last executing test programs: 604.62096ms ago: executing program 0 (id=3184): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000010c0)=ANY=[@ANYBLOB="94000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000a000000800004"], 0x94}}, 0x0) 515.523879ms ago: executing program 0 (id=3190): bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a01020000000000000000070000030900010073797a30000000002c000000160a03000000000000000000020000040900020073797a30000000000900010073797a300000000034000000140a01010000000000000000070000070900020073797a32000000000800034000000009090001"], 0xa8}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x4008) 476.978233ms ago: executing program 0 (id=3193): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xf}, {0xffff, 0xffff}, {0xfff3, 0xfff2}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x92}, 0x2000400c) 423.764038ms ago: executing program 4 (id=3196): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x0, 0x9, 0x28, 0x20009, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x3}, &(0x7f00000002c0)="b3f6612439925da560fe8e0b968c95f2bfed3c72b876a717dcd96af5a8cd630d9517414a795b8648c2df585c1f02e3b3f2b3dcf244fe856fb2973c44c5ceefc47bdebcf2eb264b46c1007a17373860f5f94f3a3a9c0079ca31a3f4ee2e6886", 0x5f, 0xfffffffffffffffb) keyctl$read(0xb, r0, &(0x7f0000003b80)=""/94, 0x5e) 423.139089ms ago: executing program 0 (id=3198): migrate_pages(0x0, 0xfc, &(0x7f0000000200)=0x7ffffffffffffffd, &(0x7f0000000240)=0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) 382.619183ms ago: executing program 1 (id=3200): r0 = io_uring_setup(0x28ad, &(0x7f0000000200)={0x0, 0xce3e, 0x400, 0xfffffffd, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002700)=""/4096, 0x1a00}], 0x0, 0x11a}, 0x20) 366.815784ms ago: executing program 4 (id=3202): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 355.895805ms ago: executing program 2 (id=3203): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000400)='sys_enter\x00', r0}, 0x18) io_cancel(0x0, 0x0, 0x0) 327.115788ms ago: executing program 3 (id=3204): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, 0x0, 0x1000d, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3c}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) 283.583432ms ago: executing program 3 (id=3205): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) mknodat$loop(0xffffffffffffffff, &(0x7f0000002b00)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0/file0\x00', 0x1, 0x1) 283.397642ms ago: executing program 1 (id=3206): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000000)={0x893d, 0x1, [{0x1, 0x1}]}) 269.412804ms ago: executing program 2 (id=3207): r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x4}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x9) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000440)=0x8) 224.178368ms ago: executing program 3 (id=3208): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003680)={0x1c, 0x16, 0xa01, 0x0, 0x1, {0x2}, [@nested={0x8, 0x122, 0x0, 0x1, [@nested={0x4, 0x8}]}]}, 0x1c}}, 0x0) 221.149019ms ago: executing program 1 (id=3209): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000380)={'ip6tnl0\x00', 0x0}) 161.702434ms ago: executing program 2 (id=3210): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r0}, 0x10) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0) 160.567515ms ago: executing program 4 (id=3211): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x1f}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 135.053527ms ago: executing program 1 (id=3212): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={'\x00', 0x7, 0x400, 0x0, 0x7, 0x4000000000000005, 0xffffffffffffffff}) ioctl$SG_BLKTRACETEARDOWN(r0, 0x1276, 0xc000000) 134.593717ms ago: executing program 2 (id=3213): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c010000", @ANYRES16=r1, @ANYBLOB="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"], 0x11c}}, 0x8800) 134.134497ms ago: executing program 4 (id=3214): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x17, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0xfca804a0, 0xe, 0x0, &(0x7f0000000200)="0400000098d1db1ba91d3305a782", 0x0, 0x973, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x50) 101.86161ms ago: executing program 3 (id=3215): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa, 0x0, 0xffffffff}, 0x1c) close(r0) 101.61303ms ago: executing program 1 (id=3216): pipe2(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) vmsplice(r0, &(0x7f0000000380)=[{&(0x7f0000001cc0)="b70cdbd7", 0x4}], 0x1, 0xa) fcntl$setpipe(r0, 0x407, 0x6) 101.34841ms ago: executing program 0 (id=3217): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$peek(0x19, r0, 0xfffffffffffffffe) 92.317651ms ago: executing program 2 (id=3218): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000001080)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@bsdgroups}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') preadv(r0, &(0x7f0000000100)=[{&(0x7f0000002a40)=""/4096, 0x1000}], 0x1, 0xf, 0x0) 48.325405ms ago: executing program 3 (id=3219): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x30, r1, 0x1, 0xffffff7d, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}]}]}, 0x30}}, 0x0) 47.959856ms ago: executing program 0 (id=3220): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x3, &(0x7f0000000140), 0x1, 0x25f, &(0x7f0000000b00)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r0, 0xfffffffffffffffd, 0x58) 47.782075ms ago: executing program 1 (id=3221): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000d000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x18000000000002a0, 0x4f, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 40.303356ms ago: executing program 4 (id=3222): r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x41, 0x0) fcntl$setlease(r0, 0x400, 0x0) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') 1.30004ms ago: executing program 4 (id=3223): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r1}, &(0x7f0000000500), &(0x7f0000000540)=r0}, 0x20) 284.04µs ago: executing program 2 (id=3224): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) 0s ago: executing program 3 (id=3225): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) get_robust_list(0x0, &(0x7f0000000600)=0x0, &(0x7f0000000640)) kernel console output (not intermixed with test programs): -0000-0000-0000-000000000000. [ 56.153618][ T29] audit: type=1326 audit(1760939599.313:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5570 comm="syz.4.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f282efc9 code=0x7ffc0000 [ 56.178758][ T29] audit: type=1326 audit(1760939599.323:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5570 comm="syz.4.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f282efc9 code=0x7ffc0000 [ 56.194891][ T5576] netlink: 'syz.1.983': attribute type 10 has an invalid length. [ 56.202149][ T29] audit: type=1326 audit(1760939599.333:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5570 comm="syz.4.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fd1f282efc9 code=0x7ffc0000 [ 56.210925][ T5576] batadv0: entered allmulticast mode [ 56.233134][ T29] audit: type=1326 audit(1760939599.333:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5570 comm="syz.4.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f282efc9 code=0x7ffc0000 [ 56.278610][ T5581] netlink: 'syz.1.983': attribute type 10 has an invalid length. [ 56.283432][ T5582] loop3: detected capacity change from 0 to 512 [ 56.289412][ T5576] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.302751][ T5576] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 56.315411][ T5578] bond_slave_0: entered promiscuous mode [ 56.321294][ T5578] bond_slave_1: entered promiscuous mode [ 56.329925][ T5578] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 56.338392][ T5582] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.985: bad orphan inode 11862016 [ 56.350788][ T5582] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 56.363671][ T5582] ext4 filesystem being mounted at /153/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.363733][ T5578] bond_slave_0: left promiscuous mode [ 56.379551][ T5578] bond_slave_1: left promiscuous mode [ 56.390499][ T5581] batadv0: entered promiscuous mode [ 56.396933][ T5581] bond0: (slave batadv0): Releasing backup interface [ 56.409939][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 56.416742][ T5581] bridge0: port 3(batadv0) entered blocking state [ 56.425471][ T5581] bridge0: port 3(batadv0) entered disabled state [ 56.444922][ T5591] loop3: detected capacity change from 0 to 512 [ 56.455194][ T68] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 56.464539][ T68] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 56.492847][ T5591] EXT4-fs (loop3): too many log groups per flexible block group [ 56.533264][ T5591] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 56.551089][ T5591] EXT4-fs (loop3): mount failed [ 56.600944][ T5607] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.613269][ T5601] loop1: detected capacity change from 0 to 8192 [ 56.616043][ T5609] ipvlan2: entered promiscuous mode [ 56.620953][ T5601] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 56.685096][ T5607] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.708637][ T5618] loop3: detected capacity change from 0 to 512 [ 56.720473][ T5618] journal_path: Non-blockdev passed as './bus' [ 56.726727][ T5618] EXT4-fs: error: could not find journal device path [ 56.755427][ T5607] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.825838][ T5607] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.901515][ T37] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.913861][ T37] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.931458][ T37] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.946419][ T37] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.965195][ T5654] loop2: detected capacity change from 0 to 512 [ 56.978965][ T5656] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 56.997831][ T5654] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.032784][ T5664] loop3: detected capacity change from 0 to 256 [ 57.061764][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.229805][ T5695] loop1: detected capacity change from 0 to 512 [ 57.244258][ T5705] loop3: detected capacity change from 0 to 512 [ 57.274817][ T5695] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.288280][ T5705] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.331405][ T5705] ext4 filesystem being mounted at /164/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.349817][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.452175][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.465021][ T5731] loop1: detected capacity change from 0 to 1024 [ 57.473649][ T5731] EXT4-fs: inline encryption not supported [ 57.479655][ T5731] EXT4-fs: Ignoring removed nobh option [ 57.485305][ T5731] EXT4-fs: Ignoring removed bh option [ 57.497917][ T5739] loop0: detected capacity change from 0 to 512 [ 57.513833][ T5739] EXT4-fs (loop0): too many log groups per flexible block group [ 57.514026][ T5739] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 57.530369][ T5731] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.544149][ T5739] EXT4-fs (loop0): mount failed [ 57.546987][ T5731] EXT4-fs (loop1): changing journal_checksum during remount not supported; ignoring [ 57.547210][ T5731] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 57.578599][ T5749] loop4: detected capacity change from 0 to 256 [ 57.588646][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.625707][ T5749] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000007f) [ 57.650674][ T5757] __nla_validate_parse: 21 callbacks suppressed [ 57.650739][ T5757] netlink: 240 bytes leftover after parsing attributes in process `syz.3.1065'. [ 57.694164][ T5762] loop4: detected capacity change from 0 to 512 [ 57.703252][ T5766] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1069'. [ 57.756877][ T5774] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1073'. [ 57.767144][ T5774] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1073'. [ 57.778147][ T5779] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1075'. [ 57.787916][ T5762] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.817108][ T5762] ext4 filesystem being mounted at /260/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.852092][ T5785] loop1: detected capacity change from 0 to 1024 [ 57.852460][ T5785] EXT4-fs: inline encryption not supported [ 57.863323][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.864432][ T5785] EXT4-fs: Ignoring removed i_version option [ 57.894122][ T5785] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.919400][ T5796] loop0: detected capacity change from 0 to 256 [ 57.952356][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.965262][ T5796] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000007f) [ 58.011024][ T5810] loop1: detected capacity change from 0 to 1024 [ 58.035570][ T5815] loop0: detected capacity change from 0 to 512 [ 58.042609][ T5810] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.079452][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.108907][ T5815] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.122405][ T5815] ext4 filesystem being mounted at /247/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.171953][ T5838] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1100'. [ 58.186101][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.216567][ T5844] loop0: detected capacity change from 0 to 512 [ 58.240974][ T5844] ext4 filesystem being mounted at /248/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.254996][ T5848] loop3: detected capacity change from 0 to 1024 [ 58.291895][ T5860] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1109'. [ 58.300909][ T5860] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1109'. [ 58.476538][ T5897] netlink: 'syz.0.1126': attribute type 10 has an invalid length. [ 58.484981][ T5897] batadv0: entered allmulticast mode [ 58.493150][ T5897] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.502904][ T5897] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 58.518726][ T5897] netlink: 'syz.0.1126': attribute type 10 has an invalid length. [ 58.526623][ T5897] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1126'. [ 58.537919][ T5897] batadv0: entered promiscuous mode [ 58.545608][ T5897] bond0: (slave batadv0): Releasing backup interface [ 58.554936][ T5897] bridge0: port 3(batadv0) entered blocking state [ 58.561464][ T5897] bridge0: port 3(batadv0) entered disabled state [ 58.583928][ T5908] loop3: detected capacity change from 0 to 512 [ 58.604516][ T5908] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 58.618502][ T5908] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 58.633008][ T5912] loop2: detected capacity change from 0 to 512 [ 58.640897][ T5908] EXT4-fs (loop3): 1 truncate cleaned up [ 58.683498][ T5921] loop0: detected capacity change from 0 to 1024 [ 58.693404][ T5921] EXT4-fs: inline encryption not supported [ 58.699822][ T5921] EXT4-fs: Ignoring removed nobh option [ 58.705464][ T5921] EXT4-fs: Ignoring removed bh option [ 58.730629][ T5931] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1142'. [ 58.740790][ T5921] EXT4-fs (loop0): changing journal_checksum during remount not supported; ignoring [ 58.751205][ T5921] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 58.787046][ T5935] loop3: detected capacity change from 0 to 512 [ 58.803132][ T5935] ext4 filesystem being mounted at /189/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.967521][ T5967] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 58.981475][ T5967] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=io+mem:owns=io+mem [ 59.041247][ T31] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 59.050519][ T31] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 59.165737][ T6005] program syz.4.1177 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 59.230103][ T6016] 9pnet: Could not find request transport: 0xffffffffffffffff [ 59.293421][ T6026] tipc: Invalid UDP bearer configuration [ 59.293438][ T6026] tipc: Enabling of bearer rejected, failed to enable media [ 59.390768][ T6046] loop2: detected capacity change from 0 to 1024 [ 59.405743][ T6046] ext4 filesystem being mounted at /257/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.510564][ T6072] loop0: detected capacity change from 0 to 128 [ 59.878890][ T6139] loop0: detected capacity change from 0 to 512 [ 59.878918][ T6137] loop4: detected capacity change from 0 to 512 [ 59.885599][ T6139] EXT4-fs: Ignoring removed bh option [ 59.898595][ T6139] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 59.910683][ T6139] EXT4-fs (loop0): 1 truncate cleaned up [ 59.919413][ T6137] ext4 filesystem being mounted at /289/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.052438][ T6168] program syz.1.1252 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 60.084467][ T6176] tipc: Invalid UDP bearer configuration [ 60.084485][ T6176] tipc: Enabling of bearer rejected, failed to enable media [ 60.084674][ T6169] 9pnet: Could not find request transport: 0xffffffffffffffff [ 60.128386][ T6177] loop0: detected capacity change from 0 to 1024 [ 60.161968][ T6177] ext4 filesystem being mounted at /291/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.210815][ T6197] loop1: detected capacity change from 0 to 164 [ 60.240353][ T6197] Unsupported NM flag settings (8) [ 60.301490][ T6208] tipc: Invalid UDP bearer configuration [ 60.301508][ T6208] tipc: Enabling of bearer rejected, failed to enable media [ 60.342545][ T6215] loop4: detected capacity change from 0 to 136 [ 60.799550][ T6259] loop4: detected capacity change from 0 to 512 [ 60.822643][ T6259] EXT4-fs: Ignoring removed bh option [ 60.843523][ T6259] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 60.910260][ T6263] loop1: detected capacity change from 0 to 512 [ 60.937707][ T6263] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 60.947862][ T29] kauditd_printk_skb: 39 callbacks suppressed [ 60.947878][ T29] audit: type=1400 audit(1760939604.103:429): avc: denied { create } for pid=6265 comm="syz.3.1296" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=qipcrtr_socket permissive=1 [ 61.086196][ T6276] loop2: detected capacity change from 0 to 128 [ 61.111394][ T6276] EXT4-fs: Ignoring removed orlov option [ 61.135910][ T6259] EXT4-fs (loop4): 1 truncate cleaned up [ 61.182893][ T6276] ext4 filesystem being mounted at /275/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.194534][ T6283] loop3: detected capacity change from 0 to 512 [ 61.215748][ T6287] loop1: detected capacity change from 0 to 512 [ 61.231667][ T6283] EXT4-fs: Ignoring removed mblk_io_submit option [ 61.251259][ T6283] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 61.285461][ T6298] netlink: 'syz.2.1310': attribute type 29 has an invalid length. [ 61.296516][ T6287] ext4 filesystem being mounted at /215/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.296537][ T6283] EXT4-fs (loop3): 1 truncate cleaned up [ 61.299485][ T6283] EXT4-fs error (device loop3): ext4_generic_delete_entry:2668: inode #2: block 13: comm syz.3.1304: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 61.310500][ T29] audit: type=1400 audit(1760939604.453:430): avc: denied { write open } for pid=6282 comm="syz.3.1304" path="/214/file1/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 61.313438][ T6283] EXT4-fs error (device loop3) in ext4_delete_entry:2739: Corrupt filesystem [ 61.333854][ T29] audit: type=1400 audit(1760939604.453:431): avc: denied { unlink } for pid=6282 comm="syz.3.1304" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 61.378206][ T6301] process 'syz.4.1311' launched '/dev/fd/3' with NULL argv: empty string added [ 61.415370][ T29] audit: type=1400 audit(1760939604.573:432): avc: denied { execute_no_trans } for pid=6300 comm="syz.4.1311" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=69 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 61.457396][ T29] audit: type=1400 audit(1760939604.613:433): avc: denied { create } for pid=6308 comm="syz.4.1315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 61.507252][ T29] audit: type=1400 audit(1760939604.633:434): avc: denied { getopt } for pid=6308 comm="syz.4.1315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 61.610184][ T29] audit: type=1400 audit(1760939604.763:435): avc: denied { mount } for pid=6329 comm="syz.1.1325" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 61.632774][ T29] audit: type=1400 audit(1760939604.793:436): avc: denied { remount } for pid=6329 comm="syz.1.1325" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 61.664687][ T29] audit: type=1400 audit(1760939604.823:437): avc: denied { unmount } for pid=3311 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 61.719140][ T29] audit: type=1400 audit(1760939604.873:438): avc: denied { validate_trans } for pid=6341 comm="syz.4.1331" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 61.742384][ T6345] loop1: detected capacity change from 0 to 128 [ 61.892177][ T6374] loop3: detected capacity change from 0 to 128 [ 61.902154][ T6374] EXT4-fs: Ignoring removed orlov option [ 61.908628][ T6376] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 61.913015][ T6374] ext4 filesystem being mounted at /225/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.915171][ T6376] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 61.933400][ T6376] vhci_hcd vhci_hcd.0: Device attached [ 61.960248][ T6377] vhci_hcd: connection closed [ 61.961479][ T68] vhci_hcd: stop threads [ 61.970519][ T68] vhci_hcd: release socket [ 61.975023][ T68] vhci_hcd: disconnect device [ 62.114848][ T6409] loop1: detected capacity change from 0 to 128 [ 62.121850][ T6409] EXT4-fs: Ignoring removed orlov option [ 62.129374][ T6409] ext4 filesystem being mounted at /230/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.346892][ T6428] loop3: detected capacity change from 0 to 128 [ 62.480180][ T6456] netlink: 'syz.1.1384': attribute type 1 has an invalid length. [ 62.525208][ T6462] loop0: detected capacity change from 0 to 512 [ 62.532839][ T6462] EXT4-fs: Ignoring removed mblk_io_submit option [ 62.540110][ T6462] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 62.563823][ T6462] EXT4-fs (loop0): 1 truncate cleaned up [ 62.574623][ T6462] EXT4-fs error (device loop0): ext4_generic_delete_entry:2668: inode #2: block 13: comm syz.0.1387: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 62.601711][ T6462] EXT4-fs error (device loop0) in ext4_delete_entry:2739: Corrupt filesystem [ 62.824267][ T6489] __nla_validate_parse: 23 callbacks suppressed [ 62.824288][ T6489] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1400'. [ 62.892020][ T6497] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1404'. [ 63.142551][ T6532] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1419'. [ 63.164591][ T6535] capability: warning: `syz.2.1421' uses 32-bit capabilities (legacy support in use) [ 63.255970][ T6546] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1427'. [ 63.265201][ T6546] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1427'. [ 63.503106][ T6572] netlink: 'syz.3.1438': attribute type 1 has an invalid length. [ 63.576609][ T6584] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1443'. [ 63.628381][ T6586] loop3: detected capacity change from 0 to 4096 [ 63.674194][ T6597] loop2: detected capacity change from 0 to 1024 [ 63.681046][ T6597] EXT4-fs: Ignoring removed orlov option [ 63.686881][ T6597] EXT4-fs: Ignoring removed mblk_io_submit option [ 63.693373][ T6597] EXT4-fs: inline encryption not supported [ 63.756480][ T6613] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1458'. [ 63.784355][ T6617] loop3: detected capacity change from 0 to 512 [ 63.803280][ T6617] ext4 filesystem being mounted at /252/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.842569][ T6625] loop0: detected capacity change from 0 to 2048 [ 63.871302][ T3571] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 63.871310][ T3814] Bluetooth: hci0: command 0x1003 tx timeout [ 63.941985][ T6640] netlink: 'syz.4.1470': attribute type 4 has an invalid length. [ 64.069100][ T6662] loop0: detected capacity change from 0 to 512 [ 64.079680][ T6662] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.1481: inode has both inline data and extents flags [ 64.112862][ T6662] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.1481: couldn't read orphan inode 15 (err -117) [ 64.146902][ T6662] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters [ 64.581858][ T6724] loop4: detected capacity change from 0 to 4096 [ 64.657374][ T6734] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 64.847734][ T6761] xt_CT: You must specify a L4 protocol and not use inversions on it [ 64.859060][ T6763] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 64.865594][ T6763] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 64.873368][ T6763] vhci_hcd vhci_hcd.0: Device attached [ 64.881821][ T6764] vhci_hcd: connection closed [ 64.882082][ T31] vhci_hcd: stop threads [ 64.891068][ T31] vhci_hcd: release socket [ 64.895732][ T31] vhci_hcd: disconnect device [ 64.960958][ T6768] loop4: detected capacity change from 0 to 512 [ 64.969166][ T6768] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.1529: inode has both inline data and extents flags [ 64.984565][ T6768] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.1529: couldn't read orphan inode 15 (err -117) [ 65.001391][ T6768] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters [ 65.049574][ T6777] netlink: 'syz.2.1533': attribute type 3 has an invalid length. [ 65.057391][ T6777] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1533'. [ 65.158695][ T6795] loop2: detected capacity change from 0 to 256 [ 65.174599][ T6797] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 65.219988][ T6803] sd 0:0:1:0: device reset [ 65.434186][ T6832] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1559'. [ 65.443170][ T6832] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1559'. [ 65.452098][ T6832] netlink: 'syz.1.1559': attribute type 11 has an invalid length. [ 65.472584][ T6834] netlink: 'syz.0.1560': attribute type 3 has an invalid length. [ 65.507695][ T6840] netlink: 'syz.4.1563': attribute type 2 has an invalid length. [ 65.555066][ T6848] sd 0:0:1:0: device reset [ 65.793804][ T6870] random: crng reseeded on system resumption [ 65.851860][ T6883] sd 0:0:1:0: device reset [ 66.035085][ T6907] loop2: detected capacity change from 0 to 128 [ 66.124840][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 66.124855][ T29] audit: type=1400 audit(1760939609.283:460): avc: denied { getopt } for pid=6915 comm="syz.0.1602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 66.181295][ T6925] random: crng reseeded on system resumption [ 66.268594][ T6936] mmap: syz.2.1609 (6936): VmData 29081600 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 66.303471][ T6933] loop0: detected capacity change from 0 to 512 [ 66.332353][ T6942] sch_tbf: burst 3 is lower than device geneve1 mtu (1514) ! [ 66.340225][ T6933] EXT4-fs (loop0): orphan cleanup on readonly fs [ 66.361682][ T6933] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.1608: inode has both inline data and extents flags [ 66.410571][ T6933] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.1608: couldn't read orphan inode 15 (err -117) [ 66.436723][ T29] audit: type=1326 audit(1760939609.593:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6949 comm="syz.2.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61f40aefc9 code=0x7ffc0000 [ 66.460222][ T29] audit: type=1326 audit(1760939609.593:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6949 comm="syz.2.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61f40aefc9 code=0x7ffc0000 [ 66.483934][ T29] audit: type=1400 audit(1760939609.613:463): avc: denied { setopt } for pid=6951 comm="syz.4.1617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 66.503997][ T29] audit: type=1326 audit(1760939609.653:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6949 comm="syz.2.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f61f40ad810 code=0x7ffc0000 [ 66.527428][ T29] audit: type=1326 audit(1760939609.653:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6949 comm="syz.2.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61f40aefc9 code=0x7ffc0000 [ 66.551010][ T29] audit: type=1326 audit(1760939609.653:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6949 comm="syz.2.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f61f40adc2a code=0x7ffc0000 [ 66.584323][ T29] audit: type=1326 audit(1760939609.733:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6949 comm="syz.2.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f61f40e1885 code=0x7ffc0000 [ 66.708759][ T6970] program syz.4.1625 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 66.777055][ T29] audit: type=1326 audit(1760939609.933:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6949 comm="syz.2.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61f40aefc9 code=0x7ffc0000 [ 66.812417][ T29] audit: type=1326 audit(1760939609.933:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6949 comm="syz.2.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61f40aefc9 code=0x7ffc0000 [ 66.849966][ T6984] loop7: detected capacity change from 0 to 7 [ 66.858267][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 66.867469][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 66.867644][ T6988] loop0: detected capacity change from 0 to 164 [ 66.875892][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 66.890794][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 66.898819][ T6984] loop7: unable to read partition table [ 66.904678][ T6984] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 66.923596][ T6988] rock: directory entry would overflow storage [ 66.929991][ T6988] rock: sig=0x66, size=4, remaining=3 [ 67.102196][ T7019] loop1: detected capacity change from 0 to 164 [ 67.115809][ T7019] rock: directory entry would overflow storage [ 67.122080][ T7019] rock: sig=0x66, size=4, remaining=3 [ 67.139708][ T36] IPVS: starting estimator thread 0... [ 67.210982][ T7036] tipc: Enabling of bearer rejected, failed to enable media [ 67.231248][ T7026] IPVS: using max 2304 ests per chain, 115200 per kthread [ 67.366302][ T7060] loop0: detected capacity change from 0 to 2048 [ 67.398890][ T7060] ext4 filesystem being mounted at /370/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.467687][ T7075] program syz.3.1674 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 67.587043][ T7098] loop7: detected capacity change from 0 to 7 [ 67.601497][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 67.610707][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 67.621418][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 67.630592][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 67.639802][ T7098] loop7: unable to read partition table [ 67.646060][ T7098] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 67.708170][ T7112] loop1: detected capacity change from 0 to 512 [ 67.765727][ T7118] loop4: detected capacity change from 0 to 512 [ 67.811681][ T7118] journal_path: Non-blockdev passed as './bus' [ 67.818206][ T7118] EXT4-fs: error: could not find journal device path [ 67.844549][ T7136] loop7: detected capacity change from 0 to 7 [ 67.851732][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 67.860919][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 67.872641][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 67.881836][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 67.889718][ T7136] loop7: unable to read partition table [ 67.905855][ T7136] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 67.965233][ T7147] loop4: detected capacity change from 0 to 2048 [ 68.013048][ T7147] ext4 filesystem being mounted at /372/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.013868][ T7154] tipc: Enabling of bearer rejected, failed to enable media [ 68.060349][ T7162] loop2: detected capacity change from 0 to 512 [ 68.084354][ T7164] __nla_validate_parse: 4 callbacks suppressed [ 68.084370][ T7164] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1715'. [ 68.105009][ T7162] ext4 filesystem being mounted at /377/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 68.133665][ T7169] loop1: detected capacity change from 0 to 512 [ 68.140370][ T7169] journal_path: Non-blockdev passed as './bus' [ 68.146602][ T7169] EXT4-fs: error: could not find journal device path [ 68.154561][ T7162] EXT4-fs error (device loop2): ext4_get_first_dir_block:3537: inode #12: block 32: comm syz.2.1714: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 68.180194][ T7162] EXT4-fs error (device loop2): ext4_get_first_dir_block:3540: inode #12: comm syz.2.1714: directory missing '.' [ 68.215679][ T7178] loop4: detected capacity change from 0 to 512 [ 68.291870][ T7190] loop2: detected capacity change from 0 to 2048 [ 68.315422][ T7190] ext4 filesystem being mounted at /379/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.449168][ T7222] loop3: detected capacity change from 0 to 2048 [ 68.498478][ T7233] loop4: detected capacity change from 0 to 128 [ 68.505240][ T7222] loop3: p1 < > p3 p4 < > [ 68.509808][ T7222] loop3: partition table partially beyond EOD, truncated [ 68.527857][ T7222] loop3: p1 start 8388352 is beyond EOD, truncated [ 68.534503][ T7222] loop3: p3 size 16777216 extends beyond EOD, truncated [ 68.550851][ T7233] ext4 filesystem being mounted at /383/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 68.618475][ T7233] EXT4-fs warning (device loop4): verify_group_input:137: Cannot add at group 7 (only 1 groups) [ 68.651709][ T7251] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1753'. [ 68.704925][ T7256] loop3: detected capacity change from 0 to 1024 [ 68.724684][ T7263] loop4: detected capacity change from 0 to 512 [ 68.732602][ T7256] EXT4-fs (loop3): filesystem is read-only [ 68.739261][ T7256] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 68.749360][ T7256] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 68.760247][ T7256] EXT4-fs error (device loop3): ext4_get_journal_inode:5808: comm syz.3.1757: inode #1: comm syz.3.1757: iget: illegal inode # [ 68.775347][ T7256] EXT4-fs (loop3): no journal found [ 68.780768][ T7256] EXT4-fs (loop3): can't get journal size [ 68.787724][ T7263] ext4 filesystem being mounted at /385/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 68.788232][ T7256] EXT4-fs (loop3): failed to initialize system zone (-22) [ 68.805801][ T7256] EXT4-fs (loop3): mount failed [ 68.813881][ T7271] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1764'. [ 68.817648][ T7263] EXT4-fs error (device loop4): ext4_get_first_dir_block:3537: inode #12: block 32: comm syz.4.1760: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 68.851483][ T7263] EXT4-fs error (device loop4): ext4_get_first_dir_block:3540: inode #12: comm syz.4.1760: directory missing '.' [ 68.914200][ T7282] 9p: Unknown access argument o: -22 [ 68.928844][ T7285] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1768'. [ 69.132193][ T7315] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1778'. [ 69.218492][ T7333] loop1: detected capacity change from 0 to 1024 [ 69.225807][ T7333] EXT4-fs (loop1): filesystem is read-only [ 69.232099][ T7333] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 69.241847][ T7333] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 69.252275][ T7333] EXT4-fs error (device loop1): ext4_get_journal_inode:5808: comm syz.1.1787: inode #1: comm syz.1.1787: iget: illegal inode # [ 69.266058][ T7333] EXT4-fs (loop1): no journal found [ 69.271346][ T7333] EXT4-fs (loop1): can't get journal size [ 69.278296][ T7333] EXT4-fs (loop1): failed to initialize system zone (-22) [ 69.288296][ T7333] EXT4-fs (loop1): mount failed [ 69.589191][ T7387] loop2: detected capacity change from 0 to 128 [ 69.599124][ T7387] ext4 filesystem being mounted at /400/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.612951][ T7387] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.1813: No space for directory leaf checksum. Please run e2fsck -D. [ 69.628482][ T7387] EXT4-fs error (device loop2): htree_dirblock_to_tree:1051: inode #2: comm syz.2.1813: Directory block failed checksum [ 69.655383][ T7398] can0: slcan on ptm0. [ 69.672046][ T7401] loop0: detected capacity change from 0 to 256 [ 69.701456][ T7396] can0 (unregistered): slcan off ptm0. [ 69.725018][ T7406] 9pnet: Could not find request transport: a [ 69.869082][ T7430] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1831'. [ 70.076795][ T7462] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1848'. [ 70.076817][ T7462] netlink: 212 bytes leftover after parsing attributes in process `syz.0.1848'. [ 70.105620][ T7470] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1852'. [ 70.117579][ T7470] netlink: 'syz.3.1852': attribute type 4 has an invalid length. [ 70.125380][ T7470] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1852'. [ 70.151533][ T3378] kernel read not supported for file /sysvipc/msg (pid: 3378 comm: kworker/1:2) [ 70.185329][ T7478] netlink: 'syz.4.1855': attribute type 1 has an invalid length. [ 70.193273][ T7478] netlink: 'syz.4.1855': attribute type 2 has an invalid length. [ 70.337178][ T7504] loop1: detected capacity change from 0 to 512 [ 70.343862][ T7504] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 70.345985][ T7504] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 70.346494][ T7504] EXT4-fs (loop1): 1 truncate cleaned up [ 70.398455][ T7511] loop3: detected capacity change from 0 to 512 [ 70.404835][ T7511] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 70.422704][ T7511] EXT4-fs (loop3): 1 truncate cleaned up [ 70.423182][ T7511] EXT4-fs mount: 62 callbacks suppressed [ 70.423193][ T7511] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.474032][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.543162][ T7532] loop2: detected capacity change from 0 to 164 [ 70.633721][ T7550] loop2: detected capacity change from 0 to 128 [ 70.649316][ T7550] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 70.663863][ T7550] ext4 filesystem being mounted at /421/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 70.728188][ T7557] loop4: detected capacity change from 0 to 2048 [ 70.745862][ T3312] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 70.808370][ T7557] loop4: p1 < > p4 [ 70.819493][ T7571] IPVS: Error connecting to the multicast addr [ 70.821833][ T7557] loop4: p4 size 8388608 extends beyond EOD, truncated [ 71.004089][ T7595] loop2: detected capacity change from 0 to 8192 [ 71.094202][ T7613] loop1: detected capacity change from 0 to 256 [ 71.125354][ T7613] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 71.375538][ T7646] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 71.568415][ T29] kauditd_printk_skb: 44 callbacks suppressed [ 71.568430][ T29] audit: type=1400 audit(1760939614.723:514): avc: denied { listen } for pid=7657 comm="syz.4.1941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 71.673496][ T29] audit: type=1400 audit(1760939614.833:515): avc: denied { read } for pid=7667 comm="syz.1.1946" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 71.792584][ T7679] loop1: detected capacity change from 0 to 512 [ 71.830390][ T7679] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.830502][ T7679] ext4 filesystem being mounted at /317/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.833851][ T7679] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 71.882200][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.899019][ T29] audit: type=1400 audit(1760939615.053:516): avc: denied { bind } for pid=7684 comm="syz.0.1952" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 71.946706][ T29] audit: type=1400 audit(1760939615.053:517): avc: denied { node_bind } for pid=7684 comm="syz.0.1952" saddr=255.255.255.255 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 71.990162][ T29] audit: type=1400 audit(1760939615.143:518): avc: denied { mount } for pid=7691 comm="syz.1.1954" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 72.034816][ T7696] loop0: detected capacity change from 0 to 512 [ 72.072274][ T7696] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.072355][ T7696] ext4 filesystem being mounted at /426/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.081168][ T7696] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.1958: corrupted xattr block 32: bad e_name length [ 72.110080][ T7696] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 72.175274][ T7696] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.1958: corrupted xattr block 32: bad e_name length [ 72.175475][ T7696] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 72.240152][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.328704][ T7721] netlink: 'syz.1.1969': attribute type 1 has an invalid length. [ 72.396586][ T7732] netlink: 'syz.1.1973': attribute type 2 has an invalid length. [ 72.423986][ T29] audit: type=1400 audit(1760939615.583:519): avc: denied { read } for pid=7734 comm="syz.3.1975" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 72.424141][ T29] audit: type=1400 audit(1760939615.583:520): avc: denied { open } for pid=7734 comm="syz.3.1975" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 72.488134][ T7739] loop3: detected capacity change from 0 to 128 [ 72.489779][ T7739] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 72.504193][ T7739] System zones: 1-3, 19-19, 35-36 [ 72.509998][ T7739] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 72.541344][ T3316] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 72.649360][ T7763] loop3: detected capacity change from 0 to 512 [ 72.657160][ T7763] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 72.924983][ T7802] loop1: detected capacity change from 0 to 1024 [ 72.943650][ T7802] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.968495][ T29] audit: type=1400 audit(1760939616.123:521): avc: denied { getopt } for pid=7818 comm="syz.4.2013" lport=13 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 72.990361][ T7819] loop3: detected capacity change from 0 to 736 [ 73.001666][ T29] audit: type=1400 audit(1760939616.123:522): avc: denied { read } for pid=7800 comm="syz.1.2005" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 73.040386][ T7826] loop3: detected capacity change from 0 to 128 [ 73.046814][ T7823] loop4: detected capacity change from 0 to 2048 [ 73.063987][ T7826] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 73.071912][ T7826] FAT-fs (loop3): Filesystem has been set read-only [ 73.072209][ T7828] loop0: detected capacity change from 0 to 764 [ 73.079152][ T7826] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 73.093056][ T7828] rock: directory entry would overflow storage [ 73.093445][ T7826] syz.3.2015: attempt to access beyond end of device [ 73.093445][ T7826] loop3: rw=2049, sector=2065, nr_sectors = 8 limit=128 [ 73.099249][ T7828] rock: sig=0x4654, size=5, remaining=4 [ 73.118927][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.191512][ T29] audit: type=1400 audit(1760939616.343:523): avc: denied { bind } for pid=7833 comm="syz.1.2018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 73.198796][ T7837] loop0: detected capacity change from 0 to 512 [ 73.212938][ T7832] bond1: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 73.219762][ T7839] __nla_validate_parse: 11 callbacks suppressed [ 73.219781][ T7839] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2022'. [ 73.242157][ T7839] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2022'. [ 73.253963][ T7837] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.2021: inode has both inline data and extents flags [ 73.260094][ T7832] bond1 (unregistering): Released all slaves [ 73.279976][ T7837] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.2021: couldn't read orphan inode 15 (err -117) [ 73.308939][ T7837] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.324833][ T7846] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2025'. [ 73.361697][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.366810][ T7852] loop1: detected capacity change from 0 to 512 [ 73.378621][ T7851] loop4: detected capacity change from 0 to 512 [ 73.392616][ T7851] EXT4-fs (loop4): orphan cleanup on readonly fs [ 73.392960][ T7852] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.419380][ T7852] ext4 filesystem being mounted at /336/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.422906][ T7851] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2027: bg 0: block 248: padding at end of block bitmap is not set [ 73.461373][ T7851] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.2027: Failed to acquire dquot type 1 [ 73.480151][ T7851] EXT4-fs (loop4): 1 truncate cleaned up [ 73.486897][ T7851] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 73.508896][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.529860][ T7867] infiniband syz!: set active [ 73.534643][ T7867] infiniband syz!: added team_slave_0 [ 73.540451][ T7851] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 73.553285][ T7851] EXT4-fs warning (device loop4): read_mmp_block:115: Error -117 while reading MMP block 0 [ 73.574337][ T7867] RDS/IB: syz!: added [ 73.582150][ T7851] syz.4.2027 (7851) used greatest stack depth: 9200 bytes left [ 73.603117][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.808838][ T7904] loop4: detected capacity change from 0 to 256 [ 73.877283][ T7913] netlink: 'syz.4.2056': attribute type 3 has an invalid length. [ 74.016721][ T7937] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2067'. [ 74.096823][ T7947] netlink: 536 bytes leftover after parsing attributes in process `syz.4.2072'. [ 74.107010][ T7947] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2072'. [ 74.148471][ T7949] loop1: detected capacity change from 0 to 512 [ 74.173958][ T7949] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 74.183530][ T7949] EXT4-fs (loop1): orphan cleanup on readonly fs [ 74.204714][ T7949] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #16: comm syz.1.2073: corrupted inode contents [ 74.219863][ T7949] EXT4-fs (loop1): Remounting filesystem read-only [ 74.235446][ T7949] EXT4-fs (loop1): 1 truncate cleaned up [ 74.241346][ T37] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 74.251978][ T37] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 74.281084][ T37] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 74.315868][ T7949] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 74.389090][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.449886][ T7980] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2087'. [ 74.499173][ T7983] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7983 comm=syz.4.2088 [ 74.541422][ T7991] loop3: detected capacity change from 0 to 128 [ 74.551194][ T7991] netlink: 112 bytes leftover after parsing attributes in process `syz.3.2092'. [ 74.560402][ T7991] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2092'. [ 74.592501][ T7994] loop1: detected capacity change from 0 to 1024 [ 74.619168][ T7994] EXT4-fs: Ignoring removed orlov option [ 74.625009][ T7994] EXT4-fs: Ignoring removed nomblk_io_submit option [ 74.655459][ T8001] loop3: detected capacity change from 0 to 512 [ 74.677924][ T8001] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.2096: inode has both inline data and extents flags [ 74.687827][ T7994] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.706111][ T8001] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.2096: couldn't read orphan inode 15 (err -117) [ 74.720079][ T3378] IPVS: starting estimator thread 0... [ 74.731732][ T8001] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.759324][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.787093][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.811216][ T8012] IPVS: using max 2256 ests per chain, 112800 per kthread [ 74.884571][ T8035] loop0: detected capacity change from 0 to 256 [ 74.894323][ T8038] loop1: detected capacity change from 0 to 1024 [ 74.897819][ T8040] loop2: detected capacity change from 0 to 512 [ 74.905437][ T8038] EXT4-fs: Ignoring removed orlov option [ 74.912733][ T8038] EXT4-fs: Ignoring removed nomblk_io_submit option [ 74.925597][ T8035] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 74.935802][ T8035] FAT-fs (loop0): Filesystem has been set read-only [ 74.941772][ T8040] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.2113: inode has both inline data and extents flags [ 74.955945][ T8040] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.2113: couldn't read orphan inode 15 (err -117) [ 74.968558][ T8040] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.976286][ T8038] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.005282][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.134184][ T8065] netlink: 'syz.0.2125': attribute type 3 has an invalid length. [ 75.150282][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.175234][ T8075] loop4: detected capacity change from 0 to 512 [ 75.195924][ T8075] EXT4-fs: Ignoring removed nomblk_io_submit option [ 75.202648][ T8075] EXT4-fs: Ignoring removed oldalloc option [ 75.213070][ T8078] tipc: Enabling of bearer rejected, failed to enable media [ 75.231881][ T8075] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: comm syz.4.2131: Parent and EA inode have the same ino 15 [ 75.249299][ T8083] loop1: detected capacity change from 0 to 512 [ 75.267455][ T8075] EXT4-fs (loop4): Remounting filesystem read-only [ 75.267498][ T8075] EXT4-fs (loop4): 1 orphan inode deleted [ 75.267995][ T8075] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.291301][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.317492][ T8083] EXT4-fs (loop1): orphan cleanup on readonly fs [ 75.318209][ T8083] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2130: bg 0: block 248: padding at end of block bitmap is not set [ 75.324958][ T8083] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.2130: Failed to acquire dquot type 1 [ 75.325543][ T8083] EXT4-fs (loop1): 1 truncate cleaned up [ 75.326219][ T8083] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 75.354926][ T8083] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 75.355577][ T8083] EXT4-fs warning (device loop1): read_mmp_block:115: Error -117 while reading MMP block 0 [ 75.386024][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.388314][ T8090] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 75.595521][ T8108] netlink: 'syz.0.2143': attribute type 10 has an invalid length. [ 75.610428][ T8108] ipvlan0: entered allmulticast mode [ 75.615869][ T8108] veth0_vlan: entered allmulticast mode [ 75.623673][ T8108] team0: Device ipvlan0 failed to register rx_handler [ 76.036182][ T8153] loop3: detected capacity change from 0 to 1764 [ 76.216473][ T8168] loop0: detected capacity change from 0 to 128 [ 76.248127][ T8168] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2171'. [ 76.610846][ T8191] tipc: Invalid UDP bearer configuration [ 76.610907][ T8191] tipc: Enabling of bearer rejected, failed to enable media [ 76.660422][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 76.660440][ T29] audit: type=1400 audit(1760939619.813:531): avc: denied { create } for pid=8194 comm="syz.4.2186" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_fib_lookup_socket permissive=1 [ 76.764139][ T8215] loop4: detected capacity change from 0 to 1024 [ 76.772453][ T8214] netlink: 'syz.2.2196': attribute type 2 has an invalid length. [ 76.781531][ T8209] loop0: detected capacity change from 0 to 1024 [ 76.788763][ T8209] ext4: Unknown parameter 'hash' [ 76.813205][ T8215] EXT4-fs: Ignoring removed orlov option [ 76.824724][ T8212] loop1: detected capacity change from 0 to 4096 [ 76.835672][ T8212] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 76.845985][ T29] audit: type=1400 audit(1760939620.003:532): avc: denied { read } for pid=8221 comm="syz.2.2201" name="mISDNtimer" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 76.868989][ T29] audit: type=1400 audit(1760939620.003:533): avc: denied { open } for pid=8221 comm="syz.2.2201" path="/dev/mISDNtimer" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 76.892390][ T29] audit: type=1400 audit(1760939620.003:534): avc: denied { ioctl } for pid=8221 comm="syz.2.2201" path="/dev/mISDNtimer" dev="devtmpfs" ino=250 ioctlcmd=0x4940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 76.980659][ T8212] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.002742][ T8212] EXT4-fs error (device loop1): ext4_lookup:1787: inode #14: comm syz.1.2194: invalid fast symlink length 131109 [ 77.014805][ T8215] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a002c118, mo2=0002] [ 77.028725][ T8215] System zones: 0-1, 3-12 [ 77.034303][ T8215] EXT4-fs (loop4): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.050256][ T29] audit: type=1400 audit(1760939620.203:535): avc: denied { create } for pid=8213 comm="syz.4.2195" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 77.088270][ T8248] random: crng reseeded on system resumption [ 77.093480][ T29] audit: type=1400 audit(1760939620.203:536): avc: denied { write } for pid=8247 comm="syz.2.2209" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 77.123011][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.172844][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 77.176765][ T8255] loop1: detected capacity change from 0 to 512 [ 77.216558][ T8255] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.230727][ T8264] syz.3.2219 (8264): /proc/8263/oom_adj is deprecated, please use /proc/8263/oom_score_adj instead. [ 77.231060][ T8255] ext4 filesystem being mounted at /371/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 77.261912][ T8255] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.2212: corrupted inode contents [ 77.283310][ T8255] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #2: comm syz.1.2212: mark_inode_dirty error [ 77.301365][ T8255] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.2212: corrupted inode contents [ 77.314404][ T29] audit: type=1400 audit(1760939620.463:537): avc: denied { write } for pid=8272 comm="syz.0.2222" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 77.347536][ T8278] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.2212: corrupted inode contents [ 77.369552][ T8278] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #2: comm syz.1.2212: mark_inode_dirty error [ 77.384503][ T8278] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.2212: corrupted inode contents [ 77.420010][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.437501][ T8291] netlink: 'syz.3.2231': attribute type 3 has an invalid length. [ 77.445308][ T8291] netlink: 'syz.3.2231': attribute type 1 has an invalid length. [ 77.580220][ T8318] loop2: detected capacity change from 0 to 512 [ 77.588187][ T8318] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 77.604379][ T8318] EXT4-fs (loop2): orphan cleanup on readonly fs [ 77.609894][ T8323] loop1: detected capacity change from 0 to 512 [ 77.621226][ T8323] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 77.630367][ T8318] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2243: bg 0: block 248: padding at end of block bitmap is not set [ 77.663597][ T8318] Quota error (device loop2): write_blk: dquota write failed [ 77.671347][ T8318] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 77.681529][ T8318] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.2243: Failed to acquire dquot type 1 [ 77.704311][ T8323] EXT4-fs (loop1): invalid journal inode [ 77.710248][ T8323] EXT4-fs (loop1): can't get journal size [ 77.719211][ T8323] EXT4-fs (loop1): 1 truncate cleaned up [ 77.725593][ T8323] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.742188][ T8318] EXT4-fs (loop2): 1 truncate cleaned up [ 77.756587][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.756705][ T8318] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 77.793778][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.819538][ T8338] loop0: detected capacity change from 0 to 512 [ 77.844402][ T8338] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 77.865007][ T8338] EXT4-fs (loop0): orphan cleanup on readonly fs [ 77.883216][ T8338] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 77.895152][ T8338] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it [ 77.905514][ T8338] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.2253: Corrupt directory, running e2fsck is recommended [ 77.919906][ T8338] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 77.951416][ T8338] EXT4-fs error (device loop0): ext4_iget_extra_inode:5075: inode #15: comm syz.0.2253: corrupted in-inode xattr: invalid ea_ino [ 78.011288][ T8338] EXT4-fs (loop0): Remounting filesystem read-only [ 78.051703][ T8338] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 78.085882][ T8338] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 78.097671][ T8338] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it [ 78.108367][ T8338] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.2253: Corrupt directory, running e2fsck is recommended [ 78.136969][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.170363][ T29] audit: type=1400 audit(1760939621.323:538): avc: denied { write } for pid=8369 comm="syz.0.2267" name="qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 78.250909][ T8380] __nla_validate_parse: 14 callbacks suppressed [ 78.250928][ T8380] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2273'. [ 78.362804][ T8398] loop1: detected capacity change from 0 to 128 [ 78.377845][ T8398] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 78.505684][ T8410] loop2: detected capacity change from 0 to 8192 [ 78.572199][ T8428] vhci_hcd: invalid port number 255 [ 78.600669][ T8432] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2298'. [ 78.676330][ T8439] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2302'. [ 78.735689][ T8442] loop3: detected capacity change from 0 to 2048 [ 78.777426][ T8447] loop0: detected capacity change from 0 to 512 [ 78.802336][ T8447] EXT4-fs (loop0): orphan cleanup on readonly fs [ 78.816949][ T8442] loop3: p1 p2 p3 [ 78.819521][ T8447] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2305: bg 0: block 248: padding at end of block bitmap is not set [ 78.861238][ T8447] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.2305: Failed to acquire dquot type 1 [ 78.900927][ T8447] EXT4-fs (loop0): 1 truncate cleaned up [ 78.907390][ T8447] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 78.953480][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.183918][ T8490] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2324'. [ 79.247050][ T8500] loop0: detected capacity change from 0 to 512 [ 79.304951][ T8500] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.338584][ T8500] ext4 filesystem being mounted at /495/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.447339][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.503751][ T8531] netlink: 15 bytes leftover after parsing attributes in process `syz.0.2344'. [ 79.567717][ T8539] loop1: detected capacity change from 0 to 1024 [ 79.603253][ T8539] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842c018, mo2=0002] [ 79.641913][ T8539] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.727868][ T8539] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2348: bg 0: block 88: padding at end of block bitmap is not set [ 79.836007][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.907273][ T8569] loop0: detected capacity change from 0 to 512 [ 79.931749][ T8569] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002] [ 79.949625][ T8575] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2364'. [ 79.950609][ T8569] System zones: 1-12 [ 79.962885][ T8569] EXT4-fs error (device loop0): dx_probe:791: inode #2: comm syz.0.2361: Directory hole found for htree index block 0 [ 79.975710][ T8569] EXT4-fs (loop0): Remounting filesystem read-only [ 79.982287][ T8569] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -117 [ 79.990528][ T8569] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 80.001273][ T8569] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.032051][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.242744][ T8595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.262628][ T8595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.359196][ T8604] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2379'. [ 80.440844][ T8612] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2383'. [ 80.735189][ T8654] loop3: detected capacity change from 0 to 512 [ 80.751872][ T8654] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.2403: bad orphan inode 15 [ 80.762454][ T8654] ext4_test_bit(bit=14, block=5) = 0 [ 80.768207][ T8654] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.795079][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.088380][ T8684] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.2416'. [ 81.144305][ T8691] loop2: detected capacity change from 0 to 512 [ 81.152156][ T8691] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 81.201493][ T8691] EXT4-fs (loop2): 1 truncate cleaned up [ 81.207632][ T8691] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.315468][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.410493][ T8708] loop3: detected capacity change from 0 to 512 [ 81.441386][ T8706] loop2: detected capacity change from 0 to 2048 [ 81.462924][ T8706] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.465926][ T8718] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2431'. [ 81.493690][ T8706] ext4 filesystem being mounted at /529/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.507218][ T8708] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 81.521451][ T8708] EXT4-fs (loop3): orphan cleanup on readonly fs [ 81.537517][ T8708] EXT4-fs warning (device loop3): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 81.557468][ T8708] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 81.564951][ T8708] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2427: bg 0: block 40: padding at end of block bitmap is not set [ 81.579719][ T8708] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 81.581784][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.589064][ T8708] EXT4-fs (loop3): 1 truncate cleaned up [ 81.603726][ T8708] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 81.668514][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.708524][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 81.708541][ T29] audit: type=1400 audit(1760939624.863:561): avc: denied { create } for pid=8738 comm="syz.4.2442" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_generic_socket permissive=1 [ 81.758523][ T29] audit: type=1400 audit(1760939624.893:562): avc: denied { write } for pid=8738 comm="syz.4.2442" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_generic_socket permissive=1 [ 81.779563][ T29] audit: type=1400 audit(1760939624.893:563): avc: denied { read } for pid=8738 comm="syz.4.2442" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_generic_socket permissive=1 [ 81.804809][ T8749] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.849514][ T8762] tipc: Enabling of bearer rejected, failed to enable media [ 81.863619][ T8749] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.916622][ T29] audit: type=1400 audit(1760939625.073:564): avc: denied { create } for pid=8772 comm="syz.3.2457" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_xfrm_socket permissive=1 [ 81.954764][ T8749] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.008442][ T8787] loop0: detected capacity change from 0 to 512 [ 82.016231][ T8787] EXT4-fs (loop0): orphan cleanup on readonly fs [ 82.024576][ T8787] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2464: bg 0: block 248: padding at end of block bitmap is not set [ 82.030525][ T8749] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.058660][ T8787] Quota error (device loop0): write_blk: dquota write failed [ 82.066178][ T8787] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 82.076214][ T8787] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.2464: Failed to acquire dquot type 1 [ 82.085559][ T8797] tipc: Invalid UDP bearer configuration [ 82.087446][ T8797] tipc: Enabling of bearer rejected, failed to enable media [ 82.088136][ T8787] EXT4-fs (loop0): 1 truncate cleaned up [ 82.109701][ T8787] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 82.145763][ T29] audit: type=1400 audit(1760939625.303:565): avc: denied { name_bind } for pid=8800 comm="syz.3.2470" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 82.166714][ T8787] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 82.199959][ T68] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.200490][ T8787] EXT4-fs warning (device loop0): read_mmp_block:115: Error -117 while reading MMP block 0 [ 82.227092][ T68] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.240320][ T8807] loop2: detected capacity change from 0 to 128 [ 82.244653][ T68] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.255166][ T68] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.274971][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.463927][ T8845] loop1: detected capacity change from 0 to 512 [ 82.502841][ T8845] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.556348][ T8845] ext4 filesystem being mounted at /441/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.641632][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.715873][ T8875] loop3: detected capacity change from 0 to 4096 [ 82.762054][ T8887] loop4: detected capacity change from 0 to 256 [ 82.772774][ T8887] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 82.866441][ T8902] netlink: 'syz.4.2518': attribute type 3 has an invalid length. [ 82.874357][ T8902] netlink: 'syz.4.2518': attribute type 1 has an invalid length. [ 82.960716][ T8923] lo: entered promiscuous mode [ 82.972909][ T8923] tunl0: entered promiscuous mode [ 82.979770][ T8923] gre0: entered promiscuous mode [ 83.009054][ T8919] loop4: detected capacity change from 0 to 8192 [ 83.015539][ T8923] gretap0: entered promiscuous mode [ 83.022907][ T8923] erspan0: entered promiscuous mode [ 83.032673][ T8923] ip_vti0: entered promiscuous mode [ 83.040037][ T8923] ip6_vti0: entered promiscuous mode [ 83.047629][ T8923] sit0: entered promiscuous mode [ 83.056988][ T8923] ip6tnl0: entered promiscuous mode [ 83.064295][ T8923] ip6gre0: entered promiscuous mode [ 83.086909][ T8923] syz_tun: entered promiscuous mode [ 83.096306][ T8923] ip6gretap0: entered promiscuous mode [ 83.103818][ T8923] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.111193][ T8923] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.118607][ T8923] bridge0: entered promiscuous mode [ 83.125353][ T8923] vcan0: entered promiscuous mode [ 83.131383][ T8923] bond0: entered promiscuous mode [ 83.136445][ T8923] bond_slave_0: entered promiscuous mode [ 83.142281][ T8923] bond_slave_1: entered promiscuous mode [ 83.149691][ T8923] team0: entered promiscuous mode [ 83.154829][ T8923] team_slave_0: entered promiscuous mode [ 83.160596][ T8923] team_slave_1: entered promiscuous mode [ 83.168383][ T8923] dummy0: entered promiscuous mode [ 83.175055][ T8923] nlmon0: entered promiscuous mode [ 83.181607][ T8923] caif0: entered promiscuous mode [ 83.186808][ T8923] batadv0: left allmulticast mode [ 83.192043][ T8923] bridge0: port 3(batadv0) entered disabled state [ 83.199423][ T8923] vxcan0: entered promiscuous mode [ 83.205427][ T8923] vxcan1: entered promiscuous mode [ 83.211261][ T8923] veth0: entered promiscuous mode [ 83.217594][ T8923] veth1: entered promiscuous mode [ 83.225155][ T8923] wg0: entered promiscuous mode [ 83.232584][ T8923] wg1: entered promiscuous mode [ 83.238977][ T8923] wg2: entered promiscuous mode [ 83.244083][ T8939] loop0: detected capacity change from 0 to 512 [ 83.245313][ T8923] veth0_to_bridge: entered promiscuous mode [ 83.259004][ T8923] bridge_slave_0: left allmulticast mode [ 83.264973][ T8923] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.272514][ T8939] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 83.280583][ T8939] EXT4-fs (loop0): orphan cleanup on readonly fs [ 83.280864][ T8923] veth1_to_bridge: entered promiscuous mode [ 83.292282][ T8939] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.2533: corrupted inode contents [ 83.296661][ T8923] bridge_slave_1: left allmulticast mode [ 83.305799][ T8939] EXT4-fs (loop0): Remounting filesystem read-only [ 83.310655][ T8923] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.317738][ T8939] EXT4-fs (loop0): 1 truncate cleaned up [ 83.330057][ T52] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 83.340649][ T52] Quota error (device loop0): write_blk: dquota write failed [ 83.348059][ T52] Quota error (device loop0): remove_free_dqentry: Can't write block (5) with free entries [ 83.358108][ T52] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 83.368628][ T52] Quota error (device loop0): write_blk: dquota write failed [ 83.376319][ T52] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 83.376675][ T8923] veth0_to_bond: entered promiscuous mode [ 83.394417][ T8923] bond0: (slave bond_slave_0): Releasing backup interface [ 83.403031][ T8923] veth1_to_bond: entered promiscuous mode [ 83.411739][ T8923] bond0: (slave bond_slave_1): Releasing backup interface [ 83.420068][ T8923] veth0_to_team: entered promiscuous mode [ 83.429615][ T8923] team0: Port device team_slave_0 removed [ 83.436208][ T8923] veth1_to_team: entered promiscuous mode [ 83.445793][ T8923] team0: Port device team_slave_1 removed [ 83.452753][ T8923] veth0_to_batadv: entered promiscuous mode [ 83.460019][ T8945] netlink: 'syz.0.2535': attribute type 1 has an invalid length. [ 83.460248][ T8923] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.475548][ T8923] batadv_slave_0: entered promiscuous mode [ 83.482629][ T8923] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 83.490759][ T8923] veth1_to_batadv: entered promiscuous mode [ 83.498244][ T8923] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.505830][ T8923] batadv_slave_1: entered promiscuous mode [ 83.512885][ T8923] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.520569][ T8923] xfrm0: entered promiscuous mode [ 83.526774][ T8923] veth0_to_hsr: entered promiscuous mode [ 83.534450][ T8923] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 83.664626][ T8960] syz.1.2542 uses obsolete (PF_INET,SOCK_PACKET) [ 83.672190][ T8958] loop4: detected capacity change from 0 to 512 [ 83.679125][ T8958] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 83.688119][ T8958] EXT4-fs (loop4): invalid journal inode [ 83.694535][ T8958] EXT4-fs (loop4): can't get journal size [ 83.714807][ T8958] EXT4-fs (loop4): 1 truncate cleaned up [ 83.747664][ T8966] __nla_validate_parse: 5 callbacks suppressed [ 83.747682][ T8966] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2544'. [ 83.763069][ T8966] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2544'. [ 83.944295][ T8996] netlink: 399 bytes leftover after parsing attributes in process `syz.3.2557'. [ 83.990657][ T9004] loop0: detected capacity change from 0 to 512 [ 83.998431][ T9004] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 84.017311][ T9004] EXT4-fs (loop0): orphan cleanup on readonly fs [ 84.025147][ T9004] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2560: bg 0: block 248: padding at end of block bitmap is not set [ 84.042880][ T9004] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.2560: Failed to acquire dquot type 1 [ 84.054832][ T9004] EXT4-fs (loop0): 1 truncate cleaned up [ 84.325151][ T9055] vhci_hcd: invalid port number 255 [ 84.389867][ T9071] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2588'. [ 84.398922][ T9071] tc_dump_action: action bad kind [ 84.748206][ T9103] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2604'. [ 84.757740][ T9103] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2604'. [ 84.766754][ T9103] tipc: Cannot configure node identity twice [ 84.772923][ T9103] tipc: Cannot configure node identity twice [ 84.933777][ T9127] vlan4: entered promiscuous mode [ 84.938876][ T9127] macvtap0: entered promiscuous mode [ 85.049470][ T9147] netlink: 'syz.0.2625': attribute type 21 has an invalid length. [ 85.057452][ T9147] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2625'. [ 85.067397][ T9147] netlink: 'syz.0.2625': attribute type 4 has an invalid length. [ 85.075262][ T9147] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2625'. [ 85.167429][ T9149] loop1: detected capacity change from 0 to 8192 [ 85.185712][ T9162] loop3: detected capacity change from 0 to 1764 [ 85.264236][ T9178] loop1: detected capacity change from 0 to 512 [ 85.271500][ T9178] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 85.285621][ T9178] EXT4-fs (loop1): 1 truncate cleaned up [ 85.315381][ T9187] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 85.367777][ T9196] loop4: detected capacity change from 0 to 512 [ 85.385390][ T9196] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 85.392187][ T9199] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2650'. [ 85.393864][ T9196] EXT4-fs (loop4): orphan cleanup on readonly fs [ 85.427998][ T9204] lo: entered promiscuous mode [ 85.433943][ T9196] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 85.445495][ T9196] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 85.455619][ T9196] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.2648: Corrupt directory, running e2fsck is recommended [ 85.482851][ T9204] tunl0: entered promiscuous mode [ 85.498767][ T9204] gre0: entered promiscuous mode [ 85.506615][ T9210] usb usb8: usbfs: process 9210 (syz.0.2654) did not claim interface 0 before use [ 85.519183][ T9196] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 85.530471][ T9204] gretap0: entered promiscuous mode [ 85.537370][ T9196] EXT4-fs error (device loop4): ext4_iget_extra_inode:5075: inode #15: comm syz.4.2648: corrupted in-inode xattr: invalid ea_ino [ 85.551236][ T9196] EXT4-fs (loop4): Remounting filesystem read-only [ 85.560134][ T9204] erspan0: entered promiscuous mode [ 85.571455][ T9204] ip_vti0: entered promiscuous mode [ 85.577365][ T9196] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 85.583317][ T9204] ip6_vti0: entered promiscuous mode [ 85.588926][ T9196] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 85.604448][ T9196] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.2648: Corrupt directory, running e2fsck is recommended [ 85.617736][ T9204] sit0: entered promiscuous mode [ 85.627219][ T9204] ip6tnl0: entered promiscuous mode [ 85.639230][ T9204] ip6gre0: entered promiscuous mode [ 85.671502][ T9204] syz_tun: entered promiscuous mode [ 85.686421][ T9204] ip6gretap0: entered promiscuous mode [ 85.697437][ T9204] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.704712][ T9204] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.712221][ T9204] bridge0: entered promiscuous mode [ 85.722678][ T9204] vcan0: entered promiscuous mode [ 85.736714][ T9204] bond0: entered promiscuous mode [ 85.742185][ T9204] bond_slave_0: entered promiscuous mode [ 85.748082][ T9204] bond_slave_1: entered promiscuous mode [ 85.757332][ T9232] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2666'. [ 85.757777][ T9204] team0: entered promiscuous mode [ 85.771467][ T9204] team_slave_0: entered promiscuous mode [ 85.777291][ T9204] team_slave_1: entered promiscuous mode [ 85.785563][ T9204] dummy0: entered promiscuous mode [ 85.796290][ T9204] nlmon0: entered promiscuous mode [ 85.809838][ T9204] caif0: entered promiscuous mode [ 85.820920][ T9204] batadv0: left allmulticast mode [ 85.826215][ T9204] bridge0: port 3(batadv0) entered disabled state [ 85.836710][ T9204] vxcan0: entered promiscuous mode [ 85.847116][ T9204] vxcan1: entered promiscuous mode [ 85.851138][ C1] hrtimer: interrupt took 37667 ns [ 85.855824][ T9204] veth0: entered promiscuous mode [ 85.864201][ T9204] veth1: entered promiscuous mode [ 85.872904][ T9204] wg0: entered promiscuous mode [ 85.880832][ T9204] wg1: entered promiscuous mode [ 85.887526][ T9204] wg2: entered promiscuous mode [ 85.893872][ T9204] veth0_to_bridge: entered promiscuous mode [ 85.903408][ T9204] bridge_slave_0: left allmulticast mode [ 85.909226][ T9204] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.920745][ T9204] veth1_to_bridge: entered promiscuous mode [ 85.930412][ T9204] bridge_slave_1: left allmulticast mode [ 85.936207][ T9204] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.946036][ T9204] veth0_to_bond: entered promiscuous mode [ 85.962310][ T9204] bond0: (slave bond_slave_0): Releasing backup interface [ 85.987378][ T9204] bond_slave_0: left allmulticast mode [ 85.994278][ T9204] veth1_to_bond: entered promiscuous mode [ 86.003190][ T9204] bond0: (slave bond_slave_1): Releasing backup interface [ 86.012032][ T9204] bond_slave_1: left allmulticast mode [ 86.018073][ T9204] veth0_to_team: entered promiscuous mode [ 86.027460][ T9204] team0: Port device team_slave_0 removed [ 86.036144][ T9204] veth1_to_team: entered promiscuous mode [ 86.045369][ T9204] team0: Port device team_slave_1 removed [ 86.051574][ T9204] veth0_to_batadv: entered promiscuous mode [ 86.060659][ T9204] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.068451][ T9204] batadv_slave_0: entered promiscuous mode [ 86.076097][ T9204] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.084310][ T9204] veth1_to_batadv: entered promiscuous mode [ 86.088690][ T9250] loop3: detected capacity change from 0 to 512 [ 86.092007][ T9204] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.098309][ T9250] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 86.104493][ T9204] batadv_slave_1: entered promiscuous mode [ 86.112306][ T9250] EXT4-fs (loop3): orphan cleanup on readonly fs [ 86.119454][ T9204] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.124737][ T9250] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 86.142949][ T9250] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 86.153049][ T9250] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.2675: Corrupt directory, running e2fsck is recommended [ 86.166103][ T9250] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 86.166450][ T9204] xfrm0: entered promiscuous mode [ 86.174661][ T9250] EXT4-fs error (device loop3): ext4_iget_extra_inode:5075: inode #15: comm syz.3.2675: corrupted in-inode xattr: invalid ea_ino [ 86.181449][ T9204] veth0_to_hsr: entered promiscuous mode [ 86.194266][ T9250] EXT4-fs (loop3): Remounting filesystem read-only [ 86.200795][ T9204] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 86.231302][ T9246] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 86.240824][ T9250] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 86.252424][ T9250] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 86.262555][ T9250] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.2675: Corrupt directory, running e2fsck is recommended [ 86.291013][ T9256] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.321949][ T9259] loop2: detected capacity change from 0 to 512 [ 86.332805][ T9259] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.2678: bad orphan inode 11862016 [ 86.348528][ T9259] ext4 filesystem being mounted at /565/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.371779][ T9256] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.432991][ T9256] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.473289][ T9256] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.473765][ T9277] tipc: Can't bind to reserved service type 1 [ 86.539846][ T31] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.548845][ T31] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.557446][ T31] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.565986][ T31] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.589410][ T9288] loop3: detected capacity change from 0 to 512 [ 86.600995][ T9288] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 86.632909][ T9288] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.2693: invalid indirect mapped block 2683928664 (level 1) [ 86.655930][ T9288] EXT4-fs (loop3): 1 truncate cleaned up [ 86.864252][ T9336] netlink: 'syz.3.2714': attribute type 101 has an invalid length. [ 86.872236][ T9336] netlink: 'syz.3.2714': attribute type 7 has an invalid length. [ 87.095808][ T9374] loop0: detected capacity change from 0 to 512 [ 87.126366][ T9374] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.2732: bad orphan inode 11862016 [ 87.138672][ T9374] ext4 filesystem being mounted at /576/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.211054][ T9396] lo: entered promiscuous mode [ 87.220356][ T9396] tunl0: entered promiscuous mode [ 87.227790][ T9396] gre0: entered promiscuous mode [ 87.239610][ T9396] gretap0: entered promiscuous mode [ 87.246978][ T9396] erspan0: entered promiscuous mode [ 87.254696][ T9396] ip_vti0: entered promiscuous mode [ 87.261644][ T9396] ip6_vti0: entered promiscuous mode [ 87.269266][ T9396] sit0: entered promiscuous mode [ 87.278665][ T9396] ip6tnl0: entered promiscuous mode [ 87.292145][ T9396] ip6gre0: entered promiscuous mode [ 87.305872][ T9396] syz_tun: entered promiscuous mode [ 87.313193][ T9396] ip6gretap0: entered promiscuous mode [ 87.320391][ T9396] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.327697][ T9396] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.335266][ T9396] bridge0: entered promiscuous mode [ 87.342350][ T9396] vcan0: entered promiscuous mode [ 87.348464][ T9396] bond0: entered promiscuous mode [ 87.353610][ T9396] bond_slave_0: entered promiscuous mode [ 87.359377][ T9396] bond_slave_1: entered promiscuous mode [ 87.367385][ T9396] team0: entered promiscuous mode [ 87.372517][ T9396] team_slave_0: entered promiscuous mode [ 87.378321][ T9396] team_slave_1: entered promiscuous mode [ 87.385848][ T9396] dummy0: entered promiscuous mode [ 87.392632][ T9396] nlmon0: entered promiscuous mode [ 87.398989][ T9396] caif0: entered promiscuous mode [ 87.404269][ T9396] batadv0: left allmulticast mode [ 87.409550][ T9396] vxcan0: entered promiscuous mode [ 87.415604][ T9396] vxcan1: entered promiscuous mode [ 87.421855][ T9396] veth0: entered promiscuous mode [ 87.428197][ T9396] veth1: entered promiscuous mode [ 87.435074][ T9396] wg0: entered promiscuous mode [ 87.441284][ T9396] wg1: entered promiscuous mode [ 87.447543][ T9396] wg2: entered promiscuous mode [ 87.453421][ T9396] veth0_to_bridge: entered promiscuous mode [ 87.462191][ T9396] bridge_slave_0: left allmulticast mode [ 87.467970][ T9396] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.476246][ T9396] veth1_to_bridge: entered promiscuous mode [ 87.484592][ T9396] bridge_slave_1: left allmulticast mode [ 87.490321][ T9396] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.498640][ T9396] veth0_to_bond: entered promiscuous mode [ 87.507491][ T9396] bond0: (slave bond_slave_0): Releasing backup interface [ 87.515357][ T9396] bond_slave_0: left allmulticast mode [ 87.521223][ T9396] veth1_to_bond: entered promiscuous mode [ 87.529645][ T9396] bond0: (slave bond_slave_1): Releasing backup interface [ 87.538354][ T9396] bond_slave_1: left allmulticast mode [ 87.544395][ T9396] veth0_to_team: entered promiscuous mode [ 87.553275][ T9396] team0: Port device team_slave_0 removed [ 87.559323][ T9396] veth1_to_team: entered promiscuous mode [ 87.568111][ T9396] team0: Port device team_slave_1 removed [ 87.574028][ T9396] veth0_to_batadv: entered promiscuous mode [ 87.581310][ T9396] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.588820][ T9396] batadv_slave_0: entered promiscuous mode [ 87.596207][ T9396] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.604108][ T9396] veth1_to_batadv: entered promiscuous mode [ 87.611493][ T9396] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.619012][ T9396] batadv_slave_1: entered promiscuous mode [ 87.626163][ T9396] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.634077][ T9396] xfrm0: entered promiscuous mode [ 87.640195][ T9396] veth0_to_hsr: entered promiscuous mode [ 87.647946][ T9396] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 87.750244][ T9425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.759888][ T9425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.835956][ T9431] loop4: detected capacity change from 0 to 2048 [ 87.861622][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 87.861662][ T29] audit: type=1400 audit(1760939631.023:597): avc: denied { mount } for pid=9432 comm="syz.0.2757" name="/" dev="rpc_pipefs" ino=24151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 87.915871][ T9431] loop4: p2 p3 p7 [ 88.069582][ T9456] loop4: detected capacity change from 0 to 128 [ 88.152110][ T9468] loop2: detected capacity change from 0 to 2048 [ 88.203819][ T9468] Alternate GPT is invalid, using primary GPT. [ 88.210152][ T9468] loop2: p2 p3 p7 [ 88.213562][ T29] audit: type=1326 audit(1760939631.363:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9481 comm="syz.1.2788" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f92bad1efc9 code=0x0 [ 88.352169][ T9499] loop3: detected capacity change from 0 to 128 [ 88.392461][ T9503] ------------[ cut here ]------------ [ 88.397633][ T9507] syz_tun: entered promiscuous mode [ 88.397982][ T9503] verifier bug: REG INVARIANTS VIOLATION (true_reg2): range bounds violation u64=[0x0, 0x7800000000] s64=[0x0, 0xffffffffffffffff] u32=[0x80000000, 0x0] s32=[0x0, 0xffffffff] var_off=(0x0, 0x7800000000) [ 88.403788][ T9507] macvtap1: entered promiscuous mode [ 88.423155][ T9503] WARNING: CPU: 0 PID: 9503 at kernel/bpf/verifier.c:2721 reg_bounds_sanity_check+0x673/0x680 [ 88.438860][ T9503] Modules linked in: [ 88.443035][ T9503] CPU: 0 UID: 0 PID: 9503 Comm: syz.2.2787 Not tainted syzkaller #0 PREEMPT(voluntary) [ 88.452907][ T9503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 88.463074][ T9503] RIP: 0010:reg_bounds_sanity_check+0x673/0x680 [ 88.469382][ T9503] Code: 7c 24 18 41 ff 74 24 20 55 41 56 4d 89 ee 53 48 8b 5c 24 30 ff 74 24 40 ff 74 24 50 ff 74 24 30 e8 92 00 bb ff 48 83 c4 38 90 <0f> 0b 90 90 e9 02 fb ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 [ 88.489048][ T9503] RSP: 0018:ffffc9001280f408 EFLAGS: 00010282 [ 88.495177][ T9503] RAX: 9d650adfc7380000 RBX: ffff888119f19040 RCX: 0000000000080000 [ 88.503515][ T9503] RDX: ffffc900033fd000 RSI: 00000000000223ae RDI: 00000000000223af [ 88.511568][ T9503] RBP: 0000000000000000 R08: 0001ffff86a242ff R09: 0000000000000000 [ 88.519596][ T9503] R10: ffffffff88e709f8 R11: ffffffff82229580 R12: ffff888119f19000 [ 88.527607][ T9503] R13: ffff8881098f0000 R14: ffff8881098f0000 R15: ffff888119f19038 [ 88.535660][ T9503] FS: 00007f61f2b0f6c0(0000) GS:ffff8882aee39000(0000) knlGS:0000000000000000 [ 88.544674][ T9503] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 88.551346][ T9503] CR2: 0000001b33f1bff8 CR3: 000000011be22000 CR4: 00000000003506f0 [ 88.559382][ T9503] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 88.567397][ T9503] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 88.575567][ T9503] Call Trace: [ 88.578914][ T9503] [ 88.581991][ T9503] reg_set_min_max+0x1eb/0x260 [ 88.586774][ T9503] check_cond_jmp_op+0x1370/0x19e0 [ 88.591958][ T9503] do_check+0x3363/0x8460 [ 88.596422][ T9503] do_check_common+0xc5e/0x12b0 [ 88.601409][ T9503] bpf_check+0xaaae/0xd9d0 [ 88.605858][ T9503] ? __alloc_frozen_pages_noprof+0x188/0x360 [ 88.611897][ T9503] ? __vmap_pages_range_noflush+0xbc4/0xcf0 [ 88.617839][ T9503] ? try_charge_memcg+0x215/0xa10 [ 88.622893][ T9503] ? _find_next_zero_bit+0x64/0xa0 [ 88.628035][ T9503] ? pcpu_block_update_hint_alloc+0x63d/0x660 [ 88.634129][ T9503] ? pcpu_block_update_hint_alloc+0x63d/0x660 [ 88.640228][ T9503] ? css_rstat_updated+0xb7/0x240 [ 88.645378][ T9503] ? __rcu_read_unlock+0x4f/0x70 [ 88.650542][ T9503] ? pcpu_memcg_post_alloc_hook+0xf1/0x150 [ 88.656439][ T9503] ? bpf_prog_alloc+0x5b/0x150 [ 88.661249][ T9503] ? pcpu_alloc_noprof+0xd29/0x1250 [ 88.666523][ T9503] ? should_fail_ex+0x30/0x280 [ 88.671367][ T9503] ? should_failslab+0x8c/0xb0 [ 88.676172][ T9503] ? __kmalloc_noprof+0x2a2/0x570 [ 88.681456][ T9503] ? security_bpf_prog_load+0x60/0x140 [ 88.687069][ T9503] ? selinux_bpf_prog_load+0xad/0xd0 [ 88.692405][ T9503] ? security_bpf_prog_load+0x9e/0x140 [ 88.698061][ T9503] bpf_prog_load+0xf6e/0x1100 [ 88.702805][ T9503] ? security_bpf+0x2b/0x90 [ 88.707350][ T9503] __sys_bpf+0x469/0x7c0 [ 88.711671][ T9503] __x64_sys_bpf+0x41/0x50 [ 88.716111][ T9503] x64_sys_call+0x2aee/0x3000 [ 88.720917][ T9503] do_syscall_64+0xd2/0x200 [ 88.725449][ T9503] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 88.731549][ T9503] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 88.737303][ T9503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.743343][ T9503] RIP: 0033:0x7f61f40aefc9 [ 88.747797][ T9503] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.767447][ T9503] RSP: 002b:00007f61f2b0f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 88.775956][ T9503] RAX: ffffffffffffffda RBX: 00007f61f4305fa0 RCX: 00007f61f40aefc9 [ 88.783943][ T9503] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 88.791932][ T9503] RBP: 00007f61f4131f91 R08: 0000000000000000 R09: 0000000000000000 [ 88.799952][ T9503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 88.807988][ T9503] R13: 00007f61f4306038 R14: 00007f61f4305fa0 R15: 00007fff0cd54f08 [ 88.816002][ T9503] [ 88.819026][ T9503] ---[ end trace 0000000000000000 ]--- [ 88.825629][ T9507] syz_tun: left promiscuous mode [ 88.885470][ T9515] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=9515 comm=syz.3.2794 [ 88.946925][ T9519] __nla_validate_parse: 3 callbacks suppressed [ 88.946941][ T9519] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.2796'. [ 88.962704][ T9519] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 88.971189][ T9519] openvswitch: netlink: Message has 1 unknown bytes. [ 88.980796][ T9523] loop2: detected capacity change from 0 to 512 [ 88.990147][ T9525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.998938][ T9523] EXT4-fs: Ignoring removed orlov option [ 89.001382][ T9525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.005567][ T9523] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 89.022183][ T9523] EXT4-fs error (device loop2): ext4_iget_extra_inode:5075: inode #15: comm syz.2.2799: corrupted in-inode xattr: e_value size too large [ 89.036802][ T9523] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.2799: couldn't read orphan inode 15 (err -117) [ 89.165126][ T9548] tmpfs: Unknown parameter 'defcontext' [ 89.170920][ T29] audit: type=1400 audit(1760939632.323:599): avc: denied { mounton } for pid=9547 comm="syz.4.2809" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 89.319521][ T9574] macsec1: entered promiscuous mode [ 89.387926][ T9589] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2828'. [ 89.409895][ T9589] netlink: 7 bytes leftover after parsing attributes in process `syz.2.2828'. [ 89.450976][ T29] audit: type=1400 audit(1760939632.603:600): avc: denied { create } for pid=9592 comm="syz.0.2832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 89.503249][ T29] audit: type=1400 audit(1760939632.633:601): avc: denied { listen } for pid=9592 comm="syz.0.2832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 89.522692][ T29] audit: type=1400 audit(1760939632.633:602): avc: denied { ioctl } for pid=9592 comm="syz.0.2832" path="socket:[24404]" dev="sockfs" ino=24404 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 89.668675][ T9621] loop0: detected capacity change from 0 to 128 [ 89.812124][ T29] audit: type=1326 audit(1760939632.973:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9631 comm="syz.0.2850" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f94abdbefc9 code=0x0 [ 89.871511][ T9648] loop3: detected capacity change from 0 to 128 [ 90.014023][ T9669] macvtap1: entered promiscuous mode [ 90.087119][ T9677] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2871'. [ 90.088576][ T9678] usb usb1: check_ctrlrecip: process 9678 (syz.3.2872) requesting ep 01 but needs 81 [ 90.105599][ T9678] usb usb1: usbfs: process 9678 (syz.3.2872) did not claim interface 0 before use [ 90.117200][ T9677] hsr_slave_1 (unregistering): left promiscuous mode [ 90.183656][ T9688] netlink: 'syz.3.2877': attribute type 1 has an invalid length. [ 90.211764][ T9690] loop3: detected capacity change from 0 to 128 [ 90.221042][ T9690] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 90.231229][ T9690] FAT-fs (loop3): Filesystem has been set read-only [ 90.237983][ T9690] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 90.248166][ T9690] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 90.258337][ T9690] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 90.268444][ T9690] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 90.278581][ T9690] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 90.288681][ T9690] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 90.298801][ T9690] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 90.308953][ T9690] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 90.319232][ T9690] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 90.422916][ T9700] netlink: 160 bytes leftover after parsing attributes in process `syz.1.2883'. [ 90.432279][ T9700] netlink: set zone limit has 8 unknown bytes [ 90.480320][ T29] audit: type=1400 audit(1760939633.633:604): avc: denied { ioctl } for pid=9705 comm="syz.4.2886" path="socket:[25455]" dev="sockfs" ino=25455 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 90.484224][ T9708] 9p: Unknown Cache mode or invalid value f [ 90.564767][ T9717] loop1: detected capacity change from 0 to 512 [ 90.565233][ T9717] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 90.583123][ T9717] EXT4-fs (loop1): 1 truncate cleaned up [ 90.623061][ T9721] sctp: [Deprecated]: syz.1.2892 (pid 9721) Use of int in max_burst socket option. [ 90.623061][ T9721] Use struct sctp_assoc_value instead [ 90.649494][ T9723] SELinux: Context system_u:object_r:syslogd_var_lib_t:s0 is not valid (left unmapped). [ 90.663201][ T29] audit: type=1400 audit(1760939633.803:605): avc: denied { mount } for pid=9722 comm="syz.3.2894" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 90.685401][ T29] audit: type=1400 audit(1760939633.813:606): avc: denied { relabelto } for pid=9722 comm="syz.3.2894" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:syslogd_var_lib_t:s0" [ 90.852734][ T9758] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2908'. [ 90.856296][ T9755] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 90.861831][ T9758] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2908'. [ 90.878857][ T9760] lo: entered promiscuous mode [ 90.894628][ T9760] tunl0: entered promiscuous mode [ 90.894839][ T9762] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2912'. [ 90.901937][ T9760] gre0: entered promiscuous mode [ 90.924274][ T9760] gretap0: entered promiscuous mode [ 90.935464][ T9760] erspan0: entered promiscuous mode [ 90.944886][ T9760] ip_vti0: entered promiscuous mode [ 90.951900][ T9760] ip6_vti0: entered promiscuous mode [ 90.959457][ T9760] sit0: entered promiscuous mode [ 90.970391][ T9760] ip6tnl0: entered promiscuous mode [ 90.976241][ T9768] netlink: 'syz.3.2915': attribute type 1 has an invalid length. [ 90.978013][ T9760] ip6gre0: entered promiscuous mode [ 90.993070][ T9760] syz_tun: entered promiscuous mode [ 91.002429][ T9774] loop2: detected capacity change from 0 to 128 [ 91.015433][ T9774] ext4 filesystem being mounted at /613/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.026107][ T9760] ip6gretap0: entered promiscuous mode [ 91.037335][ T9760] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.044614][ T9760] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.052282][ T9760] bridge0: entered promiscuous mode [ 91.059730][ T9760] vcan0: entered promiscuous mode [ 91.066401][ T9760] bond0: entered promiscuous mode [ 91.071573][ T9760] bond_slave_0: entered promiscuous mode [ 91.077606][ T9760] bond_slave_1: entered promiscuous mode [ 91.086709][ T9760] team0: entered promiscuous mode [ 91.091795][ T9760] team_slave_0: entered promiscuous mode [ 91.097604][ T9760] team_slave_1: entered promiscuous mode [ 91.108489][ T9760] dummy0: entered promiscuous mode [ 91.115487][ T9760] nlmon0: entered promiscuous mode [ 91.122236][ T9760] caif0: entered promiscuous mode [ 91.127512][ T9760] batadv0: entered promiscuous mode [ 91.134422][ T9760] vxcan0: entered promiscuous mode [ 91.140588][ T9760] vxcan1: entered promiscuous mode [ 91.146738][ T9760] veth0: entered promiscuous mode [ 91.154008][ T9760] veth1: entered promiscuous mode [ 91.161077][ T9760] wg0: entered promiscuous mode [ 91.167684][ T9760] wg1: entered promiscuous mode [ 91.174308][ T9760] wg2: entered promiscuous mode [ 91.180441][ T9760] veth0_to_bridge: entered promiscuous mode [ 91.189523][ T9760] bridge_slave_0: left allmulticast mode [ 91.195362][ T9760] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.203592][ T9760] veth1_to_bridge: entered promiscuous mode [ 91.213401][ T9760] bridge_slave_1: left allmulticast mode [ 91.219152][ T9760] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.227296][ T9760] veth0_to_bond: entered promiscuous mode [ 91.235933][ T9760] bond0: (slave bond_slave_0): Releasing backup interface [ 91.243715][ T9760] veth1_to_bond: entered promiscuous mode [ 91.252212][ T9760] bond0: (slave bond_slave_1): Releasing backup interface [ 91.260147][ T9760] veth0_to_team: entered promiscuous mode [ 91.269864][ T9760] team0: Port device team_slave_0 removed [ 91.276494][ T9760] veth1_to_team: entered promiscuous mode [ 91.285892][ T9760] team0: Port device team_slave_1 removed [ 91.292504][ T9760] veth0_to_batadv: entered promiscuous mode [ 91.300055][ T9760] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.307593][ T9760] batadv_slave_0: entered promiscuous mode [ 91.315348][ T9760] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 91.323088][ T9760] veth1_to_batadv: entered promiscuous mode [ 91.330632][ T9760] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.338233][ T9760] batadv_slave_1: entered promiscuous mode [ 91.345722][ T9760] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 91.353418][ T9760] xfrm0: entered promiscuous mode [ 91.359646][ T9760] veth0_to_hsr: entered promiscuous mode [ 91.367897][ T9760] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 91.389359][ T9785] veth0_to_bond: left promiscuous mode [ 91.395026][ T9785] veth0_to_bond: entered allmulticast mode [ 91.489325][ T9801] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 91.632672][ T9819] loop1: detected capacity change from 0 to 512 [ 91.654374][ T9819] ext4 filesystem being mounted at /533/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.874027][ T9859] vhci_hcd: invalid port number 65 [ 91.879234][ T9859] vhci_hcd: invalid port number 65 [ 91.912689][ T9865] loop1: detected capacity change from 0 to 512 [ 91.919633][ T9867] tipc: MTU too low for tipc bearer [ 91.928762][ T9864] loop4: detected capacity change from 0 to 2048 [ 91.945170][ T9865] ext4 filesystem being mounted at /540/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.948506][ T9872] sctp: [Deprecated]: syz.2.2961 (pid 9872) Use of int in max_burst socket option. [ 91.948506][ T9872] Use struct sctp_assoc_value instead [ 91.962032][ T9865] EXT4-fs warning (device loop1): verify_group_input:137: Cannot add at group 512 (only 1 groups) [ 91.985430][ T9864] ext4 filesystem being mounted at /612/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.223759][ T9893] loop2: detected capacity change from 0 to 512 [ 92.254323][ T9893] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 92.268564][ T9893] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #13: comm syz.2.2970: iget: bad i_size value: 12154757448730 [ 92.317246][ T9893] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.2970: couldn't read orphan inode 13 (err -117) [ 92.319938][ T37] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:2: bg 0: block 345: padding at end of block bitmap is not set [ 92.342864][ T9900] sctp: [Deprecated]: syz.3.2974 (pid 9900) Use of int in max_burst socket option. [ 92.342864][ T9900] Use struct sctp_assoc_value instead [ 92.344374][ T37] EXT4-fs (loop4): Remounting filesystem read-only [ 92.368206][ T9893] EXT4-fs warning (device loop2): ext4_lookup:1799: Inconsistent encryption contexts: 2/12 [ 92.390958][ T9893] EXT4-fs warning (device loop2): ext4_lookup:1799: Inconsistent encryption contexts: 2/12 [ 92.429611][ T9904] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2976'. [ 92.432673][ T9902] loop0: detected capacity change from 0 to 128 [ 92.456103][ T9907] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 92.466195][ T9902] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 92.533588][ T9919] loop1: detected capacity change from 0 to 512 [ 92.545357][ T9921] loop3: detected capacity change from 0 to 128 [ 92.571512][ T9921] ext4 filesystem being mounted at /569/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.585018][ T9919] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.2982: bad orphan inode 11862016 [ 92.602709][ T9919] ext4 filesystem being mounted at /543/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.603387][ T9931] loop4: detected capacity change from 0 to 256 [ 92.621390][ T9931] FAT-fs (loop4): Directory bread(block 1285) failed [ 92.628117][ T9931] FAT-fs (loop4): Directory bread(block 1286) failed [ 92.641055][ T9931] FAT-fs (loop4): Directory bread(block 1287) failed [ 92.648057][ T9931] FAT-fs (loop4): Directory bread(block 1288) failed [ 92.656741][ T9931] FAT-fs (loop4): Directory bread(block 1285) failed [ 92.663558][ T9931] FAT-fs (loop4): Directory bread(block 1286) failed [ 92.670533][ T9931] FAT-fs (loop4): Directory bread(block 1287) failed [ 92.677316][ T9931] FAT-fs (loop4): Directory bread(block 1288) failed [ 92.684405][ T9931] FAT-fs (loop4): FAT read failed (blocknr 1281) [ 92.691412][ T9931] FAT-fs (loop4): Directory bread(block 1285) failed [ 92.777968][ T9949] loop2: detected capacity change from 0 to 512 [ 92.807995][ T9949] EXT4-fs: Ignoring removed mblk_io_submit option [ 92.821265][ T9949] EXT4-fs: Ignoring removed nomblk_io_submit option [ 92.838566][ T9949] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 92.847104][ T9949] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 92.878107][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 92.878126][ T29] audit: type=1400 audit(1760939636.033:631): avc: denied { accept } for pid=9967 comm="syz.3.3004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 92.912526][ T9949] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.2996: Allocating blocks 41-42 which overlap fs metadata [ 92.927337][ T9949] Quota error (device loop2): write_blk: dquota write failed [ 92.934827][ T9949] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5 [ 92.944185][ T9949] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.2996: Allocating blocks 41-42 which overlap fs metadata [ 92.958403][ T9949] Quota error (device loop2): write_blk: dquota write failed [ 92.966041][ T9949] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 92.976231][ T9949] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.2996: Failed to acquire dquot type 1 [ 92.987803][ T9949] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 93.003079][ T9949] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #12: comm syz.2.2996: corrupted inode contents [ 93.015597][ T9949] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #12: comm syz.2.2996: mark_inode_dirty error [ 93.018591][ T9983] SELinux: Context system_u:object_r:netutils_exec_t:s0 is not valid (left unmapped). [ 93.027525][ T9949] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #12: comm syz.2.2996: corrupted inode contents [ 93.037657][ T29] audit: type=1400 audit(1760939636.193:632): avc: denied { relabelto } for pid=9982 comm="syz.4.3007" name="cgroup.procs" dev="cgroup" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:netutils_exec_t:s0" [ 93.075933][ T29] audit: type=1400 audit(1760939636.193:633): avc: denied { associate } for pid=9982 comm="syz.4.3007" name="cgroup.procs" dev="cgroup" ino=249 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:netutils_exec_t:s0" [ 93.075945][ T9949] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #12: comm syz.2.2996: mark_inode_dirty error [ 93.076135][ T9949] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #12: comm syz.2.2996: corrupted inode contents [ 93.132135][ T9949] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem [ 93.140890][ T9949] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #12: comm syz.2.2996: corrupted inode contents [ 93.153479][ T9949] EXT4-fs error (device loop2): ext4_truncate:4637: inode #12: comm syz.2.2996: mark_inode_dirty error [ 93.165041][ T9949] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem [ 93.174869][ T9949] EXT4-fs (loop2): 1 truncate cleaned up [ 93.223923][ T9995] netlink: 648 bytes leftover after parsing attributes in process `syz.2.3012'. [ 93.275079][T10003] loop2: detected capacity change from 0 to 1024 [ 93.293905][ T29] audit: type=1400 audit(1760939636.453:634): avc: denied { create } for pid=10006 comm="syz.4.3019" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 93.333566][ T29] audit: type=1400 audit(1760939636.493:635): avc: denied { unlink } for pid=3321 comm="syz-executor" name="file0" dev="tmpfs" ino=3203 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 93.401190][ T29] audit: type=1400 audit(1760939636.553:636): avc: denied { mount } for pid=10017 comm="syz.4.3024" name="/" dev="bdev" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bdev_t tclass=filesystem permissive=1 [ 93.497792][T10030] loop1: detected capacity change from 0 to 1024 [ 93.513886][T10030] EXT4-fs: Ignoring removed nomblk_io_submit option [ 93.523547][T10030] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 93.543721][T10030] System zones: 0-1, 3-36 [ 93.595435][T10049] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 93.662089][T10060] loop1: detected capacity change from 0 to 128 [ 93.669192][T10060] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 93.752133][T10074] sch_fq: defrate 4294967295 ignored. [ 93.784005][T10083] loop1: detected capacity change from 0 to 512 [ 93.827280][T10083] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.3054: inode has both inline data and extents flags [ 93.845205][T10083] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.3054: couldn't read orphan inode 15 (err -117) [ 93.863494][T10098] netlink: 'syz.4.3061': attribute type 5 has an invalid length. [ 93.950927][T10110] loop3: detected capacity change from 0 to 512 [ 93.962878][T10116] __nla_validate_parse: 1 callbacks suppressed [ 93.962960][T10116] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3070'. [ 93.983906][T10110] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 94.021573][T10110] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.3069: Failed to acquire dquot type 1 [ 94.047064][T10128] loop4: detected capacity change from 0 to 512 [ 94.069686][T10110] EXT4-fs (loop3): 1 truncate cleaned up [ 94.087838][T10128] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.3078: bad orphan inode 11862016 [ 94.110008][T10128] ext4 filesystem being mounted at /643/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.150071][T10146] loop3: detected capacity change from 0 to 512 [ 94.157482][T10146] EXT4-fs: Ignoring removed i_version option [ 94.163679][T10146] EXT4-fs: Ignoring removed bh option [ 94.195002][T10146] ext4 filesystem being mounted at /580/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 94.316952][T10166] loop0: detected capacity change from 0 to 256 [ 94.453492][T10185] vlan3: entered allmulticast mode [ 94.458695][T10185] bridge_slave_0: entered allmulticast mode [ 94.482545][T10191] loop0: detected capacity change from 0 to 512 [ 94.513601][T10191] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.3103: bad orphan inode 11862016 [ 94.546461][T10191] ext4 filesystem being mounted at /641/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.567126][T10205] program syz.2.3111 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 94.703101][T10223] loop4: detected capacity change from 0 to 512 [ 94.715623][T10223] ext4 filesystem being mounted at /651/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 94.837236][T10238] loop4: detected capacity change from 0 to 8192 [ 94.893245][T10256] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3134'. [ 94.945130][T10266] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 94.952648][T10266] vhci_hcd: invalid port number 96 [ 94.957791][T10266] vhci_hcd: default hub control req: 0311 v0005 i0060 l7 [ 95.004228][T10276] loop1: detected capacity change from 0 to 128 [ 95.011089][T10276] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 95.033053][T10276] EXT4-fs error (device loop1): htree_dirblock_to_tree:1051: inode #2: comm syz.1.3143: Directory block failed checksum [ 95.148259][T10294] loop4: detected capacity change from 0 to 512 [ 95.155205][T10294] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 95.167251][T10294] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 95.168389][T10296] vhci_hcd: invalid port number 65 [ 95.180463][T10296] vhci_hcd: invalid port number 65 [ 95.196692][T10294] EXT4-fs (loop4): orphan cleanup on readonly fs [ 95.203193][T10294] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.3151: bad orphan inode 267 [ 95.215718][T10294] EXT4-fs (loop4): Remounting filesystem read-only [ 95.225408][T10294] EXT4-fs warning (device loop4): dx_probe:861: inode #2: comm syz.4.3151: dx entry: limit 0 != root limit 125 [ 95.237193][T10294] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.3151: Corrupt directory, running e2fsck is recommended [ 95.310254][T10310] dvmrp1: entered allmulticast mode [ 95.791290][T10354] loop0: detected capacity change from 0 to 512 [ 95.813602][T10354] ------------[ cut here ]------------ [ 95.819168][T10354] EA inode 11 i_nlink=2 [ 95.819538][T10354] WARNING: CPU: 1 PID: 10354 at fs/ext4/xattr.c:1058 ext4_xattr_inode_update_ref+0x36a/0x380 [ 95.833990][T10354] Modules linked in: [ 95.837950][T10354] CPU: 1 UID: 0 PID: 10354 Comm: syz.0.3179 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 95.849372][T10354] Tainted: [W]=WARN [ 95.853266][T10354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 95.863385][T10354] RIP: 0010:ext4_xattr_inode_update_ref+0x36a/0x380 [ 95.870114][T10354] Code: 90 49 8d 7e 40 e8 36 ff b8 ff 4d 8b 6e 40 4c 89 e7 e8 4a fa b8 ff 41 8b 56 48 48 c7 c7 6f 52 55 86 4c 89 ee e8 a7 04 68 ff 90 <0f> 0b 90 90 e9 ff fe ff ff e8 a8 93 b0 03 0f 1f 84 00 00 00 00 00 [ 95.889832][T10354] RSP: 0000:ffffc900113a35a0 EFLAGS: 00010246 [ 95.895942][T10354] RAX: f91b4613920fcd00 RBX: ffff88811a0c01a8 RCX: 0000000000080000 [ 95.903970][T10354] RDX: ffffc90001e62000 RSI: 0000000000003cc2 RDI: 0000000000003cc3 [ 95.912009][T10354] RBP: 0000000000000002 R08: 0001c900113a3427 R09: 0000000000000000 [ 95.919998][T10354] R10: 00000000ffffffff R11: 0000000000000002 R12: ffff88811a0c0158 [ 95.928078][T10354] R13: 000000000000000b R14: ffff88811a0c0110 R15: 0000000000000001 [ 95.936110][T10354] FS: 00007f94aa81f6c0(0000) GS:ffff8882aef39000(0000) knlGS:0000000000000000 [ 95.945114][T10354] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 95.951811][T10354] CR2: 00007f94abda22e0 CR3: 0000000122630000 CR4: 00000000003506f0 [ 95.959891][T10354] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 95.968002][T10354] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 95.976052][T10354] Call Trace: [ 95.979363][T10354] [ 95.982336][T10354] ext4_xattr_set_entry+0x77f/0x1020 [ 95.987694][T10354] ext4_xattr_ibody_set+0x184/0x3c0 [ 95.992950][T10354] ext4_expand_extra_isize_ea+0xcbb/0x11f0 [ 95.998828][T10354] __ext4_expand_extra_isize+0x246/0x280 [ 96.004587][T10354] __ext4_mark_inode_dirty+0x29d/0x3f0 [ 96.010183][T10354] ext4_evict_inode+0x80e/0xd90 [ 96.015309][T10354] ? __pfx_ext4_evict_inode+0x10/0x10 [ 96.020756][T10354] evict+0x2e3/0x550 [ 96.024715][T10354] ? __dquot_initialize+0x146/0x7c0 [ 96.029948][T10354] iput+0x4ed/0x650 [ 96.033872][T10354] ext4_process_orphan+0x1a9/0x1c0 [ 96.039045][T10354] ext4_orphan_cleanup+0x6a8/0xa00 [ 96.044230][T10354] ext4_fill_super+0x3483/0x3810 [ 96.049283][T10354] ? snprintf+0x86/0xb0 [ 96.053587][T10354] ? set_blocksize+0x1a8/0x310 [ 96.058376][T10354] ? sb_set_blocksize+0xe3/0x100 [ 96.063407][T10354] ? setup_bdev_super+0x30e/0x370 [ 96.068459][T10354] ? __pfx_ext4_fill_super+0x10/0x10 [ 96.073795][T10354] get_tree_bdev_flags+0x291/0x300 [ 96.078949][T10354] ? __pfx_ext4_fill_super+0x10/0x10 [ 96.084292][T10354] get_tree_bdev+0x1f/0x30 [ 96.088733][T10354] ext4_get_tree+0x1c/0x30 [ 96.093190][T10354] vfs_get_tree+0x57/0x1d0 [ 96.097738][T10354] do_new_mount+0x24d/0x660 [ 96.102336][T10354] path_mount+0x4a5/0xb70 [ 96.106685][T10354] ? user_path_at+0x109/0x130 [ 96.111467][T10354] __se_sys_mount+0x28c/0x2e0 [ 96.116181][T10354] __x64_sys_mount+0x67/0x80 [ 96.120796][T10354] x64_sys_call+0x2b51/0x3000 [ 96.125541][T10354] do_syscall_64+0xd2/0x200 [ 96.130280][T10354] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 96.136423][T10354] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 96.142227][T10354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.148149][T10354] RIP: 0033:0x7f94abdc076a [ 96.152601][T10354] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.172313][T10354] RSP: 002b:00007f94aa81ee68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 96.180779][T10354] RAX: ffffffffffffffda RBX: 00007f94aa81eef0 RCX: 00007f94abdc076a [ 96.188833][T10354] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f94aa81eeb0 [ 96.196874][T10354] RBP: 0000200000000180 R08: 00007f94aa81eef0 R09: 0000000001a08700 [ 96.204937][T10354] R10: 0000000001a08700 R11: 0000000000000246 R12: 00002000000001c0 [ 96.213029][T10354] R13: 00007f94aa81eeb0 R14: 0000000000000470 R15: 0000200000000700 [ 96.221076][T10354] [ 96.224143][T10354] ---[ end trace 0000000000000000 ]--- [ 96.230240][T10354] EXT4-fs (loop0): 1 orphan inode deleted [ 96.343223][T10369] netlink: 124 bytes leftover after parsing attributes in process `syz.0.3184'. [ 96.500157][T10396] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3199'. [ 96.572031][T10403] loop4: detected capacity change from 0 to 1024 [ 96.580224][T10403] EXT4-fs: Ignoring removed oldalloc option [ 96.586346][T10403] EXT4-fs: Ignoring removed bh option [ 96.649694][T10403] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt. [ 96.718488][T10420] netlink: 'syz.3.3208': attribute type 8 has an invalid length. [ 96.842394][T10440] loop2: detected capacity change from 0 to 512 [ 96.860663][T10440] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 96.881646][T10440] EXT4-fs (loop2): 1 truncate cleaned up [ 96.887511][T10449] loop0: detected capacity change from 0 to 128 [ 96.912148][T10449] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 96.924983][ T3312] ================================================================== [ 96.933104][ T3312] BUG: KCSAN: data-race in find_get_block_common / has_bh_in_lru [ 96.940853][ T3312] [ 96.943182][ T3312] read-write to 0xffff888237c26fd0 of 8 bytes by task 10449 on cpu 0: [ 96.951337][ T3312] find_get_block_common+0x4f0/0x960 [ 96.956646][ T3312] bdev_getblk+0x30d/0x3b0 [ 96.961076][ T3312] ext4_sb_breadahead_unmovable+0x45/0x180 [ 96.966999][ T3312] __ext4_get_inode_loc+0x709/0x930 [ 96.972205][ T3312] __ext4_iget+0x2ea/0x22d0 [ 96.976734][ T3312] ext4_fill_super+0x2992/0x3810 [ 96.981680][ T3312] get_tree_bdev_flags+0x291/0x300 [ 96.986809][ T3312] get_tree_bdev+0x1f/0x30 [ 96.991248][ T3312] ext4_get_tree+0x1c/0x30 [ 96.995678][ T3312] vfs_get_tree+0x57/0x1d0 [ 97.000111][ T3312] do_new_mount+0x24d/0x660 [ 97.004655][ T3312] path_mount+0x4a5/0xb70 [ 97.008997][ T3312] __se_sys_mount+0x28c/0x2e0 [ 97.013691][ T3312] __x64_sys_mount+0x67/0x80 [ 97.018305][ T3312] x64_sys_call+0x2b51/0x3000 [ 97.022997][ T3312] do_syscall_64+0xd2/0x200 [ 97.027520][ T3312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.033426][ T3312] [ 97.035769][ T3312] read to 0xffff888237c26fd0 of 8 bytes by task 3312 on cpu 1: [ 97.043321][ T3312] has_bh_in_lru+0x35/0x1f0 [ 97.047927][ T3312] smp_call_function_many_cond+0x2a9/0xc60 [ 97.053761][ T3312] on_each_cpu_cond_mask+0x3c/0x80 [ 97.058883][ T3312] invalidate_bh_lrus+0x2a/0x30 [ 97.063765][ T3312] blkdev_flush_mapping+0x9a/0x1a0 [ 97.068896][ T3312] bdev_release+0x2bf/0x3d0 [ 97.073407][ T3312] blkdev_release+0x15/0x20 [ 97.077953][ T3312] __fput+0x29b/0x650 [ 97.081957][ T3312] ____fput+0x1c/0x30 [ 97.085959][ T3312] task_work_run+0x131/0x1a0 [ 97.090562][ T3312] exit_to_user_mode_loop+0xed/0x110 [ 97.095867][ T3312] do_syscall_64+0x1d6/0x200 [ 97.100471][ T3312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.106376][ T3312] [ 97.108698][ T3312] value changed: 0xffff888106f666e8 -> 0xffff888106f66f70 [ 97.115808][ T3312] [ 97.118151][ T3312] Reported by Kernel Concurrency Sanitizer on: [ 97.124312][ T3312] CPU: 1 UID: 0 PID: 3312 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 97.135786][ T3312] Tainted: [W]=WARN [ 97.139595][ T3312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 97.149657][ T3312] ================================================================== [ 97.169975][T10449] EXT4-fs error (device loop0): htree_dirblock_to_tree:1051: inode #2: comm syz.0.3220: Directory block failed checksum