last executing test programs: 1.831127631s ago: executing program 3 (id=5052): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000800)={[{@bsdgroups}, {@noinit_itable}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@sysvgroups}, {@noload}, {@nodiscard}]}, 0x64, 0x519, &(0x7f0000000b00)="$eJzs3UFvG1kdAPD/OHa2adNNFjjASiwLuyitoHayYXcjDkuREJwqLZR7CYkTRXHiKHbaJqogFR8ACSFA4gQXLkh8ACRUiQtHhFQJziBAoApaOHCADrI9TtOsnbitG6fx7ydN5s2bef6/52jG82aeZgIYWq9HxOWIeJim6cWImMjyc9kUu62psd2D+7cWGlMSaXr1H0kkWV77s5Jsfi4rdiYivvaViG8mB4Jevhe17Z3V+UqlvJllleprG6Xa9s6llbX55fJyeX12duaduXfn3p6b7ks7z0fEe1/66w+++7Mvv/erz97407W/X/hWo1rj2fr97XhC+cNWtppeaH4X+wtsPmWwkyjfbGFmrNMWIx/Iuf2c6wQAQGeNc/wPRcSnIuJiTMTI4aezAAAAwAso/cJ4/DeJSDsb7ZIPAAAAvEByzTGwSa6YjQUYj1yuWGyN4f1InM1VqrX6Z5aqW+uLrbGyk1HILa1UytPZWOHJKCSN5Zlm+tHyWweWZyPilYj4/sRYc7m4UK0sDvriBwAAAAyJcwf6//+eaPX/AQAAgFNmctAVAAAAAJ47/X8AAAA4/fT/AQAA4FR7/8qVeD93JW2//3rx+vbWavX6pcVybbW4trVQXKhubhSXq9Xl5jP71o76vEq1uvG5WN+6WaqXa/VSbXvn2lp1a71+beWxV2ADAAAAx+iVT9z5QxIRu58fa04No70V7XEz4KTK76WSbN5ht/7jy635X46pUsCxGBl0BYCByQ+6AsDAFAZdAWDgkiPWdx2889ts/sn+1gcAAOi/qY91v/+fO7Tk7uGrgRPPTgzDq3n/300AGErN+/+9juR1sgCnSsEIQBh6z3z//0hp+kQVAgAA+m68OSW5YnZ5bzxyuWIx4nzztQCFZGmlUp6OiJcj4vcThZcayzPNksmRfQYAAAAAAAAAAAAAAAAAAAAAAAAAoCVNk0gBAACAUy0i97fk161n+U9NvDl+8PrAaPKficheEXrjx1d/eHO+Xt+caeT/cy+//qMs/61BXMEAAACAofBEL/Bv99Pb/XgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6KcH928ttKfjjHvvixEx2Sl+Ps4052eiEBFn/5VEfl+5JCJG+hB/rPHno53iJ41q7YXsFH+sD/F3bx8aPyazb+Fg/NGIONeH+DDM7jSOP5c77X+5eL0577z/5SMeW35a3Y9/sXf8G+ly/DnfY4xX7/6i1DX+7YhX852PP+34SZf4b/QY/xtf39npti79ScRUx9+f5LFYpfraRqm2vXNpZW1+ubxcXp+dnXln7t25t+emS0srlXL2t2OM7338lw8Pa//ZLvEnj2j/mz22/393b97/cCtZ6BT/whsd4v/mp9kWe/FfapfJZb99n87SjfVT7fRuK73faz//3WuHtX+xS/uP+v9f6LH9F7/6nT/3uCkAcAxq2zur85VKefPUJhq99BNQDYkTmPh2Xz8wTdO0sU89w+ckcRK+lmZi0EcmAACg3x6d9A+6JgAAAAAAAAAAAAAAAAAAADC8juNxYgdj7u6lkn48QhsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoC/+HwAA//9KBNpE") mount(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x2012024, 0x0) 1.20316074s ago: executing program 3 (id=5062): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 1.129668172s ago: executing program 3 (id=5065): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008200000018070000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.111849192s ago: executing program 0 (id=5066): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe28, 0xfffffffffffffff5, &(0x7f0000000980)="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", 0x0, 0x2f, 0xe8034000, 0xf000, 0xfffffffffffffe2a, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837433998ba579da27559", 0x5dc}, 0x28) 1.056349503s ago: executing program 3 (id=5067): socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0xfa) connect$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3}}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_mptcp(0xa, 0x1, 0x106) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) shutdown(r0, 0x1) 1.056012173s ago: executing program 0 (id=5068): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x10, &(0x7f0000000740)=@framed={{}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {0x6}, {}, {0x5}, {0x7, 0x0, 0x0, 0x0}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x5b}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) 1.010748254s ago: executing program 0 (id=5070): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c5"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r1, &(0x7f0000007640)=[{{&(0x7f0000000740)=@caif=@dgm, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000f00)=""/4096, 0x1000}], 0x1}}], 0x1, 0x10000, 0x0) sendmmsg$inet(r1, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e816212096000155788943b846746ccb492175fc9e01", 0xf4}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a", 0x74}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1493766d09fd561d69a5bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe75287a4b9aaa18fd479bdd154b4efe531a242d90a1ca2799c242bfd4ddd8271448d3415bd3a907ad340dc2fa24713", 0x80}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x2, 0xc0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r1, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 922.273735ms ago: executing program 0 (id=5074): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c16, &(0x7f0000000040)={[{@nobh}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0xff, 0x240, &(0x7f00000002c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r2, &(0x7f0000000000)='2', 0x1, 0x4fed0) 832.269677ms ago: executing program 0 (id=5075): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000640)='syzkaller\x00', 0x8, 0x9b, &(0x7f0000000140)=""/155}, 0x90) 755.788878ms ago: executing program 0 (id=5079): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) 451.732093ms ago: executing program 4 (id=5090): socket$inet_tcp(0x2, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0500000001000000070000000c"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000640)={{r0}, &(0x7f00000005c0), &(0x7f0000000600)='%-5lx \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x18) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0xc0301, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 396.561973ms ago: executing program 4 (id=5093): close(0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socket$kcm(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r1}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) shutdown(0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000002ec0)=[{&(0x7f0000000900)=""/223, 0xdf}], 0x1}, 0x102) 396.288393ms ago: executing program 4 (id=5094): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0x10, 0x10, &(0x7f0000000080)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x30) 383.940574ms ago: executing program 4 (id=5096): socket(0x10, 0x3, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffebe}, 0x90) r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000b80)={0x0, 0x0, 0x10100, 0x0, 0x215}, &(0x7f0000000700)=0x0, &(0x7f0000000240)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x38}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x8, 0x0, @fd, 0x10, 0x0, 0xfffdfff9, 0x5, 0x259792cd96d38d81}) io_uring_enter(r0, 0x2d3e, 0x0, 0x8, 0x0, 0x0) 354.313904ms ago: executing program 4 (id=5097): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x5, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) 305.822965ms ago: executing program 1 (id=5098): openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_io_uring_setup(0x24f6, &(0x7f0000000b80)={0x0, 0x0, 0x10100, 0x0, 0x33a}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x8}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 305.236785ms ago: executing program 1 (id=5100): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r1, &(0x7f0000007640)=[{{&(0x7f0000000740)=@caif=@dgm, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000f00)=""/4096, 0x1000}], 0x1}}], 0x1, 0x10000, 0x0) sendmmsg$inet(r1, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e816212096000155788943b846746ccb492175fc9e01", 0xf4}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a", 0x74}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1493766d09fd561d69a5bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe75287a4b9aaa18fd479bdd154b4efe531a242d90a1ca2799c242bfd4ddd8271448d3415bd3a907ad340dc2fa24713", 0x80}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x2, 0xc0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r1, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 262.631885ms ago: executing program 4 (id=5102): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00000039c0)=ANY=[@ANYBLOB="180000000300000000000000a012544f95002b000000000093adffa82255f674412d020000000000005ab527ee3697f1ed4436dd1164b1b3f427f6ba6b34f98125f30e631d273683626e00dc254d570d4a6b78a5833488cfe410090000004aa900003d3cd62f00158e6eee8501000000520a0000151d016e6cafbe9309aba218812868a51d129e78f6ae170bf5a52001a3cd000041f0db74596fd72c002a60c1bc7dc8c38b000024b9dd1145d03ff45f70685c6bd9ff41c69b7de4758c1096a1dc52f29e8b701d2d17ebc406e89dcbb7677e6528b0856e31eb9474c0106fc48e1f8c1a5f6945ac24cf609068f6ff21e88b3cfc22df01d51e242443618c02e0a428da651366e4bac9d97328fa2a82b5e8741e02056d933bedf59ff232cebc68b91af50479387467824262852c7939db5672d07cdbe8e148bf56497e5d56d06c7551b870b2851c3f0a1aab7158edeeccd92e3a88dc0f432187ce92d7b17a21c8f1b3369ebfcb4cb2946601b0f04edb256c604f068773f6db9d661bd7f0e2536f00000000000000005521458b7d1e341c6f864f983d745f5865aad41d29158ae7602a2d6cd415e8351ebc283df54d6bec664709ff03f1aa3dc7f1580ace9bf2afd28d7157e67fb98d121a96eb373845255012e028cb2654d493afb4b35faae176f99b745eda2967199cc93685bb444f9bc50713061385537e8e4871d4acf3e3dc10e13ef227f627a40000ad1fa253d33fa74f172d0007ae4e1e347c0cff28235a6bb7aa3804b907a8f2880c5cb1cb385e6add14652003c7cdd3324f07d1ff07000000000000000009dd872ec64fa6c718bbd1aa591140cff0be4c6f8df084c5e9734ae30aa9afdc7125f01ab03a9b1074407136b4506000f0916aada035df2e0452a9b39e73aeeb6eaf14652dda689e2051d9b7eb85f3f2d5ab2c51944da8d7391d5b6b97419a3b76600cd1aa0afe5f8f46df4c5124ca425d374b371867a79b31f3f514573f1e30d1fd2d763f3ee9210b15c1d60be2168fffcd599a2cb77f124e22f87673675805494db821f39b50d5fd8c6b2a3a324c257bc97def5f07f2b77f05a4f81a9cf8110971b749ccd74089ed6b86f81ca3d247d8f71d290ed1b1a11f7a67125170c88c3b6a50696332226401b110da9c4407eca22debc99335583b00013c3130978fa069af8223b38ced735c2d90c6d84c30a0d87d42647489b39601be5c27696cf2f16625c0c102000000000000009ef52134842e64171f3963841086e3797a4825d081f240080000534187738655d7a6240412c8f283cc0c1eba2866dc9580000000000000007fffffffff554b82d9c162f3556076b80552d961ca74d1ffdaccf0ea5f02e0163a9ccb9087e6c3b3917bb74fd3d560700a1fab44e77e312b3b129e000302d613916c9bcf9f0000fac73a5b6bfb01f7ada800e50000000000fdaf2f7b3b79a433e08074ea2462974ab2cbd2190780fa39c43ea647eb1cfa2638f56daee57ed14bc74de0fd87a9ce638190f3570e0b4c80ef682df22237270955afb6008846557ee3bc09fda6dbb6550d597300eb82a184c96ffde5a30e5433d866665b98ca2002c836e89feef904c22ff2634b7bfbf5c0d586cda5b45fd00dede1e88a4d41dee7cc8d0834fb8d124638fec58faeb4c16abb440df2a694f4cdcaa4f65c22f000000000000000000000000000d503d79906958102000000000000000000001ffff0ef89b2a68d2bb2dd163e863314e8449801b52bb93f6c9084659ce777dda8563c859656a357770289a61faa95a82bf1cfb7f2f97252e9322abe282c3344fc6738b4467893b9bf0000000000000001062a35376413c29f7c6f7bde29b9f4bddd5e328661f4615e627a6f608ad53a4168fe8e5d7d934aa289b4bd2b870000000000000000000000000000fc4b4ff50000009b777883a02ffd92dfc4cb4114b9f9cf4ad155110cd3ace2b322ae31bfa27847c799c8869a1ea5018e525e6383ad7fd9795170e7b11e247603000000001459c7f606d721d3979676bffb3049166ab84ac1061991bd57c2566c10c296352a5105b6164e3f2491e4793e2b70590dcc71f110da96366c40dd44a2c9882d3aa0f8a797b8fea6efcfb5276b7679f15559cdaabf5fc14add71d0bca37405ded69b77ab4a3d7487fd50c5002adef9546abb7a2d9c085b189b5ff30e4e0c13f60870fde1f88d830b11002135e8e7262f29b6d7923bfbe0bd2a8be179e56b41ff3792cee2fc37eee739c3008ce740d8804f8e705f0dc59d000021363e8df94ff175b48dc8c12def681a11647946595445bf1cb7d2778cd27a6b3b2966b08be600000020a8a711d193bae0ab2db9ed9c6cb3c3de42ab89524414cae922141f7baf17ebb790ad60bd0387837e63f9880fd70259e35590afb4843cd4e9989398eaa89cefb3aa13cab8d015cbaf1561d95362decd73b8f8cbf8269cac091cfaaa3c7e46d6e79145fc0f1d1b383752ccb40515a772356d746914540216adf4c0f44f1cff3760afa252720ec6dad3a98671ecdaff46cddffb1f05a0c0976070d603a442d014822369fa3eacbb69bd1b0a074357acd5d02161fed146ad3aa15d2b8101b7bd1e091ada78ecd50181f4b35cae1b29aff91494c916323b61f815c4e0701657087ad11eef97952921365bc898ba2c76a9b6e0052f43b1ad2dfdf3f958fc1d32e692bc8846c78a956ada453c67c1c2cdc4f8b1c94e9adc106e85b31e030d955c5578e107a6e8ca0d4dd05344c3e2af25d9a3b0f7805624016aeab271a75f0bacb101a156ef8948064569154a7de08f80e4df4c339b69431b0a5671097d89212b465b0b32275deae10a77e334c9fc074d181bdeb5be80a6249d472e78e6be57a5ccd354cf181e099605a644ecade221a2be926210b2690d09e4b7a3dea25403397439979c27d5613262de10bacecfff2d58437f012df4252c018795310c25e8fce18ed366ac2caade564ca869727a7d63c26271e17d7aba48971835530311545273d3caadeb5d2017dc816126b6f2068f68a4111ddd587b5df4b5d8f1ce00231a2092eb2e797c491a1e66f73606fd95bb01b53a2d862b6262f0259da51ff7517ace7361460a4669a97f7d0bf095c2787f00bdbfee19670d1e0ec5e6c3cb09972fa4d94986157b96d6695177c99d83716651129320924352cda7b8ead91c3301af620c1e8d7004d29ad77f54836779600bb0b247139d429df96362db3ecfbd36fa8164fabdcf2e58b720e8e1c03a74daf593f92a8ecc03f8c8e3af9ae07dc03780cc0d69da9e3528c1693fb51998731992ceb27dcc0be5be4decefe41b78bc1847bf54b087e095172f06cfa6d4bf958b1d4544947ff1230655199db4f475006047fe83caca97758dffa53cee764f85932eb20d54241b2d515c0826dfe1f0f40ae920455a4548fb35e2a345c05b1c252b7877bb3d834b0b3579a36249146f832ef258df5127318c7017ac1a996c4f902f82deb60fd113ccf812d55ffd625057bd4ff3960992b85bc8d32edfca386be16b1c549aec52e31e1405f86c7760282901750b732ec06b0db735222a56f3ebb16fad3e9269495230cd88b0ea2e3affa196a2f0adf733bc6afd37a659ecc933d636c1b27d3a16c5ea25301f9b5789e4aa8e7228e3002f146aa5e575bb74b1ebb82147edf8161d362704377058e887c608be8719ea1b6c490f79e0832e2ddd7e217c7adddd4731e032d7eb35bdc38160c676d840e2e8be9033a686cf7061f5f55e2851736aa8c2f3bad8ac05c048e20d8c03b68008a70b8f80c93ebd2ababb5c65fe9abc4642d7b58d8c93efd7b6b39c68a16d75a7852dfc37a6a50cb28a9b6f685a465d08fc603d81d8ddd5296fae97be1401a8be7748a71fcdc85ba2049e96c4e6dce59b88cd5472726bc237fbcf3ffcbf32e2aac9b2f9d6013b59780ded723b08c767fa091e2fa4d51863500fcd5041bcc98a685504835743194113ea0b97b4f9ddc395b9ac4defefadd37a8871fd91f31a56eb96ecf90000000000000000000000000000000000000000000c447ea475c236c3b7f24079fe375f3f861fc54d9d8a04a6cb8c0dbf9e9cc53a84a5795ae5ebcbd825e3572df16fbdcd395e995fa4fcbbf31583d9e1d3ff537f401a3139200a8bd2122157887199cd54075a4d5b29935dda5c6aa0f3ac6895eb73c7abbd4603abdaa8629dedb2cab0fa80f9514ad310491a9a300015c18cdfd9342cff50d849d7516134d45d1a8cf157abe0c79de543993cf689f8a7113508fbf8a610417045e6c38a5d4ff4656dbd9656ad6ce625e1674ab57944ebb834743a248a2be304ba1e037cb63a169d340be8befc1b238aa26e24"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) sendmsg$rds(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002980)=""/4112, 0x1010}], 0x1}, 0x0) write(r2, 0x0, 0x0) recvmmsg(r2, &(0x7f00000006c0)=[{{0x0, 0xffffffffffffff0e, 0x0}, 0x45}], 0x52a, 0x40002000, 0x0) 262.111425ms ago: executing program 1 (id=5104): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x8, 0x2, &(0x7f0000000040)=@raw=[@alu={0x7, 0x0, 0xa, 0x1, 0x0, 0x0, 0x200000}, @jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}], &(0x7f0000000180)='GPL\x00', 0x4}, 0x94) 239.491606ms ago: executing program 3 (id=5105): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r3, 0x0) connect$unix(r2, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = socket$unix(0x1, 0x1, 0x0) connect$unix(r4, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r3) 205.206177ms ago: executing program 1 (id=5106): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) socket$kcm(0x2, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) shutdown(r0, 0x0) recvmsg(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000002ec0)=[{&(0x7f0000000900)=""/223, 0xdf}], 0x1}, 0x102) 180.069637ms ago: executing program 1 (id=5109): socket$inet6(0xa, 0x3, 0x8000000003c) socket$inet6(0xa, 0x3, 0x8000000003c) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000240), &(0x7f00000003c0)=r6}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r5, r2, 0x25, 0x0, @val=@tcx={@void, @value=r5}}, 0x1c) syz_emit_ethernet(0x82, &(0x7f0000000640)={@random='\x00\a\x00', @multicast, @val={@val={0x88a8, 0x1, 0x1, 0x2}, {0x8100, 0x2, 0x0, 0x4}}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "2f23aa", 0x44, 0x2f, 0x0, @empty, @mcast2, {[], {{0x0, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0x8, 0x88be, 0x0, {{0x1, 0x1, 0x10, 0x0, 0x0, 0x1, 0x0, 0x5}, 0x1, {0x6}}}, {0x8, 0x22eb, 0x1, {{0x8, 0x2, 0x3, 0x3, 0x1, 0x1, 0x6, 0x3}, 0x2, {0x7, 0x6, 0x1, 0x7, 0x0, 0x0, 0x2, 0x0, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}}, 0x0) 179.693447ms ago: executing program 2 (id=5110): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x3, @loopback={0x0, 0xac14140c}, 0x4}, 0x80, &(0x7f00000000c0), 0x5, 0x0, 0x0, 0x900}, 0x60) 144.715267ms ago: executing program 2 (id=5111): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r1, 0x0, 0x12f, 0x4c, &(0x7f0000001cc0)="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", &(0x7f0000001c40)=""/76, 0x4000, 0x0, 0x47, 0x50, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2195d4ae89abc04ff5fe5d2466892c81015df835a7d47be4f852161bc4015e7564b08584290fe1762f943a653008ac5", 0x1, 0x0, 0x13}, 0x50) 144.431967ms ago: executing program 1 (id=5112): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10) recvmmsg(r0, &(0x7f0000002d40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002f00)=""/130, 0x82}], 0x1}, 0xfffffffd}, {{0x0, 0x0, &(0x7f0000000280)=[{0x0}], 0x1}, 0xd335}], 0x2, 0x2120, 0x0) 144.087818ms ago: executing program 3 (id=5113): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000001200)={[{@block_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x200) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) lseek(r2, 0x100, 0x0) getdents64(r2, 0x0, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071118300000000008510000002000000850000005500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000) ftruncate(0xffffffffffffffff, 0x81fd) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 82.939158ms ago: executing program 2 (id=5114): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x1a103e43) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001640)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000900)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0xfffc}}}}}}}, 0x0) 73.467189ms ago: executing program 2 (id=5115): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12d, 0x0, 0x0, 0x10, &(0x7f00000003c0), &(0x7f0000000080), 0x8, 0xce, 0x8, 0x0, 0x0}}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x3, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 340.85µs ago: executing program 2 (id=5116): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x6, 0x1}}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00') preadv(r1, 0x0, 0x0, 0x200000, 0x1) 0s ago: executing program 2 (id=5117): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x80, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) kernel console output (not intermixed with test programs): eate hsr debugfs directory [ 124.124761][ T1695] bond0 (unregistering): Released all slaves [ 124.195839][T10178] ------------[ cut here ]------------ [ 124.202504][T10178] Please remove unsupported % in format string [ 124.224392][T10178] WARNING: CPU: 0 PID: 10178 at lib/vsprintf.c:2724 format_decode+0x55d/0x580 [ 124.236091][T10178] Modules linked in: [ 124.241445][T10178] CPU: 0 UID: 0 PID: 10178 Comm: syz.2.2904 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(voluntary) [ 124.257085][T10178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 124.263319][T10177] syzkaller0: entered promiscuous mode [ 124.268617][T10178] RIP: 0010:format_decode+0x55d/0x580 [ 124.275468][T10177] syzkaller0: entered allmulticast mode [ 124.289027][T10178] Code: 9e d3 86 e8 35 74 11 fc c6 05 a8 4f 73 01 01 90 4c 89 e7 e8 95 72 11 fc 41 0f b6 34 24 48 c7 c7 80 bd 5c 86 e8 64 4e c1 fb 90 <0f> 0b 90 90 e9 ea fd ff ff e8 55 72 f7 fb 4d 89 ef e9 89 fc ff ff [ 124.310229][T10178] RSP: 0018:ffffc90002e63a50 EFLAGS: 00010246 [ 124.318666][T10178] RAX: 2218336dc6fb7d00 RBX: 0000000000000400 RCX: 0000000000080000 [ 124.327945][T10178] RDX: ffffc9000367f000 RSI: 0000000000000f37 RDI: 0000000000000f38 [ 124.336991][T10178] RBP: ffffffff85c4c890 R08: 0001c90002e638cf R09: 0000000000000000 [ 124.345382][T10178] R10: 00000000ffffffff R11: 0000000000000002 R12: ffffc90002e63ba4 [ 124.354354][T10178] R13: 0000000000000000 R14: ffffc90002e63ac8 R15: 0000000000000000 [ 124.363165][T10178] FS: 00007fe86f6e76c0(0000) GS:ffff8882aee30000(0000) knlGS:0000000000000000 [ 124.374188][T10178] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 124.381278][T10178] CR2: 0000001b3281cff8 CR3: 000000011ae82000 CR4: 00000000003506f0 [ 124.390144][T10178] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 124.399020][T10178] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 124.407140][T10178] Call Trace: [ 124.411010][T10178] [ 124.414638][T10178] bstr_printf+0xb3/0x6e0 [ 124.419642][T10178] ? bpf_test_run+0x34f/0x490 [ 124.428652][T10178] bpf_trace_printk+0xb7/0x1c0 [ 124.434428][T10178] ? bpf_test_run+0x34f/0x490 [ 124.441283][T10178] bpf_prog_12183cdb1cd51dab+0x37/0x3f [ 124.451481][T10178] bpf_test_run+0x35e/0x490 [ 124.456613][T10178] ? __list_add_valid_or_report+0x38/0xe0 [ 124.463976][T10178] ? bpf_test_run+0xf6/0x490 [ 124.470334][T10178] bpf_prog_test_run_skb+0x834/0xbd0 [ 124.477963][T10178] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 124.485878][T10178] bpf_prog_test_run+0x22a/0x390 [ 124.491572][T10178] __sys_bpf+0x3dc/0x790 [ 124.496815][T10178] __x64_sys_bpf+0x41/0x50 [ 124.501761][T10178] x64_sys_call+0x2478/0x2fb0 [ 124.507329][T10178] do_syscall_64+0xd2/0x200 [ 124.512589][T10178] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 124.518634][T10178] ? clear_bhb_loop+0x40/0x90 [ 124.523967][T10178] ? clear_bhb_loop+0x40/0x90 [ 124.528933][T10178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.535326][T10178] RIP: 0033:0x7fe87107e929 [ 124.540131][T10178] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.560206][T10178] RSP: 002b:00007fe86f6e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 124.568997][T10178] RAX: ffffffffffffffda RBX: 00007fe8712a5fa0 RCX: 00007fe87107e929 [ 124.577210][T10178] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a [ 124.585475][T10178] RBP: 00007fe871100b39 R08: 0000000000000000 R09: 0000000000000000 [ 124.594026][T10178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 124.602126][T10178] R13: 0000000000000000 R14: 00007fe8712a5fa0 R15: 00007fffbdd22f18 [ 124.611066][T10178] [ 124.614449][T10178] ---[ end trace 0000000000000000 ]--- [ 124.676561][T10183] syzkaller0: entered promiscuous mode [ 124.682182][T10183] syzkaller0: entered allmulticast mode [ 124.703047][ T1695] tipc: Disabling bearer [ 124.708425][ T1695] tipc: Left network mode [ 124.777170][ T1695] hsr_slave_0: left promiscuous mode [ 124.786105][ T1695] hsr_slave_1: left promiscuous mode [ 124.798845][ T1695] veth1_macvtap: left promiscuous mode [ 124.811153][ T1695] veth0_macvtap: left promiscuous mode [ 124.825994][ T1695] veth1_vlan: left promiscuous mode [ 124.840328][ T1695] veth0_vlan: left promiscuous mode [ 124.893063][T10207] loop2: detected capacity change from 0 to 7 [ 124.915709][ C1] blk_print_req_error: 68 callbacks suppressed [ 124.915733][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 124.931351][ C1] buffer_io_error: 68 callbacks suppressed [ 124.931381][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 124.946010][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 124.955191][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 124.965498][T10158] loop2: unable to read partition table [ 124.978932][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 124.988428][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 125.004824][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 125.014359][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 125.024801][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 125.034519][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 125.046326][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 125.055655][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 125.068627][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 125.079108][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 125.095701][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 125.106209][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 125.115666][T10207] loop2: unable to read partition table [ 125.122584][T10207] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 125.136603][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 125.146038][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 125.174164][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 125.183512][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 125.191873][ T2995] loop2: unable to read partition table [ 125.297953][ T2995] loop2: unable to read partition table [ 125.368122][ T2995] loop2: unable to read partition table [ 125.477874][T10245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.492047][ T2995] loop2: unable to read partition table [ 125.498224][T10245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.632932][T10112] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 125.651203][T10112] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 125.681614][T10112] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 125.701007][T10112] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 125.778310][T10112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.809964][T10112] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.837643][ T778] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.845622][ T778] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.866335][ T778] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.873630][ T778] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.892030][T10112] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 125.905966][T10112] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 125.996689][T10112] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.158413][T10313] syzkaller0: entered promiscuous mode [ 126.164614][T10313] syzkaller0: entered allmulticast mode [ 126.233648][T10112] veth0_vlan: entered promiscuous mode [ 126.242318][T10112] veth1_vlan: entered promiscuous mode [ 126.279264][T10112] veth0_macvtap: entered promiscuous mode [ 126.304739][T10112] veth1_macvtap: entered promiscuous mode [ 126.322272][T10112] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 126.363853][T10328] syzkaller0: entered promiscuous mode [ 126.371093][T10328] syzkaller0: entered allmulticast mode [ 126.382300][T10112] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.405369][T10112] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.415331][T10112] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.425113][T10112] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.434962][T10112] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.737092][T10368] syzkaller0: entered promiscuous mode [ 126.744287][T10368] syzkaller0: entered allmulticast mode [ 127.083044][T10401] loop2: detected capacity change from 0 to 7 [ 127.122565][ T3312] loop2: unable to read partition table [ 127.140609][T10401] loop2: unable to read partition table [ 127.149784][T10401] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 127.171372][ T29] kauditd_printk_skb: 72 callbacks suppressed [ 127.171392][ T29] audit: type=1326 audit(1750796694.060:1065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10410 comm="syz.3.2971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e4782e929 code=0x7ffc0000 [ 127.200803][T10411] syzkaller0: entered promiscuous mode [ 127.206685][T10411] syzkaller0: entered allmulticast mode [ 127.218924][ T29] audit: type=1326 audit(1750796694.090:1066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10410 comm="syz.3.2971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7f3e4782e929 code=0x7ffc0000 [ 127.242808][ T29] audit: type=1326 audit(1750796694.090:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10410 comm="syz.3.2971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e4782e929 code=0x7ffc0000 [ 127.266395][ T29] audit: type=1326 audit(1750796694.090:1068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10410 comm="syz.3.2971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f3e4782e929 code=0x7ffc0000 [ 127.289847][ T29] audit: type=1326 audit(1750796694.090:1069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10410 comm="syz.3.2971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e4782e929 code=0x7ffc0000 [ 127.313498][ T29] audit: type=1326 audit(1750796694.090:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10410 comm="syz.3.2971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3e4782e929 code=0x7ffc0000 [ 127.337190][ T29] audit: type=1326 audit(1750796694.090:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10410 comm="syz.3.2971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e4782e929 code=0x7ffc0000 [ 127.370747][ T29] audit: type=1326 audit(1750796694.090:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10410 comm="syz.3.2971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f3e4782e929 code=0x7ffc0000 [ 127.419628][ T29] audit: type=1326 audit(1750796694.090:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10410 comm="syz.3.2971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e4782e929 code=0x7ffc0000 [ 127.453629][ T29] audit: type=1326 audit(1750796694.090:1074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10410 comm="syz.3.2971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f3e4782e929 code=0x7ffc0000 [ 127.746212][T10441] syzkaller0: entered promiscuous mode [ 127.751999][T10441] syzkaller0: entered allmulticast mode [ 127.969932][T10460] syzkaller0: entered promiscuous mode [ 127.976085][T10460] syzkaller0: entered allmulticast mode [ 128.420329][ T5451] syz_tun (unregistering): left allmulticast mode [ 128.570486][ T3444] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.605699][T10508] syzkaller0: entered promiscuous mode [ 128.611592][T10508] syzkaller0: entered allmulticast mode [ 128.651567][ T3444] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.686633][T10490] chnl_net:caif_netlink_parms(): no params data found [ 128.713219][ T3444] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.756884][T10490] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.764588][T10490] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.787780][T10490] bridge_slave_0: entered allmulticast mode [ 128.796196][T10490] bridge_slave_0: entered promiscuous mode [ 128.806918][ T3444] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.825163][T10490] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.833301][T10490] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.842902][T10490] bridge_slave_1: entered allmulticast mode [ 128.853656][T10490] bridge_slave_1: entered promiscuous mode [ 128.876799][T10534] syz_tun: entered allmulticast mode [ 128.895233][T10490] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 128.908337][T10533] syz_tun: left allmulticast mode [ 128.929059][T10490] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 128.983170][T10490] team0: Port device team_slave_0 added [ 129.053686][ T3444] bond1 (unregistering): (slave ip6erspan0): Releasing active interface [ 129.093560][ T3444] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 129.102974][ T3444] bond_slave_0: left promiscuous mode [ 129.111744][ T3444] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 129.121330][ T3444] bond_slave_1: left promiscuous mode [ 129.127723][ T3444] bond0 (unregistering): Released all slaves [ 129.138729][ T3444] bond1 (unregistering): Released all slaves [ 129.164853][T10542] syzkaller0: entered promiscuous mode [ 129.170765][T10542] syzkaller0: entered allmulticast mode [ 129.179850][T10490] team0: Port device team_slave_1 added [ 129.224103][ T3444] tipc: Disabling bearer [ 129.230012][ T3444] tipc: Left network mode [ 129.236158][T10490] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 129.244521][T10490] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.271754][T10490] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 129.396887][ T3444] hsr_slave_0: left promiscuous mode [ 129.410447][ T3444] hsr_slave_1: left promiscuous mode [ 129.423085][ T3444] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.432368][ T3444] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.441921][ T3444] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.450005][ T3444] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.470396][ T3444] veth1_macvtap: left promiscuous mode [ 129.476513][ T3444] veth0_macvtap: left promiscuous mode [ 129.482752][ T3444] veth1_vlan: left promiscuous mode [ 129.518289][ T3444] veth0_vlan: left promiscuous mode [ 129.653961][ T3444] team_slave_1 (unregistering): left promiscuous mode [ 129.661396][ T3444] team0 (unregistering): Port device team_slave_1 removed [ 129.671473][ T3444] team_slave_0 (unregistering): left promiscuous mode [ 129.680556][ T3444] team0 (unregistering): Port device team_slave_0 removed [ 129.732387][T10490] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 129.740137][T10490] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.773005][T10490] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 129.825081][T10606] syzkaller0: entered promiscuous mode [ 129.831211][T10606] syzkaller0: entered allmulticast mode [ 129.843622][T10611] syz_tun: entered allmulticast mode [ 129.917617][T10490] hsr_slave_0: entered promiscuous mode [ 129.939324][T10490] hsr_slave_1: entered promiscuous mode [ 129.945860][T10490] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 129.976673][T10490] Cannot create hsr debugfs directory [ 129.982628][T10608] syz_tun: left allmulticast mode [ 130.041050][T10638] wg2: left promiscuous mode [ 130.121483][T10638] wg2: entered promiscuous mode [ 130.237436][T10658] wg2: entered promiscuous mode [ 130.246939][T10658] wg2: entered allmulticast mode [ 130.274527][ T3444] IPVS: stop unused estimator thread 0... [ 130.299712][T10660] syzkaller0: entered promiscuous mode [ 130.308159][T10660] syzkaller0: entered allmulticast mode [ 130.354481][T10668] syzkaller0: entered promiscuous mode [ 130.360685][T10668] syzkaller0: entered allmulticast mode [ 130.680822][T10490] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 130.703023][T10490] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 130.742748][T10490] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 130.760523][T10490] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 130.862174][T10711] syzkaller0: entered promiscuous mode [ 130.943740][T10717] syzkaller0: entered promiscuous mode [ 130.961050][T10717] syzkaller0: entered allmulticast mode [ 131.090819][T10490] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.124194][T10743] syz_tun: entered allmulticast mode [ 131.138084][T10742] syz_tun: left allmulticast mode [ 131.147599][T10490] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.181651][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.188891][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.216634][ T3444] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.223833][ T3444] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.302149][T10490] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 131.312762][T10490] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 131.410890][T10785] syz_tun: entered allmulticast mode [ 131.463501][T10784] syz_tun: left allmulticast mode [ 131.559825][T10490] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.838077][T10490] veth0_vlan: entered promiscuous mode [ 131.855476][T10490] veth1_vlan: entered promiscuous mode [ 131.902716][T10490] veth0_macvtap: entered promiscuous mode [ 131.924372][T10490] veth1_macvtap: entered promiscuous mode [ 131.954281][T10490] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 131.976012][T10490] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 131.986357][T10490] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.995359][T10490] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.004483][T10490] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.013488][T10490] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.254366][T10878] syzkaller0: entered promiscuous mode [ 132.260464][T10878] syzkaller0: entered allmulticast mode [ 132.667150][T10931] syzkaller0: entered promiscuous mode [ 132.674039][T10931] syzkaller0: entered allmulticast mode [ 132.913927][T10902] chnl_net:caif_netlink_parms(): no params data found [ 132.934963][ T51] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.038374][ T51] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.125830][ T51] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.150140][T10902] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.157589][T10902] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.172763][T10902] bridge_slave_0: entered allmulticast mode [ 133.179871][T10902] bridge_slave_0: entered promiscuous mode [ 133.189086][T10902] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.196386][T10902] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.205904][T10902] bridge_slave_1: entered allmulticast mode [ 133.213843][T10902] bridge_slave_1: entered promiscuous mode [ 133.223989][T10958] syz_tun: entered allmulticast mode [ 133.248796][ T51] netdevsim netdevsim0 netdevsim0 (unregistering): left promiscuous mode [ 133.264881][ T51] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.283665][ T29] kauditd_printk_skb: 100 callbacks suppressed [ 133.283682][ T29] audit: type=1326 audit(1750796700.176:1175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10957 comm="syz.4.3148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7af05fe929 code=0x7ffc0000 [ 133.313829][ T29] audit: type=1326 audit(1750796700.176:1176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10957 comm="syz.4.3148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7af05fe929 code=0x7ffc0000 [ 133.341993][ T29] audit: type=1326 audit(1750796700.226:1177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10957 comm="syz.4.3148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7f7af05fe929 code=0x7ffc0000 [ 133.366269][ T29] audit: type=1326 audit(1750796700.226:1178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10957 comm="syz.4.3148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7af05fe929 code=0x7ffc0000 [ 133.391321][ T29] audit: type=1326 audit(1750796700.226:1179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10957 comm="syz.4.3148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7af05fe929 code=0x7ffc0000 [ 133.415945][ T29] audit: type=1326 audit(1750796700.226:1180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10957 comm="syz.4.3148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f7af05fe929 code=0x7ffc0000 [ 133.441088][ T29] audit: type=1326 audit(1750796700.226:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10957 comm="syz.4.3148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7af05fe929 code=0x7ffc0000 [ 133.466171][ T29] audit: type=1326 audit(1750796700.226:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10957 comm="syz.4.3148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7af05fe929 code=0x7ffc0000 [ 133.492998][ T29] audit: type=1326 audit(1750796700.236:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10957 comm="syz.4.3148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7af05fd3df code=0x7ffc0000 [ 133.518882][ T29] audit: type=1326 audit(1750796700.236:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10957 comm="syz.4.3148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7af05fe929 code=0x7ffc0000 [ 133.553017][T10902] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 133.567473][T10957] syz_tun: left allmulticast mode [ 133.593832][T10902] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 133.658564][T10902] team0: Port device team_slave_0 added [ 133.682505][T10902] team0: Port device team_slave_1 added [ 133.806849][ T51] bond0 (unregistering): left promiscuous mode [ 133.826109][ T51] bond0 (unregistering): Released all slaves [ 133.842249][T10902] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 133.849436][T10902] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.877917][T10902] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 133.912158][T10902] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 133.920313][T10902] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.950617][T10902] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 133.975821][ T51] tipc: Disabling bearer [ 133.981444][ T51] tipc: Left network mode [ 133.995400][ T51] hsr_slave_0: left promiscuous mode [ 134.011571][ T51] hsr_slave_1: left promiscuous mode [ 134.047338][ T51] veth1_macvtap: left promiscuous mode [ 134.056994][ T51] veth0_macvtap: left promiscuous mode [ 134.067310][ T51] veth1_vlan: left promiscuous mode [ 134.080289][ T51] veth0_vlan: left promiscuous mode [ 134.317713][T11022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.339232][T11022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.473402][T10902] hsr_slave_0: entered promiscuous mode [ 134.486882][T10902] hsr_slave_1: entered promiscuous mode [ 134.543119][T11040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.597468][T11040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.628117][T11040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.641318][T11040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.790082][ T51] IPVS: stop unused estimator thread 0... [ 134.938485][T10902] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 134.985080][T10902] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 134.997079][T10902] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 135.017760][T10902] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 135.107163][T10902] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.195313][T10902] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.245269][T10902] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 135.255910][T10902] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 135.271449][ T3467] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.278701][ T3467] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.295480][ T3467] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.302727][ T3467] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.457860][T10902] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 135.582617][T11110] wg2: entered promiscuous mode [ 135.588481][T11110] wg2: entered allmulticast mode [ 135.638044][T10902] veth0_vlan: entered promiscuous mode [ 135.659356][T10902] veth1_vlan: entered promiscuous mode [ 135.696045][T10902] veth0_macvtap: entered promiscuous mode [ 135.713498][T10902] veth1_macvtap: entered promiscuous mode [ 135.732249][T10902] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 135.746094][T10902] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 135.761109][T10902] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.770131][T10902] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.778991][T10902] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.787874][T10902] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.821837][T11136] syzkaller0: entered promiscuous mode [ 135.827501][T11136] syzkaller0: entered allmulticast mode [ 136.062996][T11165] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 136.087172][T11165] syzkaller0: entered promiscuous mode [ 136.094035][T11165] syzkaller0: entered allmulticast mode [ 136.256853][T11178] loop2: detected capacity change from 0 to 7 [ 136.382165][ T36] IPVS: starting estimator thread 0... [ 136.442842][ C1] blk_print_req_error: 36 callbacks suppressed [ 136.442860][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 136.464009][ C1] buffer_io_error: 36 callbacks suppressed [ 136.464023][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 136.481855][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 136.489778][T11185] IPVS: using max 2304 ests per chain, 115200 per kthread [ 136.492807][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 136.497878][T11178] loop2: unable to read partition table [ 136.544877][T11178] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 136.569353][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 136.579840][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 136.604189][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 136.614772][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 136.627023][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 136.639137][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 136.652921][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 136.664430][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 136.683418][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 136.693550][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 136.729864][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 136.740090][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 136.751353][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 136.764770][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 136.772918][ T2995] loop2: unable to read partition table [ 136.785182][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 136.794798][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 136.835617][T11195] syzkaller0: entered promiscuous mode [ 136.842160][T11195] syzkaller0: entered allmulticast mode [ 136.870064][ T2995] loop2: unable to read partition table [ 137.614075][T11257] loop2: detected capacity change from 0 to 7 [ 137.670897][T11258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.686982][T11258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.712820][T11257] loop2: unable to read partition table [ 137.770378][ T23] IPVS: starting estimator thread 0... [ 137.772626][T11257] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 137.850571][ T2995] loop2: unable to read partition table [ 137.862899][T11269] IPVS: using max 2304 ests per chain, 115200 per kthread [ 137.988093][T11277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.203022][T11277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.251244][ T2995] loop2: unable to read partition table [ 138.817174][T11307] syzkaller0: entered promiscuous mode [ 138.822761][T11307] syzkaller0: entered allmulticast mode [ 139.169752][T11316] syzkaller0: entered promiscuous mode [ 139.175348][T11316] syzkaller0: entered allmulticast mode [ 139.421675][T11324] wg2: entered promiscuous mode [ 139.426668][T11324] wg2: entered allmulticast mode [ 139.573047][T11340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.594149][T11340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.786791][T11366] syz_tun: entered allmulticast mode [ 139.796285][T11365] syz_tun: left allmulticast mode [ 139.796386][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 139.796403][ T29] audit: type=1326 audit(1750796706.674:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11365 comm="syz.1.3294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf83b4e929 code=0x7ffc0000 [ 139.831031][ T29] audit: type=1326 audit(1750796706.684:1192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11365 comm="syz.1.3294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7fdf83b4e929 code=0x7ffc0000 [ 139.855215][ T29] audit: type=1326 audit(1750796706.684:1193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11365 comm="syz.1.3294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf83b4e929 code=0x7ffc0000 [ 139.879094][ T29] audit: type=1326 audit(1750796706.684:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11365 comm="syz.1.3294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fdf83b4e929 code=0x7ffc0000 [ 139.902968][ T29] audit: type=1326 audit(1750796706.684:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11365 comm="syz.1.3294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf83b4e929 code=0x7ffc0000 [ 139.926922][ T29] audit: type=1326 audit(1750796706.684:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11365 comm="syz.1.3294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdf83b4e929 code=0x7ffc0000 [ 139.951069][ T29] audit: type=1326 audit(1750796706.684:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11365 comm="syz.1.3294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf83b4e929 code=0x7ffc0000 [ 139.975150][ T29] audit: type=1326 audit(1750796706.684:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11365 comm="syz.1.3294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fdf83b4e929 code=0x7ffc0000 [ 139.999243][ T29] audit: type=1326 audit(1750796706.684:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11365 comm="syz.1.3294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf83b4e929 code=0x7ffc0000 [ 140.022807][ T29] audit: type=1326 audit(1750796706.684:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11365 comm="syz.1.3294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fdf83b4e929 code=0x7ffc0000 [ 140.187168][T11394] syz_tun: entered allmulticast mode [ 140.198098][T11391] syz_tun: left allmulticast mode [ 140.843599][T11415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.855613][T11415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.294814][T11464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.304365][T11464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.635069][T11496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.646668][T11496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.664659][T11499] syz_tun: entered allmulticast mode [ 142.706306][T11498] syz_tun: left allmulticast mode [ 142.728196][T11477] chnl_net:caif_netlink_parms(): no params data found [ 142.790546][T11477] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.797961][T11477] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.808324][T11477] bridge_slave_0: entered allmulticast mode [ 142.815031][T11477] bridge_slave_0: entered promiscuous mode [ 142.822181][T11477] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.829306][T11477] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.838970][T11477] bridge_slave_1: entered allmulticast mode [ 142.846374][T11477] bridge_slave_1: entered promiscuous mode [ 142.868946][T11477] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 142.881134][T11477] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 142.903635][T11477] team0: Port device team_slave_0 added [ 142.910425][T11477] team0: Port device team_slave_1 added [ 143.008672][ T778] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.036218][T11477] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.043301][T11477] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.069562][T11477] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.086144][T11477] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 143.093328][T11477] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.122719][T11477] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 143.139513][ T778] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.172600][T11477] hsr_slave_0: entered promiscuous mode [ 143.179555][T11477] hsr_slave_1: entered promiscuous mode [ 143.187144][T11477] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 143.198318][T11477] Cannot create hsr debugfs directory [ 143.335896][ T778] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.913307][T11522] loop3: detected capacity change from 0 to 512 [ 143.921579][T11522] ======================================================= [ 143.921579][T11522] WARNING: The mand mount option has been deprecated and [ 143.921579][T11522] and is ignored by this kernel. Remove the mand [ 143.921579][T11522] option from the mount to silence this warning. [ 143.921579][T11522] ======================================================= [ 144.126569][T11522] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 144.154786][T11522] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2842e11c, mo2=0002] [ 144.165919][T11522] System zones: 1-12 [ 144.172561][T11522] EXT4-fs (loop3): orphan cleanup on readonly fs [ 144.181688][T11522] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.3349: invalid indirect mapped block 12 (level 1) [ 144.198444][T11522] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.3349: invalid indirect mapped block 2 (level 2) [ 144.215193][T11522] EXT4-fs (loop3): 1 truncate cleaned up [ 144.226265][T11522] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 144.269827][ T778] netdevsim netdevsim2 netdevsim0 (unregistering): left promiscuous mode [ 144.282179][ T778] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.410018][T10490] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 144.535812][ T778] ip6gretap0 (unregistering): left promiscuous mode [ 144.615922][ T778] bond0 (unregistering): Released all slaves [ 144.671618][T11540] syzkaller0: entered promiscuous mode [ 144.679496][T11540] syzkaller0: entered allmulticast mode [ 144.757410][ T778] tipc: Disabling bearer [ 144.762987][ T778] tipc: Left network mode [ 144.799412][ T778] hsr_slave_0: left promiscuous mode [ 144.807054][ T778] hsr_slave_1: left promiscuous mode [ 144.817394][ T778] veth1_macvtap: left promiscuous mode [ 144.824183][ T778] veth0_macvtap: left promiscuous mode [ 144.841380][ T778] veth1_vlan: left promiscuous mode [ 144.847602][ T778] veth0_vlan: left promiscuous mode [ 145.198457][T11604] syzkaller0: entered promiscuous mode [ 145.204988][T11604] syzkaller0: entered allmulticast mode [ 145.486656][T11477] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 145.586295][ T778] IPVS: stop unused estimator thread 0... [ 145.601568][T11477] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 145.683618][T11477] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 145.789032][T11477] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 145.858742][T11477] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.886131][T11477] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.909994][ T3444] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.917875][ T3444] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.932463][ T29] kauditd_printk_skb: 62 callbacks suppressed [ 145.932477][ T29] audit: type=1400 audit(1750796712.812:1263): avc: denied { read append } for pid=11639 comm="syz.0.3390" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 145.974687][ T29] audit: type=1400 audit(1750796712.812:1264): avc: denied { open } for pid=11639 comm="syz.0.3390" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 146.021738][T11477] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 146.035209][T11477] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 146.071022][ T29] audit: type=1400 audit(1750796712.952:1265): avc: denied { ioctl } for pid=11639 comm="syz.0.3390" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9375 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 146.101327][ T778] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.110046][ T778] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.140426][T11643] syz_tun: entered allmulticast mode [ 146.149952][T11641] syz_tun: left allmulticast mode [ 146.155579][ T29] audit: type=1326 audit(1750796713.032:1266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11641 comm="syz.4.3391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7af05fe929 code=0x7ffc0000 [ 146.179324][ T29] audit: type=1326 audit(1750796713.032:1267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11641 comm="syz.4.3391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7f7af05fe929 code=0x7ffc0000 [ 146.202949][ T29] audit: type=1326 audit(1750796713.032:1268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11641 comm="syz.4.3391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7af05fe929 code=0x7ffc0000 [ 146.226619][ T29] audit: type=1326 audit(1750796713.032:1269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11641 comm="syz.4.3391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f7af05fe929 code=0x7ffc0000 [ 146.250638][ T29] audit: type=1326 audit(1750796713.032:1270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11641 comm="syz.4.3391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7af05fe929 code=0x7ffc0000 [ 146.274835][ T29] audit: type=1326 audit(1750796713.032:1271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11641 comm="syz.4.3391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7af05fe929 code=0x7ffc0000 [ 146.298496][ T29] audit: type=1326 audit(1750796713.032:1272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11641 comm="syz.4.3391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7af05fe929 code=0x7ffc0000 [ 146.323026][T11477] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.539062][T11477] veth0_vlan: entered promiscuous mode [ 146.569531][T11477] veth1_vlan: entered promiscuous mode [ 146.598721][T11477] veth0_macvtap: entered promiscuous mode [ 146.624157][T11477] veth1_macvtap: entered promiscuous mode [ 146.642134][T11477] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 146.666690][T11477] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 146.701494][T11477] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.710336][T11477] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.719459][T11477] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.728680][T11477] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.797072][T11712] syz_tun: entered allmulticast mode [ 146.824272][T11700] syz_tun: left allmulticast mode [ 147.198856][T11764] syzkaller0: entered promiscuous mode [ 147.205756][T11764] syzkaller0: entered allmulticast mode [ 147.222457][T11772] syz_tun: entered allmulticast mode [ 147.272038][T11777] batman_adv: batadv0: Adding interface: dummy0 [ 147.281269][T11777] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.321628][T11777] batman_adv: batadv0: Interface activated: dummy0 [ 147.338645][T11765] syz_tun: left allmulticast mode [ 147.381080][T11781] batadv0: mtu less than device minimum [ 147.388061][T11781] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 147.404127][T11781] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 147.421468][T11781] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 147.438163][T11781] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 147.454226][T11781] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 147.469082][T11781] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 147.489773][T11781] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 147.506457][T11781] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 147.525407][T11781] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 147.752123][T11809] syzkaller0: entered promiscuous mode [ 147.757746][T11809] syzkaller0: entered allmulticast mode [ 147.783954][T11810] loop1: detected capacity change from 0 to 512 [ 147.790721][T11810] EXT4-fs: Ignoring removed nobh option [ 147.796542][T11810] EXT4-fs: Ignoring removed mblk_io_submit option [ 147.890571][T11815] syz_tun: entered allmulticast mode [ 147.900230][T11814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.912818][T11814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.953489][T11810] EXT4-fs error (device loop1): dx_probe:791: inode #2: comm syz.1.3430: Attempting to read directory block (0) that is past i_size (256) [ 147.968869][T11810] EXT4-fs (loop1): Remounting filesystem read-only [ 147.975801][T11810] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 147.984971][T11810] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.033363][T11813] syz_tun: left allmulticast mode [ 148.262064][T11837] loop3: detected capacity change from 0 to 512 [ 148.282169][T11837] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 148.302402][T11837] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 148.329283][T11837] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 148.352719][T11837] EXT4-fs (loop3): 1 truncate cleaned up [ 148.366937][T11837] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.440739][ T9330] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.457478][T10490] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.483459][T11852] loop4: detected capacity change from 0 to 1024 [ 148.495754][T11852] EXT4-fs: inline encryption not supported [ 148.502860][T11852] EXT4-fs: Ignoring removed nomblk_io_submit option [ 148.539301][T11850] syzkaller0: entered promiscuous mode [ 148.546320][T11850] syzkaller0: entered allmulticast mode [ 148.580435][T11852] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.629577][T11852] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 402653209 free clusters [ 148.652466][T11867] loop1: detected capacity change from 0 to 512 [ 148.667494][T11867] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 148.678268][T10112] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.714870][T11867] EXT4-fs (loop1): failed to open journal device unknown-block(1,255) -6 [ 148.900438][T11889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.925956][T11889] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.042266][T11902] syzkaller0: entered promiscuous mode [ 149.048539][T11902] syzkaller0: entered allmulticast mode [ 149.221093][T11928] batman_adv: batadv0: Adding interface: dummy0 [ 149.228656][T11928] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.262331][T11928] batman_adv: batadv0: Interface activated: dummy0 [ 149.377017][ C0] Illegal XDP return value 16128 on prog (id 1431) dev veth0_to_bridge, expect packet loss! [ 149.552503][T11953] syzkaller0: entered promiscuous mode [ 149.559677][T11953] syzkaller0: entered allmulticast mode [ 150.188414][T11981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.199116][T11981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.313146][T11996] syzkaller0: entered promiscuous mode [ 150.318855][T11996] syzkaller0: entered allmulticast mode [ 150.423524][T12012] syz_tun: entered allmulticast mode [ 150.442922][T12011] syz_tun: left allmulticast mode [ 150.603145][T12036] syzkaller0: entered promiscuous mode [ 150.608878][T12036] syzkaller0: entered allmulticast mode [ 150.617349][T12038] syz_tun: entered allmulticast mode [ 150.632344][T12037] syz_tun: left allmulticast mode [ 150.749524][T12053] loop0: detected capacity change from 0 to 512 [ 150.767055][T12053] EXT4-fs (loop0): external journal device major/minor numbers have changed [ 150.780753][T12054] loop2: detected capacity change from 0 to 7 [ 150.795811][ C1] blk_print_req_error: 27 callbacks suppressed [ 150.795828][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 150.811239][ C1] buffer_io_error: 27 callbacks suppressed [ 150.811256][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 150.829363][T12053] EXT4-fs (loop0): failed to open journal device unknown-block(1,255) -6 [ 150.838557][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 150.846908][ T36] IPVS: starting estimator thread 0... [ 150.847754][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 150.861177][T12054] loop2: unable to read partition table [ 150.870126][T12054] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 150.883424][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 150.892680][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 150.906054][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 150.915375][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 150.925066][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 150.934317][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 150.945622][T12062] IPVS: using max 1968 ests per chain, 98400 per kthread [ 150.946185][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 150.964906][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 150.975682][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 150.985386][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 151.015834][T12071] syz_tun: entered allmulticast mode [ 151.021623][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 151.030875][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 151.040670][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 151.049909][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 151.051518][T12073] syzkaller0: entered promiscuous mode [ 151.057980][ T2995] loop2: unable to read partition table [ 151.069688][T12073] syzkaller0: entered allmulticast mode [ 151.076022][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 151.087309][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 151.098044][ T29] kauditd_printk_skb: 149 callbacks suppressed [ 151.098064][ T29] audit: type=1326 audit(1750796717.981:1422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12070 comm="syz.0.3551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf9130e929 code=0x7ffc0000 [ 151.100947][T12070] syz_tun: left allmulticast mode [ 151.104342][ T29] audit: type=1326 audit(1750796717.981:1423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12070 comm="syz.0.3551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf9130e929 code=0x7ffc0000 [ 151.165567][ T29] audit: type=1326 audit(1750796717.981:1424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12070 comm="syz.0.3551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7fcf9130e929 code=0x7ffc0000 [ 151.189367][ T29] audit: type=1326 audit(1750796717.981:1425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12070 comm="syz.0.3551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf9130e929 code=0x7ffc0000 [ 151.212925][ T29] audit: type=1326 audit(1750796717.981:1426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12070 comm="syz.0.3551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf9130e929 code=0x7ffc0000 [ 151.236474][ T29] audit: type=1326 audit(1750796717.981:1427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12070 comm="syz.0.3551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fcf9130e929 code=0x7ffc0000 [ 151.262034][ T29] audit: type=1326 audit(1750796717.981:1428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12070 comm="syz.0.3551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf9130e929 code=0x7ffc0000 [ 151.285791][ T29] audit: type=1326 audit(1750796717.981:1429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12070 comm="syz.0.3551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf9130e929 code=0x7ffc0000 [ 151.309435][ T29] audit: type=1326 audit(1750796717.981:1430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12070 comm="syz.0.3551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcf9130e929 code=0x7ffc0000 [ 151.333349][ T29] audit: type=1326 audit(1750796717.981:1431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12070 comm="syz.0.3551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf9130e929 code=0x7ffc0000 [ 151.349140][T12090] loop1: detected capacity change from 0 to 512 [ 151.370638][T12090] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 151.386901][T12090] EXT4-fs (loop1): 1 truncate cleaned up [ 151.393091][T12090] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.422350][ T9330] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.445704][ T2995] loop2: unable to read partition table [ 151.469810][ T2995] loop2: unable to read partition table [ 151.575790][T12108] wg2: entered promiscuous mode [ 151.580808][T12108] wg2: entered allmulticast mode [ 151.697544][T12130] syz_tun: entered allmulticast mode [ 151.714775][T12129] syz_tun: left allmulticast mode [ 151.972198][T12142] vhci_hcd: invalid port number 96 [ 151.977498][T12142] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 152.834669][T12173] syzkaller0: entered promiscuous mode [ 152.840496][T12173] syzkaller0: entered allmulticast mode [ 152.981968][T12190] syz_tun: entered allmulticast mode [ 153.147176][T12189] syz_tun: left allmulticast mode [ 153.269902][T12207] loop1: detected capacity change from 0 to 256 [ 153.279409][T12208] net_ratelimit: 13 callbacks suppressed [ 153.279425][T12208] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 6a:7b:04:00:00:62 [ 153.522406][T12212] loop0: detected capacity change from 0 to 2048 [ 153.744825][T12226] syzkaller0: entered promiscuous mode [ 153.750439][T12226] syzkaller0: entered allmulticast mode [ 153.943230][T12250] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 154.257880][T12266] syzkaller0: entered promiscuous mode [ 154.263755][T12266] syzkaller0: entered allmulticast mode [ 154.364239][T12268] syz_tun: entered allmulticast mode [ 154.376045][T12267] syz_tun: left allmulticast mode [ 154.431539][T12273] loop4: detected capacity change from 0 to 2048 [ 154.511030][T12277] loop4: detected capacity change from 0 to 512 [ 154.524050][T12277] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 154.547205][T12277] EXT4-fs (loop4): orphan cleanup on readonly fs [ 154.568613][T12277] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.3643: Failed to acquire dquot type 1 [ 154.596744][T12277] EXT4-fs (loop4): 1 truncate cleaned up [ 154.604135][T12277] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-00000040ed00 ro without journal. Quota mode: writeback. [ 154.687843][T12290] syzkaller0: entered promiscuous mode [ 154.693444][T12290] syzkaller0: entered allmulticast mode [ 154.699612][T12277] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 154.714035][T12277] EXT4-fs warning (device loop4): ext4_multi_mount_protect:332: MMP startup interrupted, failing mount [ 154.714035][T12277] [ 154.734632][T12292] loop3: detected capacity change from 0 to 1024 [ 154.765799][T10112] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-00000040ed00. [ 154.778430][T12292] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.809611][T12292] EXT4-fs error (device loop3): ext4_xattr_block_list:762: inode #15: comm syz.3.3650: corrupted xattr block 161: invalid header [ 154.850947][T12292] EXT4-fs (loop3): Remounting filesystem read-only [ 154.890330][T10490] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.052382][T12320] loop3: detected capacity change from 0 to 512 [ 155.070245][T12320] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 155.118905][T12320] EXT4-fs (loop3): orphan cleanup on readonly fs [ 155.192417][T12320] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.3662: Failed to acquire dquot type 1 [ 155.210044][T12320] EXT4-fs (loop3): 1 truncate cleaned up [ 156.007264][T12320] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-00000040ed00 ro without journal. Quota mode: writeback. [ 156.053374][T12339] syz_tun: entered allmulticast mode [ 156.234989][ T29] kauditd_printk_skb: 132 callbacks suppressed [ 156.235008][ T29] audit: type=1326 audit(1750796723.111:1560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12336 comm="syz.4.3668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7af05fe929 code=0x7ffc0000 [ 156.237295][T12336] syz_tun: left allmulticast mode [ 156.241705][ T29] audit: type=1326 audit(1750796723.111:1561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12336 comm="syz.4.3668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7af05fe929 code=0x7ffc0000 [ 156.309523][ T29] audit: type=1326 audit(1750796723.111:1562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12336 comm="syz.4.3668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7f7af05fe929 code=0x7ffc0000 [ 156.340638][ T29] audit: type=1326 audit(1750796723.111:1563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12336 comm="syz.4.3668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7af05fe929 code=0x7ffc0000 [ 156.411090][T12343] loop0: detected capacity change from 0 to 512 [ 156.419874][T12343] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 156.447978][T12320] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 156.489372][T12320] EXT4-fs warning (device loop3): ext4_multi_mount_protect:332: MMP startup interrupted, failing mount [ 156.489372][T12320] [ 156.518308][T12343] EXT4-fs (loop0): 1 truncate cleaned up [ 156.542839][T12343] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.559566][ T29] audit: type=1326 audit(1750796723.111:1564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12336 comm="syz.4.3668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f7af05fe929 code=0x7ffc0000 [ 156.586180][ T29] audit: type=1326 audit(1750796723.111:1565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12336 comm="syz.4.3668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7af05fe929 code=0x7ffc0000 [ 156.611201][ T29] audit: type=1326 audit(1750796723.111:1566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12336 comm="syz.4.3668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7af05fe929 code=0x7ffc0000 [ 156.636804][ T29] audit: type=1326 audit(1750796723.111:1567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12336 comm="syz.4.3668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7af05fe929 code=0x7ffc0000 [ 156.661373][ T29] audit: type=1326 audit(1750796723.111:1568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12336 comm="syz.4.3668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f7af05fe929 code=0x7ffc0000 [ 156.686345][ T29] audit: type=1326 audit(1750796723.111:1569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12336 comm="syz.4.3668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7af05fe929 code=0x7ffc0000 [ 156.726308][T10902] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.765210][T10490] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-00000040ed00. [ 156.774936][T12359] loop1: detected capacity change from 0 to 2048 [ 156.933587][T12380] loop4: detected capacity change from 0 to 512 [ 156.997380][T12380] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 157.023459][T12380] EXT4-fs (loop4): 1 truncate cleaned up [ 157.030130][T12380] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.091441][T10112] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.938456][T12399] loop2: detected capacity change from 0 to 512 [ 157.950914][T12398] loop3: detected capacity change from 0 to 1024 [ 157.974582][T12399] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 157.994489][T12399] EXT4-fs (loop2): orphan cleanup on readonly fs [ 158.014567][T12399] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.3692: Failed to acquire dquot type 1 [ 158.031896][T12398] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.054718][T12399] EXT4-fs (loop2): 1 truncate cleaned up [ 158.065964][T12399] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-00000040ed00 ro without journal. Quota mode: writeback. [ 158.116509][T10490] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.136472][T12399] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 158.156255][T12399] EXT4-fs warning (device loop2): ext4_multi_mount_protect:332: MMP startup interrupted, failing mount [ 158.156255][T12399] [ 158.207989][T11477] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-00000040ed00. [ 158.306328][T12418] syzkaller0: entered promiscuous mode [ 158.311958][T12418] syzkaller0: entered allmulticast mode [ 158.335680][T12424] loop2: detected capacity change from 0 to 2048 [ 158.456785][T12432] loop3: detected capacity change from 0 to 1024 [ 158.477923][T12432] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.543792][T10490] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.667162][T12452] syzkaller0: entered promiscuous mode [ 158.672682][T12452] syzkaller0: entered allmulticast mode [ 158.960181][T12481] syzkaller0: entered promiscuous mode [ 158.965788][T12481] syzkaller0: entered allmulticast mode [ 159.218683][T12502] loop2: detected capacity change from 0 to 7 [ 159.239105][ C0] blk_print_req_error: 18 callbacks suppressed [ 159.239132][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 159.254678][ C0] buffer_io_error: 18 callbacks suppressed [ 159.254693][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 159.269970][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 159.279347][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 159.287342][T11477] loop2: unable to read partition table [ 159.297709][T12508] loop4: detected capacity change from 0 to 2048 [ 159.321268][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 159.330480][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 159.338605][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 159.347855][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 159.356164][T12502] loop2: unable to read partition table [ 159.372250][T12502] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 159.381754][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 159.390988][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 159.399542][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 159.408851][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 159.427157][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 159.436425][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 159.439089][T12511] syzkaller0: entered promiscuous mode [ 159.449853][T12511] syzkaller0: entered allmulticast mode [ 159.461053][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 159.470361][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 159.484930][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 159.494206][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 159.509925][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 159.519500][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 159.712902][ T2995] loop2: unable to read partition table [ 159.777232][ T2995] loop2: unable to read partition table [ 159.910199][ T2995] loop2: unable to read partition table [ 159.989195][ T2995] loop2: unable to read partition table [ 160.003130][T12554] loop1: detected capacity change from 0 to 2048 [ 160.006099][T12559] loop0: detected capacity change from 0 to 512 [ 160.047011][T12559] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 160.085491][T12559] EXT4-fs (loop0): orphan cleanup on readonly fs [ 160.108274][T12559] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.3769: Failed to acquire dquot type 1 [ 160.125331][T12565] batadv0: mtu less than device minimum [ 160.131384][T12565] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 160.142246][T12565] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 160.153101][T12565] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 160.164531][T12565] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 160.177559][T12565] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 160.189927][T12565] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 160.204828][T12565] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 160.217574][T12565] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 160.232835][T12565] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 160.266714][T12559] EXT4-fs (loop0): 1 truncate cleaned up [ 160.278671][T12559] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-00000040ed00 ro without journal. Quota mode: writeback. [ 160.329606][T10902] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-00000040ed00. [ 160.492071][T12595] loop1: detected capacity change from 0 to 512 [ 160.509478][T12595] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 160.525576][T12595] EXT4-fs (loop1): orphan cleanup on readonly fs [ 160.534729][T12595] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.3785: Failed to acquire dquot type 1 [ 160.548410][T12595] EXT4-fs (loop1): 1 truncate cleaned up [ 160.554959][T12595] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-00000040ed00 ro without journal. Quota mode: writeback. [ 160.583146][T12597] loop2: detected capacity change from 0 to 7 [ 160.590630][ T9330] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-00000040ed00. [ 160.600896][T12597] loop2: unable to read partition table [ 160.606862][T12597] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 160.955636][T12616] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3792'. [ 160.992046][ T2995] loop2: unable to read partition table [ 161.097608][ T2995] loop2: unable to read partition table [ 161.120048][ T2995] loop2: unable to read partition table [ 161.150079][ T2995] loop2: unable to read partition table [ 161.290110][ T2995] loop2: unable to read partition table [ 161.431510][T12656] syz_tun: entered allmulticast mode [ 161.442363][ T29] kauditd_printk_skb: 89 callbacks suppressed [ 161.442383][ T29] audit: type=1326 audit(1750796728.320:1653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12655 comm="syz.0.3811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf9130e929 code=0x7ffc0000 [ 161.447253][T12655] syz_tun: left allmulticast mode [ 161.448703][ T29] audit: type=1326 audit(1750796728.320:1654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12655 comm="syz.0.3811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7fcf9130e929 code=0x7ffc0000 [ 161.502384][ T29] audit: type=1326 audit(1750796728.320:1655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12655 comm="syz.0.3811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf9130e929 code=0x7ffc0000 [ 161.528627][ T29] audit: type=1326 audit(1750796728.320:1656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12655 comm="syz.0.3811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fcf9130e929 code=0x7ffc0000 [ 161.557619][ T29] audit: type=1326 audit(1750796728.320:1657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12655 comm="syz.0.3811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf9130e929 code=0x7ffc0000 [ 161.587576][ T29] audit: type=1326 audit(1750796728.320:1658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12655 comm="syz.0.3811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcf9130e929 code=0x7ffc0000 [ 161.618843][ T29] audit: type=1326 audit(1750796728.320:1659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12655 comm="syz.0.3811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf9130e929 code=0x7ffc0000 [ 161.658330][ T29] audit: type=1326 audit(1750796728.320:1660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12655 comm="syz.0.3811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fcf9130e929 code=0x7ffc0000 [ 161.666066][T12668] loop4: detected capacity change from 0 to 1024 [ 161.684455][ T29] audit: type=1326 audit(1750796728.320:1661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12655 comm="syz.0.3811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf9130e929 code=0x7ffc0000 [ 161.714874][ T29] audit: type=1326 audit(1750796728.320:1662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12655 comm="syz.0.3811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fcf9130e929 code=0x7ffc0000 [ 161.757771][T12666] loop2: detected capacity change from 0 to 512 [ 161.775509][T12666] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 161.787632][T12668] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.804837][T12666] EXT4-fs (loop2): orphan cleanup on readonly fs [ 161.824828][T10112] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.834696][T12666] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.3815: Failed to acquire dquot type 1 [ 161.866892][T12666] EXT4-fs (loop2): 1 truncate cleaned up [ 161.878683][T12666] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-00000040ed00 ro without journal. Quota mode: writeback. [ 161.912956][T12666] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 162.508440][T12666] EXT4-fs warning (device loop2): ext4_multi_mount_protect:332: MMP startup interrupted, failing mount [ 162.508440][T12666] [ 162.571811][T12707] loop0: detected capacity change from 0 to 512 [ 162.632318][T12707] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 162.634465][T12711] loop3: detected capacity change from 0 to 256 [ 162.673057][T12711] FAT-fs (loop3): codepage cp950 not found [ 162.691037][T12707] EXT4-fs (loop0): 1 truncate cleaned up [ 162.703035][T11477] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-00000040ed00. [ 162.771958][T12707] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.922063][T12734] loop3: detected capacity change from 0 to 512 [ 163.937877][T12734] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 163.951514][T10902] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.955846][T12734] EXT4-fs (loop3): orphan cleanup on readonly fs [ 163.976338][T12734] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.3843: Failed to acquire dquot type 1 [ 163.999702][T12734] EXT4-fs (loop3): 1 truncate cleaned up [ 164.019105][T12734] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-00000040ed00 ro without journal. Quota mode: writeback. [ 164.108442][T10490] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-00000040ed00. [ 164.154007][T12744] loop0: detected capacity change from 0 to 2048 [ 164.218207][T12754] syz_tun: entered allmulticast mode [ 164.263909][T12753] syz_tun: left allmulticast mode [ 164.273929][T12755] /dev/nbd2: Can't lookup blockdev [ 164.680280][T12770] loop4: detected capacity change from 0 to 512 [ 164.693312][T12770] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 164.703592][T12770] EXT4-fs (loop4): orphan cleanup on readonly fs [ 164.716305][T12770] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.3859: Failed to acquire dquot type 1 [ 164.736455][T12770] EXT4-fs (loop4): 1 truncate cleaned up [ 164.743065][T12770] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-00000040ed00 ro without journal. Quota mode: writeback. [ 164.798783][T10112] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-00000040ed00. [ 166.429352][T12828] syz_tun: entered allmulticast mode [ 166.449708][T12827] syz_tun: left allmulticast mode [ 166.593090][T12845] loop4: detected capacity change from 0 to 1024 [ 166.604873][T12845] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.628666][ T29] kauditd_printk_skb: 71 callbacks suppressed [ 166.628682][ T29] audit: type=1400 audit(1750796733.510:1728): avc: denied { create } for pid=12844 comm="syz.4.3891" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 166.682120][T12845] EXT4-fs warning (device loop4): empty_inline_dir:1775: bad inline directory (dir #12) - no `..' [ 166.706637][ T29] audit: type=1400 audit(1750796733.560:1729): avc: denied { remove_name } for pid=12844 comm="syz.4.3891" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 166.749164][ T29] audit: type=1400 audit(1750796733.560:1730): avc: denied { rename } for pid=12844 comm="syz.4.3891" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 166.793440][ T29] audit: type=1400 audit(1750796733.560:1731): avc: denied { rmdir } for pid=12844 comm="syz.4.3891" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 166.848427][T12857] loop1: detected capacity change from 0 to 512 [ 166.862328][T12857] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 166.873802][T12859] syz_tun: entered allmulticast mode [ 166.880512][T10112] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.904414][T12858] syz_tun: left allmulticast mode [ 166.913489][T12857] EXT4-fs (loop1): orphan cleanup on readonly fs [ 166.937511][T12862] loop3: detected capacity change from 0 to 256 [ 166.944872][T12857] Quota error (device loop1): do_check_range: Getting block 196613 out of range 1-5 [ 166.954424][T12857] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 166.965221][T12857] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.3898: Failed to acquire dquot type 1 [ 167.048582][T12862] FAT-fs (loop3): codepage cp932 not found [ 167.058972][T12857] EXT4-fs (loop1): 1 truncate cleaned up [ 167.069078][T12857] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-00000040ed00 ro without journal. Quota mode: writeback. [ 167.162801][ T9330] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-00000040ed00. [ 167.484193][ T29] audit: type=1400 audit(1750796734.360:1732): avc: denied { create } for pid=12914 comm="syz.4.3923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 167.505514][ T29] audit: type=1400 audit(1750796734.360:1733): avc: denied { ioctl } for pid=12914 comm="syz.4.3923" path="socket:[36691]" dev="sockfs" ino=36691 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 167.585896][T12931] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3931'. [ 167.894113][T12958] loop2: detected capacity change from 0 to 512 [ 167.913702][T12958] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 168.040828][T12958] EXT4-fs (loop2): orphan cleanup on readonly fs [ 168.075970][T12958] Quota error (device loop2): do_check_range: Getting block 196613 out of range 1-5 [ 168.085547][T12958] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 168.095115][T12958] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.3943: Failed to acquire dquot type 1 [ 168.213468][T12958] EXT4-fs (loop2): 1 truncate cleaned up [ 168.224204][T12958] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-00000040ed00 ro without journal. Quota mode: writeback. [ 168.279466][T11477] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-00000040ed00. [ 168.463411][T12993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.473931][T12993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.537490][T13018] loop1: detected capacity change from 0 to 1024 [ 169.652572][T13018] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.750859][ T9330] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.916053][T13059] loop3: detected capacity change from 0 to 1024 [ 169.950860][T13059] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.027096][T10490] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.180807][T13095] loop3: detected capacity change from 0 to 1024 [ 170.221306][T13095] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.303332][T10490] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.747866][T13128] loop1: detected capacity change from 0 to 512 [ 170.804453][T13128] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 170.882584][T13128] EXT4-fs (loop1): 1 truncate cleaned up [ 170.895030][T13139] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4020'. [ 170.930876][T13136] loop3: detected capacity change from 0 to 1024 [ 170.971427][T13128] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.019649][T13136] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.340760][T10490] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.774111][T13170] loop4: detected capacity change from 0 to 2048 [ 171.903313][ T9330] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.256807][T13218] netlink: 'syz.0.4058': attribute type 10 has an invalid length. [ 172.482290][T13218] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.693212][T13218] bridge_slave_1: left allmulticast mode [ 172.699576][T13218] bridge_slave_1: left promiscuous mode [ 172.705633][T13218] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.735083][T13218] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 173.011647][T13233] loop1: detected capacity change from 0 to 2048 [ 173.246065][T13265] loop2: detected capacity change from 0 to 1024 [ 173.309080][T13265] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.323976][T13271] loop0: detected capacity change from 0 to 2048 [ 173.383979][T11477] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.582143][T13306] loop1: detected capacity change from 0 to 1024 [ 173.609735][T13306] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.649401][ T9330] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.696376][T13315] loop4: detected capacity change from 0 to 2048 [ 173.740779][T13327] netlink: 148 bytes leftover after parsing attributes in process `syz.2.4106'. [ 174.141204][T13360] loop4: detected capacity change from 0 to 512 [ 174.171591][T13360] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 174.294985][T13372] loop1: detected capacity change from 0 to 512 [ 174.375213][T13372] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 174.606943][T13378] netlink: 148 bytes leftover after parsing attributes in process `syz.3.4129'. [ 174.617465][T13372] EXT4-fs (loop1): orphan cleanup on readonly fs [ 174.633855][T13360] EXT4-fs (loop4): orphan cleanup on readonly fs [ 174.643996][T13360] __quota_error: 1 callbacks suppressed [ 174.644010][T13360] Quota error (device loop4): do_check_range: Getting block 196613 out of range 1-5 [ 174.664023][T13360] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 174.673719][T13360] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.4122: Failed to acquire dquot type 1 [ 174.691513][T13372] Quota error (device loop1): do_check_range: Getting block 196613 out of range 1-5 [ 174.694673][T13360] EXT4-fs (loop4): 1 truncate cleaned up [ 174.701950][T13372] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 174.721080][T13372] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.4125: Failed to acquire dquot type 1 [ 174.723782][T13360] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-00000040ed00 ro without journal. Quota mode: writeback. [ 174.864257][T13372] EXT4-fs (loop1): 1 truncate cleaned up [ 174.871265][T13372] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-00000040ed00 ro without journal. Quota mode: writeback. [ 174.913059][T13360] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 174.961706][ T9330] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-00000040ed00. [ 174.982254][T13387] loop2: detected capacity change from 0 to 1024 [ 174.992591][T13360] EXT4-fs warning (device loop4): ext4_multi_mount_protect:332: MMP startup interrupted, failing mount [ 174.992591][T13360] [ 175.024416][T13387] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.117227][T10112] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-00000040ed00. [ 175.162871][T11477] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.436786][T13401] loop1: detected capacity change from 0 to 2048 [ 175.502783][T13407] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4140'. [ 175.513608][T13407] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4140'. [ 175.638820][T13414] syz_tun: entered allmulticast mode [ 175.675736][T13411] syz_tun: left allmulticast mode [ 175.760098][T13427] loop1: detected capacity change from 0 to 512 [ 175.780822][T13427] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 175.794817][T13427] EXT4-fs (loop1): orphan cleanup on readonly fs [ 175.804635][T13427] Quota error (device loop1): do_check_range: Getting block 196613 out of range 1-5 [ 175.815555][T13427] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 175.826384][T13427] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.4149: Failed to acquire dquot type 1 [ 175.845410][T13434] loop3: detected capacity change from 0 to 128 [ 175.853576][T13434] EXT4-fs: Ignoring removed nobh option [ 175.912089][T13427] EXT4-fs (loop1): 1 truncate cleaned up [ 175.931124][T13427] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-00000040ed00 ro without journal. Quota mode: writeback. [ 175.961193][T13434] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 175.975580][T13434] ext4 filesystem being mounted at /202/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 176.000383][ T29] audit: type=1400 audit(1750796742.880:1735): avc: denied { setattr } for pid=13422 comm="syz.3.4147" path="/202/mnt/file1" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 176.153149][T13427] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 176.234046][T13427] EXT4-fs warning (device loop1): ext4_multi_mount_protect:332: MMP startup interrupted, failing mount [ 176.234046][T13427] [ 176.261871][ T29] audit: type=1400 audit(1750796742.940:1736): avc: denied { ioctl } for pid=13422 comm="syz.3.4147" path="/202/mnt/file1" dev="loop3" ino=12 ioctlcmd=0x6609 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 176.310387][ T9330] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-00000040ed00. [ 176.524195][T13453] syz_tun: entered allmulticast mode [ 176.545298][T13452] syz_tun: left allmulticast mode [ 176.564493][T13457] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4161'. [ 176.617034][T10490] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 176.731339][T13472] loop2: detected capacity change from 0 to 2048 [ 176.852469][T13481] syz_tun: entered allmulticast mode [ 176.860932][T13480] syz_tun: left allmulticast mode [ 177.032274][T13501] loop2: detected capacity change from 0 to 1024 [ 177.050273][T13501] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.085108][T11477] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.272084][T13528] loop2: detected capacity change from 0 to 1024 [ 177.291875][T13528] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.364800][T11477] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.582695][ T29] audit: type=1400 audit(1750796744.460:1737): avc: denied { nlmsg_write } for pid=13561 comm="syz.4.4210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 177.626794][T13564] loop3: detected capacity change from 0 to 1024 [ 177.715144][T13564] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.794023][ T29] audit: type=1400 audit(1750796744.670:1738): avc: denied { write } for pid=13561 comm="syz.4.4210" path="socket:[38662]" dev="sockfs" ino=38662 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 177.900094][T10490] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.565622][T13601] loop0: detected capacity change from 0 to 1024 [ 178.577386][T13610] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4229'. [ 178.588786][T13610] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4229'. [ 178.613677][T13613] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.4232'. [ 178.642214][T13601] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.679889][T13615] loop2: detected capacity change from 0 to 2048 [ 178.751785][T10902] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.855008][T13636] loop0: detected capacity change from 0 to 1024 [ 178.893643][T13636] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.957638][T13643] loop2: detected capacity change from 0 to 512 [ 178.967106][T13643] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 178.992367][T13643] EXT4-fs (loop2): orphan cleanup on readonly fs [ 179.018164][T13643] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.4243: Failed to acquire dquot type 1 [ 179.046690][T10902] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.097619][T13643] EXT4-fs (loop2): 1 truncate cleaned up [ 179.115891][T13643] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-00000040ed00 ro without journal. Quota mode: writeback. [ 179.178044][T13652] loop3: detected capacity change from 0 to 1024 [ 179.185595][T13643] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 179.214280][T13652] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.226997][T13643] EXT4-fs warning (device loop2): ext4_multi_mount_protect:332: MMP startup interrupted, failing mount [ 179.226997][T13643] [ 179.289965][T10490] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.312385][T11477] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-00000040ed00. [ 179.570399][T13680] loop0: detected capacity change from 0 to 1024 [ 179.675867][T13680] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.728469][T10902] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.002037][T13713] loop3: detected capacity change from 0 to 2048 [ 180.869894][T13749] loop3: detected capacity change from 0 to 2048 [ 181.025813][T13759] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4296'. [ 181.460093][T13781] netlink: 'syz.4.4299': attribute type 4 has an invalid length. [ 181.474322][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 181.481784][ T29] audit: type=1400 audit(1750796748.330:1741): avc: denied { getopt } for pid=13773 comm="syz.4.4299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 181.503285][ T29] audit: type=1400 audit(1750796748.340:1742): avc: denied { ioctl } for pid=13773 comm="syz.4.4299" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 182.507252][T13814] syzkaller0: entered promiscuous mode [ 182.513466][T13814] syzkaller0: entered allmulticast mode [ 182.579654][T13818] netlink: 108 bytes leftover after parsing attributes in process `syz.4.4321'. [ 183.703458][T13892] vlan3: entered promiscuous mode [ 183.710015][T13892] team0: entered promiscuous mode [ 183.722090][T13892] team_slave_0: entered promiscuous mode [ 183.731711][T13892] team_slave_1: entered promiscuous mode [ 183.738551][T13892] vlan3: entered allmulticast mode [ 183.744375][T13892] team0: entered allmulticast mode [ 183.755923][T13892] team_slave_0: entered allmulticast mode [ 183.762359][T13892] team_slave_1: entered allmulticast mode [ 185.336003][T14031] loop0: detected capacity change from 0 to 512 [ 185.652588][T14031] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 185.686439][T14031] EXT4-fs (loop0): 1 truncate cleaned up [ 185.708556][T14031] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.746030][T14043] loop2: detected capacity change from 0 to 1024 [ 185.784289][T14043] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.824127][ T29] audit: type=1400 audit(1750796752.699:1743): avc: denied { map } for pid=14025 comm="syz.0.4415" path="/235/file1/blkio.bfq.avg_queue_size" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 186.005648][T14059] loop4: detected capacity change from 0 to 1024 [ 186.037649][T11477] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.065764][T10902] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.084282][T14059] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.212678][T14082] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4437'. [ 186.458038][T10112] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.994861][T14114] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4449'. [ 187.066134][T14121] loop1: detected capacity change from 0 to 1024 [ 187.100146][T14121] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.213056][ T9330] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.369384][T14151] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4465'. [ 187.465864][T14164] loop0: detected capacity change from 0 to 512 [ 187.492732][T14164] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.510636][T14169] netlink: 148 bytes leftover after parsing attributes in process `syz.4.4472'. [ 187.578667][T14164] ext4 filesystem being mounted at /245/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 187.629988][T14180] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4478'. [ 187.631777][T10902] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.764003][T14192] loop0: detected capacity change from 0 to 1024 [ 187.780961][T14195] netlink: 148 bytes leftover after parsing attributes in process `syz.2.4485'. [ 187.822433][T14192] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.923344][T10902] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.025897][T14213] loop2: detected capacity change from 0 to 128 [ 188.035919][T14213] EXT4-fs: Ignoring removed nobh option [ 188.434522][T14213] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 188.453014][T14213] ext4 filesystem being mounted at /236/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 188.557802][ T29] audit: type=1400 audit(1750796755.429:1744): avc: denied { bind } for pid=14219 comm="syz.0.4493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 188.778548][T11477] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 189.006252][T14263] netlink: 148 bytes leftover after parsing attributes in process `syz.4.4515'. [ 189.103293][T14265] loop2: detected capacity change from 0 to 128 [ 189.111184][T14265] EXT4-fs: Ignoring removed nobh option [ 189.523321][T14265] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 189.542461][T14265] ext4 filesystem being mounted at /239/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 189.815932][T11477] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 189.963623][ T29] audit: type=1400 audit(1750796756.839:1745): avc: denied { append } for pid=14300 comm="syz.3.4529" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 190.370144][ T29] audit: type=1400 audit(1750796757.249:1746): avc: denied { read } for pid=14326 comm="syz.2.4542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 191.360233][T14360] loop4: detected capacity change from 0 to 512 [ 191.380784][T14360] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.418287][T14360] ext4 filesystem being mounted at /350/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 191.471607][T14360] EXT4-fs (loop4): shut down requested (0) [ 191.496420][T10112] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.517818][ T29] audit: type=1400 audit(1750796758.399:1747): avc: denied { read } for pid=2977 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 191.553165][ T29] audit: type=1400 audit(1750796758.399:1748): avc: denied { search } for pid=2977 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 191.587406][ T778] Quota error (device loop4): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync! [ 191.588409][ T29] audit: type=1400 audit(1750796758.439:1749): avc: denied { search } for pid=2977 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 191.634967][ T29] audit: type=1400 audit(1750796758.439:1750): avc: denied { add_name } for pid=2977 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 191.662378][ T29] audit: type=1400 audit(1750796758.439:1751): avc: denied { create } for pid=2977 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 191.698495][ T29] audit: type=1400 audit(1750796758.439:1752): avc: denied { append open } for pid=2977 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 192.450347][T14398] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4571'. [ 193.219833][T14424] loop4: detected capacity change from 0 to 128 [ 193.228681][T14424] EXT4-fs: Ignoring removed nobh option [ 193.266297][T14424] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 193.287032][T14424] ext4 filesystem being mounted at /359/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 193.542813][T14441] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4586'. [ 193.576601][T10112] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 193.676472][T14451] loop3: detected capacity change from 0 to 128 [ 193.684607][T14451] EXT4-fs: Ignoring removed nobh option [ 193.728269][T14451] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 193.743232][T14451] ext4 filesystem being mounted at /276/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 194.441108][T10490] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 194.746855][T14505] loop0: detected capacity change from 0 to 256 [ 195.241501][T14505] FAT-fs (loop0): codepage cp775 not found [ 195.550249][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 195.550266][ T29] audit: type=1400 audit(1750796762.429:1754): avc: denied { create } for pid=14543 comm="syz.4.4632" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 195.648075][ T29] audit: type=1400 audit(1750796762.439:1755): avc: denied { unlink } for pid=10112 comm="syz-executor" name="file0" dev="tmpfs" ino=1916 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 195.968161][ T29] audit: type=1400 audit(1750796762.849:1756): avc: denied { name_connect } for pid=14580 comm="syz.4.4649" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 196.309175][T14587] loop0: detected capacity change from 0 to 512 [ 196.358855][T14587] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.414510][T14587] ext4 filesystem being mounted at /270/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.503788][T10902] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.644908][T14606] loop2: detected capacity change from 0 to 512 [ 196.690428][T14606] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 196.731076][T14606] EXT4-fs (loop2): orphan cleanup on readonly fs [ 196.741750][T14606] Quota error (device loop2): do_check_range: Getting block 196613 out of range 1-5 [ 196.756933][T14606] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 196.774395][T14606] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.4659: Failed to acquire dquot type 1 [ 196.793216][T14606] EXT4-fs (loop2): 1 truncate cleaned up [ 196.802935][T14606] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-00000040ed00 ro without journal. Quota mode: writeback. [ 196.827742][T14606] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 196.847828][T14606] EXT4-fs warning (device loop2): ext4_multi_mount_protect:332: MMP startup interrupted, failing mount [ 196.847828][T14606] [ 196.915293][T11477] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-00000040ed00. [ 197.378269][T14636] netlink: 92 bytes leftover after parsing attributes in process `syz.3.4669'. [ 198.264998][T14673] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4687'. [ 198.476602][ T29] audit: type=1400 audit(1750796765.349:1757): avc: denied { create } for pid=14688 comm="syz.0.4694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 199.482956][T14719] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4707'. [ 199.520041][ T29] audit: type=1400 audit(1750796766.399:1758): avc: denied { bind } for pid=14721 comm="syz.3.4708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 199.562538][ T29] audit: type=1400 audit(1750796766.419:1759): avc: denied { listen } for pid=14721 comm="syz.3.4708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 199.589956][ T29] audit: type=1400 audit(1750796766.419:1760): avc: denied { connect } for pid=14721 comm="syz.3.4708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 199.614927][ T29] audit: type=1400 audit(1750796766.419:1761): avc: denied { write } for pid=14721 comm="syz.3.4708" path="socket:[43481]" dev="sockfs" ino=43481 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 199.796482][T14746] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4718'. [ 199.868807][T14752] loop0: detected capacity change from 0 to 512 [ 199.879880][T14752] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 199.894677][T14752] EXT4-fs (loop0): orphan cleanup on readonly fs [ 199.910217][T14752] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.4721: Failed to acquire dquot type 1 [ 199.924293][T14752] EXT4-fs (loop0): 1 truncate cleaned up [ 199.932355][T14752] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-00000040ed00 ro without journal. Quota mode: writeback. [ 199.947465][T14752] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 199.959195][T14752] EXT4-fs warning (device loop0): ext4_multi_mount_protect:332: MMP startup interrupted, failing mount [ 199.959195][T14752] [ 199.986224][T10902] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-00000040ed00. [ 200.873796][T14775] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4730'. [ 201.153890][T14785] loop2: detected capacity change from 0 to 512 [ 201.316155][T14785] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 201.421771][T14792] net_ratelimit: 12 callbacks suppressed [ 201.421788][T14792] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 201.476449][T14785] EXT4-fs (loop2): orphan cleanup on readonly fs [ 201.539158][T14785] __quota_error: 4 callbacks suppressed [ 201.539179][T14785] Quota error (device loop2): do_check_range: Getting block 196613 out of range 1-5 [ 201.562807][T14785] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 201.577821][T14785] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.4732: Failed to acquire dquot type 1 [ 201.614610][T14785] EXT4-fs (loop2): 1 truncate cleaned up [ 201.635998][T14785] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-00000040ed00 ro without journal. Quota mode: writeback. [ 201.654975][T14785] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 201.686307][T14785] EXT4-fs warning (device loop2): ext4_multi_mount_protect:332: MMP startup interrupted, failing mount [ 201.686307][T14785] [ 201.731019][T14809] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4744'. [ 201.767295][T11477] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-00000040ed00. [ 202.032566][T13230] IPVS: starting estimator thread 0... [ 202.127970][T14832] IPVS: using max 2352 ests per chain, 117600 per kthread [ 202.311413][ T29] audit: type=1400 audit(1750796769.179:1764): avc: denied { mounton } for pid=14840 comm="syz.2.4756" path="/292/file1" dev="tmpfs" ino=1516 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 202.979311][ T29] audit: type=1400 audit(1750796769.769:1765): avc: denied { bind } for pid=14868 comm="syz.0.4768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 204.146469][ T29] audit: type=1400 audit(1750796771.019:1766): avc: denied { write } for pid=14932 comm="syz.3.4797" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 204.500008][T14970] loop1: detected capacity change from 0 to 512 [ 204.516295][T14970] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 204.535731][T14970] EXT4-fs (loop1): orphan cleanup on readonly fs [ 204.544984][T14970] Quota error (device loop1): do_check_range: Getting block 196613 out of range 1-5 [ 204.555282][T14970] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 204.566257][T14970] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.4814: Failed to acquire dquot type 1 [ 204.586312][T14970] EXT4-fs (loop1): 1 truncate cleaned up [ 204.593566][T14970] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-00000040ed00 ro without journal. Quota mode: writeback. [ 204.612899][T14970] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 204.626000][T14970] EXT4-fs warning (device loop1): ext4_multi_mount_protect:332: MMP startup interrupted, failing mount [ 204.626000][T14970] [ 204.674255][T14983] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 204.692577][ T9330] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-00000040ed00. [ 204.895594][T15008] loop0: detected capacity change from 0 to 1024 [ 204.911619][T15005] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 205.002147][T15008] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.127213][T10902] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.880223][T15086] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4868'. [ 205.986724][T15096] vlan2: entered promiscuous mode [ 205.992203][T15096] team0: entered promiscuous mode [ 205.999654][T15096] team_slave_0: entered promiscuous mode [ 206.009110][T15096] team_slave_1: entered promiscuous mode [ 206.016946][T15096] vlan2: entered allmulticast mode [ 206.022550][T15096] team0: entered allmulticast mode [ 206.030068][T15096] team_slave_0: entered allmulticast mode [ 206.038507][T15096] team_slave_1: entered allmulticast mode [ 206.234099][T15111] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4880'. [ 206.792862][ T29] audit: type=1400 audit(1750796773.669:1767): avc: denied { create } for pid=15143 comm="syz.4.4894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 206.794966][T15144] tipc: Can't bind to reserved service type 0 [ 206.834202][T15144] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4894'. [ 206.844485][ T29] audit: type=1400 audit(1750796773.669:1768): avc: denied { bind } for pid=15143 comm="syz.4.4894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 207.042048][T15163] syz_tun: entered allmulticast mode [ 207.052966][T15162] syz_tun: left allmulticast mode [ 207.094073][T15166] loop1: detected capacity change from 0 to 512 [ 207.104419][T15166] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 207.119001][T15166] EXT4-fs (loop1): orphan cleanup on readonly fs [ 207.132317][T15166] Quota error (device loop1): do_check_range: Getting block 196613 out of range 1-5 [ 207.144441][T15166] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 207.156088][T15166] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.4905: Failed to acquire dquot type 1 [ 207.168850][T15166] EXT4-fs (loop1): 1 truncate cleaned up [ 207.176102][T15166] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-00000040ed00 ro without journal. Quota mode: writeback. [ 207.191872][T15166] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 207.203299][T15166] EXT4-fs warning (device loop1): ext4_multi_mount_protect:332: MMP startup interrupted, failing mount [ 207.203299][T15166] [ 207.266491][ T9330] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-00000040ed00. [ 208.563264][T15264] netlink: 136 bytes leftover after parsing attributes in process `syz.2.4947'. [ 208.800599][T15290] loop3: detected capacity change from 0 to 512 [ 208.808815][T15290] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 208.821013][T15290] EXT4-fs (loop3): orphan cleanup on readonly fs [ 208.830523][T15290] Quota error (device loop3): do_check_range: Getting block 196613 out of range 1-5 [ 208.840557][T15290] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 208.850984][T15290] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.4960: Failed to acquire dquot type 1 [ 208.863803][T15290] EXT4-fs (loop3): 1 truncate cleaned up [ 208.871848][T15290] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-00000040ed00 ro without journal. Quota mode: writeback. [ 208.888086][T15290] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 208.898647][T15290] EXT4-fs warning (device loop3): ext4_multi_mount_protect:332: MMP startup interrupted, failing mount [ 208.898647][T15290] [ 208.926661][T10490] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-00000040ed00. [ 208.986256][T15293] netlink: 136 bytes leftover after parsing attributes in process `syz.3.4961'. [ 209.533698][T15315] loop0: detected capacity change from 0 to 512 [ 209.544377][T15315] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 209.560403][T15317] netlink: 136 bytes leftover after parsing attributes in process `syz.2.4972'. [ 209.560946][T15315] EXT4-fs (loop0): orphan cleanup on readonly fs [ 209.583952][T15315] Quota error (device loop0): do_check_range: Getting block 196613 out of range 1-5 [ 209.595249][T15315] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 209.607460][T15315] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.4971: Failed to acquire dquot type 1 [ 209.625257][T15315] EXT4-fs (loop0): 1 truncate cleaned up [ 209.633159][T15315] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-00000040ed00 ro without journal. Quota mode: writeback. [ 209.661103][T15315] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 209.677808][T15315] EXT4-fs warning (device loop0): ext4_multi_mount_protect:332: MMP startup interrupted, failing mount [ 209.677808][T15315] [ 209.763730][T10902] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-00000040ed00. [ 209.931911][ T29] audit: type=1400 audit(1750796776.809:1769): avc: denied { ioctl } for pid=15330 comm="syz.3.4979" path="socket:[45521]" dev="sockfs" ino=45521 ioctlcmd=0x8b24 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 210.181062][T15345] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4984'. [ 210.457651][T15354] loop3: detected capacity change from 0 to 512 [ 210.569778][T15354] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 210.603405][T15354] EXT4-fs (loop3): orphan cleanup on readonly fs [ 210.635511][T15354] Quota error (device loop3): do_check_range: Getting block 196613 out of range 1-5 [ 210.648296][T15354] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.4988: Failed to acquire dquot type 1 [ 210.671421][T15354] EXT4-fs (loop3): 1 truncate cleaned up [ 210.680119][T15354] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-00000040ed00 ro without journal. Quota mode: writeback. [ 210.696154][T15354] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 210.707646][T15354] EXT4-fs warning (device loop3): ext4_multi_mount_protect:332: MMP startup interrupted, failing mount [ 210.707646][T15354] [ 210.739598][T10490] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-00000040ed00. [ 210.959198][T15373] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4996'. [ 211.121206][T15390] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 212.455389][T15434] loop3: detected capacity change from 0 to 128 [ 212.463385][T15434] EXT4-fs: Ignoring removed nobh option [ 212.749202][T15434] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 212.768197][T15434] ext4 filesystem being mounted at /354/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 212.951415][T10490] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 213.859979][T15486] loop2: detected capacity change from 0 to 512 [ 213.877259][T15486] EXT4-fs: Ignoring removed nobh option [ 213.894064][T15486] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #15: comm syz.2.5044: iget: bad i_size value: 38620345925642 [ 213.913701][T15486] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.5044: couldn't read orphan inode 15 (err -117) [ 213.959086][T15486] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.997186][T15496] loop3: detected capacity change from 0 to 128 [ 214.005556][T15496] EXT4-fs: Ignoring removed nobh option [ 214.036834][T15496] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 214.082705][T15499] loop1: detected capacity change from 0 to 736 [ 214.091903][T15496] ext4 filesystem being mounted at /358/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 214.143388][T10490] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 214.178816][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 214.178843][ T29] audit: type=1400 audit(1750796781.059:1770): avc: denied { mount } for pid=15498 comm="syz.1.5049" name="/" dev="loop1" ino=1472 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 214.234713][ T29] audit: type=1400 audit(1750796781.069:1771): avc: denied { read append } for pid=15498 comm="syz.1.5049" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 214.264807][ T29] audit: type=1400 audit(1750796781.069:1772): avc: denied { ioctl open } for pid=15498 comm="syz.1.5049" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 214.295141][ T29] audit: type=1400 audit(1750796781.069:1773): avc: denied { bind } for pid=15498 comm="syz.1.5049" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 214.318230][ T29] audit: type=1400 audit(1750796781.069:1774): avc: denied { name_bind } for pid=15498 comm="syz.1.5049" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 214.344591][ T29] audit: type=1400 audit(1750796781.069:1775): avc: denied { node_bind } for pid=15498 comm="syz.1.5049" saddr=224.0.0.2 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 214.373381][ T29] audit: type=1400 audit(1750796781.109:1776): avc: denied { unmount } for pid=9330 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 214.431298][T15507] loop3: detected capacity change from 0 to 512 [ 214.459637][ T29] audit: type=1400 audit(1750796781.329:1777): avc: denied { mount } for pid=15485 comm="syz.2.5044" name="/" dev="ramfs" ino=44924 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 214.519656][T15507] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 214.585428][T15507] EXT4-fs (loop3): orphan cleanup on readonly fs [ 214.593483][T15507] Quota error (device loop3): do_check_range: Getting block 196613 out of range 1-5 [ 214.608095][T15507] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 214.624220][T15507] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.5052: Failed to acquire dquot type 1 [ 214.836101][T11477] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.837055][T15507] EXT4-fs (loop3): 1 truncate cleaned up [ 214.855389][T15507] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-00000040ed00 ro without journal. Quota mode: writeback. [ 214.911468][T15507] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 214.946648][T15507] EXT4-fs warning (device loop3): ext4_multi_mount_protect:332: MMP startup interrupted, failing mount [ 214.946648][T15507] [ 214.996439][T10490] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-00000040ed00. [ 215.282051][T15555] loop0: detected capacity change from 0 to 128 [ 215.292404][T15555] EXT4-fs: Ignoring removed nobh option [ 215.304024][T15555] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 215.330792][T15555] ext4 filesystem being mounted at /369/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 215.367393][T10902] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 215.551371][T15583] loop4: detected capacity change from 0 to 128 [ 215.562348][T15583] EXT4-fs: Ignoring removed nobh option [ 215.572662][T15583] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 215.587479][T15583] ext4 filesystem being mounted at /471/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 215.619844][T10112] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 215.632571][T15581] loop1: detected capacity change from 0 to 8192 [ 216.076625][T15640] loop3: detected capacity change from 0 to 1024 [ 216.096817][T15640] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.211510][T15650] ================================================================== [ 216.221134][T15650] BUG: KCSAN: data-race in filemap_splice_read / filemap_splice_read [ 216.232102][T15650] [ 216.236615][T15650] write to 0xffff888118e07fa8 of 8 bytes by task 15640 on cpu 0: [ 216.247784][T15650] filemap_splice_read+0x47e/0x6b0 [ 216.253005][T15650] ext4_file_splice_read+0x8f/0xb0 [ 216.258383][T15650] splice_direct_to_actor+0x26f/0x680 [ 216.263798][T15650] do_splice_direct+0xda/0x150 [ 216.268607][T15650] do_sendfile+0x380/0x650 [ 216.273054][T15650] __x64_sys_sendfile64+0x105/0x150 [ 216.278370][T15650] x64_sys_call+0xb39/0x2fb0 [ 216.283003][T15650] do_syscall_64+0xd2/0x200 [ 216.287548][T15650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.293482][T15650] [ 216.295878][T15650] write to 0xffff888118e07fa8 of 8 bytes by task 15650 on cpu 1: [ 216.303631][T15650] filemap_splice_read+0x47e/0x6b0 [ 216.309755][T15650] ext4_file_splice_read+0x8f/0xb0 [ 216.317220][T15650] splice_direct_to_actor+0x26f/0x680 [ 216.324498][T15650] do_splice_direct+0xda/0x150 [ 216.332718][T15650] do_sendfile+0x380/0x650 [ 216.337606][T15650] __x64_sys_sendfile64+0x105/0x150 [ 216.343562][T15650] x64_sys_call+0xb39/0x2fb0 [ 216.349713][T15650] do_syscall_64+0xd2/0x200 [ 216.356426][T15650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.363396][T15650] [ 216.366532][T15650] value changed: 0x00000000000000f9 -> 0x00000000000000fa [ 216.374405][T15650] [ 216.377476][T15650] Reported by Kernel Concurrency Sanitizer on: [ 216.384295][T15650] CPU: 1 UID: 0 PID: 15650 Comm: syz.3.5113 Tainted: G W 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(voluntary) [ 216.401233][T15650] Tainted: [W]=WARN [ 216.407950][T15650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 216.420909][T15650] ================================================================== [ 216.947208][T15640] ================================================================== [ 216.955383][T15640] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark [ 216.962539][T15640] [ 216.964885][T15640] write to 0xffff8881091f06e4 of 4 bytes by task 15650 on cpu 0: [ 216.972643][T15640] xas_set_mark+0x12b/0x140 [ 216.977212][T15640] __folio_start_writeback+0x1dd/0x440 [ 216.982729][T15640] ext4_bio_write_folio+0x5ad/0x9f0 [ 216.988061][T15640] mpage_submit_folio+0xe4/0x170 [ 216.993038][T15640] mpage_process_page_bufs+0x39b/0x4a0 [ 216.998555][T15640] mpage_prepare_extent_to_map+0x741/0xaa0 [ 217.004408][T15640] ext4_do_writepages+0xa1a/0x21c0 [ 217.009570][T15640] ext4_writepages+0x176/0x300 [ 217.014382][T15640] do_writepages+0x1c3/0x310 [ 217.019093][T15640] file_write_and_wait_range+0x156/0x2c0 [ 217.024781][T15640] generic_buffers_fsync_noflush+0x45/0x120 [ 217.030736][T15640] ext4_sync_file+0x1ab/0x690 [ 217.035461][T15640] vfs_fsync_range+0x10a/0x130 [ 217.040283][T15640] ext4_buffered_write_iter+0x34f/0x3c0 [ 217.045865][T15640] ext4_file_write_iter+0x383/0xf00 [ 217.051100][T15640] iter_file_splice_write+0x5ef/0x970 [ 217.056535][T15640] direct_splice_actor+0x153/0x2a0 [ 217.061697][T15640] splice_direct_to_actor+0x30f/0x680 [ 217.067113][T15640] do_splice_direct+0xda/0x150 [ 217.071921][T15640] do_sendfile+0x380/0x650 [ 217.076382][T15640] __x64_sys_sendfile64+0x105/0x150 [ 217.081630][T15640] x64_sys_call+0xb39/0x2fb0 [ 217.086265][T15640] do_syscall_64+0xd2/0x200 [ 217.090808][T15640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.096726][T15640] [ 217.099069][T15640] read to 0xffff8881091f06e4 of 4 bytes by task 15640 on cpu 1: [ 217.106811][T15640] xas_find_marked+0x5dc/0x620 [ 217.111624][T15640] find_get_entry+0x5d/0x380 [ 217.116265][T15640] filemap_get_folios_tag+0x92/0x210 [ 217.121608][T15640] mpage_prepare_extent_to_map+0x320/0xaa0 [ 217.127460][T15640] ext4_do_writepages+0x6ea/0x21c0 [ 217.132623][T15640] ext4_writepages+0x176/0x300 [ 217.137438][T15640] do_writepages+0x1c3/0x310 [ 217.142118][T15640] file_write_and_wait_range+0x156/0x2c0 [ 217.147805][T15640] generic_buffers_fsync_noflush+0x45/0x120 [ 217.153750][T15640] ext4_sync_file+0x1ab/0x690 [ 217.158469][T15640] vfs_fsync_range+0x10a/0x130 [ 217.163337][T15640] ext4_buffered_write_iter+0x34f/0x3c0 [ 217.169758][T15640] ext4_file_write_iter+0x383/0xf00 [ 217.184180][T15640] iter_file_splice_write+0x5ef/0x970 [ 217.191140][T15640] direct_splice_actor+0x153/0x2a0 [ 217.197187][T15640] splice_direct_to_actor+0x30f/0x680 [ 217.203573][T15640] do_splice_direct+0xda/0x150 [ 217.208512][T15640] do_sendfile+0x380/0x650 [ 217.213079][T15640] __x64_sys_sendfile64+0x105/0x150 [ 217.218329][T15640] x64_sys_call+0xb39/0x2fb0 [ 217.222963][T15640] do_syscall_64+0xd2/0x200 [ 217.227503][T15640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.233452][T15640] [ 217.235802][T15640] value changed: 0x0a000021 -> 0x04000021 [ 217.241573][T15640] [ 217.243912][T15640] Reported by Kernel Concurrency Sanitizer on: [ 217.250084][T15640] CPU: 1 UID: 0 PID: 15640 Comm: syz.3.5113 Tainted: G W 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(voluntary) [ 217.264188][T15640] Tainted: [W]=WARN [ 217.268013][T15640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 217.278108][T15640] ================================================================== [ 217.361392][T15640] syz.3.5113 (15640) used greatest stack depth: 9080 bytes left [ 217.374322][T10490] EXT4-fs error (device loop3): ext4_iget_extra_inode:5035: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 217.398864][T10490] EXT4-fs error (device loop3): ext4_iget_extra_inode:5035: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 217.442996][T12457] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.647870][ T778] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.701052][ T778] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.760902][ T778] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.819315][ T778] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.914105][ T778] bridge_slave_1: left allmulticast mode [ 217.919967][ T778] bridge_slave_1: left promiscuous mode [ 217.925741][ T778] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.960276][ T778] bridge_slave_0: left allmulticast mode [ 217.966056][ T778] bridge_slave_0: left promiscuous mode [ 217.971798][ T778] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.121025][ T778] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 218.132231][ T778] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 218.142190][ T778] bond0 (unregistering): Released all slaves [ 218.210593][ T778] hsr_slave_0: left promiscuous mode [ 218.216308][ T778] hsr_slave_1: left promiscuous mode [ 218.228139][ T778] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 218.235674][ T778] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 218.268250][ T778] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 218.275821][ T778] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.293461][ T778] veth1_macvtap: left promiscuous mode [ 218.299107][ T778] veth0_macvtap: left promiscuous mode [ 218.304731][ T778] veth1_vlan: left promiscuous mode [ 218.310337][ T778] veth0_vlan: left promiscuous mode [ 218.384858][ T778] team0 (unregistering): Port device team_slave_1 removed [ 218.396006][ T778] team0 (unregistering): Port device team_slave_0 removed [ 218.630975][ T778] IPVS: stop unused estimator thread 0...