last executing test programs: 1.454413899s ago: executing program 2 (id=1891): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x4000, 0x0, 0x101}}) 1.384100825s ago: executing program 2 (id=1892): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) writev(r2, &(0x7f0000000300)=[{&(0x7f00000000c0)="c0", 0x1}], 0x1) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 1.383548865s ago: executing program 2 (id=1893): r0 = memfd_create(&(0x7f0000000140)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xac \xe8\xb6\xdf\x16J\xab\xecC\xe2{\xfd\x8a\xb4\x8e\x9c\xfb\xf6\xe9\xd8]B6)\x9f\x9cR\xae\x12G\xd8\xa4y\xef\x02?\xf2\xe7}\ra\x97F', 0x0) r1 = dup(r0) write$cgroup_pid(r1, &(0x7f0000000040)=0xffffffffffffffff, 0xe) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r2 = msgget$private(0x0, 0x0) msgrcv(r2, 0x0, 0x0, 0xeba45e42f78e2070, 0x1000) sendfile(r0, r1, &(0x7f0000000100), 0x6c03) msgsnd(r2, &(0x7f0000000580)={0x3}, 0x8, 0x0) 915.428048ms ago: executing program 4 (id=1910): r0 = syz_io_uring_setup(0x70e4, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r4}}) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='+'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 849.283133ms ago: executing program 4 (id=1914): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)="c8", &(0x7f0000000900), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 812.047237ms ago: executing program 4 (id=1917): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000080)="e9", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 811.411007ms ago: executing program 1 (id=1918): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x0, &(0x7f0000000000)={[{@init_itable_val={'init_itable', 0x3d, 0x4}}, {@nombcache}]}, 0x1, 0x589, &(0x7f0000000bc0)="$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") creat(&(0x7f00000003c0)='./bus\x00', 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x9) r1 = open(&(0x7f00000004c0)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2008002) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r0, 0x0) r2 = gettid() process_vm_writev(r2, &(0x7f0000000580)=[{&(0x7f000034afa4)=""/1, 0x1}, {0x0}], 0x2, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x1}], 0x1, 0x0) 758.243382ms ago: executing program 4 (id=1919): r0 = syz_io_uring_setup(0x207, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000300), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x6d3, &(0x7f00000008c0), &(0x7f0000000040)=0x0, &(0x7f00000002c0)) syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000047c0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00'}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) io_uring_enter(r0, 0x1849, 0x0, 0x0, 0x0, 0x0) 733.685404ms ago: executing program 1 (id=1922): dup(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x20081e, &(0x7f0000000040)={[{@nodelalloc}, {@orlov}, {@auto_da_alloc}]}, 0x1, 0x4ef, &(0x7f00000003c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) fallocate(r1, 0x0, 0xfff, 0x20001) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_mems\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000180), 0x12) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r2}) 679.958559ms ago: executing program 4 (id=1923): syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = epoll_create1(0x0) r2 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0xa0028000}) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000002840)={0xff}, &(0x7f0000000180)={0x0, 0x989680}, 0x0) 677.333499ms ago: executing program 4 (id=1924): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) syz_clone3(0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) ioctl$EVIOCGBITSW(r1, 0x40095505, 0x0) 655.093951ms ago: executing program 1 (id=1926): r0 = socket$packet(0x11, 0x3, 0x300) socket$inet(0x2, 0x3, 0x5) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a00000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="1201010200000020"], 0x0) r2 = syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x14a042) dup3(r0, r1, 0x80000) write$hidraw(r2, 0x0, 0x0) 567.450419ms ago: executing program 0 (id=1929): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @loopback, 0x9}, 0x1c) listen(r0, 0x0) listen(r1, 0x0) 561.311709ms ago: executing program 0 (id=1930): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000240)=@chain={'key_or_keyring:', r1}) r3 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r4 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r3) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000200)=@keyring={'key_or_keyring:', r2}) 547.127261ms ago: executing program 0 (id=1931): r0 = syz_open_procfs(0x0, &(0x7f0000000980)='fd\x00') r1 = memfd_create(&(0x7f00000002c0)='D\xa3\xd5Wj\x00\x00\x8b\x14\xc2\xac\x1a\x1a\vG\xa9~vB\xbc\t\x00\x00\x00VoA\xaa\xbc\xee[\xe1\xa2\xe0\xff\x04\x00\x9b\x12\x0eW\xcf\t\xb0\xa9 +H/\xfd\xa4\xcaN\x84\xadS\x8bqE\x99\x01t\xb1\x1f|\x99PL\x92\x8f\xc2y\xcd\x8cj\x03X\x05\x17mwI\xf0\x01\xe5z\xcdJ)\xc7\xfa)\xaa}\xef\xde\xf5\xcd\xb1o5\x18\xd6\v\x85q\x98\x9bB\xb9\xea\xe7\xff\x7f\x00\x00T\xc0\xd2\t?\bpBl\xf4\x86\xd4\xc9\xe3\x8f\xd9\x9f\x15\x1e\xf2\x18\r\xad\b\xe0\x96NH\x85\r+\xfc\xb3\xdd\xddhg(\x03\xa7\x92\xe5\x00+h\xb7@#K\x9cMY\xd3\x9b\b-G\xb1\xdaS\x81\xb2\x93\xb83\x8a\x94*\x8d\\\b\xff/\xf8A\xaf\\\xaa\xf5u\xde\xfa\xa1\xc0\xf9&gR\x81.\xff\x83k\xe6\rDa\x16\xbd\x1a\xb2w\b\x00'/244, 0x0) write(r1, &(0x7f0000000100)="6900eec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677bda3300000021df83a9e803dd004e1403428a00c68ff535d0d13022313803", 0x43) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r2 = dup3(r0, r1, 0x0) fchdir(r2) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000040)='.\x00', 0x201) 534.402722ms ago: executing program 2 (id=1932): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000300000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 526.219552ms ago: executing program 0 (id=1933): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) syz_open_procfs(r2, &(0x7f0000000040)='fd/4\x00') 502.720945ms ago: executing program 2 (id=1935): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r2, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f0000000300)=[{0x40, 0x0, 0xfc, 0x3ff}]}) 502.324045ms ago: executing program 0 (id=1936): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prlimit64(0x0, 0xf, &(0x7f0000000140)={0x0, 0xffffffffffffffff}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x6) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@bridge_delneigh={0x1c, 0x1c, 0x1}, 0x1c}}, 0x0) 451.815989ms ago: executing program 2 (id=1937): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000300)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@lazytime}, {@jqfmt_vfsold}, {@usrquota}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") creat(&(0x7f0000000240)='./bus\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 442.71793ms ago: executing program 0 (id=1939): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) r1 = epoll_create(0x7ffffffe) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r2 = syz_open_pts(r0, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x15) 222.24931ms ago: executing program 3 (id=1945): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="8fcacb7907051175f37538e486dd6300800701082c00db5b686158bbcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40042, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd6372ce22fdb911"], 0xfdef) 133.275658ms ago: executing program 3 (id=1946): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00'}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{}, {}]}, [{}, {}, {}, {}, {}, {0x448eade7}, {0x0, 0x0, 0x80000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0xfffffffc}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xfffffffe}, {0xfffffffe}, {}, {0xd5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x10}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x76}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xd77}, {0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) 66.337044ms ago: executing program 3 (id=1947): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) write$binfmt_script(r2, 0x0, 0x0) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x9504, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) 66.090404ms ago: executing program 1 (id=1948): io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, 0x0, 0x0) r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008bd6000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000530494"], 0x14}}, 0x0) 65.907184ms ago: executing program 3 (id=1949): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000540)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0xffff}}, 0x24) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) 55.115605ms ago: executing program 1 (id=1950): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket(0xa, 0x40000000002, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "a05c7b5d00008023e9c5bcf5fb7700"}) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 31.334037ms ago: executing program 3 (id=1951): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r2, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="be38", 0xffe7}], 0x1, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @dev}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@rr={0x7, 0x3, 0x8b}, @noop]}}}], 0x38}, 0x0) 29.349307ms ago: executing program 1 (id=1952): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000180)=0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000001c0)='kmem_cache_free\x00', r2}, 0x10) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000000)) write$ppp(r0, &(0x7f0000000280)='\x00!D', 0x3) 0s ago: executing program 3 (id=1953): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002180)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x49de, 0x0, 0x0, 0xc003, 0x0, "f13d760700"}) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x7, 0x2, 0xf, "1000a87d827bc2c95a5947380b00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) kernel console output (not intermixed with test programs): =202 compat=0 ip=0x7fd73fecdef9 code=0x7ffc0000 [ 83.075429][ T29] audit: type=1326 audit(1726749380.902:1271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7306 comm="syz.2.1027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd73fecdef9 code=0x7ffc0000 [ 83.099617][ T29] audit: type=1326 audit(1726749380.902:1272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7306 comm="syz.2.1027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fd73fecdef9 code=0x7ffc0000 [ 83.123028][ T29] audit: type=1326 audit(1726749380.902:1273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7306 comm="syz.2.1027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd73fecdef9 code=0x7ffc0000 [ 83.327979][ T7333] loop2: detected capacity change from 0 to 512 [ 83.367500][ T7333] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.1027: corrupted in-inode xattr: invalid ea_ino [ 83.385064][ T7333] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.1027: couldn't read orphan inode 15 (err -117) [ 83.429334][ T7333] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.467523][ T303] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 83.633701][ T6755] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.786889][ T7358] loop2: detected capacity change from 0 to 512 [ 83.828699][ T7358] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 83.871505][ T7358] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.912461][ T7365] loop1: detected capacity change from 0 to 8192 [ 83.917110][ T7358] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.966603][ T7377] loop3: detected capacity change from 0 to 2048 [ 83.967400][ T7365] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 84.009976][ T7377] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.056902][ T6755] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.126020][ T6358] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.208971][ T7389] loop3: detected capacity change from 0 to 512 [ 84.247494][ T7395] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 84.257995][ T7389] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.281143][ T7395] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 84.291909][ T7389] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.368018][ T6358] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.683501][ T7422] loop2: detected capacity change from 0 to 2048 [ 84.713903][ T7422] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.810506][ T7438] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 84.832362][ T7437] loop3: detected capacity change from 0 to 2048 [ 84.839739][ T7438] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1042 with error 28 [ 84.842831][ T6387] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000500000000. [ 84.852348][ T7438] EXT4-fs (loop2): This should not happen!! Data will be lost [ 84.852348][ T7438] [ 84.871111][ T7438] EXT4-fs (loop2): Total free blocks count 0 [ 84.877167][ T7438] EXT4-fs (loop2): Free/Dirty block details [ 84.883091][ T7438] EXT4-fs (loop2): free_blocks=66060288 [ 84.888734][ T7438] EXT4-fs (loop2): dirty_blocks=1568 [ 84.894045][ T7438] EXT4-fs (loop2): Block reservation details [ 84.900179][ T7438] EXT4-fs (loop2): i_reserved_data_blocks=113 [ 84.909767][ T7437] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.925475][ T303] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.935167][ T7437] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1072: bg 0: block 234: padding at end of block bitmap is not set [ 84.982512][ T6358] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.999495][ T303] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.091476][ T303] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.151316][ T303] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.183715][ T6285] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1808 with error 28 [ 85.204169][ T7418] chnl_net:caif_netlink_parms(): no params data found [ 85.342572][ T303] bridge_slave_1: left allmulticast mode [ 85.348337][ T303] bridge_slave_1: left promiscuous mode [ 85.354114][ T303] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.356389][ T7476] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1087'. [ 85.370584][ T7476] unsupported nlmsg_type 40 [ 85.390234][ T303] bridge_slave_0: left allmulticast mode [ 85.396276][ T303] bridge_slave_0: left promiscuous mode [ 85.402066][ T303] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.404122][ T7477] TCP: out of memory -- consider tuning tcp_mem [ 85.493399][ T7485] loop0: detected capacity change from 0 to 2048 [ 85.577546][ T7485] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.678525][ T7491] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 85.708839][ T303] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 85.727943][ T303] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 85.738852][ T7495] loop2: detected capacity change from 0 to 512 [ 85.747070][ T7491] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 85.759630][ T7491] EXT4-fs (loop0): This should not happen!! Data will be lost [ 85.759630][ T7491] [ 85.769330][ T7491] EXT4-fs (loop0): Total free blocks count 0 [ 85.775583][ T7491] EXT4-fs (loop0): Free/Dirty block details [ 85.775667][ T7488] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1092'. [ 85.781553][ T7491] EXT4-fs (loop0): free_blocks=66060288 [ 85.796347][ T7491] EXT4-fs (loop0): dirty_blocks=3328 [ 85.801675][ T7491] EXT4-fs (loop0): Block reservation details [ 85.807743][ T7491] EXT4-fs (loop0): i_reserved_data_blocks=208 [ 85.816763][ T303] bond0 (unregistering): Released all slaves [ 85.817155][ T7495] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.835532][ T7495] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.846617][ T7418] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.853742][ T7418] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.866094][ T7418] bridge_slave_0: entered allmulticast mode [ 85.876476][ T7418] bridge_slave_0: entered promiscuous mode [ 85.896909][ T303] hsr_slave_0: left promiscuous mode [ 85.916313][ T303] hsr_slave_1: left promiscuous mode [ 85.938431][ T303] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.946085][ T303] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 85.980957][ T303] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.988531][ T303] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.007501][ T303] veth1_macvtap: left promiscuous mode [ 86.013037][ T303] veth0_macvtap: left promiscuous mode [ 86.018713][ T303] veth1_vlan: left promiscuous mode [ 86.024000][ T303] veth0_vlan: left promiscuous mode [ 86.030567][ T6755] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.154520][ T7143] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 86.180997][ T303] team0 (unregistering): Port device team_slave_1 removed [ 86.199279][ T303] team0 (unregistering): Port device team_slave_0 removed [ 86.288900][ T7418] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.296306][ T7418] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.307472][ T7418] bridge_slave_1: entered allmulticast mode [ 86.315610][ T7418] bridge_slave_1: entered promiscuous mode [ 86.374082][ T7522] pim6reg1: entered promiscuous mode [ 86.379544][ T7522] pim6reg1: entered allmulticast mode [ 86.440191][ T7532] loop3: detected capacity change from 0 to 256 [ 86.469507][ T7418] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.490995][ T7418] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.546591][ T7532] loop3: detected capacity change from 256 to 255 [ 86.563395][ T7418] team0: Port device team_slave_0 added [ 86.575850][ T7418] team0: Port device team_slave_1 added [ 86.633358][ T7541] syzkaller0: entered promiscuous mode [ 86.639117][ T7541] syzkaller0: entered allmulticast mode [ 86.670085][ T7418] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.677106][ T7418] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.704084][ T7418] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.736988][ T7555] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1106'. [ 86.746899][ T7418] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.753913][ T7418] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.780178][ T7418] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.831361][ T7418] hsr_slave_0: entered promiscuous mode [ 86.838315][ T7418] hsr_slave_1: entered promiscuous mode [ 86.848354][ T7418] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.864109][ T7418] Cannot create hsr debugfs directory [ 86.912488][ T303] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.976928][ T303] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.050785][ T303] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.133118][ T303] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.206326][ T7605] loop2: detected capacity change from 0 to 512 [ 87.222411][ T303] bridge_slave_1: left allmulticast mode [ 87.228225][ T303] bridge_slave_1: left promiscuous mode [ 87.233941][ T303] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.243980][ T7605] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 87.254266][ T303] bridge_slave_0: left allmulticast mode [ 87.255819][ T7605] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec01c, mo2=0002] [ 87.260257][ T303] bridge_slave_0: left promiscuous mode [ 87.270500][ T7605] System zones: 1-12 [ 87.273691][ T303] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.286426][ T7605] EXT4-fs (loop2): 1 truncate cleaned up [ 87.292818][ T7605] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.417661][ T303] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 87.428617][ T303] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 87.440002][ T303] bond0 (unregistering): Released all slaves [ 87.494844][ T303] hsr_slave_0: left promiscuous mode [ 87.507076][ T303] hsr_slave_1: left promiscuous mode [ 87.519657][ T303] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.527234][ T303] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.550131][ T303] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.557672][ T303] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.569536][ T303] veth1_macvtap: left promiscuous mode [ 87.575166][ T303] veth0_macvtap: left promiscuous mode [ 87.580798][ T303] veth1_vlan: left promiscuous mode [ 87.586131][ T303] veth0_vlan: left promiscuous mode [ 87.736192][ T303] team0 (unregistering): Port device team_slave_1 removed [ 87.751176][ T303] team0 (unregistering): Port device team_slave_0 removed [ 87.821386][ T7619] bridge0: port 3(vlan2) entered blocking state [ 87.827828][ T7619] bridge0: port 3(vlan2) entered disabled state [ 87.836993][ T7619] vlan2: entered allmulticast mode [ 87.842937][ T7619] vlan2: left allmulticast mode [ 87.942849][ T7638] loop1: detected capacity change from 0 to 128 [ 87.952014][ T7638] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 87.969030][ T7571] chnl_net:caif_netlink_parms(): no params data found [ 88.058689][ T7143] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 88.075898][ T6755] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.108095][ T7418] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 88.142528][ T29] kauditd_printk_skb: 77 callbacks suppressed [ 88.142543][ T29] audit: type=1400 audit(1726749386.122:1351): avc: denied { mount } for pid=7660 comm="syz.0.1124" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 88.177915][ T7418] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 88.186064][ T7664] ip6t_rpfilter: unknown options [ 88.193316][ T7418] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 88.202219][ T7571] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.209511][ T7571] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.216870][ T7571] bridge_slave_0: entered allmulticast mode [ 88.223284][ T7571] bridge_slave_0: entered promiscuous mode [ 88.230569][ T7571] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.237732][ T7571] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.257260][ T7571] bridge_slave_1: entered allmulticast mode [ 88.264635][ T7571] bridge_slave_1: entered promiscuous mode [ 88.273602][ T7418] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 88.319170][ T7571] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.328612][ T7669] pim6reg1: entered promiscuous mode [ 88.334084][ T7669] pim6reg1: entered allmulticast mode [ 88.349354][ T7571] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.387242][ T7571] team0: Port device team_slave_0 added [ 88.393974][ T7571] team0: Port device team_slave_1 added [ 88.418621][ T7571] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.425647][ T7571] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.451739][ T7571] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.479106][ T7571] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.486199][ T7571] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.508341][ T7690] loop1: detected capacity change from 0 to 512 [ 88.512529][ T7571] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.540484][ T7690] EXT4-fs: Ignoring removed orlov option [ 88.548610][ T7695] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1133'. [ 88.561637][ T7695] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 88.571989][ T7690] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 88.604146][ T7690] EXT4-fs (loop1): 1 orphan inode deleted [ 88.604210][ T7695] batman_adv: batadv1: Adding interface: netdevsim0 [ 88.609987][ T7690] EXT4-fs (loop1): 1 truncate cleaned up [ 88.616654][ T7695] batman_adv: batadv1: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.617099][ T7695] batman_adv: batadv1: Interface activated: netdevsim0 [ 88.644079][ T7690] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.681808][ T7571] hsr_slave_0: entered promiscuous mode [ 88.687968][ T29] audit: type=1326 audit(1726749386.662:1352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7707 comm="syz.0.1136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d7bccdef9 code=0x7ffc0000 [ 88.711526][ T29] audit: type=1326 audit(1726749386.662:1353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7707 comm="syz.0.1136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d7bccdef9 code=0x7ffc0000 [ 88.735079][ T29] audit: type=1326 audit(1726749386.662:1354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7707 comm="syz.0.1136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7d7bccdef9 code=0x7ffc0000 [ 88.758769][ T29] audit: type=1326 audit(1726749386.662:1355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7707 comm="syz.0.1136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d7bccdef9 code=0x7ffc0000 [ 88.782622][ T29] audit: type=1326 audit(1726749386.672:1356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7707 comm="syz.0.1136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f7d7bccdef9 code=0x7ffc0000 [ 88.782779][ T7708] Process accounting resumed [ 88.806147][ T29] audit: type=1326 audit(1726749386.672:1357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7707 comm="syz.0.1136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d7bccdef9 code=0x7ffc0000 [ 88.834305][ T29] audit: type=1326 audit(1726749386.672:1358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7707 comm="syz.0.1136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d7bccdef9 code=0x7ffc0000 [ 88.857957][ T29] audit: type=1326 audit(1726749386.672:1359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7707 comm="syz.0.1136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7d7bccdef9 code=0x7ffc0000 [ 88.882706][ T29] audit: type=1326 audit(1726749386.672:1360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7707 comm="syz.0.1136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d7bccdef9 code=0x7ffc0000 [ 88.906860][ T7571] hsr_slave_1: entered promiscuous mode [ 88.959332][ T7418] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.992893][ T7418] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.014483][ T7730] loop0: detected capacity change from 0 to 164 [ 89.050461][ T303] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.057598][ T303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.076363][ T4575] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.083480][ T4575] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.135642][ T7418] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 89.152934][ T7738] loop2: detected capacity change from 0 to 2048 [ 89.168264][ T3339] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 89.176097][ T3339] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 89.183559][ T3339] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 89.191327][ T3339] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 89.198778][ T3339] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 89.206224][ T3339] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 89.213641][ T3339] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 89.221134][ T3339] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 89.228776][ T3339] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 89.236401][ T3339] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 89.243816][ T3339] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 89.251262][ T3339] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 89.259073][ T3339] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 89.266613][ T3339] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 89.274030][ T3339] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 89.281509][ T3339] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 89.290255][ T3339] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 89.297706][ T3339] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 89.305142][ T3339] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 89.312559][ T3339] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 89.320067][ T3339] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 89.327580][ T3339] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 89.335112][ T3339] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 89.342527][ T3339] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 89.349992][ T3339] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 89.357502][ T3339] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 89.364999][ T3339] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 89.372414][ T3339] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 89.379814][ T7418] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.386717][ T3339] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 89.394133][ T3339] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 89.401642][ T3339] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 89.409102][ T3339] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 89.416578][ T3339] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 89.424071][ T3339] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 89.432217][ T3339] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 89.439727][ T3339] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 89.446907][ T7738] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.447184][ T3339] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 89.466580][ T3339] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 89.474092][ T3339] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 89.481601][ T3339] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 89.489042][ T3339] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 89.496573][ T3339] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 89.503986][ T3339] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 89.520961][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.558524][ T3339] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz0] on syz0 [ 89.578134][ T6755] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.626755][ T7788] loop0: detected capacity change from 0 to 512 [ 89.639531][ T7788] ext4 filesystem being mounted at /37/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 89.648921][ T7792] loop2: detected capacity change from 0 to 512 [ 89.664925][ T7418] veth0_vlan: entered promiscuous mode [ 89.679559][ T7792] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 89.700189][ T7792] EXT4-fs (loop2): 1 truncate cleaned up [ 89.706945][ T7418] veth1_vlan: entered promiscuous mode [ 89.722655][ T7418] veth0_macvtap: entered promiscuous mode [ 89.730998][ T7418] veth1_macvtap: entered promiscuous mode [ 89.741925][ T7418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.752409][ T7418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.762284][ T7418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.772996][ T7418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.783111][ T7418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.793651][ T7418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.803551][ T7418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.814116][ T7418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.824321][ T7418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.834821][ T7418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.846729][ T7418] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.859723][ T7571] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.883238][ T7418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.893866][ T7418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.903973][ T7418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.914686][ T7418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.924547][ T7418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.935061][ T7418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.945005][ T7418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.955469][ T7418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.965340][ T7418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.975849][ T7418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.988359][ T7418] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.997015][ T7571] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.007284][ T7571] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.024152][ T7571] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.051262][ T7418] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.060124][ T7418] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.068890][ T7418] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.077843][ T7418] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.117932][ T7813] batadv0: entered promiscuous mode [ 90.123206][ T7813] macsec1: entered promiscuous mode [ 90.133944][ T7813] batadv0: left promiscuous mode [ 90.201841][ T7571] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.256976][ T7571] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.283443][ T7143] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.290588][ T7143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.316332][ T7143] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.323540][ T7143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.408035][ T7845] loop1: detected capacity change from 0 to 512 [ 90.449228][ T7850] loop4: detected capacity change from 0 to 128 [ 90.484333][ T7850] EXT4-fs: Ignoring removed nobh option [ 90.500801][ T7845] ext4 filesystem being mounted at /97/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 90.554916][ T7850] ext4 filesystem being mounted at /3/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 90.603687][ T7873] syz.2.1163[7873] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 90.603829][ T7873] syz.2.1163[7873] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 90.637966][ T7873] sd 0:0:1:0: device reset [ 90.639602][ T7571] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.730830][ T7885] SELinux: security_context_str_to_sid ( ) failed with errno=-22 [ 90.747642][ T7891] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1164'. [ 90.756835][ T7891] netlink: 'syz.1.1164': attribute type 25 has an invalid length. [ 90.845316][ T7905] xt_CT: You must specify a L4 protocol and not use inversions on it [ 90.868045][ T7909] loop4: detected capacity change from 0 to 128 [ 90.889156][ T7909] ext4 filesystem being mounted at /5/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 90.917519][ T7571] veth0_vlan: entered promiscuous mode [ 90.930095][ T7571] veth1_vlan: entered promiscuous mode [ 90.956660][ T7571] veth0_macvtap: entered promiscuous mode [ 90.965190][ T7571] veth1_macvtap: entered promiscuous mode [ 90.979350][ T7571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.990028][ T7571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.999901][ T7571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.010391][ T7571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.020251][ T7571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.030749][ T7571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.040849][ T7571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.051409][ T7571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.061350][ T7571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.071836][ T7571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.081708][ T7571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.092166][ T7571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.105152][ T7571] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.113672][ T7571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.124360][ T7571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.134239][ T7571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.144810][ T7571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.154705][ T7571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.165260][ T7571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.175729][ T7571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.186298][ T7571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.196213][ T7571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.206750][ T7571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.216604][ T7571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.227058][ T7571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.245598][ T7571] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.266732][ T7936] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1174'. [ 91.285492][ T7571] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.294255][ T7571] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.303173][ T7571] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.312008][ T7571] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.334318][ T7945] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1175'. [ 91.343444][ T7945] netlink: 'syz.4.1175': attribute type 7 has an invalid length. [ 91.376763][ T7945] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.385617][ T7945] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.394459][ T7945] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.403299][ T7945] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.415011][ T7945] vxlan0: entered promiscuous mode [ 91.422114][ T7956] loop0: detected capacity change from 0 to 2048 [ 91.700608][ T7997] loop3: detected capacity change from 0 to 512 [ 91.733181][ T7997] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.774935][ T7997] EXT4-fs error (device loop3): ext4_do_update_inode:5151: inode #19: comm syz.3.1185: corrupted inode contents [ 91.788073][ T7997] EXT4-fs error (device loop3): ext4_dirty_inode:6011: inode #19: comm syz.3.1185: mark_inode_dirty error [ 91.799862][ T7997] EXT4-fs error (device loop3): ext4_do_update_inode:5151: inode #19: comm syz.3.1185: corrupted inode contents [ 91.813352][ T7997] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3007: inode #19: comm syz.3.1185: mark_inode_dirty error [ 91.826838][ T7997] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3010: inode #19: comm syz.3.1185: mark inode dirty (error -117) [ 91.841694][ T7997] EXT4-fs warning (device loop3): ext4_evict_inode:271: xattr delete (err -117) [ 92.006280][ T8034] loop3: detected capacity change from 0 to 1024 [ 92.013444][ T8034] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 92.192380][ T8044] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1193'. [ 92.253988][ T8048] loop4: detected capacity change from 0 to 128 [ 92.268110][ T8048] ext4 filesystem being mounted at /15/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 92.372984][ T8051] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1196'. [ 92.550212][ T8065] loop1: detected capacity change from 0 to 1024 [ 92.615517][ T8065] EXT4-fs error (device loop1): ext4_xattr_inode_iget:440: inode #11: comm syz.1.1203: missing EA_INODE flag [ 92.634023][ T8065] EXT4-fs error (device loop1): ext4_xattr_inode_iget:445: comm syz.1.1203: error while reading EA inode 11 err=-117 [ 92.736813][ T8084] syz.1.1211[8084] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 92.736890][ T8084] syz.1.1211[8084] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 92.932053][ T8103] loop3: detected capacity change from 0 to 128 [ 93.002393][ T8103] syz.3.1218: attempt to access beyond end of device [ 93.002393][ T8103] loop3: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 93.049304][ T8109] sch_tbf: peakrate 3 is lower than or equals to rate 6 ! [ 93.062054][ T8107] loop2: detected capacity change from 0 to 2048 [ 93.080262][ T8107] EXT4-fs error (device loop2): __ext4_fill_super:5435: inode #2: comm syz.2.1220: casefold flag without casefold feature [ 93.099872][ T8107] EXT4-fs (loop2): get root inode failed [ 93.105630][ T8107] EXT4-fs (loop2): mount failed [ 93.194861][ T29] kauditd_printk_skb: 66 callbacks suppressed [ 93.194879][ T29] audit: type=1400 audit(1726749391.172:1427): avc: denied { write } for pid=8124 comm="syz.1.1228" name="event0" dev="devtmpfs" ino=218 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 93.300413][ T8134] loop3: detected capacity change from 0 to 256 [ 93.308093][ T8134] vfat: Bad value for 'time_offset' [ 93.315554][ T29] audit: type=1400 audit(1726749391.302:1428): avc: denied { read } for pid=8131 comm="syz.0.1230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 93.368560][ T8134] SELinux: security_context_str_to_sid (shortname=winnt,uni_xlate=0,uni_xlate=0,shortname=winnt,uni_xlate=1,) failed with errno=-22 [ 93.399572][ T8139] loop2: detected capacity change from 0 to 512 [ 93.433280][ T8139] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c11c, mo2=0002] [ 93.446169][ T8139] System zones: 0-2, 18-18, 34-34 [ 93.448559][ T8144] netlink: 'syz.3.1237': attribute type 9 has an invalid length. [ 93.453448][ T8139] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1233: bg 0: block 248: padding at end of block bitmap is not set [ 93.475177][ T8139] Quota error (device loop2): write_blk: dquota write failed [ 93.482739][ T8139] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 93.493350][ T8139] EXT4-fs error (device loop2): ext4_acquire_dquot:6848: comm syz.2.1233: Failed to acquire dquot type 1 [ 93.509921][ T8148] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1236'. [ 93.519016][ T8139] EXT4-fs (loop2): 1 truncate cleaned up [ 93.527510][ T8148] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1236'. [ 93.532927][ T8139] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.620058][ T4575] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-5 [ 93.629176][ T4575] EXT4-fs error (device loop2): ext4_release_dquot:6871: comm kworker/u8:11: Failed to release dquot type 1 [ 93.671281][ T8161] netlink: 264 bytes leftover after parsing attributes in process `syz.3.1241'. [ 93.692635][ T29] audit: type=1400 audit(1726749391.662:1429): avc: denied { read } for pid=8162 comm="syz.1.1244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 93.709555][ T8169] loop4: detected capacity change from 0 to 512 [ 93.722771][ T8169] EXT4-fs: Ignoring removed i_version option [ 93.726273][ T8165] loop0: detected capacity change from 0 to 2048 [ 93.729034][ T8169] EXT4-fs: Ignoring removed nobh option [ 93.742792][ T8165] EXT4-fs: test_dummy_encryption option not supported [ 93.761024][ T8169] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 93.773815][ T29] audit: type=1400 audit(1726749391.752:1430): avc: denied { connect } for pid=8171 comm="syz.2.1243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 93.806527][ T29] audit: type=1400 audit(1726749391.792:1431): avc: denied { unmount } for pid=7033 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 93.834176][ T8177] loop1: detected capacity change from 0 to 1024 [ 93.857937][ T8169] EXT4-fs (loop4): 1 truncate cleaned up [ 93.863193][ T29] audit: type=1326 audit(1726749391.832:1432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8178 comm="syz.0.1250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d7bccdef9 code=0x7ffc0000 [ 93.887191][ T29] audit: type=1326 audit(1726749391.832:1433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8178 comm="syz.0.1250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f7d7bccdef9 code=0x7ffc0000 [ 93.926097][ T8177] 9pnet_fd: p9_fd_create_unix (8177): problem connecting socket: ./file1: -111 [ 93.938586][ T8181] loop2: detected capacity change from 0 to 512 [ 93.975062][ T8177] loop1: detected capacity change from 1024 to 1023 [ 93.989511][ T8181] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 93.999544][ T5771] EXT4-fs error (device loop1): ext4_readdir:261: inode #2: block 16: comm syz-executor: path /114/file1: bad entry in directory: rec_len is smaller than minimal - offset=980, inode=0, rec_len=0, size=1024 fake=0 [ 94.020619][ T8195] loop4: detected capacity change from 0 to 512 [ 94.032362][ T5771] EXT4-fs error (device loop1): ext4_lookup:1811: inode #12: comm syz-executor: iget: bad extended attribute block 257296770591160 [ 94.046509][ T8195] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 94.053581][ T8197] loop3: detected capacity change from 0 to 2048 [ 94.062675][ T5771] EXT4-fs error (device loop1): ext4_lookup:1811: inode #12: comm syz-executor: iget: bad extended attribute block 257296770591160 [ 94.079957][ T8195] EXT4-fs (loop4): 1 orphan inode deleted [ 94.085814][ T8195] EXT4-fs (loop4): 1 truncate cleaned up [ 94.098116][ T8181] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 94.106739][ T8181] EXT4-fs (loop2): orphan cleanup on readonly fs [ 94.117173][ T8181] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1251: bg 0: block 248: padding at end of block bitmap is not set [ 94.133995][ T8195] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 94.149283][ T8181] EXT4-fs error (device loop2): ext4_acquire_dquot:6848: comm syz.2.1251: Failed to acquire dquot type 1 [ 94.156521][ T8195] EXT4-fs (loop4): Remounting filesystem read-only [ 94.167345][ T8195] EXT4-fs (loop4): error restoring inline_data for inode -- potential data loss! (inode 12, error -5) [ 94.184895][ T8181] EXT4-fs (loop2): 1 truncate cleaned up [ 94.259928][ T8215] loop4: detected capacity change from 0 to 1024 [ 94.263431][ T8213] loop2: detected capacity change from 0 to 512 [ 94.268669][ T8215] EXT4-fs: Ignoring removed nomblk_io_submit option [ 94.291813][ T8213] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 94.312831][ T8215] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 94.329199][ T8213] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1264: bg 0: block 248: padding at end of block bitmap is not set [ 94.378990][ T8213] EXT4-fs error (device loop2): ext4_acquire_dquot:6848: comm syz.2.1264: Failed to acquire dquot type 1 [ 94.397870][ T8215] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 94.409271][ T8213] EXT4-fs (loop2): 1 truncate cleaned up [ 94.430703][ T8213] ext4 filesystem being mounted at /77/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 94.482119][ T8213] EXT4-fs error (device loop2): __ext4_remount:6491: comm syz.2.1264: Abort forced by user [ 94.499426][ T8213] EXT4-fs (loop2): Remounting filesystem read-only [ 94.784004][ T8225] chnl_net:caif_netlink_parms(): no params data found [ 94.805784][ T8262] vhci_hcd: invalid port number 97 [ 94.811006][ T8262] vhci_hcd: default hub control req: d364 v6665 i0061 l29804 [ 94.885191][ T8225] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.892374][ T8225] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.904329][ T8225] bridge_slave_0: entered allmulticast mode [ 94.913099][ T8225] bridge_slave_0: entered promiscuous mode [ 94.926963][ T8278] netlink: 'syz.4.1285': attribute type 8 has an invalid length. [ 94.937824][ T8225] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.945158][ T8225] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.964482][ T8225] bridge_slave_1: entered allmulticast mode [ 94.980180][ T8225] bridge_slave_1: entered promiscuous mode [ 95.008079][ T8289] loop4: detected capacity change from 0 to 2048 [ 95.023651][ T8291] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 95.037789][ T8225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.052995][ T8289] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 95.069657][ T8225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.094133][ T8225] team0: Port device team_slave_0 added [ 95.104325][ T8225] team0: Port device team_slave_1 added [ 95.137779][ T8225] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.144947][ T8225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.171115][ T8225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.182772][ T8225] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.184080][ T8301] syz.4.1293[8301] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 95.189832][ T8225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.190268][ T8301] syz.4.1293[8301] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 95.201257][ T8225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.309167][ T8225] hsr_slave_0: entered promiscuous mode [ 95.317784][ T8225] hsr_slave_1: entered promiscuous mode [ 95.328907][ T8225] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.340168][ T8225] Cannot create hsr debugfs directory [ 95.443248][ T8225] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 95.447036][ T8321] loop4: detected capacity change from 0 to 512 [ 95.453643][ T8225] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.484264][ T8323] loop3: detected capacity change from 0 to 512 [ 95.499971][ T8323] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 95.506345][ T8321] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 95.524728][ T8321] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec01c, mo2=0002] [ 95.538330][ T8225] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 95.548854][ T8225] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.567354][ T8321] System zones: 1-12 [ 95.570634][ T8323] EXT4-fs (loop3): 1 truncate cleaned up [ 95.593083][ T8321] EXT4-fs (loop4): 1 truncate cleaned up [ 95.605524][ T8333] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1307'. [ 95.619685][ T8225] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 95.630091][ T8225] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.692775][ T8225] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 95.703201][ T8225] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.788977][ T8225] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 95.798820][ T8225] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 95.809276][ T8225] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 95.826612][ T8225] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 95.839585][ T8350] loop3: detected capacity change from 0 to 2048 [ 95.887271][ T8355] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1316'. [ 95.896512][ T8355] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1316'. [ 95.972765][ T8225] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.990215][ T8225] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.007209][ T8359] Falling back ldisc for ttyS3. [ 96.008806][ T4593] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.019245][ T4593] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.040829][ T8225] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 96.051403][ T8225] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 96.072825][ T4593] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.079994][ T4593] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.153872][ T8364] syzkaller0: entered promiscuous mode [ 96.159606][ T8364] syzkaller0: entered allmulticast mode [ 96.173900][ T8225] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.225820][ T7143] bridge_slave_1: left allmulticast mode [ 96.231525][ T7143] bridge_slave_1: left promiscuous mode [ 96.237498][ T7143] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.261822][ T7143] bridge_slave_0: left allmulticast mode [ 96.267615][ T7143] bridge_slave_0: left promiscuous mode [ 96.273388][ T7143] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.488105][ T7143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 96.498843][ T7143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 96.509783][ T7143] bond0 (unregistering): Released all slaves [ 96.518014][ T8364] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 96.523904][ T8364] syzkaller0: Linktype set failed because interface is up [ 96.531628][ T8394] tipc: Started in network mode [ 96.536787][ T8394] tipc: Node identity 101, cluster identity 4711 [ 96.543129][ T8394] tipc: Node number set to 257 [ 96.579401][ T7143] hsr_slave_0: left promiscuous mode [ 96.597316][ T7143] hsr_slave_1: left promiscuous mode [ 96.621582][ T7143] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.629173][ T7143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.653361][ T7143] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.660891][ T7143] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.695165][ T7143] veth1_macvtap: left promiscuous mode [ 96.700793][ T7143] veth0_macvtap: left promiscuous mode [ 96.706499][ T7143] veth1_vlan: left promiscuous mode [ 96.711850][ T7143] veth0_vlan: left promiscuous mode [ 96.747307][ T8430] loop2: detected capacity change from 0 to 2048 [ 96.910009][ T7143] team0 (unregistering): Port device team_slave_1 removed [ 96.922489][ T7143] team0 (unregistering): Port device team_slave_0 removed [ 97.187434][ T8521] loop4: detected capacity change from 0 to 128 [ 97.221626][ T8225] veth0_vlan: entered promiscuous mode [ 97.240593][ T8225] veth1_vlan: entered promiscuous mode [ 97.261746][ T8528] loop4: detected capacity change from 0 to 512 [ 97.287623][ T8225] veth0_macvtap: entered promiscuous mode [ 97.297645][ T8225] veth1_macvtap: entered promiscuous mode [ 97.312800][ T8225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.323485][ T8225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.333386][ T8225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.343988][ T8225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.350292][ T8528] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.353931][ T8225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.374832][ T8225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.384676][ T8225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.395171][ T8225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.405108][ T8225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.415631][ T8225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.425574][ T8225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.436138][ T8225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.453681][ T8225] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.465193][ T8225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.475692][ T8225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.485572][ T8225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.496158][ T8225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.506176][ T8225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.516857][ T8225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.526731][ T8225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.537280][ T8225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.548264][ T8225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.559710][ T8225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.569684][ T8225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.580824][ T8225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.592788][ T8225] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.601342][ T7418] EXT4-fs unmount: 47 callbacks suppressed [ 97.601356][ T7418] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.622763][ T8225] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.631679][ T8225] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.640733][ T8225] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.649647][ T8225] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.680119][ T8545] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1349'. [ 97.757194][ T8551] loop4: detected capacity change from 0 to 2048 [ 97.775112][ T8551] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 97.841887][ T8556] loop2: detected capacity change from 0 to 512 [ 97.876644][ T8564] loop3: detected capacity change from 0 to 128 [ 97.876690][ T8566] sd 0:0:1:0: device reset [ 97.891914][ T7418] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.913471][ T8556] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.928775][ T8564] syz.3.1355: attempt to access beyond end of device [ 97.928775][ T8564] loop3: rw=2049, sector=177, nr_sectors = 1 limit=128 [ 97.942453][ T8556] ext4 filesystem being mounted at /94/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.983500][ T7143] kworker/u8:22: attempt to access beyond end of device [ 97.983500][ T7143] loop3: rw=1, sector=153, nr_sectors = 24 limit=128 [ 98.000805][ T6755] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.045894][ T8581] loop3: detected capacity change from 0 to 512 [ 98.064327][ T8581] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 98.107968][ T8589] 9pnet_fd: Insufficient options for proto=fd [ 98.115196][ T8581] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.119468][ T8586] loop4: detected capacity change from 0 to 1024 [ 98.136930][ T8581] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.167229][ T8586] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.191359][ T8601] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1370'. [ 98.225851][ T29] kauditd_printk_skb: 70 callbacks suppressed [ 98.225868][ T29] audit: type=1326 audit(1726749396.212:1500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8604 comm="syz.0.1373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d7bccdef9 code=0x7ffc0000 [ 98.256175][ T29] audit: type=1400 audit(1726749396.242:1501): avc: denied { append } for pid=8584 comm="syz.4.1364" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 98.279849][ T29] audit: type=1326 audit(1726749396.252:1502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8604 comm="syz.0.1373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d7bccdef9 code=0x7ffc0000 [ 98.280826][ T7571] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.303878][ T29] audit: type=1326 audit(1726749396.252:1503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8604 comm="syz.0.1373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7d7bccdef9 code=0x7ffc0000 [ 98.303922][ T29] audit: type=1326 audit(1726749396.252:1504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8604 comm="syz.0.1373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d7bccdef9 code=0x7ffc0000 [ 98.303949][ T29] audit: type=1326 audit(1726749396.262:1505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8604 comm="syz.0.1373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7d7bccdef9 code=0x7ffc0000 [ 98.383797][ T29] audit: type=1326 audit(1726749396.262:1506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8604 comm="syz.0.1373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d7bccdef9 code=0x7ffc0000 [ 98.407409][ T29] audit: type=1326 audit(1726749396.262:1507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8604 comm="syz.0.1373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d7bccdef9 code=0x7ffc0000 [ 98.431129][ T29] audit: type=1326 audit(1726749396.262:1508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8604 comm="syz.0.1373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7d7bccdef9 code=0x7ffc0000 [ 98.454893][ T29] audit: type=1326 audit(1726749396.262:1509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8604 comm="syz.0.1373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d7bccdef9 code=0x7ffc0000 [ 98.498927][ T7418] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.508805][ T8613] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1378'. [ 98.583823][ T8624] loop4: detected capacity change from 0 to 512 [ 98.625055][ T8624] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 98.646768][ T8627] veth0_vlan: entered allmulticast mode [ 98.656867][ T8624] EXT4-fs (loop4): 1 truncate cleaned up [ 98.663131][ T8624] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.700098][ T8627] veth0_vlan: left promiscuous mode [ 98.706694][ T8627] veth0_vlan: entered promiscuous mode [ 98.768256][ T8633] syz.3.1386[8633] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 98.768387][ T8633] syz.3.1386[8633] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 98.805768][ T7418] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.868927][ T4603] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.961252][ T4603] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.033710][ T8649] syz.1.1393[8649] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 99.034826][ T8649] syz.1.1393[8649] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 99.048401][ T4603] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.116167][ T4603] batman_adv: batadv1: Interface deactivated: netdevsim0 [ 99.147222][ T8662] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1396'. [ 99.157605][ T4603] batman_adv: batadv1: Removing interface: netdevsim0 [ 99.169155][ T8658] loop1: detected capacity change from 0 to 2048 [ 99.182868][ T4603] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.237714][ T8658] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.294315][ T4603] bridge_slave_1: left allmulticast mode [ 99.300287][ T4603] bridge_slave_1: left promiscuous mode [ 99.306079][ T4603] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.321016][ T4603] bridge_slave_0: left allmulticast mode [ 99.326861][ T4603] bridge_slave_0: left promiscuous mode [ 99.332678][ T4603] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.407396][ T8225] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.545137][ T4603] @ (unregistering): (slave bond_slave_0): Releasing backup interface [ 99.564089][ T4603] @ (unregistering): (slave bond_slave_1): Releasing backup interface [ 99.583072][ T4603] @ (unregistering): Released all slaves [ 99.593179][ T8689] bond_slave_0: entered promiscuous mode [ 99.598896][ T8689] bond_slave_1: entered promiscuous mode [ 99.619399][ T8694] bond_slave_0: left promiscuous mode [ 99.624896][ T8694] bond_slave_1: left promiscuous mode [ 99.662394][ T4603] hsr_slave_0: left promiscuous mode [ 99.668537][ T8700] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 99.685062][ T4603] hsr_slave_1: left promiscuous mode [ 99.687461][ T8700] vhci_hcd: default hub control req: d300 v0000 i0000 l0 [ 99.698066][ T4603] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.705800][ T4603] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.724480][ T4603] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.732160][ T4603] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.752772][ T4603] veth1_macvtap: left promiscuous mode [ 99.758464][ T4603] veth0_macvtap: left promiscuous mode [ 99.764065][ T4603] veth1_vlan: left promiscuous mode [ 99.769439][ T4603] veth0_vlan: left promiscuous mode [ 99.838413][ T8708] loop4: detected capacity change from 0 to 512 [ 99.880476][ T8708] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.895194][ T8708] ext4 filesystem being mounted at /60/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 99.913870][ T4603] team0 (unregistering): Port device team_slave_1 removed [ 99.925688][ T4603] team0 (unregistering): Port device team_slave_0 removed [ 99.963763][ T7418] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.100522][ T8645] chnl_net:caif_netlink_parms(): no params data found [ 100.119219][ T8721] loop3: detected capacity change from 0 to 2048 [ 100.151882][ T8721] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.239027][ T7571] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.257534][ T8645] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.264725][ T8645] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.274478][ T8645] bridge_slave_0: entered allmulticast mode [ 100.281312][ T8645] bridge_slave_0: entered promiscuous mode [ 100.290752][ T8645] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.298040][ T8645] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.305630][ T8645] bridge_slave_1: entered allmulticast mode [ 100.326182][ T8645] bridge_slave_1: entered promiscuous mode [ 100.332319][ T8749] loop3: detected capacity change from 0 to 2048 [ 100.348627][ T8645] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.348947][ T8749] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.359920][ T8645] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.405780][ T8645] team0: Port device team_slave_0 added [ 100.413120][ T7571] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.413471][ T8645] team0: Port device team_slave_1 added [ 100.470712][ T8645] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.477858][ T8645] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.503841][ T8645] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.516501][ T8758] loop3: detected capacity change from 0 to 128 [ 100.549536][ T8645] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.556599][ T8645] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.582603][ T8645] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.594458][ T8758] syz.3.1420: attempt to access beyond end of device [ 100.594458][ T8758] loop3: rw=0, sector=121, nr_sectors = 120 limit=128 [ 100.651639][ T4589] kworker/u8:15: attempt to access beyond end of device [ 100.651639][ T4589] loop3: rw=1, sector=241, nr_sectors = 800 limit=128 [ 100.688976][ T8771] SELinux: policydb version -570608695 does not match my version range 15-33 [ 100.699416][ T8771] SELinux: failed to load policy [ 100.700523][ T8645] hsr_slave_0: entered promiscuous mode [ 100.712900][ T8645] hsr_slave_1: entered promiscuous mode [ 100.722556][ T8645] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 100.737509][ T8645] Cannot create hsr debugfs directory [ 101.082226][ T8804] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 101.091155][ T8804] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 101.100226][ T8804] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 101.109176][ T8804] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 101.164974][ T8804] geneve2: entered promiscuous mode [ 101.170257][ T8804] geneve2: entered allmulticast mode [ 101.223020][ T8645] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 101.304998][ T8645] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 101.305179][ T8814] IPv4: Oversized IP packet from 172.20.20.24 [ 101.318054][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 101.324244][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 101.371068][ T8810] loop4: detected capacity change from 0 to 2048 [ 101.407086][ T8810] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.420075][ T8645] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 101.475081][ T8645] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 101.632171][ T7418] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.684856][ T8830] SELinux: Context system_u:object_r:dhcpd_var_run_t:s0 is not valid (left unmapped). [ 101.707748][ T8645] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.760994][ T8645] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.816857][ T7143] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.823971][ T7143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.844448][ T8845] loop3: detected capacity change from 0 to 512 [ 101.865088][ T7143] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.872194][ T7143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.881142][ T8845] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 101.911003][ T8845] EXT4-fs (loop3): 1 truncate cleaned up [ 101.924020][ T8845] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.986382][ T8860] bond_slave_0: entered promiscuous mode [ 101.992120][ T8860] bond_slave_1: entered promiscuous mode [ 101.999252][ T8860] bond_slave_0: left promiscuous mode [ 102.004675][ T8860] bond_slave_1: left promiscuous mode [ 102.040135][ T7571] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.073862][ T8645] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.112357][ T8869] pim6reg1: entered allmulticast mode [ 102.262041][ T8645] veth0_vlan: entered promiscuous mode [ 102.267495][ T8903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.279547][ T8900] loop4: detected capacity change from 0 to 2048 [ 102.295149][ T8903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.296560][ T8645] veth1_vlan: entered promiscuous mode [ 102.331199][ T8900] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.360995][ T8645] veth0_macvtap: entered promiscuous mode [ 102.374074][ T8645] veth1_macvtap: entered promiscuous mode [ 102.403214][ T8645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.413785][ T8645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.423643][ T8645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.434134][ T8645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.444008][ T8645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.454548][ T8645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.464545][ T8645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.475135][ T8645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.485000][ T8645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.495466][ T8645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.505399][ T8645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.515867][ T8645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.529876][ T8645] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.541712][ T8645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.552475][ T8645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.562374][ T8645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.572861][ T8645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.582723][ T8645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.593258][ T8645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.603124][ T8645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.613591][ T8645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.623571][ T8645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.634138][ T8645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.644029][ T8645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.654548][ T8645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.666595][ T8645] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.668108][ T7418] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.676119][ T8645] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.691764][ T8645] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.701390][ T8645] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.710404][ T8645] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.003255][ T8967] syz.4.1468[8967] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 103.003472][ T8967] syz.4.1468[8967] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 103.147040][ T8977] syz.0.1475[8977] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 103.162143][ T8977] syz.0.1475[8977] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 103.217455][ T8985] loop2: detected capacity change from 0 to 128 [ 103.261813][ T8985] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 103.280909][ T8985] ext4 filesystem being mounted at /3/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 103.353329][ T8645] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 103.532181][ T35] hid-generic 0000:0000:0000.000A: unknown main item tag 0x7 [ 103.539683][ T35] hid-generic 0000:0000:0000.000A: ignoring exceeding usage max [ 103.551587][ T35] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 103.566548][ T35] hid-generic 0000:0000:0000.000A: unknown main item tag 0x6 [ 103.574056][ T35] hid-generic 0000:0000:0000.000A: unknown main item tag 0xd [ 103.609808][ T35] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz0] on syz0 [ 103.674458][ T9018] loop1: detected capacity change from 0 to 164 [ 103.700130][ T9018] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 103.723631][ T9018] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 103.797912][ T9026] syz.3.1497[9026] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 103.798043][ T9026] syz.3.1497[9026] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 103.887399][ T9032] syz.3.1500[9032] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 103.930060][ T9032] syz.3.1500[9032] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 104.027422][ T9041] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1503'. [ 104.105134][ T9049] syz.0.1507[9049] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 104.105390][ T9049] syz.0.1507[9049] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 104.146548][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 104.146563][ T29] audit: type=1326 audit(1726749402.132:1555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9052 comm="syz.3.1509" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd1adbcdef9 code=0x0 [ 104.320417][ T9065] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1513'. [ 104.387671][ T9073] loop2: detected capacity change from 0 to 256 [ 104.398774][ T9073] vfat: Bad value for 'time_offset' [ 104.426466][ T9073] SELinux: security_context_str_to_sid (shortname=winnt,uni_xlate=0,uni_xlate=0,shortname=winnt,uni_xlate=1,) failed with errno=-22 [ 104.543724][ T29] audit: type=1400 audit(1726749402.522:1556): avc: denied { ioctl } for pid=9088 comm="syz.2.1525" path="socket:[23665]" dev="sockfs" ino=23665 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 104.607879][ T9098] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 104.619392][ T9098] batman_adv: batadv0: Adding interface: ip6gretap1 [ 104.626330][ T9098] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.652232][ T9098] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 104.666742][ T9101] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1529'. [ 104.675748][ T9101] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.683419][ T9101] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.691559][ T9101] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.699256][ T9101] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.707195][ T9101] batman_adv: batadv0: Removing interface: ip6gretap1 [ 104.760360][ T29] audit: type=1400 audit(1726749402.742:1557): avc: denied { read } for pid=9102 comm="syz.2.1531" lport=58953 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 104.854425][ T9123] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1540'. [ 104.888644][ T29] audit: type=1400 audit(1726749402.872:1558): avc: denied { shutdown } for pid=9117 comm="syz.1.1537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 104.913964][ T9128] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 104.997810][ T9137] syz.3.1546[9137] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 104.997871][ T9137] syz.3.1546[9137] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 105.017845][ T29] audit: type=1326 audit(1726749403.002:1559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9134 comm="syz.2.1545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f404f72def9 code=0x7ffc0000 [ 105.054866][ T29] audit: type=1326 audit(1726749403.002:1560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9134 comm="syz.2.1545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f404f72def9 code=0x7ffc0000 [ 105.078632][ T29] audit: type=1326 audit(1726749403.002:1561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9134 comm="syz.2.1545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f404f72def9 code=0x7ffc0000 [ 105.102188][ T29] audit: type=1326 audit(1726749403.002:1562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9134 comm="syz.2.1545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f404f72def9 code=0x7ffc0000 [ 105.125972][ T29] audit: type=1326 audit(1726749403.002:1563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9134 comm="syz.2.1545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f404f72def9 code=0x7ffc0000 [ 105.149917][ T29] audit: type=1326 audit(1726749403.008:1564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9134 comm="syz.2.1545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f404f72def9 code=0x7ffc0000 [ 105.331327][ T9155] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1551'. [ 105.368835][ T9157] loop1: detected capacity change from 0 to 164 [ 105.401875][ T9157] Unable to read rock-ridge attributes [ 105.412653][ T9161] ªªªªªª: renamed from vlan0 (while UP) [ 105.427913][ T9157] Unable to read rock-ridge attributes [ 105.437448][ T9159] loop2: detected capacity change from 0 to 2048 [ 105.496846][ T9159] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.528716][ T9159] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 105.560218][ T8645] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.608767][ T9174] loop3: detected capacity change from 0 to 128 [ 105.629771][ T9174] netlink: 264 bytes leftover after parsing attributes in process `syz.3.1562'. [ 105.649539][ T9172] loop1: detected capacity change from 0 to 1024 [ 105.687008][ T9172] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.709606][ T9180] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1564'. [ 105.856317][ T9186] vhci_hcd: invalid port number 97 [ 105.861478][ T9186] vhci_hcd: default hub control req: d364 v6665 i0061 l29804 [ 105.901998][ T9189] syz.2.1560[9189] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 105.902135][ T9189] syz.2.1560[9189] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 106.041154][ T9193] loop4: detected capacity change from 0 to 8192 [ 106.080318][ T9198] loop3: detected capacity change from 0 to 2048 [ 106.124562][ T9198] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.206281][ T9198] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 106.252123][ T7571] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.263929][ T9213] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1578'. [ 106.299977][ T9172] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 106.329254][ T9172] EXT4-fs (loop1): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 1 with error 28 [ 106.341766][ T9172] EXT4-fs (loop1): This should not happen!! Data will be lost [ 106.341766][ T9172] [ 106.351522][ T9172] EXT4-fs (loop1): Total free blocks count 0 [ 106.357726][ T9172] EXT4-fs (loop1): Free/Dirty block details [ 106.363646][ T9172] EXT4-fs (loop1): free_blocks=68451041280 [ 106.369629][ T9172] EXT4-fs (loop1): dirty_blocks=16 [ 106.374827][ T9172] EXT4-fs (loop1): Block reservation details [ 106.380828][ T9172] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 106.385187][ T9223] netlink: 'syz.3.1580': attribute type 8 has an invalid length. [ 106.494708][ T8225] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.742566][ T9262] loop3: detected capacity change from 0 to 512 [ 106.782928][ T9262] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c11c, mo2=0002] [ 106.816192][ T9272] pimreg: entered allmulticast mode [ 106.823750][ T9272] lo: entered allmulticast mode [ 106.831122][ T9262] System zones: 0-2, 18-18, 34-34 [ 106.850580][ T9262] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1589: bg 0: block 248: padding at end of block bitmap is not set [ 106.881703][ T9280] syzkaller0: entered promiscuous mode [ 106.887272][ T9280] syzkaller0: entered allmulticast mode [ 106.888188][ T9275] loop2: detected capacity change from 0 to 2048 [ 106.906226][ T6285] syzkaller0: tun_net_xmit 48 [ 106.911792][ T9280] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 106.917839][ T9280] syzkaller0: Linktype set failed because interface is up [ 106.927152][ T9262] EXT4-fs error (device loop3): ext4_acquire_dquot:6848: comm syz.3.1589: Failed to acquire dquot type 1 [ 106.941980][ T9262] EXT4-fs (loop3): 1 truncate cleaned up [ 106.948364][ T9262] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.963968][ T9275] Alternate GPT is invalid, using primary GPT. [ 106.970330][ T9275] loop2: p1 p2 p3 [ 106.974608][ T9262] ext4 filesystem being mounted at /96/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.055459][ T9283] netlink: 'syz.1.1596': attribute type 8 has an invalid length. [ 107.069277][ T7571] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.086641][ T6285] EXT4-fs error (device loop3): ext4_release_dquot:6871: comm kworker/u8:21: Failed to release dquot type 1 [ 107.162581][ T9312] sg_write: data in/out 220/10 bytes for SCSI command 0xff-- guessing data in; [ 107.162581][ T9312] program syz.1.1603 not setting count and/or reply_len properly [ 107.379615][ T9362] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 107.395473][ T9362] batman_adv: batadv0: Adding interface: ip6gretap1 [ 107.402139][ T9362] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.427985][ T9362] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 107.455185][ T9362] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1604'. [ 107.464160][ T9362] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.471690][ T9362] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.481256][ T9362] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.488785][ T9362] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.503518][ T9362] batman_adv: batadv0: Removing interface: ip6gretap1 [ 107.519572][ T9377] block device autoloading is deprecated and will be removed. [ 107.532907][ T9377] syz.1.1610: attempt to access beyond end of device [ 107.532907][ T9377] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 107.550151][ T9379] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 107.558552][ T9379] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 107.588246][ T9381] ref_ctr_offset mismatch. inode: 0x2fd offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x0 [ 107.783655][ T9412] loop0: detected capacity change from 0 to 1024 [ 107.819125][ T9412] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.956843][ T9430] loop2: detected capacity change from 0 to 256 [ 107.981032][ T9] IPVS: starting estimator thread 0... [ 108.074924][ T9434] IPVS: using max 2208 ests per chain, 110400 per kthread [ 108.161634][ T9412] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 108.186535][ T9412] EXT4-fs (loop0): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 1 with error 28 [ 108.198902][ T9412] EXT4-fs (loop0): This should not happen!! Data will be lost [ 108.198902][ T9412] [ 108.208706][ T9412] EXT4-fs (loop0): Total free blocks count 0 [ 108.214706][ T9412] EXT4-fs (loop0): Free/Dirty block details [ 108.220866][ T9412] EXT4-fs (loop0): free_blocks=68451041280 [ 108.226789][ T9412] EXT4-fs (loop0): dirty_blocks=16 [ 108.232044][ T9412] EXT4-fs (loop0): Block reservation details [ 108.238095][ T9412] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 108.276815][ T7033] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.298603][ T9469] loop0: detected capacity change from 0 to 128 [ 108.317187][ T9469] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 108.336590][ T9469] ext4 filesystem being mounted at /148/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 108.376342][ T9474] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 108.383621][ T9474] IPv6: NLM_F_CREATE should be set when creating new route [ 108.396863][ T7033] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 108.469268][ T9489] SELinux: security_context_str_to_sid ( ) failed with errno=-22 [ 108.672896][ T2964] udevd[2964]: worker [3251] terminated by signal 33 (Unknown signal 33) [ 108.699341][ T9540] ipvlan1: entered promiscuous mode [ 108.717796][ T9540] ipvlan1: left promiscuous mode [ 108.824693][ T9563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.837685][ T9563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.908072][ T9567] loop2: detected capacity change from 0 to 8192 [ 108.945089][ T9567] loop2: p2 p3 p4 [ 108.948979][ T9567] loop2: p2 start 452985600 is beyond EOD, truncated [ 108.955753][ T9567] loop2: p3 start 4177527808 is beyond EOD, truncated [ 108.962984][ T9567] loop2: p4 size 3599499392 extends beyond EOD, truncated [ 109.078285][ T9578] bpf_get_probe_write_proto: 2 callbacks suppressed [ 109.078305][ T9578] syz.1.1656[9578] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 109.085822][ T9578] syz.1.1656[9578] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 109.111986][ T9578] loop1: detected capacity change from 0 to 2048 [ 109.163323][ T9578] Alternate GPT is invalid, using primary GPT. [ 109.169750][ T9578] loop1: p1 p2 p3 [ 109.295808][ T29] kauditd_printk_skb: 90 callbacks suppressed [ 109.295823][ T29] audit: type=1326 audit(1726749407.278:1652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9587 comm="syz.2.1661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f404f72def9 code=0x7ffc0000 [ 109.335542][ T29] audit: type=1326 audit(1726749407.278:1653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9587 comm="syz.2.1661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f404f72def9 code=0x7ffc0000 [ 109.349378][ T9592] loop2: detected capacity change from 0 to 1024 [ 109.359076][ T29] audit: type=1326 audit(1726749407.278:1654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9587 comm="syz.2.1661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f404f72def9 code=0x7ffc0000 [ 109.388644][ T29] audit: type=1326 audit(1726749407.278:1655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9587 comm="syz.2.1661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f404f72def9 code=0x7ffc0000 [ 109.412083][ T29] audit: type=1326 audit(1726749407.278:1656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9587 comm="syz.2.1661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f404f72def9 code=0x7ffc0000 [ 109.435683][ T29] audit: type=1326 audit(1726749407.278:1657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9587 comm="syz.2.1661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f404f72def9 code=0x7ffc0000 [ 109.459160][ T29] audit: type=1326 audit(1726749407.278:1658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9587 comm="syz.2.1661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f404f72def9 code=0x7ffc0000 [ 109.464139][ T9592] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.482781][ T29] audit: type=1326 audit(1726749407.278:1659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9587 comm="syz.2.1661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f404f72def9 code=0x7ffc0000 [ 109.518303][ T29] audit: type=1326 audit(1726749407.278:1660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9587 comm="syz.2.1661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f404f72def9 code=0x7ffc0000 [ 109.541884][ T29] audit: type=1326 audit(1726749407.278:1661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9587 comm="syz.2.1661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f404f72def9 code=0x7ffc0000 [ 109.572297][ T8645] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.639022][ T9609] loop2: detected capacity change from 0 to 2048 [ 109.645857][ T9609] EXT4-fs: Ignoring removed mblk_io_submit option [ 109.656378][ T9609] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.690256][ T8645] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.739826][ T9619] loop1: detected capacity change from 0 to 256 [ 109.878970][ T9623] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1675'. [ 110.081444][ T9638] 9pnet_fd: p9_fd_create_tcp (9638): problem connecting socket to 127.0.0.1 [ 110.419434][ T9651] loop4: detected capacity change from 0 to 512 [ 110.437982][ T9651] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.451620][ T9651] ext4 filesystem being mounted at /107/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.469204][ T9651] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 110.484945][ T9651] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 65793 with max blocks 1 with error 28 [ 110.497559][ T9651] EXT4-fs (loop4): This should not happen!! Data will be lost [ 110.497559][ T9651] [ 110.507422][ T9651] EXT4-fs (loop4): Total free blocks count 0 [ 110.513544][ T9651] EXT4-fs (loop4): Free/Dirty block details [ 110.519481][ T9651] EXT4-fs (loop4): free_blocks=65280 [ 110.524815][ T9651] EXT4-fs (loop4): dirty_blocks=1 [ 110.530034][ T9651] EXT4-fs (loop4): Block reservation details [ 110.536074][ T9651] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 110.556447][ T7418] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.579835][ T9659] loop4: detected capacity change from 0 to 512 [ 110.601906][ T9659] EXT4-fs (loop4): 1 truncate cleaned up [ 110.616595][ T9659] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.662200][ T7418] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.713227][ T9675] loop4: detected capacity change from 0 to 512 [ 110.728968][ T9675] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.743247][ T9675] ext4 filesystem being mounted at /109/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.758998][ T9675] Invalid ELF header magic: != ELF [ 110.773033][ T9674] Process accounting resumed [ 110.787150][ T7418] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.851433][ T5312] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.948339][ T5312] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.990542][ T9710] tipc: Enabled bearer , priority 10 [ 111.059172][ T5312] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.124820][ T5312] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.130676][ T9728] loop1: detected capacity change from 0 to 1024 [ 111.167238][ T9728] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.200956][ T9728] ext4 filesystem being mounted at /80/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.211712][ T5312] bridge_slave_1: left allmulticast mode [ 111.217445][ T5312] bridge_slave_1: left promiscuous mode [ 111.223189][ T5312] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.237657][ T5312] bridge_slave_0: left allmulticast mode [ 111.243454][ T5312] bridge_slave_0: left promiscuous mode [ 111.249199][ T5312] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.277355][ T8225] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.373523][ T9750] loop1: detected capacity change from 0 to 512 [ 111.384333][ T5312] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 111.390792][ T9750] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 111.414043][ T5312] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 111.426328][ T9750] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.444712][ T9750] ext4 filesystem being mounted at /82/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.457377][ T5312] bond0 (unregistering): Released all slaves [ 111.636350][ T8225] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.678156][ T9816] loop0: detected capacity change from 0 to 128 [ 111.689897][ T5312] hsr_slave_0: left promiscuous mode [ 111.691692][ T9816] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 111.707567][ T5312] hsr_slave_1: left promiscuous mode [ 111.707776][ T9816] ext4 filesystem being mounted at /162/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 111.749046][ T5312] veth1_macvtap: left promiscuous mode [ 111.754848][ T5312] veth0_macvtap: left promiscuous mode [ 111.760794][ T5312] veth1_vlan: left promiscuous mode [ 111.766106][ T5312] veth0_vlan: left promiscuous mode [ 111.783164][ T7033] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 111.869774][ T5312] team0 (unregistering): Port device team_slave_1 removed [ 111.881720][ T5312] team0 (unregistering): Port device team_slave_0 removed [ 111.965453][ T9706] chnl_net:caif_netlink_parms(): no params data found [ 111.970441][ T9835] loop3: detected capacity change from 0 to 128 [ 111.998730][ T9835] syz.3.1723: attempt to access beyond end of device [ 111.998730][ T9835] loop3: rw=0, sector=121, nr_sectors = 112 limit=128 [ 112.056842][ T9706] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.063968][ T9706] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.102868][ T9706] bridge_slave_0: entered allmulticast mode [ 112.120351][ T9706] bridge_slave_0: entered promiscuous mode [ 112.128200][ T9706] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.135305][ T9706] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.143798][ T9706] bridge_slave_1: entered allmulticast mode [ 112.150710][ T9706] bridge_slave_1: entered promiscuous mode [ 112.162333][ T9855] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 112.178425][ T9706] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.189126][ T9706] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.221218][ T9706] team0: Port device team_slave_0 added [ 112.231754][ T9706] team0: Port device team_slave_1 added [ 112.254424][ T9706] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.261769][ T9706] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.287827][ T9706] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.301029][ T9859] loop4: detected capacity change from 0 to 1024 [ 112.308885][ T9859] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 112.309704][ T9706] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.324708][ T9706] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.351034][ T9706] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.357073][ T9859] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.376760][ T5312] IPVS: stop unused estimator thread 0... [ 112.414695][ T9706] hsr_slave_0: entered promiscuous mode [ 112.421609][ T9706] hsr_slave_1: entered promiscuous mode [ 112.429286][ T9706] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 112.439179][ T9706] Cannot create hsr debugfs directory [ 112.682164][ T9706] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 112.691071][ T9706] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 112.701048][ T9706] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 112.710031][ T9706] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 112.727660][ T9706] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.734937][ T9706] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.742255][ T9706] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.749371][ T9706] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.783865][ T9706] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.798632][ T6285] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.808020][ T6285] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.821726][ T9706] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.832768][ T5312] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.840027][ T5312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.851639][ T5312] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.858988][ T5312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.963098][ T9706] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.965491][ T9874] loop3: detected capacity change from 0 to 1024 [ 112.993726][ T9877] loop0: detected capacity change from 0 to 512 [ 113.001095][ T9877] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 113.011870][ T9874] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.017218][ T9877] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.037084][ T9877] ext4 filesystem being mounted at /169/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.135622][ T9706] veth0_vlan: entered promiscuous mode [ 113.140048][ T7033] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.146269][ T9706] veth1_vlan: entered promiscuous mode [ 113.162277][ T7418] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.165929][ T9706] veth0_macvtap: entered promiscuous mode [ 113.182563][ T9706] veth1_macvtap: entered promiscuous mode [ 113.210796][ T9706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.221340][ T9706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.231429][ T9706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.242386][ T9706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.252500][ T9706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.263428][ T9706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.273465][ T9706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.283947][ T9706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.294218][ T9706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.305056][ T9706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.319756][ T9706] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.331510][ T9706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.342018][ T9706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.351939][ T9706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.362676][ T9706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.372624][ T9706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.383288][ T9706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.393749][ T9706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.404320][ T9706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.414206][ T9706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.425128][ T9706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.443655][ T9706] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.452563][ T9706] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.461741][ T9706] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.470648][ T9706] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.479495][ T9706] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.654659][ T9905] loop1: detected capacity change from 0 to 2048 [ 113.676836][ T9905] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.689384][ T9874] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 113.702753][ T9905] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 113.716747][ T9874] EXT4-fs (loop3): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 1 with error 28 [ 113.731701][ T9874] EXT4-fs (loop3): This should not happen!! Data will be lost [ 113.731701][ T9874] [ 113.736632][ T9905] EXT4-fs (loop1): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 113.741573][ T9874] EXT4-fs (loop3): Total free blocks count 0 [ 113.754022][ T9905] EXT4-fs (loop1): This should not happen!! Data will be lost [ 113.754022][ T9905] [ 113.759887][ T9874] EXT4-fs (loop3): Free/Dirty block details [ 113.759903][ T9874] EXT4-fs (loop3): free_blocks=68451041280 [ 113.759920][ T9874] EXT4-fs (loop3): dirty_blocks=16 [ 113.769723][ T9905] EXT4-fs (loop1): Total free blocks count 0 [ 113.775610][ T9874] EXT4-fs (loop3): Block reservation details [ 113.775630][ T9874] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 113.805648][ T9905] EXT4-fs (loop1): Free/Dirty block details [ 113.811552][ T9905] EXT4-fs (loop1): free_blocks=2415919104 [ 113.817408][ T9905] EXT4-fs (loop1): dirty_blocks=16 [ 113.822637][ T9905] EXT4-fs (loop1): Block reservation details [ 113.829406][ T9905] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 113.860738][ T9917] EXT4-fs (loop1): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 113.895987][ T9922] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1750'. [ 113.915617][ T7571] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.943530][ T9926] loop1: detected capacity change from 0 to 512 [ 113.955459][ T9926] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 113.993742][ T9926] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.024523][ T9935] loop3: detected capacity change from 0 to 1764 [ 114.029781][ T9926] ext4 filesystem being mounted at /90/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.042880][ T9] IPVS: starting estimator thread 0... [ 114.059584][ T9938] bridge0: port 3(vlan2) entered blocking state [ 114.065929][ T9938] bridge0: port 3(vlan2) entered disabled state [ 114.069117][ T9943] syz.4.1759[9943] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 114.073050][ T9943] syz.4.1759[9943] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 114.078697][ T9938] vlan2: entered allmulticast mode [ 114.111915][ T9938] vlan2: left allmulticast mode [ 114.141319][ T9946] loop4: detected capacity change from 0 to 512 [ 114.154850][ T9941] IPVS: using max 2304 ests per chain, 115200 per kthread [ 114.162285][ T9948] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.169637][ T9948] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.172446][ T9946] EXT4-fs (loop4): too many log groups per flexible block group [ 114.178480][ T9948] bridge0: entered allmulticast mode [ 114.184481][ T9946] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 114.198397][ T9946] EXT4-fs (loop4): mount failed [ 114.212599][ T9948] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.219728][ T9948] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.230601][ T9948] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.237815][ T9948] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.245164][ T9948] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.252401][ T9948] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.260038][ T9948] bridge0: entered promiscuous mode [ 114.277226][ T9954] loop4: detected capacity change from 0 to 1024 [ 114.307973][ T29] kauditd_printk_skb: 144 callbacks suppressed [ 114.307989][ T29] audit: type=1326 audit(1726749412.288:1806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9953 comm="syz.4.1763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f003e2dc890 code=0x7ffc0000 [ 114.315130][ T9959] loop2: detected capacity change from 0 to 2048 [ 114.340527][ T29] audit: type=1326 audit(1726749412.318:1807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9953 comm="syz.4.1763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f003e2dcc77 code=0x7ffc0000 [ 114.367491][ T29] audit: type=1326 audit(1726749412.318:1808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9953 comm="syz.4.1763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f003e2dc890 code=0x7ffc0000 [ 114.391069][ T29] audit: type=1326 audit(1726749412.318:1809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9953 comm="syz.4.1763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f003e2ddef9 code=0x7ffc0000 [ 114.414618][ T29] audit: type=1326 audit(1726749412.318:1810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9953 comm="syz.4.1763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f003e2ddef9 code=0x7ffc0000 [ 114.442729][ T29] audit: type=1326 audit(1726749412.348:1811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9953 comm="syz.4.1763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f003e2ddef9 code=0x7ffc0000 [ 114.466060][ T29] audit: type=1326 audit(1726749412.348:1812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9953 comm="syz.4.1763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f003e2ddef9 code=0x7ffc0000 [ 114.489585][ T29] audit: type=1326 audit(1726749412.348:1813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9953 comm="syz.4.1763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f003e2ddef9 code=0x7ffc0000 [ 114.513034][ T29] audit: type=1326 audit(1726749412.348:1814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9953 comm="syz.4.1763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f003e2ddef9 code=0x7ffc0000 [ 114.536442][ T29] audit: type=1326 audit(1726749412.348:1815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9953 comm="syz.4.1763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f003e2ddef9 code=0x7ffc0000 [ 114.595858][ T9954] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 114.611539][ T9954] EXT4-fs (loop4): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 1 with error 28 [ 114.624471][ T9954] EXT4-fs (loop4): This should not happen!! Data will be lost [ 114.624471][ T9954] [ 114.634348][ T9954] EXT4-fs (loop4): Total free blocks count 0 [ 114.640441][ T9954] EXT4-fs (loop4): Free/Dirty block details [ 114.646895][ T9954] EXT4-fs (loop4): free_blocks=68451041280 [ 114.652754][ T9954] EXT4-fs (loop4): dirty_blocks=16 [ 114.657999][ T9954] EXT4-fs (loop4): Block reservation details [ 114.664013][ T9954] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 115.238172][ T9997] loop1: detected capacity change from 0 to 1764 [ 115.246549][ T9997] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 115.356885][T10007] loop3: detected capacity change from 0 to 512 [ 115.367889][T10007] ext4 filesystem being mounted at /132/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.380131][T10007] Process accounting resumed [ 115.388718][T10007] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 115.430533][T10013] wg2: entered promiscuous mode [ 115.435471][T10013] wg2: entered allmulticast mode [ 115.530316][T10025] syz.1.1792 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 115.568810][T10031] loop2: detected capacity change from 0 to 512 [ 115.581559][T10031] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 115.589168][T10029] loop3: detected capacity change from 0 to 1024 [ 115.590132][T10031] EXT4-fs (loop2): blocks per group (34) and clusters per group (32768) inconsistent [ 115.636532][T10040] loop0: detected capacity change from 0 to 2048 [ 115.659218][T10044] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1798'. [ 115.680845][T10040] loop0: p1 < > p4 [ 115.688750][T10040] loop0: p4 size 8388608 extends beyond EOD, truncated [ 115.696643][T10049] x_tables: ip6_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 115.704901][T10044] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 115.807322][T10056] loop3: detected capacity change from 0 to 512 [ 115.837365][T10056] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 115.853525][T10058] loop1: detected capacity change from 0 to 1024 [ 115.861705][T10058] EXT4-fs: Ignoring removed orlov option [ 115.868206][T10056] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002] [ 115.877366][T10058] EXT4-fs (loop1): filesystem is read-only [ 115.883324][T10058] EXT4-fs (loop1): #clusters per group too big: 8193 [ 115.893334][T10056] EXT4-fs (loop3): orphan cleanup on readonly fs [ 115.928893][T10056] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1803: bg 0: block 361: padding at end of block bitmap is not set [ 115.944905][T10058] loop1: detected capacity change from 0 to 512 [ 115.951891][T10056] EXT4-fs (loop3): Remounting filesystem read-only [ 115.959070][T10056] EXT4-fs (loop3): 1 truncate cleaned up [ 115.965789][T10056] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 115.979097][T10058] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1806: bg 0: block 248: padding at end of block bitmap is not set [ 116.012949][T10058] EXT4-fs error (device loop1): ext4_acquire_dquot:6848: comm syz.1.1806: Failed to acquire dquot type 1 [ 116.052334][T10058] EXT4-fs (loop1): 1 truncate cleaned up [ 116.063142][T10058] ext4 filesystem being mounted at /105/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.142574][T10071] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1810'. [ 116.168593][T10075] loop0: detected capacity change from 0 to 512 [ 116.179518][T10075] EXT4-fs: Ignoring removed orlov option [ 116.205892][T10075] EXT4-fs: Invalid journal IO priority (must be 0-7) [ 116.269182][T10086] netlink: 'syz.3.1818': attribute type 1 has an invalid length. [ 116.292375][T10091] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 116.501293][T10124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.522547][T10124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.216935][T10246] loop0: detected capacity change from 0 to 256 [ 117.237544][T10246] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 117.266628][T10251] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 117.291724][T10259] syz.3.1839[10259] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 117.291828][T10259] syz.3.1839[10259] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 117.308781][T10259] syz.3.1839[10259] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 117.323688][T10259] syz.3.1839[10259] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 117.358164][T10266] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 117.358164][T10266] program syz.1.1841 not setting count and/or reply_len properly [ 117.418653][T10272] netlink: 'syz.1.1844': attribute type 7 has an invalid length. [ 117.419730][T10270] sd 0:0:1:0: device reset [ 117.426456][T10272] netlink: 'syz.1.1844': attribute type 39 has an invalid length. [ 117.432648][T10272] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10272 comm=syz.1.1844 [ 117.454250][T10274] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 117.461531][T10272] netlink: 'syz.1.1844': attribute type 7 has an invalid length. [ 117.472280][T10272] netlink: 'syz.1.1844': attribute type 39 has an invalid length. [ 117.494634][T10276] loop3: detected capacity change from 0 to 1024 [ 117.501619][T10276] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 117.830244][ T3320] IPVS: starting estimator thread 0... [ 117.926424][T10315] IPVS: using max 2256 ests per chain, 112800 per kthread [ 117.942134][T10325] syz.1.1856[10325] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 117.942211][T10325] syz.1.1856[10325] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 118.157881][T10347] loop2: detected capacity change from 0 to 1024 [ 118.183808][T10347] EXT4-fs: Ignoring removed orlov option [ 118.189730][T10347] EXT4-fs: Ignoring removed nomblk_io_submit option [ 118.203918][T10356] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1863'. [ 118.290796][T10365] Falling back ldisc for ptm0. [ 118.578480][T10435] syz.4.1875[10435] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 118.578561][T10435] syz.4.1875[10435] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 118.637848][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 118.696290][ T4562] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 118.770450][T10449] syzkaller0: entered promiscuous mode [ 118.776103][T10449] syzkaller0: entered allmulticast mode [ 118.861308][T10451] loop2: detected capacity change from 0 to 128 [ 118.945457][T10461] netlink: 332 bytes leftover after parsing attributes in process `syz.2.1887'. [ 118.954701][T10461] netlink: 'syz.2.1887': attribute type 9 has an invalid length. [ 118.962559][T10461] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1887'. [ 118.971734][T10461] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1887'. [ 119.001916][T10463] loop2: detected capacity change from 0 to 512 [ 119.027876][T10463] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.039605][T10463] EXT4-fs error (device loop2): ext4_do_update_inode:5151: inode #2: comm syz.2.1888: corrupted inode contents [ 119.052829][T10463] EXT4-fs error (device loop2): ext4_dirty_inode:6011: inode #2: comm syz.2.1888: mark_inode_dirty error [ 119.064552][T10463] EXT4-fs error (device loop2): ext4_do_update_inode:5151: inode #2: comm syz.2.1888: corrupted inode contents [ 119.078907][T10463] EXT4-fs error (device loop2): ext4_add_entry:2435: inode #2: comm syz.2.1888: Directory hole found for htree leaf block 0 [ 119.494680][T10498] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1904'. [ 119.629255][ T29] kauditd_printk_skb: 76 callbacks suppressed [ 119.629272][ T29] audit: type=1400 audit(1726749417.608:1890): avc: denied { remount } for pid=10508 comm="syz.1.1908" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 119.705977][T10515] syz.0.1912[10515] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 119.706064][T10515] syz.0.1912[10515] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 119.720530][T10513] loop1: detected capacity change from 0 to 2048 [ 119.795674][T10529] loop1: detected capacity change from 0 to 1024 [ 119.810239][T10529] ext4 filesystem being mounted at /131/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.835922][T10535] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1920'. [ 119.862548][T10535] bond1: (slave xfrm1): The slave device specified does not support setting the MAC address [ 119.873438][T10535] bond1: (slave xfrm1): Error -95 calling set_mac_address [ 119.887779][T10542] loop1: detected capacity change from 0 to 512 [ 119.894425][T10542] EXT4-fs: Ignoring removed orlov option [ 119.904499][T10542] ext4 filesystem being mounted at /132/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 119.934721][T10548] loop3: detected capacity change from 0 to 128 [ 119.945352][T10551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.945513][ T24] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 119.961347][T10551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.963294][ T24] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 120.117144][T10573] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1936'. [ 120.127275][T10546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.148040][T10546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.159633][T10575] loop2: detected capacity change from 0 to 1024 [ 120.167123][T10575] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 120.507889][ T29] audit: type=1107 audit(1726749418.488:1891): pid=10600 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 120.597837][T10584] ================================================================== [ 120.606032][T10584] BUG: KCSAN: data-race in __xa_set_mark / xas_find_marked [ 120.613266][T10584] [ 120.615611][T10584] write to 0xffff8881057c66e4 of 4 bytes by task 10575 on cpu 0: [ 120.623358][T10584] __xa_set_mark+0x182/0x1b0 [ 120.627982][T10584] __folio_mark_dirty+0x3b5/0x4e0 [ 120.633029][T10584] mark_buffer_dirty+0x148/0x250 [ 120.638008][T10584] block_write_end+0x123/0x210 [ 120.642804][T10584] ext4_write_end+0x136/0x720 [ 120.647522][T10584] generic_perform_write+0x33c/0x4a0 [ 120.652855][T10584] ext4_buffered_write_iter+0x1ea/0x370 [ 120.658449][T10584] ext4_file_write_iter+0x293/0xe10 [ 120.663685][T10584] iter_file_splice_write+0x5f1/0x980 [ 120.669112][T10584] direct_splice_actor+0x160/0x2c0 [ 120.674259][T10584] splice_direct_to_actor+0x302/0x670 [ 120.679680][T10584] do_splice_direct+0xd7/0x150 [ 120.684496][T10584] do_sendfile+0x39b/0x970 [ 120.688964][T10584] __x64_sys_sendfile64+0x110/0x150 [ 120.694243][T10584] x64_sys_call+0xed5/0x2d60 [ 120.698880][T10584] do_syscall_64+0xc9/0x1c0 [ 120.703424][T10584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.709352][T10584] [ 120.711696][T10584] read to 0xffff8881057c66e4 of 4 bytes by task 10584 on cpu 1: [ 120.719354][T10584] xas_find_marked+0x60a/0x660 [ 120.724149][T10584] find_get_entry+0x54/0x390 [ 120.728871][T10584] filemap_get_folios_tag+0x9e/0x210 [ 120.734254][T10584] __filemap_fdatawait_range+0x82/0x140 [ 120.739832][T10584] file_write_and_wait_range+0x10a/0x170 [ 120.745491][T10584] generic_buffers_fsync_noflush+0x46/0x120 [ 120.751427][T10584] ext4_sync_file+0x1ff/0x6c0 [ 120.756145][T10584] vfs_fsync_range+0x116/0x130 [ 120.760937][T10584] ext4_buffered_write_iter+0x326/0x370 [ 120.766505][T10584] ext4_file_write_iter+0x293/0xe10 [ 120.771730][T10584] iter_file_splice_write+0x5f1/0x980 [ 120.777137][T10584] direct_splice_actor+0x160/0x2c0 [ 120.782296][T10584] splice_direct_to_actor+0x302/0x670 [ 120.787713][T10584] do_splice_direct+0xd7/0x150 [ 120.792509][T10584] do_sendfile+0x39b/0x970 [ 120.796971][T10584] __x64_sys_sendfile64+0x110/0x150 [ 120.802204][T10584] x64_sys_call+0xed5/0x2d60 [ 120.806832][T10584] do_syscall_64+0xc9/0x1c0 [ 120.811381][T10584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.817313][T10584] [ 120.819652][T10584] value changed: 0x04000021 -> 0x0e000021 [ 120.825470][T10584] [ 120.827803][T10584] Reported by Kernel Concurrency Sanitizer on: [ 120.833975][T10584] CPU: 1 UID: 0 PID: 10584 Comm: syz.2.1937 Not tainted 6.11.0-syzkaller-07262-g839c4f596f89 #0 [ 120.844417][T10584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 120.854584][T10584] ================================================================== [ 120.926718][T10584] ================================================================== [ 120.934981][T10584] BUG: KCSAN: data-race in filemap_splice_read / filemap_splice_read [ 120.943128][T10584] [ 120.945470][T10584] write to 0xffff88810c9ad230 of 8 bytes by task 10575 on cpu 1: [ 120.953199][T10584] filemap_splice_read+0x6c4/0x910 [ 120.958382][T10584] ext4_file_splice_read+0x8f/0xb0 [ 120.963547][T10584] splice_direct_to_actor+0x269/0x670 [ 120.969138][T10584] do_splice_direct+0xd7/0x150 [ 120.973948][T10584] do_sendfile+0x39b/0x970 [ 120.978449][T10584] __x64_sys_sendfile64+0x110/0x150 [ 120.983776][T10584] x64_sys_call+0xed5/0x2d60 [ 120.988426][T10584] do_syscall_64+0xc9/0x1c0 [ 120.992979][T10584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.998990][T10584] [ 121.001320][T10584] write to 0xffff88810c9ad230 of 8 bytes by task 10584 on cpu 0: [ 121.009062][T10584] filemap_splice_read+0x6c4/0x910 [ 121.014208][T10584] ext4_file_splice_read+0x8f/0xb0 [ 121.019347][T10584] splice_direct_to_actor+0x269/0x670 [ 121.024778][T10584] do_splice_direct+0xd7/0x150 [ 121.029651][T10584] do_sendfile+0x39b/0x970 [ 121.034115][T10584] __x64_sys_sendfile64+0x110/0x150 [ 121.039490][T10584] x64_sys_call+0xed5/0x2d60 [ 121.044126][T10584] do_syscall_64+0xc9/0x1c0 [ 121.048677][T10584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.054694][T10584] [ 121.057028][T10584] value changed: 0x0000000000000f8a -> 0x0000000000000f8b [ 121.064166][T10584] [ 121.066534][T10584] Reported by Kernel Concurrency Sanitizer on: [ 121.072705][T10584] CPU: 0 UID: 0 PID: 10584 Comm: syz.2.1937 Not tainted 6.11.0-syzkaller-07262-g839c4f596f89 #0 [ 121.083236][T10584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 121.093419][T10584] ================================================================== [ 121.256024][ T3340] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 124.465494][ T4580] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 130.216485][ T4580] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration