1) [ 109.562152][ T29] audit: type=1400 audit(1760173119.843:1931): avc: denied { execute } for pid=8250 comm="syz.4.1705" path="/328/file1/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 109.590390][ T8251] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 3: comm syz.4.1705: lblock 3 mapped to illegal pblock 3 (length 1) [ 109.605165][ T8251] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 3: comm syz.4.1705: lblock 3 mapped to illegal pblock 3 (length 1) [ 109.620890][ T8261] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 3: comm syz.4.1705: lblock 3 mapped to illegal pblock 3 (length 1) [ 109.645479][ T8260] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1704: bg 0: block 393: padding at end of block bitmap is not set [ 109.645543][ T8261] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 3: comm syz.4.1705: lblock 3 mapped to illegal pblock 3 (length 1) [ 109.660216][ T8260] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 352 with max blocks 56 with error 117 [ 109.675683][ T8251] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 3: comm syz.4.1705: lblock 3 mapped to illegal pblock 3 (length 1) [ 109.686542][ T8260] EXT4-fs (loop1): This should not happen!! Data will be lost [ 109.686542][ T8260] [ 109.687563][ T8260] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 28 [ 109.701534][ T8250] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 3: comm syz.4.1705: lblock 3 mapped to illegal pblock 3 (length 1) [ 109.710307][ T8260] EXT4-fs (loop1): This should not happen!! Data will be lost [ 109.710307][ T8260] [ 109.710362][ T8260] EXT4-fs (loop1): Total free blocks count 0 [ 109.710375][ T8260] EXT4-fs (loop1): Free/Dirty block details [ 109.710386][ T8260] EXT4-fs (loop1): free_blocks=0 [ 109.710398][ T8260] EXT4-fs (loop1): dirty_blocks=16 [ 109.723408][ T8251] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 3: comm syz.4.1705: lblock 3 mapped to illegal pblock 3 (length 1) [ 109.736881][ T8260] EXT4-fs (loop1): Block reservation details [ 109.789220][ T8261] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 3: comm syz.4.1705: lblock 3 mapped to illegal pblock 3 (length 1) [ 109.853939][ T29] audit: type=1326 audit(1760173120.163:1932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8264 comm="syz.1.1708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87a07ceec9 code=0x7ffc0000 [ 109.919755][ T29] audit: type=1326 audit(1760173120.193:1933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8264 comm="syz.1.1708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f87a07ceec9 code=0x7ffc0000 [ 109.943323][ T29] audit: type=1326 audit(1760173120.193:1934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8264 comm="syz.1.1708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87a07ceec9 code=0x7ffc0000 [ 109.966975][ T29] audit: type=1326 audit(1760173120.193:1935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8264 comm="syz.1.1708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7f87a07ceec9 code=0x7ffc0000 [ 109.990477][ T29] audit: type=1326 audit(1760173120.193:1936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8264 comm="syz.1.1708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87a07ceec9 code=0x7ffc0000 [ 110.013986][ T29] audit: type=1326 audit(1760173120.193:1937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8264 comm="syz.1.1708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87a07ceec9 code=0x7ffc0000 [ 110.249639][ T6000] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 110.262025][ T6000] EXT4-fs (loop4): This should not happen!! Data will be lost [ 110.262025][ T6000] [ 110.286660][ T8294] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1724'. [ 110.295493][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 110.307136][ T8294] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1724'. [ 110.586920][ T8338] bond0: (slave team0): Releasing backup interface [ 110.607834][ T8338] batman_adv: batadv0: Interface deactivated: dummy0 [ 110.614634][ T8338] batman_adv: batadv0: Removing interface: dummy0 [ 110.641563][ T8338] bridge_slave_0: left allmulticast mode [ 110.647316][ T8338] bridge_slave_0: left promiscuous mode [ 110.653034][ T8338] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.670693][ T8338] bridge_slave_1: left allmulticast mode [ 110.676444][ T8338] bridge_slave_1: left promiscuous mode [ 110.682219][ T8338] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.692481][ T8338] bond0: (slave bond_slave_0): Releasing backup interface [ 110.712570][ T8338] bond0: (slave bond_slave_1): Releasing backup interface [ 110.738516][ T8338] team0: Port device team_slave_0 removed [ 110.766146][ T8338] team0: Port device team_slave_1 removed [ 110.779878][ T8338] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.787379][ T8338] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.806169][ T8338] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.813633][ T8338] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.823828][ T8338] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 110.841205][ T8345] team0: Mode changed to "loadbalance" [ 110.968775][ T8379] loop4: detected capacity change from 0 to 128 [ 111.140647][ T8402] loop2: detected capacity change from 0 to 1024 [ 111.147291][ T8379] bio_check_eod: 3262 callbacks suppressed [ 111.147367][ T8379] syz.4.1732: attempt to access beyond end of device [ 111.147367][ T8379] loop4: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 111.195852][ T8379] syz.4.1732: attempt to access beyond end of device [ 111.195852][ T8379] loop4: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 111.210019][ T8402] EXT4-fs: inline encryption not supported [ 111.215969][ T8402] EXT4-fs: Ignoring removed i_version option [ 111.232437][ T8402] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 111.259463][ T8379] syz.4.1732: attempt to access beyond end of device [ 111.259463][ T8379] loop4: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 111.485700][ T8402] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 2: comm syz.2.1733: lblock 2 mapped to illegal pblock 2 (length 1) [ 111.546337][ T8402] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.1733: lblock 0 mapped to illegal pblock 48 (length 1) [ 111.606067][ T8443] loop5: detected capacity change from 0 to 512 [ 111.619152][ T8402] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.1733: Failed to acquire dquot type 0 [ 111.633418][ T8443] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 111.648835][ T8402] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6305: Corrupt filesystem [ 111.659693][ T8443] EXT4-fs (loop5): failed to initialize system zone (-117) [ 111.667149][ T8443] EXT4-fs (loop5): mount failed [ 111.672283][ T8402] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.1733: mark_inode_dirty error [ 111.684729][ T8402] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 111.695371][ T8402] EXT4-fs (loop2): 1 orphan inode deleted [ 111.725529][ T1621] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 111.743267][ T8402] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.765038][ T1621] EXT4-fs error (device loop2): ext4_release_dquot:6981: comm kworker/u8:6: Failed to release dquot type 0 [ 111.837071][ T4804] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.847599][ T4804] EXT4-fs error (device loop2): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 111.870833][ T4804] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6305: Corrupt filesystem [ 111.893713][ T4804] EXT4-fs error (device loop2): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 111.981701][ T8490] bridge_slave_0: left allmulticast mode [ 111.987439][ T8490] bridge_slave_0: left promiscuous mode [ 111.993239][ T8490] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.003608][ T8490] bridge_slave_1: left allmulticast mode [ 112.009419][ T8490] bridge_slave_1: left promiscuous mode [ 112.015301][ T8490] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.024226][ T8490] bond0: (slave bond_slave_0): Releasing backup interface [ 112.032754][ T8490] bond0: (slave bond_slave_1): Releasing backup interface [ 112.042906][ T8490] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.050741][ T8490] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.075752][ T8490] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 112.419795][ T8530] loop1: detected capacity change from 0 to 512 [ 112.447737][ T8530] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 112.461406][ T8530] EXT4-fs (loop1): 1 truncate cleaned up [ 112.470830][ T8530] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.498748][ T8530] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.1763' sets config #-1 [ 112.509084][ T8530] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.1763' sets config #1 [ 112.542145][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.561461][ T8548] netlink: 'syz.2.1780': attribute type 4 has an invalid length. [ 112.682684][ T8566] loop0: detected capacity change from 0 to 1024 [ 112.761855][ T8566] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.804420][ T8566] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4193: comm syz.0.1777: Allocating blocks 449-513 which overlap fs metadata [ 112.895725][ T8563] EXT4-fs (loop0): pa ffff8881071d15b0: logic 48, phys. 177, len 21 [ 112.903819][ T8563] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 112.926078][ T8578] __nla_validate_parse: 4 callbacks suppressed [ 112.926098][ T8578] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1782'. [ 112.973551][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.099263][ T8593] sctp: [Deprecated]: syz.2.1789 (pid 8593) Use of int in max_burst socket option. [ 113.099263][ T8593] Use struct sctp_assoc_value instead [ 113.129121][ T8597] random: crng reseeded on system resumption [ 113.147759][ T8595] loop5: detected capacity change from 0 to 2048 [ 113.186880][ T8595] loop5: p1 < > p4 [ 113.195448][ T8595] loop5: p4 size 8388608 extends beyond EOD, truncated [ 113.209342][ T8605] loop0: detected capacity change from 0 to 256 [ 113.231394][ T8605] FAT-fs (loop0): bogus number of FAT sectors [ 113.237639][ T8605] FAT-fs (loop0): Can't find a valid FAT filesystem [ 113.313573][ T8613] loop2: detected capacity change from 0 to 128 [ 113.358942][ T8613] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 113.366866][ T8613] FAT-fs (loop2): Filesystem has been set read-only [ 113.381116][ T8613] syz.2.1799: attempt to access beyond end of device [ 113.381116][ T8613] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 113.403584][ T8627] loop4: detected capacity change from 0 to 512 [ 113.411161][ T8613] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 113.419305][ T8613] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 113.428081][ T8613] syz.2.1799: attempt to access beyond end of device [ 113.428081][ T8613] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 113.442316][ T8629] syz.2.1799: attempt to access beyond end of device [ 113.442316][ T8629] loop2: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 113.443173][ T8627] EXT4-fs (loop4): too many log groups per flexible block group [ 113.455788][ T8629] Buffer I/O error on dev loop2, logical block 2065, async page read [ 113.464087][ T8627] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 113.478626][ T8627] EXT4-fs (loop4): mount failed [ 113.489777][ T8631] lo speed is unknown, defaulting to 1000 [ 113.495605][ T8613] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 113.495642][ T8613] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 113.511410][ T8613] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 113.548196][ T8629] syz.2.1799: attempt to access beyond end of device [ 113.548196][ T8629] loop2: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 113.561602][ T8629] Buffer I/O error on dev loop2, logical block 2066, async page read [ 113.584336][ T8629] syz.2.1799: attempt to access beyond end of device [ 113.584336][ T8629] loop2: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 113.597749][ T8629] Buffer I/O error on dev loop2, logical block 2067, async page read [ 113.606128][ T8629] syz.2.1799: attempt to access beyond end of device [ 113.606128][ T8629] loop2: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 113.619576][ T8629] Buffer I/O error on dev loop2, logical block 2068, async page read [ 113.627839][ T8629] syz.2.1799: attempt to access beyond end of device [ 113.627839][ T8629] loop2: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 113.641174][ T8629] Buffer I/O error on dev loop2, logical block 2069, async page read [ 113.649450][ T8629] Buffer I/O error on dev loop2, logical block 2070, async page read [ 113.649933][ T8645] veth0: entered promiscuous mode [ 113.657779][ T8629] Buffer I/O error on dev loop2, logical block 2071, async page read [ 113.671687][ T8645] veth0: left promiscuous mode [ 113.690743][ T8629] Buffer I/O error on dev loop2, logical block 2072, async page read [ 113.699030][ T8613] Buffer I/O error on dev loop2, logical block 2065, async page read [ 113.717790][ T8613] Buffer I/O error on dev loop2, logical block 2066, async page read [ 113.857413][ T8661] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1819'. [ 113.933476][ T29] kauditd_printk_skb: 136 callbacks suppressed [ 113.933553][ T29] audit: type=1400 audit(1760173124.243:2071): avc: denied { create } for pid=8668 comm="syz.5.1823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 114.101265][ T8672] loop5: detected capacity change from 0 to 512 [ 114.113820][ T8672] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.1824: casefold flag without casefold feature [ 114.162566][ T8672] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.1824: couldn't read orphan inode 15 (err -117) [ 114.187070][ T8672] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.213573][ T29] audit: type=1400 audit(1760173124.523:2072): avc: denied { create } for pid=8671 comm="syz.5.1824" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 114.257256][ T5189] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.260733][ T29] audit: type=1400 audit(1760173124.543:2073): avc: denied { read } for pid=8671 comm="syz.5.1824" name="file0" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 114.297178][ T8681] loop1: detected capacity change from 0 to 1024 [ 114.304294][ T8681] EXT4-fs: Ignoring removed nobh option [ 114.309971][ T8681] EXT4-fs: Ignoring removed bh option [ 114.346376][ T8681] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.412184][ T8681] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4193: comm syz.1.1828: Allocating blocks 449-513 which overlap fs metadata [ 114.427019][ T8681] EXT4-fs (loop1): Remounting filesystem read-only [ 114.443542][ T8680] EXT4-fs (loop1): pa ffff8881071d1770: logic 48, phys. 177, len 21 [ 114.476282][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.499290][ T29] audit: type=1400 audit(1760173124.813:2074): avc: denied { ioctl } for pid=8698 comm="syz.0.1835" path="/dev/input/event0" dev="devtmpfs" ino=242 ioctlcmd=0x4592 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 114.654321][ T29] audit: type=1326 audit(1760173124.963:2075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8724 comm="syz.1.1847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87a07ceec9 code=0x7ffc0000 [ 114.728132][ T29] audit: type=1326 audit(1760173124.993:2076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8724 comm="syz.1.1847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f87a07ceec9 code=0x7ffc0000 [ 114.751720][ T29] audit: type=1326 audit(1760173124.993:2077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8724 comm="syz.1.1847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87a07ceec9 code=0x7ffc0000 [ 114.775258][ T29] audit: type=1326 audit(1760173124.993:2078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8724 comm="syz.1.1847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f87a07ceec9 code=0x7ffc0000 [ 114.798934][ T29] audit: type=1326 audit(1760173124.993:2079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8724 comm="syz.1.1847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87a07ceec9 code=0x7ffc0000 [ 114.822422][ T29] audit: type=1326 audit(1760173124.993:2080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8724 comm="syz.1.1847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f87a07ceec9 code=0x7ffc0000 [ 114.929594][ T8735] veth0: entered promiscuous mode [ 114.937257][ T8735] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1852'. [ 115.155898][ T8762] netlink: 'syz.4.1865': attribute type 13 has an invalid length. [ 115.295846][ T8778] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1870'. [ 115.300207][ T5343] IPVS: starting estimator thread 0... [ 115.395382][ T8782] IPVS: using max 2064 ests per chain, 103200 per kthread [ 115.468991][ T8762] bridge0: port 3(vlan0) entered disabled state [ 115.630860][ T8780] bridge0: entered promiscuous mode [ 115.640684][ T8780] macvtap1: entered allmulticast mode [ 115.646268][ T8780] bridge0: entered allmulticast mode [ 115.667831][ T8780] bridge0: port 5(macvtap1) entered blocking state [ 115.674521][ T8780] bridge0: port 5(macvtap1) entered disabled state [ 115.706891][ T8805] unsupported nla_type 52263 [ 115.727331][ T8780] bridge0: left allmulticast mode [ 115.732446][ T8780] bridge0: left promiscuous mode [ 115.741154][ T8807] loop4: detected capacity change from 0 to 512 [ 115.799251][ T8794] vlan3: entered allmulticast mode [ 115.804497][ T8794] bridge_slave_0: entered allmulticast mode [ 115.814059][ T6284] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 115.822542][ T6284] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.841216][ T6284] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 115.849758][ T6284] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.858467][ T6284] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 115.867117][ T6284] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.877552][ T6284] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 115.886172][ T6284] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.961280][ T8822] loop5: detected capacity change from 0 to 1024 [ 115.977873][ T8822] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.092618][ T8846] netlink: 'syz.2.1896': attribute type 4 has an invalid length. [ 116.111559][ T8846] netlink: 'syz.2.1896': attribute type 4 has an invalid length. [ 116.153887][ T8853] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1899'. [ 116.174608][ T6284] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.188430][ T6284] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.203492][ T6284] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.212224][ T6284] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.402630][ T8882] loop1: detected capacity change from 0 to 128 [ 116.441246][ T8882] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 116.453792][ T8882] ext4 filesystem being mounted at /304/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 116.590803][ T3311] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 116.628804][ T8905] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1922'. [ 116.695779][ T8912] syz_tun: entered allmulticast mode [ 116.701868][ T8912] syz_tun: left allmulticast mode [ 116.724120][ T5189] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.736885][ T8916] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1927'. [ 116.998550][ T8935] loop0: detected capacity change from 0 to 764 [ 117.005938][ T8935] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 117.019317][ T8935] Symlink component flag not implemented [ 117.025857][ T8935] Symlink component flag not implemented (7) [ 117.242602][ T8951] lo speed is unknown, defaulting to 1000 [ 117.307912][ T8951] chnl_net:caif_netlink_parms(): no params data found [ 117.362340][ T8951] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.369557][ T8951] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.376966][ T8951] bridge_slave_0: entered allmulticast mode [ 117.383419][ T8951] bridge_slave_0: entered promiscuous mode [ 117.407706][ T6286] bond1 (unregistering): (slave geneve2): Releasing active interface [ 117.537324][ T6286] bond0 (unregistering): Released all slaves [ 117.546051][ T6286] bond1 (unregistering): Released all slaves [ 117.554613][ T8951] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.561807][ T8951] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.569155][ T8951] bridge_slave_1: entered allmulticast mode [ 117.576198][ T8951] bridge_slave_1: entered promiscuous mode [ 117.592532][ T8975] pimreg: entered allmulticast mode [ 117.611497][ T8951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 117.620767][ T8973] pimreg: left allmulticast mode [ 117.639746][ T6286] tipc: Disabling bearer [ 117.645102][ T6286] tipc: Left network mode [ 117.651574][ T8951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 117.673339][ T6286] hsr_slave_0: left promiscuous mode [ 117.684363][ T6286] hsr_slave_1: left promiscuous mode [ 117.694336][ T8979] netlink: 'syz.0.1947': attribute type 13 has an invalid length. [ 117.959442][ T8991] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8991 comm=syz.4.1961 [ 118.069884][ T9002] netlink: 'syz.4.1957': attribute type 1 has an invalid length. [ 118.224248][ T8979] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.681983][ T9032] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1969'. [ 118.806138][ T8979] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.837213][ T8979] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.933421][ T3394] lo speed is unknown, defaulting to 1000 [ 118.939409][ T3394] syz2: Port: 1 Link DOWN [ 118.944727][ T8951] team0: Port device team_slave_0 added [ 118.957480][ T8951] team0: Port device team_slave_1 added [ 118.974918][ T9002] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 118.990366][ T9034] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1969'. [ 119.007914][ T317] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 119.016365][ T317] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.035779][ T9044] SELinux: security policydb version 16 (MLS) not backwards compatible [ 119.044166][ T9044] SELinux: failed to load policy [ 119.049224][ T29] kauditd_printk_skb: 107 callbacks suppressed [ 119.049245][ T29] audit: type=1400 audit(1760173129.353:2188): avc: denied { load_policy } for pid=9042 comm="syz.1.1970" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 119.089482][ T317] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 119.097997][ T317] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.137138][ T8951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.144187][ T8951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 119.170205][ T8951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.192404][ T317] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 119.200934][ T317] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.212736][ T9053] vlan3: entered allmulticast mode [ 119.233184][ T9055] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1974'. [ 119.252896][ T9051] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 119.269242][ T8951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.276312][ T8951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 119.302347][ T8951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 119.324229][ T317] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 119.332762][ T317] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.417584][ T9064] netlink: 2028 bytes leftover after parsing attributes in process `syz.4.1978'. [ 119.424846][ T8951] hsr_slave_0: entered promiscuous mode [ 119.426786][ T9064] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1978'. [ 119.446548][ T8951] hsr_slave_1: entered promiscuous mode [ 119.453056][ T8951] debugfs: 'hsr0' already exists in 'hsr' [ 119.458923][ T8951] Cannot create hsr debugfs directory [ 119.462321][ T9067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.473903][ T29] audit: type=1400 audit(1760173129.773:2189): avc: denied { write } for pid=9066 comm="syz.1.1981" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 119.479158][ T9067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.497096][ T29] audit: type=1400 audit(1760173129.773:2190): avc: denied { ioctl } for pid=9066 comm="syz.1.1981" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 119.721802][ T29] audit: type=1400 audit(1760173130.033:2191): avc: denied { mount } for pid=9070 comm="syz.5.1982" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 119.812713][ T8951] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 119.827486][ T8951] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 119.837674][ T8951] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 119.847050][ T8951] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 119.884328][ T8951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.897218][ T8951] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.920403][ T5997] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.927520][ T5997] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.936706][ T5997] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.943855][ T5997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.020710][ T8951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.081059][ T29] audit: type=1400 audit(1760173130.393:2192): avc: denied { create } for pid=9089 comm="syz.1.1985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 120.180417][ T9097] team0: Port device vlan3 added [ 120.190624][ T9075] Set syz1 is full, maxelem 65536 reached [ 120.249591][ T8951] veth0_vlan: entered promiscuous mode [ 120.257685][ T8951] veth1_vlan: entered promiscuous mode [ 120.271531][ T8951] veth0_macvtap: entered promiscuous mode [ 120.279631][ T8951] veth1_macvtap: entered promiscuous mode [ 120.285608][ T29] audit: type=1326 audit(1760173130.573:2193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9102 comm="syz.4.1988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc163e5eec9 code=0x7ffc0000 [ 120.309172][ T29] audit: type=1326 audit(1760173130.573:2194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9102 comm="syz.4.1988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7fc163e5eec9 code=0x7ffc0000 [ 120.332630][ T29] audit: type=1326 audit(1760173130.573:2195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9102 comm="syz.4.1988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc163e5eec9 code=0x7ffc0000 [ 120.356087][ T29] audit: type=1326 audit(1760173130.573:2196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9102 comm="syz.4.1988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7fc163e5eec9 code=0x7ffc0000 [ 120.379495][ T29] audit: type=1326 audit(1760173130.573:2197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9102 comm="syz.4.1988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc163e5eec9 code=0x7ffc0000 [ 120.420006][ T8951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.442908][ T8951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.454496][ T317] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.477363][ T317] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.498125][ T317] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.512281][ T317] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.580057][ T9120] futex_wake_op: syz.4.1995 tries to shift op by 144; fix this program [ 120.595642][ T9120] netlink: 5452 bytes leftover after parsing attributes in process `syz.4.1995'. [ 120.619670][ T9122] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1994'. [ 120.751179][ T9134] lo speed is unknown, defaulting to 1000 [ 120.854199][ T9146] loop5: detected capacity change from 0 to 1024 [ 120.890661][ T9146] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.913339][ T9150] loop4: detected capacity change from 0 to 1024 [ 120.919937][ T9146] ext4 filesystem being mounted at /311/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.920129][ T9150] EXT4-fs: inline encryption not supported [ 120.936383][ T9150] EXT4-fs: Ignoring removed i_version option [ 120.962442][ T9157] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2009'. [ 120.972299][ T9150] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 121.028763][ T9150] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.2005: lblock 2 mapped to illegal pblock 2 (length 1) [ 121.106614][ T9164] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2011'. [ 121.116233][ T9150] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.2005: lblock 0 mapped to illegal pblock 48 (length 1) [ 121.131280][ T9150] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.2005: Failed to acquire dquot type 0 [ 121.138466][ T9165] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2006: bg 0: block 393: padding at end of block bitmap is not set [ 121.171407][ T9150] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6305: Corrupt filesystem [ 121.185450][ T9150] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.2005: mark_inode_dirty error [ 121.210514][ T9150] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 121.221146][ T9165] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 272 with max blocks 44 with error 117 [ 121.233857][ T9165] EXT4-fs (loop5): This should not happen!! Data will be lost [ 121.233857][ T9165] [ 121.248709][ T9150] EXT4-fs (loop4): 1 orphan inode deleted [ 121.262836][ T9150] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.269880][ T9165] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 316 with max blocks 4 with error 117 [ 121.287602][ T9165] EXT4-fs (loop5): This should not happen!! Data will be lost [ 121.287602][ T9165] [ 121.298643][ T6000] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:10: lblock 1 mapped to illegal pblock 1 (length 1) [ 121.313744][ T6000] EXT4-fs error (device loop4): ext4_release_dquot:6981: comm kworker/u8:10: Failed to release dquot type 0 [ 121.362278][ T1621] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 28 [ 121.374832][ T1621] EXT4-fs (loop5): This should not happen!! Data will be lost [ 121.374832][ T1621] [ 121.384551][ T1621] EXT4-fs (loop5): Total free blocks count 0 [ 121.390579][ T1621] EXT4-fs (loop5): Free/Dirty block details [ 121.396519][ T1621] EXT4-fs (loop5): free_blocks=0 [ 121.419145][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.445381][ T3312] EXT4-fs error (device loop4): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 121.475690][ T3312] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6305: Corrupt filesystem [ 121.505608][ T3312] EXT4-fs error (device loop4): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 121.512609][ T9176] loop2: detected capacity change from 0 to 4096 [ 121.552573][ T9176] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.602977][ T8951] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.603183][ T9184] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 121.618503][ T9184] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 121.626093][ T9184] vhci_hcd vhci_hcd.0: Device attached [ 121.626227][ T9188] netlink: 'syz.0.2019': attribute type 1 has an invalid length. [ 121.640691][ T9184] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(5) [ 121.647250][ T9184] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 121.654870][ T9184] vhci_hcd vhci_hcd.0: Device attached [ 121.664606][ T9188] 8021q: adding VLAN 0 to HW filter on device bond3 [ 121.687803][ T9188] bond3: (slave geneve2): making interface the new active one [ 121.697707][ T9188] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 121.706512][ T6286] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.716351][ T9195] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(8) [ 121.716414][ T6286] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.722900][ T9195] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 121.731259][ T6286] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.738812][ T9195] vhci_hcd vhci_hcd.0: Device attached [ 121.747244][ T6286] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.762983][ T9184] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 121.781130][ T9200] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2022'. [ 121.790797][ T9184] vhci_hcd vhci_hcd.0: pdev(5) rhport(4) sockfd(11) [ 121.797441][ T9184] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 121.805261][ T9184] vhci_hcd vhci_hcd.0: Device attached [ 121.826312][ T9184] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 121.846742][ T9184] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 121.856179][ T9184] vhci_hcd vhci_hcd.0: pdev(5) rhport(7) sockfd(17) [ 121.862822][ T9184] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 121.870789][ T9184] vhci_hcd vhci_hcd.0: Device attached [ 121.880331][ T9210] vhci_hcd: connection closed [ 121.880482][ T317] vhci_hcd: stop threads [ 121.880742][ T9203] vhci_hcd: connection closed [ 121.885394][ T317] vhci_hcd: release socket [ 121.885459][ T317] vhci_hcd: disconnect device [ 121.903903][ T9186] vhci_hcd: connection closed [ 121.904022][ T9189] vhci_hcd: connection closed [ 121.908786][ T9196] vhci_hcd: connection closed [ 121.913976][ T8772] usb 11-1: new low-speed USB device number 2 using vhci_hcd [ 121.926428][ T9187] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 121.932715][ T6286] vhci_hcd: stop threads [ 121.937220][ T6286] vhci_hcd: release socket [ 121.941674][ T6286] vhci_hcd: disconnect device [ 121.948731][ T6286] vhci_hcd: stop threads [ 121.953015][ T6286] vhci_hcd: release socket [ 121.957525][ T6286] vhci_hcd: disconnect device [ 121.965681][ T6286] vhci_hcd: stop threads [ 121.969974][ T6286] vhci_hcd: release socket [ 121.974439][ T6286] vhci_hcd: disconnect device [ 121.977547][ T9214] loop0: detected capacity change from 0 to 128 [ 121.986518][ T9214] FAT-fs (loop0): Directory bread(block 162) failed [ 121.993409][ T6286] vhci_hcd: stop threads [ 121.993460][ T9214] FAT-fs (loop0): Directory bread(block 163) failed [ 121.997780][ T6286] vhci_hcd: release socket [ 121.997795][ T6286] vhci_hcd: disconnect device [ 122.008133][ T9214] FAT-fs (loop0): Directory bread(block 164) failed [ 122.020340][ T9214] FAT-fs (loop0): Directory bread(block 165) failed [ 122.027852][ T9214] FAT-fs (loop0): Directory bread(block 166) failed [ 122.034513][ T9214] FAT-fs (loop0): Directory bread(block 167) failed [ 122.041312][ T9214] FAT-fs (loop0): Directory bread(block 168) failed [ 122.048176][ T9214] FAT-fs (loop0): Directory bread(block 169) failed [ 122.316998][ T9242] netlink: 'syz.1.2034': attribute type 1 has an invalid length. [ 122.332310][ T9242] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.353043][ T9242] bond0: (slave geneve2): making interface the new active one [ 122.362016][ T9242] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 122.422387][ T9248] lo speed is unknown, defaulting to 1000 [ 122.538277][ T9258] loop5: detected capacity change from 0 to 512 [ 122.552630][ T9248] loop1: detected capacity change from 0 to 512 [ 122.553902][ T9258] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 122.571203][ T9258] EXT4-fs (loop5): 1 truncate cleaned up [ 122.571473][ T9248] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.2037: error while reading EA inode 32 err=-116 [ 122.590187][ T9258] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.602894][ T9248] EXT4-fs (loop1): Remounting filesystem read-only [ 122.609749][ T9248] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 122.624637][ T9258] usb usb1: usbfs: interface 0 claimed by hub while 'syz.5.2041' sets config #-1 [ 122.634023][ T9248] EXT4-fs (loop1): 1 orphan inode deleted [ 122.640419][ T9258] usb usb1: usbfs: interface 0 claimed by hub while 'syz.5.2041' sets config #1 [ 122.640946][ T9248] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.662243][ T9248] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.687010][ T9264] lo speed is unknown, defaulting to 1000 [ 122.693974][ T5189] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.724337][ T9266] loop5: detected capacity change from 0 to 1024 [ 122.738190][ T9266] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.776922][ T9266] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4193: comm syz.5.2047: Allocating blocks 449-513 which overlap fs metadata [ 122.798126][ T9265] EXT4-fs (loop5): pa ffff8881071d15b0: logic 48, phys. 177, len 21 [ 122.806209][ T9265] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 122.827439][ T5189] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.023999][ T9292] loop4: detected capacity change from 0 to 8192 [ 123.226525][ T9322] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.055380][ T29] kauditd_printk_skb: 756 callbacks suppressed [ 124.055402][ T29] audit: type=1326 audit(1760173134.373:2951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9323 comm="syz.4.2070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc163e91785 code=0x7ffc0000 [ 124.085463][ T29] audit: type=1326 audit(1760173134.373:2952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9323 comm="syz.4.2070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc163e91785 code=0x7ffc0000 [ 124.108949][ T29] audit: type=1326 audit(1760173134.373:2953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9323 comm="syz.4.2070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc163e91785 code=0x7ffc0000 [ 124.132387][ T29] audit: type=1326 audit(1760173134.373:2954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9323 comm="syz.4.2070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc163e91785 code=0x7ffc0000 [ 124.155910][ T29] audit: type=1326 audit(1760173134.373:2955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9323 comm="syz.4.2070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc163e91785 code=0x7ffc0000 [ 124.179501][ T29] audit: type=1326 audit(1760173134.373:2956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9323 comm="syz.4.2070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc163e91785 code=0x7ffc0000 [ 124.203201][ T29] audit: type=1326 audit(1760173134.373:2957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9323 comm="syz.4.2070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc163e91785 code=0x7ffc0000 [ 124.226678][ T29] audit: type=1326 audit(1760173134.373:2958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9323 comm="syz.4.2070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc163e91785 code=0x7ffc0000 [ 124.250174][ T29] audit: type=1326 audit(1760173134.373:2959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9323 comm="syz.4.2070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7fc163e5eec9 code=0x7ffc0000 [ 124.273717][ T29] audit: type=1326 audit(1760173134.373:2960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9323 comm="syz.4.2070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc163e91785 code=0x7ffc0000 [ 124.322828][ T9350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.331514][ T9350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.572387][ T9366] random: crng reseeded on system resumption [ 124.669473][ T9322] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.738555][ T9322] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.799110][ T9322] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.865379][ T6284] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.894215][ T6284] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.915401][ T6284] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.935316][ T6284] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.947887][ T9386] loop0: detected capacity change from 0 to 128 [ 124.957923][ T9386] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 124.985713][ T9386] ext4 filesystem being mounted at /447/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 125.018529][ T3319] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 125.326402][ T9417] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.408253][ T9417] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.467340][ T9417] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.517246][ T9417] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.731371][ T9439] veth0: entered promiscuous mode [ 125.740231][ T9439] __nla_validate_parse: 4 callbacks suppressed [ 125.740253][ T9439] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2117'. [ 125.767060][ T9439] veth0 (unregistering): left promiscuous mode [ 125.896678][ T9443] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2119'. [ 126.003383][ T9454] loop4: detected capacity change from 0 to 512 [ 126.015204][ T9454] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.2122: error while reading EA inode 32 err=-116 [ 126.037993][ T9449] lo speed is unknown, defaulting to 1000 [ 126.062732][ T9454] EXT4-fs (loop4): Remounting filesystem read-only [ 126.088363][ T9457] loop5: detected capacity change from 0 to 1024 [ 126.099271][ T9454] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 126.152517][ T9454] EXT4-fs (loop4): 1 orphan inode deleted [ 126.158686][ T9457] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 126.169389][ T9454] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.182082][ T9457] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 126.190173][ T9457] EXT4-fs (loop5): orphan cleanup on readonly fs [ 126.196977][ T9457] EXT4-fs error (device loop5): ext4_free_blocks:6706: comm syz.5.2125: Freeing blocks not in datazone - block = 0, count = 4096 [ 126.224725][ T9457] EXT4-fs (loop5): 1 orphan inode deleted [ 126.225165][ T9454] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.235644][ T9457] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 126.302878][ T5189] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.334431][ T9463] team_slave_0: entered promiscuous mode [ 126.340436][ T9463] team_slave_0: left promiscuous mode [ 126.571821][ T9482] loop0: detected capacity change from 0 to 1024 [ 126.591756][ T9482] EXT4-fs: inline encryption not supported [ 126.597729][ T9482] EXT4-fs: Ignoring removed i_version option [ 126.606554][ T9482] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 126.653311][ T9482] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 2: comm syz.0.2131: lblock 2 mapped to illegal pblock 2 (length 1) [ 126.667791][ T9482] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.2131: lblock 0 mapped to illegal pblock 48 (length 1) [ 126.682231][ T9482] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.2131: Failed to acquire dquot type 0 [ 126.693923][ T9482] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6305: Corrupt filesystem [ 126.695678][ T9484] lo speed is unknown, defaulting to 1000 [ 126.703589][ T9482] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.2131: mark_inode_dirty error [ 126.721140][ T9482] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 126.731568][ T9482] EXT4-fs (loop0): 1 orphan inode deleted [ 126.737999][ T9482] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.799563][ T6000] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:10: lblock 1 mapped to illegal pblock 1 (length 1) [ 126.818099][ T6000] EXT4-fs error (device loop0): ext4_release_dquot:6981: comm kworker/u8:10: Failed to release dquot type 0 [ 126.882323][ T9491] lo speed is unknown, defaulting to 1000 [ 126.962936][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.965546][ T8772] usb 11-1: enqueue for inactive port 0 [ 126.988995][ T3319] EXT4-fs error (device loop0): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 127.004460][ T8772] usb 11-1: enqueue for inactive port 0 [ 127.007157][ T3319] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6305: Corrupt filesystem [ 127.041377][ T3319] EXT4-fs error (device loop0): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 127.062453][ T9491] loop4: detected capacity change from 0 to 512 [ 127.085314][ T8772] vhci_hcd: vhci_device speed not set [ 127.089056][ T9491] EXT4-fs: inline encryption not supported [ 127.123371][ T9491] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 127.137949][ T9491] EXT4-fs (loop4): 1 truncate cleaned up [ 127.144015][ T9491] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.362000][ T9531] loop1: detected capacity change from 0 to 512 [ 127.377235][ T9531] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.2148: bad orphan inode 11862016 [ 127.388359][ T9531] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 127.401382][ T9531] ext4 filesystem being mounted at /368/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.414553][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.488010][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 127.528601][ T6284] af_packet: tpacket_rcv: packet too big, clamped from 76 to 4294967272. macoff=96 [ 127.560963][ T9543] team_slave_0: entered promiscuous mode [ 127.576055][ T9543] ipvlan0: entered promiscuous mode [ 127.581917][ T9543] ipvlan0: left promiscuous mode [ 127.588927][ T9543] team_slave_0: left promiscuous mode [ 127.601500][ T9546] loop1: detected capacity change from 0 to 1024 [ 127.609006][ T9546] EXT4-fs: inline encryption not supported [ 127.614968][ T9546] EXT4-fs: Ignoring removed i_version option [ 127.637611][ T9546] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 127.699658][ T9546] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 2: comm syz.1.2153: lblock 2 mapped to illegal pblock 2 (length 1) [ 127.737766][ T9546] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.2153: lblock 0 mapped to illegal pblock 48 (length 1) [ 127.781260][ T9546] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.2153: Failed to acquire dquot type 0 [ 127.806237][ T9546] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6305: Corrupt filesystem [ 127.830589][ T9546] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.2153: mark_inode_dirty error [ 127.842697][ T9546] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 127.853170][ T9546] EXT4-fs (loop1): 1 orphan inode deleted [ 127.861100][ T9546] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.875376][ T1621] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 127.901746][ T1621] EXT4-fs error (device loop1): ext4_release_dquot:6981: comm kworker/u8:6: Failed to release dquot type 0 [ 127.981908][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.993604][ T9576] loop0: detected capacity change from 0 to 1024 [ 127.994722][ T3311] EXT4-fs error (device loop1): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 128.015360][ T3311] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6305: Corrupt filesystem [ 128.026071][ T3311] EXT4-fs error (device loop1): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 128.054693][ T9576] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.082549][ T9585] lo speed is unknown, defaulting to 1000 [ 128.114942][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.156608][ T9585] loop4: detected capacity change from 0 to 512 [ 128.166637][ T9585] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.2174: error while reading EA inode 32 err=-116 [ 128.216789][ T9601] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2180'. [ 128.226400][ T9585] EXT4-fs (loop4): Remounting filesystem read-only [ 128.234508][ T9585] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 128.244827][ T9585] EXT4-fs (loop4): 1 orphan inode deleted [ 128.251222][ T9585] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.263865][ T9585] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.277457][ T9605] loop0: detected capacity change from 0 to 164 [ 128.291907][ T9605] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 128.300331][ T9606] loop5: detected capacity change from 0 to 512 [ 128.308671][ T9605] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 128.317108][ T9606] EXT4-fs (loop5): The Hurd can't support 64-bit file systems [ 128.337695][ T9605] Symlink component flag not implemented [ 128.343709][ T9605] Symlink component flag not implemented [ 128.360822][ T9612] loop4: detected capacity change from 0 to 1024 [ 128.367784][ T9612] EXT4-fs: Ignoring removed orlov option [ 128.368910][ T9605] Symlink component flag not implemented (7) [ 128.379584][ T9605] Symlink component flag not implemented (116) [ 128.400434][ T9612] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 128.423495][ T9612] ext4 filesystem being mounted at /421/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.452374][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 128.453693][ T9625] loop1: detected capacity change from 0 to 1024 [ 128.468997][ T9625] EXT4-fs: Ignoring removed orlov option [ 128.500417][ T9629] netlink: 'syz.4.2191': attribute type 4 has an invalid length. [ 128.513312][ T9625] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.528783][ T9629] netlink: 'syz.4.2191': attribute type 4 has an invalid length. [ 128.594252][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.732319][ T9641] loop1: detected capacity change from 0 to 8192 [ 128.763977][ T9648] loop4: detected capacity change from 0 to 512 [ 128.776177][ T9648] EXT4-fs (loop4): orphan cleanup on readonly fs [ 128.782993][ T9648] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.2199: bad orphan inode 13 [ 128.793370][ T9648] ext4_test_bit(bit=12, block=18) = 1 [ 128.799049][ T9648] is_bad_inode(inode)=0 [ 128.803252][ T9648] NEXT_ORPHAN(inode)=2130706432 [ 128.808244][ T9648] max_ino=32 [ 128.811461][ T9648] i_nlink=1 [ 128.835892][ T9648] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 128.851966][ T9648] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 128.872768][ T9648] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2199: bg 0: block 248: padding at end of block bitmap is not set [ 128.888871][ T9648] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.2199: Failed to acquire dquot type 1 [ 128.900760][ T9648] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 128.941021][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.956675][ T6286] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.990228][ T6286] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.011062][ T6286] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.022941][ T6286] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.074232][ T29] kauditd_printk_skb: 146 callbacks suppressed [ 129.074250][ T29] audit: type=1400 audit(1760173139.383:3099): avc: denied { create } for pid=9665 comm="syz.4.2207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 129.113553][ T29] audit: type=1400 audit(1760173139.413:3100): avc: denied { setopt } for pid=9665 comm="syz.4.2207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 129.133445][ T29] audit: type=1400 audit(1760173139.423:3101): avc: denied { create } for pid=9667 comm="syz.0.2208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 129.153981][ T29] audit: type=1400 audit(1760173139.423:3102): avc: denied { write } for pid=9667 comm="syz.0.2208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 129.174473][ T29] audit: type=1400 audit(1760173139.423:3103): avc: denied { read } for pid=9667 comm="syz.0.2208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 129.306539][ T9677] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9677 comm=syz.4.2212 [ 129.351551][ T29] audit: type=1400 audit(1760173139.663:3104): avc: denied { execmem } for pid=9680 comm="syz.2.2214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 129.474884][ T9660] Set syz1 is full, maxelem 65536 reached [ 129.529649][ T29] audit: type=1400 audit(1760173139.823:3105): avc: denied { create } for pid=9687 comm="syz.0.2217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 129.549393][ T29] audit: type=1326 audit(1760173139.833:3106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9687 comm="syz.0.2217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42adadeec9 code=0x7ffc0000 [ 129.572816][ T29] audit: type=1326 audit(1760173139.833:3107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9687 comm="syz.0.2217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7f42adadeec9 code=0x7ffc0000 [ 129.596289][ T29] audit: type=1326 audit(1760173139.833:3108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9687 comm="syz.0.2217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42adadeec9 code=0x7ffc0000 [ 129.652404][ T9695] loop4: detected capacity change from 0 to 512 [ 129.659203][ T9695] EXT4-fs: Ignoring removed mblk_io_submit option [ 129.676952][ T9698] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2219'. [ 129.687408][ T9695] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 129.696573][ T9695] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 129.713899][ T9695] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 129.746717][ T9695] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a043c01c, mo2=0102] [ 129.754982][ T9695] System zones: 0-2, 18-18, 34-34 [ 129.775978][ T9695] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.2221: iget: bad i_size value: 360287970189639680 [ 129.798853][ T9698] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2219'. [ 129.804431][ T9695] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.2221: couldn't read orphan inode 15 (err -117) [ 129.820605][ T9695] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.855635][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.769065][ T9741] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2237'. [ 131.257906][ T9763] loop0: detected capacity change from 0 to 1024 [ 131.264887][ T9763] EXT4-fs: inline encryption not supported [ 131.270805][ T9763] EXT4-fs: Ignoring removed i_version option [ 131.282089][ T9763] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 131.325914][ T9763] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 2: comm syz.0.2248: lblock 2 mapped to illegal pblock 2 (length 1) [ 131.340390][ T9763] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.2248: lblock 0 mapped to illegal pblock 48 (length 1) [ 131.355100][ T9763] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.2248: Failed to acquire dquot type 0 [ 131.366933][ T9763] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6305: Corrupt filesystem [ 131.376864][ T9763] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.2248: mark_inode_dirty error [ 131.388558][ T9763] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 131.399080][ T9763] EXT4-fs (loop0): 1 orphan inode deleted [ 131.416805][ T6284] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:14: lblock 1 mapped to illegal pblock 1 (length 1) [ 131.437831][ T6284] EXT4-fs error (device loop0): ext4_release_dquot:6981: comm kworker/u8:14: Failed to release dquot type 0 [ 131.461202][ T3319] EXT4-fs error (device loop0): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 131.474242][ T3319] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6305: Corrupt filesystem [ 131.483879][ T3319] EXT4-fs error (device loop0): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 131.594707][ T9776] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2253'. [ 131.656861][ T9776] 8021q: adding VLAN 0 to HW filter on device bond4 [ 131.681741][ T9783] loop1: detected capacity change from 0 to 1024 [ 131.691194][ T9776] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2253'. [ 131.710800][ T9776] bond4 (unregistering): Released all slaves [ 131.776004][ T9783] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 131.919941][ T9796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.933579][ T9796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.983509][ T9800] loop5: detected capacity change from 0 to 512 [ 132.014891][ T9803] bridge_slave_0: left promiscuous mode [ 132.020682][ T9803] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.032044][ T9803] bridge_slave_1: left allmulticast mode [ 132.037868][ T9803] bridge_slave_1: left promiscuous mode [ 132.043562][ T9803] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.054228][ T9803] bond0: (slave bond_slave_0): Releasing backup interface [ 132.062682][ T9803] bond0: (slave bond_slave_1): Releasing backup interface [ 132.072085][ T9803] team0: Port device team_slave_0 removed [ 132.079294][ T9803] team0: Port device team_slave_1 removed [ 132.088322][ T9803] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.123352][ T9803] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 132.131785][ T9803] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 132.152193][ T9806] team0: Mode changed to "loadbalance" [ 132.191599][ T9810] netlink: 168 bytes leftover after parsing attributes in process `syz.5.2267'. [ 132.226373][ T9814] loop4: detected capacity change from 0 to 1024 [ 132.241145][ T9814] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 132.281235][ T9822] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.357059][ T9822] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.392895][ T9834] vlan3: entered allmulticast mode [ 132.418144][ T9822] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.495775][ T9843] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 132.516452][ T9840] lo speed is unknown, defaulting to 1000 [ 132.523288][ T9822] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.534891][ T9843] team0: Unable to change to the same mode the team is in [ 132.621465][ T5997] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.648971][ T6000] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.664834][ T6000] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.693809][ T6000] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.751039][ T9867] loop1: detected capacity change from 0 to 1024 [ 132.783187][ T9867] EXT4-fs: inline encryption not supported [ 132.789093][ T9867] EXT4-fs: Ignoring removed i_version option [ 132.798495][ T9867] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 132.831739][ T9867] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 2: comm syz.1.2289: lblock 2 mapped to illegal pblock 2 (length 1) [ 132.890741][ T9867] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.2289: lblock 0 mapped to illegal pblock 48 (length 1) [ 132.890880][ T9867] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.2289: Failed to acquire dquot type 0 [ 132.890978][ T9867] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6305: Corrupt filesystem [ 132.891187][ T9867] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.2289: mark_inode_dirty error [ 132.937913][ T9867] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 132.948207][ T9867] EXT4-fs (loop1): 1 orphan inode deleted [ 132.954594][ T9867] EXT4-fs mount: 8 callbacks suppressed [ 132.954612][ T9867] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.973172][ T6286] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:15: lblock 1 mapped to illegal pblock 1 (length 1) [ 133.033275][ T6286] EXT4-fs error (device loop1): ext4_release_dquot:6981: comm kworker/u8:15: Failed to release dquot type 0 [ 133.038196][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.038583][ T3311] EXT4-fs error (device loop1): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 133.038665][ T3311] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6305: Corrupt filesystem [ 133.038814][ T3311] EXT4-fs error (device loop1): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 133.098172][ T9899] loop0: detected capacity change from 0 to 1024 [ 133.106491][ T9899] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.111658][ T9899] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 133.165599][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.223994][ T9907] loop0: detected capacity change from 0 to 512 [ 133.226509][ T9907] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 133.240501][ T9908] loop1: detected capacity change from 0 to 512 [ 133.301006][ T9907] EXT4-fs (loop0): 1 truncate cleaned up [ 133.316904][ T9907] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.331093][ T9908] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2305: bg 0: block 248: padding at end of block bitmap is not set [ 133.365439][ T9908] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.2305: Failed to acquire dquot type 1 [ 133.366470][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.395631][ T9912] loop4: detected capacity change from 0 to 4096 [ 133.403682][ T9908] EXT4-fs (loop1): 1 truncate cleaned up [ 133.410037][ T9908] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.410729][ T9920] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2308'. [ 133.423531][ T9908] ext4 filesystem being mounted at /395/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.447878][ T9912] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.461992][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.475956][ T6284] EXT4-fs error (device loop1): ext4_release_dquot:6981: comm kworker/u8:14: Failed to release dquot type 1 [ 133.512889][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.554849][ T9936] sch_tbf: burst 19869 is lower than device lo mtu (11337746) ! [ 133.755977][ T9961] loop1: detected capacity change from 0 to 512 [ 133.763574][ T9961] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 133.777018][ T9961] EXT4-fs (loop1): 1 truncate cleaned up [ 133.783145][ T9961] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.812619][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.958627][ T9977] pim6reg: entered allmulticast mode [ 133.964649][ T9977] pim6reg: left allmulticast mode [ 134.456231][ T9993] veth0: entered promiscuous mode [ 134.469230][ T29] kauditd_printk_skb: 151 callbacks suppressed [ 134.469250][ T29] audit: type=1400 audit(1760173144.783:3251): avc: denied { mount } for pid=9994 comm="syz.4.2341" name="/" dev="hugetlbfs" ino=26735 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 134.500388][ T9993] veth0: left promiscuous mode [ 134.546658][ T29] audit: type=1400 audit(1760173144.863:3252): avc: denied { cpu } for pid=9998 comm="syz.4.2343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 134.612425][T10006] loop4: detected capacity change from 0 to 128 [ 134.626608][ T29] audit: type=1400 audit(1760173144.943:3253): avc: denied { mount } for pid=10005 comm="syz.4.2345" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 134.659480][T10006] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2345'. [ 134.723144][ T29] audit: type=1400 audit(1760173145.033:3254): avc: denied { unmount } for pid=3312 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 134.766332][T10016] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.896521][T10016] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.956611][T10016] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.032426][T10016] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.102996][ T6286] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.115059][ T6286] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.140346][ T6286] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.228672][ T6286] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.263186][ T29] audit: type=1400 audit(1760173145.573:3255): avc: denied { firmware_load } for pid=10026 comm=77DEA305FF07 path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 135.381122][ T29] audit: type=1400 audit(1760173145.693:3256): avc: denied { name_bind } for pid=10030 comm="syz.4.2355" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 135.632659][T10052] loop2: detected capacity change from 0 to 512 [ 135.649342][T10052] EXT4-fs (loop2): too many log groups per flexible block group [ 135.669638][T10052] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 135.685257][T10052] EXT4-fs (loop2): mount failed [ 135.734956][T10060] netlink: 2088 bytes leftover after parsing attributes in process `syz.0.2366'. [ 135.774115][ T29] audit: type=1400 audit(1760173146.083:3257): avc: denied { create } for pid=10063 comm="syz.2.2369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 135.804376][ T29] audit: type=1400 audit(1760173146.113:3258): avc: denied { connect } for pid=10063 comm="syz.2.2369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 135.857200][T10067] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2370'. [ 135.915619][ T29] audit: type=1326 audit(1760173146.233:3259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10069 comm="syz.2.2371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d5ae8eec9 code=0x7ffc0000 [ 135.956060][ T29] audit: type=1326 audit(1760173146.233:3260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10069 comm="syz.2.2371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d5ae8eec9 code=0x7ffc0000 [ 136.136640][T10075] vhci_hcd: invalid port number 96 [ 136.141826][T10075] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 136.235786][ T8772] page_pool_release_retry() stalled pool shutdown: id 57, 1 inflight 60 sec [ 136.246754][T10087] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2378'. [ 136.255767][T10087] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2378'. [ 136.395912][T10099] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.447042][T10099] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.501151][T10109] loop5: detected capacity change from 0 to 1024 [ 136.517075][T10099] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.531972][T10109] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.564133][T10109] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4193: comm syz.5.2388: Allocating blocks 449-513 which overlap fs metadata [ 136.587018][T10108] EXT4-fs (loop5): pa ffff8881071d1850: logic 48, phys. 177, len 21 [ 136.595081][T10108] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 136.633116][ T5189] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.650086][T10099] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.736691][ T5997] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.762994][ T5997] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.781583][ T5997] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.791700][ T5997] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.807760][T10127] loop5: detected capacity change from 0 to 1024 [ 136.856052][T10127] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.896384][T10127] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 136.925344][ T5189] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.078092][T10148] loop5: detected capacity change from 0 to 512 [ 137.094960][T10148] EXT4-fs: dax option not supported [ 137.136040][T10152] loop1: detected capacity change from 0 to 1024 [ 137.171320][T10152] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 137.212514][T10152] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #3: block 1: comm syz.1.2404: lblock 1 mapped to illegal pblock 1 (length 1) [ 137.237429][T10152] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.2404: Failed to acquire dquot type 0 [ 137.305351][T10152] EXT4-fs error (device loop1): ext4_free_blocks:6706: comm syz.1.2404: Freeing blocks not in datazone - block = 0, count = 4096 [ 137.326942][T10152] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.2404: Invalid inode bitmap blk 0 in block_group 0 [ 137.355934][T10152] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 137.356740][ T5997] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 137.385293][T10152] EXT4-fs (loop1): 1 orphan inode deleted [ 137.395481][ T5997] EXT4-fs error (device loop1): ext4_release_dquot:6981: comm kworker/u8:9: Failed to release dquot type 0 [ 137.405970][T10152] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.519230][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.668355][T10180] loop0: detected capacity change from 0 to 1024 [ 137.685344][T10180] EXT4-fs: Ignoring removed orlov option [ 137.698339][T10180] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.743761][T10184] pim6reg1: entered promiscuous mode [ 137.749378][T10184] pim6reg1: entered allmulticast mode [ 138.067889][T10193] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2420'. [ 138.123696][T10197] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2422'. [ 138.132792][T10197] netlink: 'syz.1.2422': attribute type 7 has an invalid length. [ 138.140550][T10197] netlink: 'syz.1.2422': attribute type 8 has an invalid length. [ 138.148303][T10197] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2422'. [ 138.254675][T10201] loop5: detected capacity change from 0 to 1024 [ 138.262750][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.263159][T10201] EXT4-fs: Ignoring removed nobh option [ 138.298896][T10201] EXT4-fs: Ignoring removed orlov option [ 138.318854][T10201] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.331662][T10213] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10213 comm=syz.0.2429 [ 138.369426][T10201] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2424'. [ 138.442784][ T5189] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.571027][T10247] 9pnet_fd: Insufficient options for proto=fd [ 138.608297][T10254] netlink: 71 bytes leftover after parsing attributes in process `syz.5.2449'. [ 138.643175][T10260] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2460'. [ 138.809854][T10273] lo speed is unknown, defaulting to 1000 [ 138.818622][T10276] loop4: detected capacity change from 0 to 512 [ 138.837749][T10276] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.2451: bad orphan inode 11862016 [ 138.850743][T10276] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 138.875533][T10276] ext4 filesystem being mounted at /473/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.992761][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 139.129450][T10293] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.139063][T10293] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 139.156041][T10300] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2466'. [ 139.170506][ T6284] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.189304][ T6284] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.198160][ T6284] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.206682][ T6284] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.436975][T10312] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.707568][T10312] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.730162][T10327] loop5: detected capacity change from 0 to 1024 [ 139.737355][T10327] EXT4-fs: Ignoring removed oldalloc option [ 139.743434][T10327] EXT4-fs: Ignoring removed bh option [ 139.743951][ T29] kauditd_printk_skb: 545 callbacks suppressed [ 139.743968][ T29] audit: type=1400 audit(1760173150.053:3803): avc: denied { read } for pid=10328 comm="syz.1.2478" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 139.779604][ T29] audit: type=1400 audit(1760173150.053:3804): avc: denied { open } for pid=10328 comm="syz.1.2478" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 139.797793][T10327] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.804682][ T29] audit: type=1400 audit(1760173150.063:3805): avc: denied { ioctl } for pid=10328 comm="syz.1.2478" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 139.828005][T10327] EXT4-fs error (device loop5): mb_free_blocks:2017: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt. [ 139.860046][T10312] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.882700][ T5189] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.933179][ T29] audit: type=1326 audit(1760173150.243:3806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10334 comm="syz.2.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d5ae8eec9 code=0x7ffc0000 [ 139.970147][T10312] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.996730][ T29] audit: type=1326 audit(1760173150.273:3807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10334 comm="syz.2.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f7d5ae8eec9 code=0x7ffc0000 [ 140.020313][ T29] audit: type=1326 audit(1760173150.273:3808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10334 comm="syz.2.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d5ae8eec9 code=0x7ffc0000 [ 140.044038][ T29] audit: type=1326 audit(1760173150.273:3809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10334 comm="syz.2.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f7d5ae8eec9 code=0x7ffc0000 [ 140.067552][ T29] audit: type=1326 audit(1760173150.273:3810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10334 comm="syz.2.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d5ae8eec9 code=0x7ffc0000 [ 140.091159][ T29] audit: type=1326 audit(1760173150.273:3811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10334 comm="syz.2.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f7d5ae8eec9 code=0x7ffc0000 [ 140.114606][ T29] audit: type=1326 audit(1760173150.273:3812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10334 comm="syz.2.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d5ae8eec9 code=0x7ffc0000 [ 140.213519][ T52] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.235984][ T317] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.268315][ T52] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.276810][ T52] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.295168][T10363] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10363 comm=syz.1.2491 [ 140.447836][T10377] pimreg: entered allmulticast mode [ 140.453821][T10377] pimreg: left allmulticast mode [ 140.501286][T10350] loop4: detected capacity change from 0 to 32768 [ 140.528207][T10350] loop4: p1 p3 < > [ 140.935537][T10405] __nla_validate_parse: 2 callbacks suppressed [ 140.935606][T10405] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2510'. [ 141.067895][T10417] netlink: 'syz.2.2515': attribute type 12 has an invalid length. [ 141.136551][ T8772] kernel write not supported for file bpf-prog (pid: 8772 comm: kworker/0:7) [ 141.224002][T10434] netlink: 'syz.5.2523': attribute type 10 has an invalid length. [ 141.236735][T10434] team0: Port device dummy0 added [ 141.251234][T10434] netlink: 'syz.5.2523': attribute type 10 has an invalid length. [ 141.265795][T10434] team0: Port device dummy0 removed [ 141.276170][T10434] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 141.331593][T10438] netlink: 'syz.4.2525': attribute type 13 has an invalid length. [ 141.610023][T10458] veth0: entered promiscuous mode [ 141.623222][T10458] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2535'. [ 141.645377][T10458] veth0 (unregistering): left promiscuous mode [ 141.796394][T10473] loop4: detected capacity change from 0 to 1764 [ 142.313563][T10488] Set syz1 is full, maxelem 65536 reached [ 142.717133][T10519] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2561'. [ 143.021432][T10508] Set syz1 is full, maxelem 65536 reached [ 143.261910][T10545] loop2: detected capacity change from 0 to 512 [ 143.297729][T10547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.309332][T10547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.318373][T10545] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 143.413760][T10545] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.531449][ T52] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.547476][ T52] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.559967][ T52] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.568650][ T52] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.899761][T10577] loop2: detected capacity change from 0 to 4096 [ 143.908303][T10577] EXT4-fs: Ignoring removed nomblk_io_submit option [ 143.920130][T10577] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.136509][ T8951] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.278784][T10607] loop4: detected capacity change from 0 to 8192 [ 144.287083][T10611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.295699][T10611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.757008][ T29] kauditd_printk_skb: 91 callbacks suppressed [ 144.757023][ T29] audit: type=1400 audit(1760173155.073:3904): avc: denied { execute } for pid=10621 comm="syz.1.2603" path="/file1" dev="ramfs" ino=29998 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 144.786951][T10624] loop2: detected capacity change from 0 to 7 [ 144.904573][ T29] audit: type=1326 audit(1760173155.213:3905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10639 comm="syz.2.2611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d5ae8eec9 code=0x7ffc0000 [ 144.977462][ T29] audit: type=1326 audit(1760173155.213:3906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10639 comm="syz.2.2611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d5ae8eec9 code=0x7ffc0000 [ 145.001082][ T29] audit: type=1326 audit(1760173155.213:3907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10639 comm="syz.2.2611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7d5ae8eec9 code=0x7ffc0000 [ 145.024588][ T29] audit: type=1326 audit(1760173155.213:3908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10639 comm="syz.2.2611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d5ae8eec9 code=0x7ffc0000 [ 145.048170][ T29] audit: type=1326 audit(1760173155.213:3909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10639 comm="syz.2.2611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d5ae8eec9 code=0x7ffc0000 [ 145.071679][ T29] audit: type=1326 audit(1760173155.213:3910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10639 comm="syz.2.2611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7d5ae8eec9 code=0x7ffc0000 [ 145.095219][ T29] audit: type=1326 audit(1760173155.213:3911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10639 comm="syz.2.2611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d5ae8eec9 code=0x7ffc0000 [ 145.118848][ T29] audit: type=1326 audit(1760173155.213:3912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10639 comm="syz.2.2611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d5ae8eec9 code=0x7ffc0000 [ 145.142415][ T29] audit: type=1326 audit(1760173155.213:3913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10639 comm="syz.2.2611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7d5ae8eec9 code=0x7ffc0000 [ 145.395670][T10668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.414442][T10668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.432175][T10670] loop2: detected capacity change from 0 to 1024 [ 145.448264][T10670] EXT4-fs: Ignoring removed nobh option [ 145.454278][T10670] EXT4-fs: Ignoring removed orlov option [ 145.476535][T10670] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.492660][T10670] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2622'. [ 145.526915][ T8951] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.261720][T10708] $H: renamed from  [ 146.290828][T10708] $H: entered promiscuous mode [ 147.789632][T10812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.798329][T10812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.300780][T10823] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 148.307333][T10823] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 148.314927][T10823] vhci_hcd vhci_hcd.0: Device attached [ 148.327568][T10823] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(5) [ 148.334165][T10823] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 148.341833][T10823] vhci_hcd vhci_hcd.0: Device attached [ 148.354042][T10823] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(7) [ 148.360588][T10823] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 148.368443][T10823] vhci_hcd vhci_hcd.0: Device attached [ 148.374844][T10823] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 148.383779][T10823] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(11) [ 148.390453][T10823] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 148.397980][T10823] vhci_hcd vhci_hcd.0: Device attached [ 148.404217][T10823] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 148.412877][T10823] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 148.422054][T10823] vhci_hcd vhci_hcd.0: pdev(2) rhport(7) sockfd(17) [ 148.428666][T10823] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 148.436288][T10823] vhci_hcd vhci_hcd.0: Device attached [ 148.442299][T10834] vhci_hcd: connection closed [ 148.442626][ T6000] vhci_hcd: stop threads [ 148.442637][T10824] vhci_hcd: connection closed [ 148.445274][T10832] vhci_hcd: connection closed [ 148.447376][ T6000] vhci_hcd: release socket [ 148.451713][T10830] vhci_hcd: connection closed [ 148.456278][ T6000] vhci_hcd: disconnect device [ 148.456381][T10826] vhci_hcd: connection closed [ 148.475046][ T6000] vhci_hcd: stop threads [ 148.484086][ T6000] vhci_hcd: release socket [ 148.488543][ T6000] vhci_hcd: disconnect device [ 148.493380][ T6000] vhci_hcd: stop threads [ 148.497744][ T6000] vhci_hcd: release socket [ 148.502156][ T6000] vhci_hcd: disconnect device [ 148.507072][ T6000] vhci_hcd: stop threads [ 148.511320][ T6000] vhci_hcd: release socket [ 148.515765][ T6000] vhci_hcd: disconnect device [ 148.520544][ T6000] vhci_hcd: stop threads [ 148.524865][ T6000] vhci_hcd: release socket [ 148.529343][ T6000] vhci_hcd: disconnect device [ 148.535249][ T8800] vhci_hcd: vhci_device speed not set [ 149.104583][T10864] pim6reg1: entered promiscuous mode [ 149.110029][T10864] pim6reg1: entered allmulticast mode [ 149.672320][T10907] netlink: 'syz.0.2705': attribute type 1 has an invalid length. [ 149.680193][T10907] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.2705'. [ 149.690509][T10908] loop4: detected capacity change from 0 to 1024 [ 149.720882][T10908] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.747261][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.822195][ T29] kauditd_printk_skb: 239 callbacks suppressed [ 149.822213][ T29] audit: type=1326 audit(1760173160.133:4153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10923 comm="syz.1.2723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87a07ceec9 code=0x7ffc0000 [ 149.863289][ T29] audit: type=1326 audit(1760173160.163:4154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10923 comm="syz.1.2723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87a07ceec9 code=0x7ffc0000 [ 149.886924][ T29] audit: type=1326 audit(1760173160.163:4155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10923 comm="syz.1.2723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87a07ceec9 code=0x7ffc0000 [ 149.910450][ T29] audit: type=1326 audit(1760173160.163:4156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10923 comm="syz.1.2723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87a07ceec9 code=0x7ffc0000 [ 149.934023][ T29] audit: type=1326 audit(1760173160.163:4157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10923 comm="syz.1.2723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f87a07ceec9 code=0x7ffc0000 [ 149.957653][ T29] audit: type=1326 audit(1760173160.163:4158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10923 comm="syz.1.2723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f87a07cef03 code=0x7ffc0000 [ 149.981106][ T29] audit: type=1326 audit(1760173160.163:4159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10923 comm="syz.1.2723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f87a07cef03 code=0x7ffc0000 [ 150.004598][ T29] audit: type=1326 audit(1760173160.163:4160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10923 comm="syz.1.2723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87a07ceec9 code=0x7ffc0000 [ 150.028105][ T29] audit: type=1326 audit(1760173160.163:4161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10923 comm="syz.1.2723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87a07ceec9 code=0x7ffc0000 [ 150.051623][ T29] audit: type=1326 audit(1760173160.163:4162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10923 comm="syz.1.2723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87a07ceec9 code=0x7ffc0000 [ 150.164579][T10937] loop4: detected capacity change from 0 to 1024 [ 150.179442][T10937] EXT4-fs: Ignoring removed bh option [ 150.193422][T10937] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 150.237469][T10937] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.278397][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.296276][T10947] loop2: detected capacity change from 0 to 1024 [ 150.314701][T10947] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.359233][T10947] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.2718: Allocating blocks 449-513 which overlap fs metadata [ 150.401372][T10944] EXT4-fs (loop2): pa ffff8881071d1850: logic 48, phys. 177, len 21 [ 150.409515][T10944] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 150.433485][ T8951] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.556480][T10970] sctp: [Deprecated]: syz.2.2730 (pid 10970) Use of struct sctp_assoc_value in delayed_ack socket option. [ 150.556480][T10970] Use struct sctp_sack_info instead [ 150.617713][T10978] loop2: detected capacity change from 0 to 1024 [ 150.624590][T10978] EXT4-fs: Ignoring removed bh option [ 150.630478][T10978] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 150.646728][T10978] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.672613][ T8951] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.692877][T10984] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.702692][T10984] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.746799][T10984] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.756701][T10984] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.807008][T10984] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.816854][T10984] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.876883][T10984] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.887111][T10984] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.952671][ T6284] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.961024][ T6284] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.972213][ T6284] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.980488][ T6284] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.992528][ T6284] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.000815][ T6284] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.011604][ T6284] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.019861][ T6284] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.064842][T10987] loop2: detected capacity change from 0 to 1024 [ 151.072088][T10987] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 151.084112][T10987] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #3: block 1: comm syz.2.2737: lblock 1 mapped to illegal pblock 1 (length 1) [ 151.098422][T10987] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.2737: Failed to acquire dquot type 0 [ 151.110004][T10987] EXT4-fs error (device loop2): ext4_free_blocks:6706: comm syz.2.2737: Freeing blocks not in datazone - block = 0, count = 4096 [ 151.124080][T10987] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.2737: Invalid inode bitmap blk 0 in block_group 0 [ 151.137437][T10987] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 151.146069][ T6284] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:14: lblock 1 mapped to illegal pblock 1 (length 1) [ 151.161115][T10987] EXT4-fs (loop2): 1 orphan inode deleted [ 151.162243][ T6284] EXT4-fs error (device loop2): ext4_release_dquot:6981: comm kworker/u8:14: Failed to release dquot type 0 [ 151.168661][T10987] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.260832][T10994] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2740'. [ 151.288949][T10998] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2742'. [ 151.301234][ T8951] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.383421][T11010] netlink: 71 bytes leftover after parsing attributes in process `syz.4.2748'. [ 152.461378][T11064] lo speed is unknown, defaulting to 1000 [ 152.596311][T11076] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2777'. [ 152.771523][T11102] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2789'. [ 152.781714][T11102] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2789'. [ 152.828161][T11106] netlink: 14528 bytes leftover after parsing attributes in process `syz.5.2791'. [ 152.852859][T11105] netlink: 'syz.4.2790': attribute type 5 has an invalid length. [ 152.861020][T11108] loop5: detected capacity change from 0 to 512 [ 152.870740][T11108] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.883613][T11108] ext4 filesystem being mounted at /487/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 152.919221][T11113] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=11113 comm=syz.1.2792 [ 152.952372][ T5189] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.177344][T11128] lo speed is unknown, defaulting to 1000 [ 153.271434][T11140] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2803'. [ 153.284088][T11140] batadv0: entered promiscuous mode [ 153.289542][T11140] batadv0: entered allmulticast mode [ 153.297903][T11142] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.381614][T11142] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.442077][T11149] netlink: 100 bytes leftover after parsing attributes in process `syz.5.2807'. [ 153.466895][T11142] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.528552][T11142] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.603551][ T52] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.628203][ T52] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.645343][ T52] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.665127][ T52] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.757717][T11166] lo speed is unknown, defaulting to 1000 [ 153.865695][T11174] lo speed is unknown, defaulting to 1000 [ 154.142245][T11187] loop2: detected capacity change from 0 to 32768 [ 154.175641][T11187] loop2: p1 p3 < > [ 154.329141][T11198] tipc: Started in network mode [ 154.334077][T11198] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 154.343146][T11198] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 154.351484][T11198] tipc: Enabled bearer , priority 10 [ 154.503459][T11217] loop9: detected capacity change from 0 to 7 [ 154.510502][T11217] buffer_io_error: 26678 callbacks suppressed [ 154.510521][T11217] Buffer I/O error on dev loop9, logical block 0, async page read [ 154.529723][T11217] Buffer I/O error on dev loop9, logical block 0, async page read [ 154.537713][T11217] loop9: unable to read partition table [ 154.547582][T11217] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 154.547582][T11217] ) failed (rc=-5) [ 155.351827][T11234] lo speed is unknown, defaulting to 1000 [ 155.460771][ T29] kauditd_printk_skb: 649 callbacks suppressed [ 155.460789][ T29] audit: type=1326 audit(1760173165.773:4809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11245 comm="syz.0.2848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42adadeec9 code=0x7ffc0000 [ 155.492030][ T36] tipc: Node number set to 1 [ 155.498629][ T29] audit: type=1326 audit(1760173165.803:4810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11245 comm="syz.0.2848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f42adadeec9 code=0x7ffc0000 [ 155.522354][ T29] audit: type=1326 audit(1760173165.803:4811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11245 comm="syz.0.2848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42adadeec9 code=0x7ffc0000 [ 155.545938][ T29] audit: type=1326 audit(1760173165.803:4812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11245 comm="syz.0.2848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f42adadeec9 code=0x7ffc0000 [ 155.569581][ T29] audit: type=1326 audit(1760173165.813:4813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11245 comm="syz.0.2848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42adadeec9 code=0x7ffc0000 [ 155.593204][ T29] audit: type=1326 audit(1760173165.813:4814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11245 comm="syz.0.2848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f42adadeec9 code=0x7ffc0000 [ 155.616746][ T29] audit: type=1326 audit(1760173165.813:4815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11245 comm="syz.0.2848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42adadeec9 code=0x7ffc0000 [ 155.640265][ T29] audit: type=1326 audit(1760173165.813:4816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11245 comm="syz.0.2848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42adadeec9 code=0x7ffc0000 [ 155.663934][ T29] audit: type=1326 audit(1760173165.813:4817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11245 comm="syz.0.2848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7f42adadeec9 code=0x7ffc0000 [ 155.687632][ T29] audit: type=1326 audit(1760173165.813:4818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11245 comm="syz.0.2848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42adadeec9 code=0x7ffc0000 [ 156.310721][T11305] lo speed is unknown, defaulting to 1000 [ 156.368718][T11314] __nla_validate_parse: 5 callbacks suppressed [ 156.368739][T11314] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2876'. [ 156.409414][T11314] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2876'. [ 156.482961][T11321] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2878'. [ 156.520388][T11321] batadv0: entered promiscuous mode [ 156.525702][T11321] batadv0: entered allmulticast mode [ 156.549482][T11333] IPv6: Can't replace route, no match found [ 156.741996][T11351] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2893'. [ 156.787994][T11355] netlink: 'syz.0.2895': attribute type 1 has an invalid length. [ 156.795828][T11355] netlink: 'syz.0.2895': attribute type 4 has an invalid length. [ 156.803665][T11355] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.2895'. [ 156.814646][T11355] netlink: 'syz.0.2895': attribute type 1 has an invalid length. [ 156.822617][T11355] netlink: 'syz.0.2895': attribute type 4 has an invalid length. [ 156.826653][T11353] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2894'. [ 156.830658][T11355] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.2895'. [ 156.895338][T11353] netem: change failed [ 157.413461][T11372] $H: renamed from bond0 (while UP) [ 157.479268][T11372] $H: entered promiscuous mode [ 157.484352][T11372] dummy0: entered promiscuous mode [ 157.600876][T11382] loop5: detected capacity change from 0 to 512 [ 157.609772][T11382] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.2907: casefold flag without casefold feature [ 157.666575][T11382] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.2907: couldn't read orphan inode 15 (err -117) [ 157.682213][T11382] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.717116][T11382] : renamed from veth0_to_bond (while UP) [ 157.830828][ T5189] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.863367][T11390] SELinux: failed to load policy [ 158.250405][ C0] vcan0: j1939_tp_rxtimer: 0xffff888119c36200: rx timeout, send abort [ 158.259167][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888119c36200: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 159.225389][T11498] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2933'. [ 159.539787][T11513] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2938'. [ 159.566201][T11513] hsr_slave_0: left promiscuous mode [ 159.572076][T11513] hsr_slave_1: left promiscuous mode [ 159.606897][T11515] lo speed is unknown, defaulting to 1000 [ 160.768627][ T29] kauditd_printk_skb: 80 callbacks suppressed [ 160.768645][ T29] audit: type=1400 audit(1760173171.083:4899): avc: denied { append } for pid=11569 comm="syz.5.2960" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 160.863925][T11573] loop2: detected capacity change from 0 to 1024 [ 160.955469][T11573] EXT4-fs: Ignoring removed orlov option [ 160.997066][T11573] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.209905][ T29] audit: type=1326 audit(1760173171.523:4900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11585 comm="syz.5.2965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ab992eec9 code=0x7ffc0000 [ 161.233516][ T29] audit: type=1326 audit(1760173171.523:4901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11585 comm="syz.5.2965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ab992eec9 code=0x7ffc0000 [ 161.257077][ T29] audit: type=1326 audit(1760173171.523:4902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11585 comm="syz.5.2965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4ab992eec9 code=0x7ffc0000 [ 161.280578][ T29] audit: type=1326 audit(1760173171.523:4903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11585 comm="syz.5.2965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ab992eec9 code=0x7ffc0000 [ 161.345318][ T29] audit: type=1326 audit(1760173171.523:4904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11585 comm="syz.5.2965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4ab992eec9 code=0x7ffc0000 [ 161.369047][ T29] audit: type=1326 audit(1760173171.593:4905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11585 comm="syz.5.2965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ab992eec9 code=0x7ffc0000 [ 161.392874][ T29] audit: type=1326 audit(1760173171.603:4906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11585 comm="syz.5.2965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ab992eec9 code=0x7ffc0000 [ 161.416441][ T29] audit: type=1326 audit(1760173171.633:4907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11585 comm="syz.5.2965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f4ab992eec9 code=0x7ffc0000 [ 161.440281][ T29] audit: type=1326 audit(1760173171.633:4908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11585 comm="syz.5.2965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ab992eec9 code=0x7ffc0000 [ 161.750401][ T8951] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.111600][T11628] serio: Serial port ptm0 [ 163.039684][T11686] loop2: detected capacity change from 0 to 128 [ 163.057459][T11686] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 163.075488][T11686] ext4 filesystem being mounted at /165/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 163.209892][T11695] atomic_op ffff88813d702d28 conn xmit_atomic 0000000000000000 [ 163.358368][ T8951] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 163.699117][T11719] netlink: 'syz.1.3017': attribute type 1 has an invalid length. [ 163.748164][T11719] 8021q: adding VLAN 0 to HW filter on device bond1 [ 163.788236][T11725] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3017'. [ 163.844529][T11656] syz.5.2989 (11656) used greatest stack depth: 6904 bytes left [ 163.854138][T11725] bond1 (unregistering): Released all slaves [ 164.086666][T11674] ================================================================== [ 164.094799][T11674] BUG: KCSAN: data-race in fifo_open / wait_for_partner [ 164.101784][T11674] [ 164.104126][T11674] read-write to 0xffff888120fee36c of 4 bytes by task 11669 on cpu 0: [ 164.112282][T11674] fifo_open+0x86/0x5d0 [ 164.116470][T11674] do_dentry_open+0x646/0xa20 [ 164.121185][T11674] vfs_open+0x37/0x1e0 [ 164.125280][T11674] path_openat+0x1c5e/0x2170 [ 164.129909][T11674] do_filp_open+0x109/0x230 [ 164.134441][T11674] do_sys_openat2+0xa6/0x110 [ 164.139089][T11674] __x64_sys_openat+0xf2/0x120 [ 164.143891][T11674] x64_sys_call+0x2eab/0x3000 [ 164.148602][T11674] do_syscall_64+0xd2/0x200 [ 164.153142][T11674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.159155][T11674] [ 164.161501][T11674] read to 0xffff888120fee36c of 4 bytes by task 11674 on cpu 1: [ 164.169146][T11674] wait_for_partner+0xb5/0x1c0 [ 164.173937][T11674] fifo_open+0x4b1/0x5d0 [ 164.178208][T11674] do_dentry_open+0x646/0xa20 [ 164.182932][T11674] vfs_open+0x37/0x1e0 [ 164.187049][T11674] path_openat+0x1c5e/0x2170 [ 164.191666][T11674] do_filp_open+0x109/0x230 [ 164.196209][T11674] do_sys_openat2+0xa6/0x110 [ 164.200841][T11674] __se_sys_openat2+0x194/0x1f0 [ 164.205743][T11674] __x64_sys_openat2+0x55/0x70 [ 164.210552][T11674] x64_sys_call+0x1121/0x3000 [ 164.215266][T11674] do_syscall_64+0xd2/0x200 [ 164.219813][T11674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.225740][T11674] [ 164.228081][T11674] value changed: 0x00000001 -> 0x00000002 [ 164.233808][T11674] [ 164.236135][T11674] Reported by Kernel Concurrency Sanitizer on: [ 164.242321][T11674] CPU: 1 UID: 0 PID: 11674 Comm: syz.4.2993 Not tainted syzkaller #0 PREEMPT(voluntary) [ 164.252161][T11674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 164.262243][T11674] ==================================================================