last executing test programs: 1m48.954503345s ago: executing program 4 (id=573): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/35, 0x23}], 0x1, 0x0, 0x0) writev(r0, &(0x7f00000003c0), 0x100000000000022d) 1m48.757406384s ago: executing program 4 (id=576): r0 = syz_open_procfs(0x0, &(0x7f0000019100)='net/fib_trie\x00') read$char_usb(r0, &(0x7f0000000000)=""/164, 0xa4) pread64(r0, &(0x7f0000019140)=""/102349, 0x18fcd, 0x1c) 1m48.660136668s ago: executing program 4 (id=581): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000045000/0x3000)=nil, 0x3) 1m48.6267395s ago: executing program 4 (id=586): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x10, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2}]}]}]}, 0x3c}}, 0x8000) 1m48.577328021s ago: executing program 4 (id=589): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) symlink(&(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1m48.538669253s ago: executing program 4 (id=592): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x3, &(0x7f0000000000)=0xffff, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000200)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) 1m32.535568279s ago: executing program 32 (id=592): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x3, &(0x7f0000000000)=0xffff, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000200)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) 1m26.68807825s ago: executing program 2 (id=1183): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000300000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10) 1m26.534410327s ago: executing program 2 (id=1187): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x1c, r1, 0x331, 0x70bd25, 0x25dfdbfa, {0xb}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24048800}, 0x4000000) 1m26.24508803s ago: executing program 2 (id=1190): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffffff}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="28000000120001abed30a900", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b'], 0x28}, 0x1, 0x0, 0x0, 0x2404c455}, 0x20040000) 1m25.620213526s ago: executing program 2 (id=1202): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000a00)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@resgid}, {@barrier}, {@quota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001340)="$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") mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f0000001080)='./file0\x00', 0x0, 0x1326020, &(0x7f0000000140)=ANY=[@ANYBLOB='mode=0']) 1m24.83506567s ago: executing program 2 (id=1208): r0 = syz_io_uring_setup(0x4b6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3d8}, &(0x7f0000ff0000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0, 0x5d}, {&(0x7f0000000100)=""/14, 0xe}], &(0x7f00000005c0), 0x2}, 0x20) 1m24.558105062s ago: executing program 2 (id=1216): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000080)=0x200, 0x4) 1m24.558017332s ago: executing program 33 (id=1216): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000080)=0x200, 0x4) 1m6.8805477s ago: executing program 5 (id=2031): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = io_uring_setup(0xbbc, &(0x7f0000000280)={0x0, 0x0, 0x2, 0x0, 0x345}) io_uring_enter(r0, 0x100000, 0x2, 0xf, &(0x7f0000000000), 0x18) 1m6.795266454s ago: executing program 5 (id=2035): prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x8) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='status\x00') preadv(r0, &(0x7f0000000100)=[{&(0x7f0000001140)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 1m6.740981516s ago: executing program 5 (id=2040): io_setup(0x63, &(0x7f0000000000)=0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) io_submit(r0, 0x1, &(0x7f0000000200)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x6, r1, &(0x7f0000000040)='-6', 0x2, 0x0, 0x0, 0x4}]) 1m6.645043401s ago: executing program 5 (id=2055): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000a00)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@resgid}, {@barrier}, {@quota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001340)="$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") mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f0000001080)='./file0\x00', 0x0, 0x1326020, &(0x7f0000000140)=ANY=[@ANYBLOB='mode=0']) 1m6.548703245s ago: executing program 5 (id=2049): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000000)={0x17a6, 0x1, [{0x1, 0x1}]}) 1m6.157034472s ago: executing program 5 (id=2069): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) 1m6.156942171s ago: executing program 34 (id=2069): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) 17.623424494s ago: executing program 0 (id=4684): bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000340)={[{@errors_remount}, {@nodioread_nolock}]}, 0x1, 0x512, &(0x7f0000000380)="$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") 17.469441201s ago: executing program 0 (id=4677): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x2}, 0x18) syz_mount_image$iso9660(&(0x7f0000000cc0), &(0x7f0000000180)='./file3\x00', 0x1004081, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYBLOB="30d7e88b7e1a89248cbe96fa60e3aa658b848c34b60d221b47faa425408774ccb71ea1fa398e581c2dfb0c563ae9e0179d98b1dcce10430d6aeea68db5b0e19e3a18c41ddd8964c127983aaa9808f00958eb84e5f6ad7cf6da5d1c91a1ca244531d9d1e03d0cdf08801cfa3144c8c973a4af2adb11b537a30414e7268b844618a1a6468378f196dc2c94b1d5880655a657aaf29227ec5691ab941dac2bb42722601cdc3fd713d2029386f3ec77d7cac4921e2c06865201ca5a3d76f218c6a72ab5af528b604869e9dbab560430e94d8ef41ad7015d7847a16dc02b6307f3029200d82f197a5ad42b08733b48c48b7cf18e52"], 0x10, 0x7f4, &(0x7f0000001580)="$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") open$dir(&(0x7f0000000080)='./file1\x00', 0x200, 0x40) 17.361832725s ago: executing program 0 (id=4683): writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="39e8dcfa461ac09e8a722e34d7e484893ffa560200133b1b00003f210000001770faf047145bc79e0b9971bcbedac0eeaf3300000000000000000000cab0312cf6b68ced50ac2b5546216e3ce964359fa4ea01a34f038f38509172feed11b0fd62fd47a9d236813b4ebda3ebdd33aec5ea71251a0651345627e476fa4b9c478f296d2457c7d362ae632c", 0x8a}], 0x1) r0 = syz_open_dev$sg(&(0x7f0000001bc0), 0x208, 0x2c41) setreuid(0x0, 0xee00) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r0]) 17.328680126s ago: executing program 0 (id=4687): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 17.308907847s ago: executing program 0 (id=4689): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x1000}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') 17.074526787s ago: executing program 0 (id=4693): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$igmp6(0xa, 0x3, 0x2) unshare(0x22020400) getsockopt$sock_timeval(r0, 0x1, 0x15, 0x0, &(0x7f00000002c0)) 17.055258398s ago: executing program 35 (id=4693): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$igmp6(0xa, 0x3, 0x2) unshare(0x22020400) getsockopt$sock_timeval(r0, 0x1, 0x15, 0x0, &(0x7f00000002c0)) 10.159533984s ago: executing program 6 (id=4983): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x8000000000000002, {0x1, 0xf0}, 0xfd}, 0x18) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000002c0)=0x14) 10.052714898s ago: executing program 6 (id=4990): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000d80)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x9d}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000940)=[{0x10, 0x8, 0x4, 0x8}]}) 10.000388301s ago: executing program 6 (id=4993): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) socket(0xa, 0x3, 0xff) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000500)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000100)={r1, 0x1, r0, 0xfffffffd, 0x80000}) 9.032431852s ago: executing program 6 (id=5030): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 9.015117773s ago: executing program 6 (id=5031): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000061c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/104, 0x68}, 0x4d1ee337}, {{0x0, 0x0, 0x0}, 0x5}], 0x2, 0x10042, 0x0) 8.684406037s ago: executing program 6 (id=5046): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x17) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x18, &(0x7f0000000580)=ANY=[@ANYBLOB="180200000000000000000000a8ea0000b7080000000000007b8af8ff00000000b7080000000200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000000850000001700000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 8.658020469s ago: executing program 36 (id=5046): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x17) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x18, &(0x7f0000000580)=ANY=[@ANYBLOB="180200000000000000000000a8ea0000b7080000000000007b8af8ff00000000b7080000000200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000000850000001700000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.016103376s ago: executing program 9 (id=5371): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5}, 0x48) 998.595397ms ago: executing program 9 (id=5372): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x2, 0x7fe2, 0x3, 0x12}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x2416, &(0x7f0000000580)=ANY=[@ANYBLOB="e727dc07001f391e7dd7a2d786dd609907a623e02c03cb697a653e336f000000500000000000ff02000000000000000000000000000132"], 0x0) 976.456608ms ago: executing program 9 (id=5373): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r0}, 0x10) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) 925.38674ms ago: executing program 9 (id=5377): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x6) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) 854.186413ms ago: executing program 7 (id=5382): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x5, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 853.973943ms ago: executing program 7 (id=5384): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2400000039000900f036d6760000000004000000040000000c0001800600060086"], 0x24}}, 0x10) 830.790344ms ago: executing program 7 (id=5385): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB="cc0000002100010000000000fefffffffc020000000000000000000000000000fc020000000000000000000000000000fffc0000000000000a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="020000000000000050001100fe80000000000000000000000000001164010102000000000000000000000000ac1414aa000000000000000000000000ac1e01010000000000000000000000003c000000000000000a000a002c0013"], 0xcc}, 0x1, 0x0, 0x0, 0xf6c97465f2d93f5b}, 0x0) 813.244055ms ago: executing program 7 (id=5387): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000e40)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) fadvise64(r1, 0x807f, 0xaf, 0x1) 795.700055ms ago: executing program 7 (id=5388): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) rseq(0x0, 0x0, 0x1, 0x0) 772.032457ms ago: executing program 1 (id=5389): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xf, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kfree\x00', r0}, 0x18) r1 = io_uring_setup(0xaae, &(0x7f00000003c0)={0x0, 0xffffeffa, 0x800, 0x7, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 712.0191ms ago: executing program 1 (id=5390): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) faccessat2(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup\x00', 0x7, 0x1100) 691.91575ms ago: executing program 1 (id=5391): r0 = msgget$private(0x0, 0x193) msgsnd(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="01"], 0x8, 0x0) msgrcv(r0, 0x0, 0x0, 0x0, 0x1800) msgctl$IPC_STAT(r0, 0x2, &(0x7f00000005c0)=""/82) 671.540701ms ago: executing program 1 (id=5392): writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="39e8dcfa461ac09e8a722e34d7e484893ffa", 0x12}], 0x1) r0 = syz_open_dev$sg(&(0x7f0000001bc0), 0x208, 0x2c41) setreuid(0x0, 0xee00) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r0]) 639.611203ms ago: executing program 1 (id=5393): r0 = gettid() timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000440)={{0x0, 0x3938700}}, &(0x7f0000000480)) 601.913024ms ago: executing program 7 (id=5394): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x103440) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x3, 0xf3, &(0x7f0000000540)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x41015500, &(0x7f0000000500)=0x81000000) 538.152907ms ago: executing program 1 (id=5395): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x2a82) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') r1 = socket(0x1d, 0x2, 0x6) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 349.701355ms ago: executing program 3 (id=5407): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x18) r1 = io_uring_setup(0x7086, &(0x7f0000000040)={0x0, 0x4def, 0x800, 0x3, 0xf7}) io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r1, 0x19, 0x0, 0x0) 332.508445ms ago: executing program 3 (id=5408): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree\x00', r1}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000007000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94) 261.679268ms ago: executing program 3 (id=5412): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) ioperm(0x5, 0x8, 0x8000000000005) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x241a2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x3, @perf_bp={&(0x7f0000000300), 0x1}, 0x0, 0x2, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') 247.566569ms ago: executing program 3 (id=5413): r0 = socket$inet(0x2, 0x3, 0x9) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x4, @empty}, {0x1}, 0x4a, {0x2, 0x100, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'veth1_to_bridge\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000080)="290000001e00190f00003fffffffda060200000000e80001dd0008040d0008000c0000000005000000", 0x29}], 0x1) 241.622829ms ago: executing program 8 (id=5414): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0x0, &(0x7f00000000c0)="279a004c6588d5d6dc03d5cc2a00", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 223.95206ms ago: executing program 3 (id=5415): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x1a00404, &(0x7f0000000080)={[{@grpquota}, {@nomblk_io_submit}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) lseek(r0, 0x5, 0x4) 152.811173ms ago: executing program 8 (id=5416): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000009600)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x2, @private0={0xfc, 0x0, '\x00', 0x4}}, 0x1c, &(0x7f0000000d00)=[{&(0x7f00000002c0)='\n', 0x1}], 0x1}}], 0x1, 0x200488d4) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @empty}}}, 0x90) 127.050934ms ago: executing program 8 (id=5417): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ff01000000000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000800)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) clock_getres(0xfffffffffffffff1, 0x0) 97.709166ms ago: executing program 8 (id=5418): r0 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f00000007c0)=0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) 76.538836ms ago: executing program 8 (id=5419): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f00000001c0), 0x2, 0x0) sendfile(r1, r1, 0x0, 0x6) 4.54573ms ago: executing program 9 (id=5420): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000080)=',\xea\x00', 0x4) ftruncate(r0, 0x7000000) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000001380)=""/4090, 0xffa}], 0x1, 0x5, 0x4) 4.41121ms ago: executing program 8 (id=5421): unshare(0x28000600) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r0, r1, 0x5}, 0x10) 3.71331ms ago: executing program 3 (id=5422): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x24, r1, 0x331, 0x1ffc, 0x40000000, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_HARD_IFINDEX={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x400400c}, 0x0) 0s ago: executing program 9 (id=5423): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x7, 0x4, 0x200, 0x21db}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x8, 0x4, 0x7cb4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) kernel console output (not intermixed with test programs): 294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10990 comm="syz.6.3127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa90c7ff749 code=0x7ffc0000 [ 105.641547][ T29] audit: type=1326 audit(1764774239.595:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10990 comm="syz.6.3127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=265 compat=0 ip=0x7fa90c7ff749 code=0x7ffc0000 [ 105.665564][ T29] audit: type=1400 audit(1764774239.595:803): avc: denied { link } for pid=10990 comm="syz.6.3127" name="file0" dev="tmpfs" ino=1913 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 105.688216][ T29] audit: type=1326 audit(1764774239.595:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10990 comm="syz.6.3127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa90c7ff749 code=0x7ffc0000 [ 105.712251][ T29] audit: type=1400 audit(1764774239.615:805): avc: denied { unlink } for pid=6240 comm="syz-executor" name="file7" dev="tmpfs" ino=1913 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 105.716665][T10997] vhci_hcd: default hub control req: 010b v0000 i0000 l0 [ 105.856316][T11024] loop0: detected capacity change from 0 to 1024 [ 105.883920][T11027] random: crng reseeded on system resumption [ 105.895166][ T29] audit: type=1400 audit(1764774239.905:806): avc: denied { write } for pid=11025 comm="syz.3.3143" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 105.918231][ T29] audit: type=1400 audit(1764774239.905:807): avc: denied { ioctl } for pid=11025 comm="syz.3.3143" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 105.958864][T11024] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 105.994631][ T29] audit: type=1400 audit(1764774240.015:808): avc: denied { write } for pid=11043 comm="syz.3.3151" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 106.018724][T11024] ext4 filesystem being mounted at /687/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.075862][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 106.092762][ T8057] hid-generic 0007:0005:0004.0003: unknown main item tag 0x0 [ 106.100287][ T8057] hid-generic 0007:0005:0004.0003: unknown main item tag 0x0 [ 106.108598][ T8057] hid-generic 0007:0005:0004.0003: unknown main item tag 0x0 [ 106.116019][ T8057] hid-generic 0007:0005:0004.0003: unknown main item tag 0x0 [ 106.123461][ T8057] hid-generic 0007:0005:0004.0003: unknown main item tag 0x0 [ 106.131060][ T8057] hid-generic 0007:0005:0004.0003: unknown main item tag 0x0 [ 106.139468][ T8057] hid-generic 0007:0005:0004.0003: unknown main item tag 0x0 [ 106.147097][ T8057] hid-generic 0007:0005:0004.0003: unknown main item tag 0x0 [ 106.154688][ T8057] hid-generic 0007:0005:0004.0003: unknown main item tag 0x0 [ 106.162663][ T8057] hid-generic 0007:0005:0004.0003: unknown main item tag 0x0 [ 106.182900][ T8057] hid-generic 0007:0005:0004.0003: hidraw0: HID v0.05 Device [syz0] on syz1 [ 106.445072][T11114] loop3: detected capacity change from 0 to 512 [ 106.605795][T11134] hub 6-0:1.0: USB hub found [ 106.621864][T11134] hub 6-0:1.0: 8 ports detected [ 106.724259][T11161] netlink: 'syz.3.3208': attribute type 1 has an invalid length. [ 106.807767][T11178] netlink: 'syz.6.3214': attribute type 3 has an invalid length. [ 106.970484][T11205] loop1: detected capacity change from 0 to 512 [ 107.016586][T11205] EXT4-fs warning (device loop1): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 107.070043][T11205] EXT4-fs (loop1): mount failed [ 107.159973][T11239] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 107.174862][T11236] vlan2: entered promiscuous mode [ 107.179909][T11236] syz_tun: entered promiscuous mode [ 107.214135][T11248] vhci_hcd: default hub control req: a105 vfffe i0000 l0 [ 107.364095][T11271] loop7: detected capacity change from 0 to 512 [ 107.414535][T11271] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.430380][T11271] ext4 filesystem being mounted at /236/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.437655][T11282] loop3: detected capacity change from 0 to 512 [ 107.467985][T11282] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 107.474871][ T8429] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.496563][T11282] EXT4-fs (loop3): 1 truncate cleaned up [ 107.510077][T11282] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.582990][ T3333] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.655313][T11307] loop6: detected capacity change from 0 to 512 [ 107.713281][T11307] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 107.738507][T11307] EXT4-fs (loop6): 1 orphan inode deleted [ 107.744394][T11307] EXT4-fs (loop6): 1 truncate cleaned up [ 107.757953][T11307] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.771613][T11318] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 107.778143][T11318] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 107.786420][T11318] vhci_hcd vhci_hcd.0: Device attached [ 107.802120][T11307] EXT4-fs (loop6): Online resizing not supported with sparse_super2 [ 107.822302][T11321] vhci_hcd: connection closed [ 107.822439][ T31] vhci_hcd: stop threads [ 107.831496][ T31] vhci_hcd: release socket [ 107.835906][ T31] vhci_hcd: disconnect device [ 107.845424][ T6240] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.005174][T11352] loop6: detected capacity change from 0 to 512 [ 108.016687][T11352] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 108.041498][T11352] EXT4-fs (loop6): 1 truncate cleaned up [ 108.047866][T11352] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.093609][ T6240] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.131196][T11366] __nla_validate_parse: 11 callbacks suppressed [ 108.131220][T11366] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3303'. [ 108.228764][T11379] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3319'. [ 108.349676][T11399] loop6: detected capacity change from 0 to 164 [ 108.414277][T11399] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 108.499821][T11418] loop3: detected capacity change from 0 to 2048 [ 108.563047][ T3550] Alternate GPT is invalid, using primary GPT. [ 108.569292][ T3550] loop3: p1 p2 p3 [ 108.573044][ T3550] loop3: partition table partially beyond EOD, truncated [ 108.614130][T11433] loop1: detected capacity change from 0 to 512 [ 108.622015][T11418] Alternate GPT is invalid, using primary GPT. [ 108.628289][T11418] loop3: p1 p2 p3 [ 108.632638][T11418] loop3: partition table partially beyond EOD, truncated [ 108.665099][T11433] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 108.674751][T11439] loop6: detected capacity change from 0 to 164 [ 108.684254][T11439] ISOFS: unable to read i-node block [ 108.689599][T11439] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 108.737789][T11444] udevd[11444]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 108.741469][T11433] System zones: 0-2, 18-18, 34-34 [ 108.757094][ T3546] udevd[3546]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 108.768287][T11433] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.3335: bg 0: block 248: padding at end of block bitmap is not set [ 108.772739][ T3550] udevd[3550]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 108.797610][T11433] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.3335: Failed to acquire dquot type 1 [ 108.814496][T11433] EXT4-fs (loop1): 1 truncate cleaned up [ 108.820632][T11433] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.833429][T11433] ext4 filesystem being mounted at /697/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.851927][ T3546] udevd[3546]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 108.863450][ T3545] udevd[3545]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 108.878377][ T3550] udevd[3550]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 108.920348][ T3326] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.946545][T11464] loop0: detected capacity change from 0 to 512 [ 108.982776][T11464] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.3349: bg 0: block 5: invalid block bitmap [ 108.995672][T11464] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 109.012599][T11464] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.3349: invalid indirect mapped block 3 (level 2) [ 109.026215][T11464] EXT4-fs (loop0): 2 truncates cleaned up [ 109.033580][T11464] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.057212][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.129069][T11484] loop3: detected capacity change from 0 to 512 [ 109.140790][T11486] loop0: detected capacity change from 0 to 512 [ 109.150093][T11484] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.162840][T11484] ext4 filesystem being mounted at /766/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.178580][T11486] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 109.178636][T11484] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 109.213216][T11486] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.229536][ T3333] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.238938][T11486] ext4 filesystem being mounted at /719/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 109.310065][T11499] loop6: detected capacity change from 0 to 1024 [ 109.318702][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.332327][T11499] EXT4-fs: Ignoring removed nobh option [ 109.337930][T11499] EXT4-fs: inline encryption not supported [ 109.378551][T11507] loop3: detected capacity change from 0 to 1024 [ 109.386284][T11507] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 109.399684][T11499] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.429342][ T6240] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.523249][T11519] netlink: 'syz.6.3371': attribute type 1 has an invalid length. [ 109.551907][T11523] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3372'. [ 109.748110][T11552] netlink: 160 bytes leftover after parsing attributes in process `syz.7.3387'. [ 109.757587][T11552] net_ratelimit: 3495 callbacks suppressed [ 109.757600][T11552] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 109.800830][T11557] loop7: detected capacity change from 0 to 1024 [ 109.817302][T11557] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.843167][ T8429] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.927837][T11572] loop6: detected capacity change from 0 to 512 [ 109.956350][T11572] ext4 filesystem being mounted at /431/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.057036][T11595] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3407'. [ 110.126488][T11608] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3413'. [ 110.454179][ T29] kauditd_printk_skb: 49 callbacks suppressed [ 110.454194][ T29] audit: type=1400 audit(1764774244.475:855): avc: denied { setopt } for pid=11661 comm="syz.3.3448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 110.472266][T11664] netlink: 59060 bytes leftover after parsing attributes in process `syz.7.3438'. [ 110.492552][T11664] netlink: zone id is out of range [ 110.497683][T11664] netlink: zone id is out of range [ 110.534511][T11664] netlink: zone id is out of range [ 110.539687][T11664] netlink: zone id is out of range [ 110.545527][T11664] netlink: zone id is out of range [ 110.550638][T11664] netlink: zone id is out of range [ 110.556127][T11664] netlink: zone id is out of range [ 110.561315][T11664] netlink: zone id is out of range [ 110.566454][T11664] netlink: zone id is out of range [ 110.566720][T11676] loop3: detected capacity change from 0 to 128 [ 110.806248][T11720] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 110.809846][ T29] audit: type=1400 audit(1764774244.825:856): avc: denied { read write } for pid=11717 comm="syz.3.3466" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 110.841405][ T29] audit: type=1400 audit(1764774244.825:857): avc: denied { open } for pid=11717 comm="syz.3.3466" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 110.853536][T11721] loop7: detected capacity change from 0 to 512 [ 110.908550][T11721] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 110.917980][T11721] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 110.934454][T11728] loop1: detected capacity change from 0 to 1024 [ 110.955568][T11728] EXT4-fs: inline encryption not supported [ 110.992122][T11721] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4193: comm syz.7.3467: Allocating blocks 41-42 which overlap fs metadata [ 110.992276][T11721] Quota error (device loop7): write_blk: dquota write failed [ 111.013873][T11721] Quota error (device loop7): find_free_dqentry: Can't write quota data block 5 [ 111.016298][T11721] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 111.016401][T11721] EXT4-fs error (device loop7): ext4_acquire_dquot:6945: comm syz.7.3467: Failed to acquire dquot type 1 [ 111.016555][T11721] EXT4-fs error (device loop7): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 111.016682][T11721] EXT4-fs error (device loop7): ext4_do_update_inode:5628: inode #12: comm syz.7.3467: corrupted inode contents [ 111.017467][T11721] EXT4-fs error (device loop7): ext4_dirty_inode:6513: inode #12: comm syz.7.3467: mark_inode_dirty error [ 111.018643][T11721] EXT4-fs error (device loop7): ext4_do_update_inode:5628: inode #12: comm syz.7.3467: corrupted inode contents [ 111.071223][T11728] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, [ 111.087934][T11721] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #12: comm syz.7.3467: mark_inode_dirty error [ 111.099549][T11728] inode 15: block 385:freeing already freed block (bit 24); block bitmap corrupt. [ 111.130702][T11721] EXT4-fs error (device loop7): ext4_do_update_inode:5628: inode #12: comm syz.7.3467: corrupted inode contents [ 111.130875][T11721] EXT4-fs error (device loop7) in ext4_orphan_del:301: Corrupt filesystem [ 111.152323][T11728] EXT4-fs (loop1): Remounting filesystem read-only [ 111.189861][T11721] EXT4-fs error (device loop7): ext4_do_update_inode:5628: inode #12: comm syz.7.3467: corrupted inode contents [ 111.238609][T11721] EXT4-fs error (device loop7): ext4_truncate:4633: inode #12: comm syz.7.3467: mark_inode_dirty error [ 111.250703][T11721] EXT4-fs error (device loop7) in ext4_process_orphan:343: Corrupt filesystem [ 111.252393][T11721] EXT4-fs (loop7): 1 truncate cleaned up [ 111.353489][T11756] loop7: detected capacity change from 0 to 2048 [ 111.392905][ T3550] loop7: p1 < > p4 [ 111.403038][ T3550] loop7: p4 size 722688 extends beyond EOD, truncated [ 111.422954][T11756] loop7: p1 < > p4 [ 111.423544][T11756] loop7: p4 size 722688 extends beyond EOD, truncated [ 111.530471][ T29] audit: type=1400 audit(1764774245.545:858): avc: denied { create } for pid=11775 comm="syz.6.3489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 111.569034][ T3315] udevd[3315]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 111.578858][T11779] netlink: 'syz.1.3491': attribute type 6 has an invalid length. [ 111.582536][ T3550] udevd[3550]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 111.601031][ T29] audit: type=1326 audit(1764774245.615:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11777 comm="syz.7.3490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89a174f749 code=0x7ffc0000 [ 111.601128][ T29] audit: type=1326 audit(1764774245.615:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11777 comm="syz.7.3490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89a174f749 code=0x7ffc0000 [ 111.649645][ T29] audit: type=1326 audit(1764774245.615:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11777 comm="syz.7.3490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f89a174f749 code=0x7ffc0000 [ 111.723593][T11786] loop1: detected capacity change from 0 to 1024 [ 111.723915][T11786] EXT4-fs: inline encryption not supported [ 112.012053][T11809] loop3: detected capacity change from 0 to 128 [ 112.017469][T11816] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3509'. [ 112.030395][T11816] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3509'. [ 112.049676][T11809] ext4 filesystem being mounted at /781/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 112.075017][T11822] loop1: detected capacity change from 0 to 512 [ 112.131070][T11828] mmap: syz.3.3516 (11828): VmData 26996736 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 112.724787][T11890] netlink: 348 bytes leftover after parsing attributes in process `syz.3.3545'. [ 112.877115][T11914] loop0: detected capacity change from 0 to 1024 [ 113.024301][T11932] loop7: detected capacity change from 0 to 1024 [ 113.025459][T11932] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 113.025573][T11932] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 113.034588][T11932] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 113.034673][T11932] EXT4-fs (loop7): orphan cleanup on readonly fs [ 113.034870][T11932] EXT4-fs error (device loop7): ext4_read_inode_bitmap:167: comm syz.7.3565: Inode bitmap for bg 0 marked uninitialized [ 113.051114][T11932] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:517: comm syz.7.3565: Block bitmap for bg 0 marked uninitialized [ 113.108776][T11939] team0: Device is already in use. [ 113.199080][T11952] loop1: detected capacity change from 0 to 512 [ 113.223319][T11952] ext4 filesystem being mounted at /737/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.252107][T11957] loop0: detected capacity change from 0 to 1024 [ 113.278211][T11957] EXT4-fs: Ignoring removed nomblk_io_submit option [ 113.318889][T11957] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6042c018, mo2=0102] [ 113.343276][T11957] System zones: 0-1, 3-12 [ 113.395209][T11957] EXT4-fs: Remounting fs w/o journal so ignoring data_err option [ 113.418962][T11957] EXT4-fs (loop0): can't enable nombcache during remount [ 113.466943][T11993] tipc: Started in network mode [ 113.471904][T11993] tipc: Node identity , cluster identity 4711 [ 113.477979][T11993] tipc: Failed to obtain node identity [ 113.483480][T11993] tipc: Enabling of bearer rejected, failed to enable media [ 113.623215][T12013] __nla_validate_parse: 3 callbacks suppressed [ 113.623230][T12013] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3602'. [ 113.836032][T12047] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3618'. [ 113.966166][T12064] 9pnet: Could not find request transport: 0xffffffffffffffff [ 114.012367][T12070] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3629'. [ 114.140832][T12096] vlan2: entered allmulticast mode [ 114.168659][T12099] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3642'. [ 114.274007][T12116] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3651'. [ 114.310958][T12121] loop6: detected capacity change from 0 to 128 [ 114.315500][T12123] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3655'. [ 114.427153][T12138] loop0: detected capacity change from 0 to 512 [ 114.447696][T12138] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 114.482405][T12138] EXT4-fs (loop0): 1 truncate cleaned up [ 114.549318][T12152] loop7: detected capacity change from 0 to 512 [ 114.571446][T12152] EXT4-fs: Ignoring removed mblk_io_submit option [ 114.620021][T12161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.693000][T12161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.807286][T12157] loop3: detected capacity change from 0 to 32768 [ 114.843343][ T3550] loop3: p1 p2 p3 < > p4 < p5 p6 > [ 114.853274][ T3550] loop3: p1 start 460800 is beyond EOD, truncated [ 114.859715][ T3550] loop3: p2 size 83886080 extends beyond EOD, truncated [ 114.885466][T12189] loop7: detected capacity change from 0 to 512 [ 114.902334][ T3550] loop3: p5 start 460800 is beyond EOD, truncated [ 114.908828][ T3550] loop3: p6 size 83886080 extends beyond EOD, truncated [ 114.930020][T12189] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 114.942406][T12191] loop6: detected capacity change from 0 to 8192 [ 114.951926][T12157] loop3: p1 p2 p3 < > p4 < p5 p6 > [ 114.958033][T12157] loop3: p1 start 460800 is beyond EOD, truncated [ 114.965138][T12157] loop3: p2 size 83886080 extends beyond EOD, truncated [ 114.989158][ T167] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 115.012249][T12157] loop3: p5 start 460800 is beyond EOD, truncated [ 115.018802][T12157] loop3: p6 size 83886080 extends beyond EOD, truncated [ 115.046236][T12197] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 115.052080][T12199] loop1: detected capacity change from 0 to 1024 [ 115.071794][T12199] EXT4-fs: Ignoring removed nobh option [ 115.077148][ T3546] udevd[3546]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 115.077435][T12199] EXT4-fs: inline encryption not supported [ 115.092580][ T3550] udevd[3550]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 115.095630][ T3315] udevd[3315]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 115.114998][ T3552] udevd[3552]: inotify_add_watch(7, /dev/loop3p6, 10) failed: No such file or directory [ 115.156950][ T3550] udevd[3550]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 115.157657][ T3552] udevd[3552]: inotify_add_watch(7, /dev/loop3p6, 10) failed: No such file or directory [ 115.177593][ T3546] udevd[3546]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 115.190132][ T3315] udevd[3315]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 115.342928][T12222] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3701'. [ 115.412081][T12227] loop7: detected capacity change from 0 to 512 [ 115.444230][T12227] EXT4-fs warning (device loop7): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 115.462685][T12238] loop0: detected capacity change from 0 to 512 [ 115.481337][T12227] EXT4-fs (loop7): mount failed [ 115.517561][T12246] loop0: detected capacity change from 0 to 512 [ 115.556647][T12246] ext4 filesystem being mounted at /793/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.571985][T12254] netem: invalid attributes len -22 [ 115.577298][T12254] netem: change failed [ 115.628447][T12262] loop3: detected capacity change from 0 to 512 [ 115.665684][T12262] EXT4-fs: Ignoring removed nobh option [ 115.685408][T12267] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3720'. [ 115.696784][T12262] ext4 filesystem being mounted at /839/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 115.738391][ T29] kauditd_printk_skb: 37 callbacks suppressed [ 115.738406][ T29] audit: type=1326 audit(1764774249.755:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12271 comm="syz.3.3721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb60ed0f749 code=0x7ffc0000 [ 115.775101][ T29] audit: type=1326 audit(1764774249.785:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12271 comm="syz.3.3721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7fb60ed0f749 code=0x7ffc0000 [ 115.799409][ T29] audit: type=1326 audit(1764774249.785:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12271 comm="syz.3.3721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb60ed0f749 code=0x7ffc0000 [ 115.822839][ T29] audit: type=1326 audit(1764774249.785:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12271 comm="syz.3.3721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb60ed0f749 code=0x7ffc0000 [ 115.911861][ T29] audit: type=1400 audit(1764774249.935:902): avc: denied { create } for pid=12287 comm="syz.6.3728" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 115.935231][ T29] audit: type=1400 audit(1764774249.935:903): avc: denied { write } for pid=12287 comm="syz.6.3728" name="file0" dev="tmpfs" ino=2528 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 115.957700][ T29] audit: type=1400 audit(1764774249.935:904): avc: denied { open } for pid=12287 comm="syz.6.3728" path="/491/file0" dev="tmpfs" ino=2528 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 115.981132][ T29] audit: type=1400 audit(1764774249.935:905): avc: denied { ioctl } for pid=12287 comm="syz.6.3728" path="/491/file0" dev="tmpfs" ino=2528 ioctlcmd=0x1270 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 116.066619][ T29] audit: type=1400 audit(1764774249.955:906): avc: denied { unlink } for pid=6240 comm="syz-executor" name="file0" dev="tmpfs" ino=2528 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 116.089360][ T29] audit: type=1326 audit(1764774250.045:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12293 comm="syz.0.3731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71ffd1f749 code=0x7ffc0000 [ 116.137604][T12309] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3738'. [ 116.194352][T12317] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3741'. [ 116.446396][T12340] loop7: detected capacity change from 0 to 8192 [ 116.465647][T12340] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 116.517188][T12365] netem: incorrect gi model size [ 116.522185][T12365] netem: change failed [ 116.536818][T12366] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 116.669865][ T23] IPVS: starting estimator thread 0... [ 116.743769][T12410] hsr0: left promiscuous mode [ 116.762144][T12396] IPVS: using max 2160 ests per chain, 108000 per kthread [ 116.763759][T12410] ipvlan2: entered promiscuous mode [ 116.817710][T12419] kernel profiling enabled (shift: 9) [ 116.888713][T12430] syz.6.3792 (12430): /proc/12428/oom_adj is deprecated, please use /proc/12428/oom_score_adj instead. [ 116.914826][T12433] dummy0: entered promiscuous mode [ 116.930010][T12433] macsec0: entered allmulticast mode [ 116.940223][T12433] dummy0: entered allmulticast mode [ 116.962602][T12433] dummy0: left allmulticast mode [ 116.967743][T12433] dummy0: left promiscuous mode [ 117.129888][T12473] loop1: detected capacity change from 0 to 128 [ 117.174275][T12473] ext4 filesystem being mounted at /771/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 117.257967][T12479] loop6: detected capacity change from 0 to 256 [ 117.287920][T12481] loop0: detected capacity change from 0 to 512 [ 117.720462][T12523] loop3: detected capacity change from 0 to 128 [ 117.733339][T12520] loop7: detected capacity change from 0 to 512 [ 117.776453][T12520] ext4 filesystem being mounted at /360/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 117.809565][T12520] EXT4-fs error (device loop7): ext4_do_update_inode:5628: inode #2: comm syz.7.3832: corrupted inode contents [ 117.823534][T12520] EXT4-fs error (device loop7): ext4_dirty_inode:6513: inode #2: comm syz.7.3832: mark_inode_dirty error [ 117.835083][T12520] EXT4-fs error (device loop7): ext4_do_update_inode:5628: inode #2: comm syz.7.3832: corrupted inode contents [ 117.995175][T12556] pim6reg0: tun_chr_ioctl cmd 1074025676 [ 118.000873][T12556] pim6reg0: owner set to 0 [ 118.173956][T12576] netlink: 'syz.6.3857': attribute type 2 has an invalid length. [ 118.412517][T12602] loop3: detected capacity change from 0 to 1024 [ 118.486431][T12602] EXT4-fs error (device loop3): ext4_read_inline_dir:1476: inode #12: block 7: comm syz.3.3870: path /870/file1/file0: bad entry in directory: inode out of bounds - offset=24, inode=150994957, rec_len=16, size=80 fake=0 [ 118.565416][T12615] xt_hashlimit: max too large, truncated to 1048576 [ 118.625157][T12635] loop7: detected capacity change from 0 to 512 [ 118.642748][T12629] loop6: detected capacity change from 0 to 1024 [ 118.873551][T12663] hub 6-0:1.0: USB hub found [ 118.882692][T12663] hub 6-0:1.0: 8 ports detected [ 118.899936][T12670] loop6: detected capacity change from 0 to 764 [ 118.908994][T12670] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 118.932520][T12670] Symlink component flag not implemented [ 118.950957][T12670] Symlink component flag not implemented (7) [ 119.066886][T12687] loop6: detected capacity change from 0 to 1024 [ 119.113312][T12695] loop3: detected capacity change from 0 to 512 [ 119.120504][T12695] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 119.158190][T12695] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.3909: invalid indirect mapped block 4294967295 (level 0) [ 119.161539][T12704] netlink: 'syz.0.3913': attribute type 12 has an invalid length. [ 119.180721][T12704] netlink: 'syz.0.3913': attribute type 29 has an invalid length. [ 119.188545][T12704] netlink: 'syz.0.3913': attribute type 2 has an invalid length. [ 119.196308][T12704] __nla_validate_parse: 5 callbacks suppressed [ 119.196318][T12704] netlink: 260 bytes leftover after parsing attributes in process `syz.0.3913'. [ 119.204030][T12695] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.3909: invalid indirect mapped block 4294967295 (level 1) [ 119.236964][T12695] EXT4-fs (loop3): 1 orphan inode deleted [ 119.242846][T12695] EXT4-fs (loop3): 1 truncate cleaned up [ 119.361197][T12726] loop6: detected capacity change from 0 to 1024 [ 119.380056][T12726] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 119.405059][T12726] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 119.420102][T12726] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 119.428766][T12726] EXT4-fs (loop6): orphan cleanup on readonly fs [ 119.436166][T12726] EXT4-fs error (device loop6): ext4_read_inode_bitmap:167: comm syz.6.3923: Inode bitmap for bg 0 marked uninitialized [ 119.458016][T12726] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:517: comm syz.6.3923: Block bitmap for bg 0 marked uninitialized [ 119.540246][T12741] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3931'. [ 119.776817][T12772] netlink: 128 bytes leftover after parsing attributes in process `syz.6.3946'. [ 119.888540][T12785] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3952'. [ 119.934108][T12791] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3955'. [ 119.957799][T12797] netlink: 7 bytes leftover after parsing attributes in process `syz.0.3958'. [ 119.961483][T12791] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3955'. [ 119.980447][T12797] netlink: 7 bytes leftover after parsing attributes in process `syz.0.3958'. [ 120.025700][T12804] netlink: 'syz.0.3961': attribute type 1 has an invalid length. [ 120.033506][T12804] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3961'. [ 120.124865][T12827] netlink: 182 bytes leftover after parsing attributes in process `syz.1.3972'. [ 120.257147][T12855] loop6: detected capacity change from 0 to 764 [ 120.273804][T12855] rock: directory entry would overflow storage [ 120.280011][T12855] rock: sig=0x4f50, size=4, remaining=3 [ 120.285660][T12855] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 120.320469][ T8057] hid_parser_main: 146 callbacks suppressed [ 120.320484][ T8057] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 120.338059][ T8057] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 120.416040][T12879] vlan2: entered allmulticast mode [ 120.644761][T12899] loop1: detected capacity change from 0 to 256 [ 120.679313][T12903] loop6: detected capacity change from 0 to 512 [ 120.701268][T12903] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 120.851275][T12918] loop0: detected capacity change from 0 to 1024 [ 120.894263][T12918] ext4 filesystem being mounted at /868/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.915404][ T29] kauditd_printk_skb: 106 callbacks suppressed [ 120.915418][ T29] audit: type=1326 audit(1764774254.935:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12920 comm="syz.1.4013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f450e28f749 code=0x7ffc0000 [ 120.988677][T12918] EXT4-fs error (device loop0): ext4_map_blocks:813: inode #15: block 1: comm syz.0.4011: lblock 1 mapped to illegal pblock 1 (length 5) [ 121.022834][T12928] netlink: 'syz.1.4014': attribute type 1 has an invalid length. [ 121.061960][ T29] audit: type=1326 audit(1764774254.965:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12920 comm="syz.1.4013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f450e28f749 code=0x7ffc0000 [ 121.086308][ T29] audit: type=1326 audit(1764774254.965:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12920 comm="syz.1.4013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f450e28f749 code=0x7ffc0000 [ 121.110503][ T29] audit: type=1326 audit(1764774254.965:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12920 comm="syz.1.4013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f450e28f749 code=0x7ffc0000 [ 121.134685][ T29] audit: type=1326 audit(1764774254.965:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12920 comm="syz.1.4013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f450e28f749 code=0x7ffc0000 [ 121.201164][T12918] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 5 with error 117 [ 121.214162][T12918] EXT4-fs (loop0): This should not happen!! Data will be lost [ 121.214162][T12918] [ 121.216709][ T29] audit: type=1400 audit(1764774255.205:1019): avc: denied { ioctl } for pid=12935 comm="syz.3.4018" path="socket:[34411]" dev="sockfs" ino=34411 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 121.336981][ T29] audit: type=1107 audit(1764774255.355:1020): pid=12955 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 121.350643][ T2819] EXT4-fs error (device loop0): ext4_map_blocks:813: inode #15: block 8: comm kworker/u8:14: lblock 8 mapped to illegal pblock 8 (length 8) [ 121.369142][ T2819] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 121.381512][ T2819] EXT4-fs (loop0): This should not happen!! Data will be lost [ 121.381512][ T2819] [ 121.405869][T12966] loop6: detected capacity change from 0 to 1024 [ 121.430325][T12966] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 121.441748][T12966] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 121.453409][T12966] EXT4-fs error (device loop6): ext4_get_journal_inode:5808: inode #32: comm syz.6.4033: iget: special inode unallocated [ 121.469671][T12966] EXT4-fs (loop6): Remounting filesystem read-only [ 121.487339][T12966] EXT4-fs (loop6): no journal found [ 121.493306][T12966] EXT4-fs (loop6): can't get journal size [ 121.511282][T12966] EXT4-fs (loop6): filesystem is read-only [ 121.539491][ T29] audit: type=1400 audit(1764774255.555:1021): avc: denied { mounton } for pid=12981 comm="syz.3.4040" path="/899/file0" dev="tmpfs" ino=4626 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 121.563294][ T29] audit: type=1400 audit(1764774255.555:1022): avc: denied { mount } for pid=12981 comm="syz.3.4040" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 121.609585][T12984] loop0: detected capacity change from 0 to 512 [ 121.618541][T12984] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (3832!=33349) [ 121.652182][T12984] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e02c, mo2=0002] [ 121.674332][T12984] EXT4-fs (loop0): failed to initialize system zone (-117) [ 121.689064][T12984] EXT4-fs (loop0): mount failed [ 121.762005][ T29] audit: type=1400 audit(1764774255.775:1023): avc: denied { name_connect } for pid=13000 comm="syz.6.4049" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 121.772225][T13001] sctp: [Deprecated]: syz.6.4049 (pid 13001) Use of int in max_burst socket option. [ 121.772225][T13001] Use struct sctp_assoc_value instead [ 121.851127][T13011] loop0: detected capacity change from 0 to 512 [ 121.877789][T13011] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.4055: inode has both inline data and extents flags [ 121.891453][T13011] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.4055: couldn't read orphan inode 15 (err -117) [ 121.914721][T13011] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.4055: bg 0: block 320: padding at end of block bitmap is not set [ 121.953062][T13018] netlink: 'syz.3.4057': attribute type 1 has an invalid length. [ 121.960813][T13018] netlink: 'syz.3.4057': attribute type 4 has an invalid length. [ 121.969254][T13018] NCSI netlink: No device for ifindex 3321692160 [ 122.151057][T13039] loop7: detected capacity change from 0 to 1024 [ 122.180211][T13039] EXT4-fs: Ignoring removed nomblk_io_submit option [ 122.191816][T13039] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 122.223050][T13039] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm syz.7.4068: Invalid block bitmap block 0 in block_group 0 [ 122.263181][T13039] EXT4-fs error (device loop7): ext4_acquire_dquot:6945: comm syz.7.4068: Failed to acquire dquot type 0 [ 122.283735][T13039] EXT4-fs error (device loop7): ext4_free_blocks:6706: comm syz.7.4068: Freeing blocks not in datazone - block = 0, count = 4096 [ 122.310073][T13039] EXT4-fs error (device loop7): ext4_read_inode_bitmap:139: comm syz.7.4068: Invalid inode bitmap blk 0 in block_group 0 [ 122.322782][ T31] EXT4-fs error (device loop7): ext4_release_dquot:6981: comm kworker/u8:1: Failed to release dquot type 0 [ 122.334971][T13039] EXT4-fs error (device loop7) in ext4_free_inode:361: Corrupt filesystem [ 122.344422][T13039] EXT4-fs (loop7): 1 orphan inode deleted [ 122.357783][T13061] loop3: detected capacity change from 0 to 512 [ 122.373386][T13061] EXT4-fs warning (device loop3): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 122.390056][T13061] EXT4-fs (loop3): mount failed [ 122.420576][ T3430] hid-generic 0003:0004:0000.0005: unknown main item tag 0x0 [ 122.423383][T13077] netlink: 'syz.3.4083': attribute type 1 has an invalid length. [ 122.428731][ T3430] hid-generic 0003:0004:0000.0005: unknown main item tag 0x0 [ 122.435784][T13077] netlink: 'syz.3.4083': attribute type 1 has an invalid length. [ 122.443812][ T3430] hid-generic 0003:0004:0000.0005: unknown main item tag 0x0 [ 122.458428][ T3430] hid-generic 0003:0004:0000.0005: unknown main item tag 0x0 [ 122.466475][ T3430] hid-generic 0003:0004:0000.0005: unknown main item tag 0x0 [ 122.473914][ T3430] hid-generic 0003:0004:0000.0005: unknown main item tag 0x0 [ 122.482038][ T3430] hid-generic 0003:0004:0000.0005: unknown main item tag 0x0 [ 122.489473][ T3430] hid-generic 0003:0004:0000.0005: unknown main item tag 0x0 [ 122.496950][ T3430] hid-generic 0003:0004:0000.0005: unknown main item tag 0x0 [ 122.513862][ T3430] hid-generic 0003:0004:0000.0005: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 122.534351][T13079] loop3: detected capacity change from 0 to 8192 [ 122.545150][T13086] loop6: detected capacity change from 0 to 512 [ 122.551694][T13086] EXT4-fs: Ignoring removed nobh option [ 122.564023][T13086] ext4 filesystem being mounted at /584/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 122.621284][T13099] team0: Device dummy0 is up. Set it down before adding it as a team port [ 122.670322][T13109] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 122.676910][T13109] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 122.685167][T13109] vhci_hcd vhci_hcd.0: Device attached [ 122.692731][T13111] vhci_hcd: connection closed [ 122.692833][ T31] vhci_hcd: stop threads [ 122.701799][ T31] vhci_hcd: release socket [ 122.706367][ T31] vhci_hcd: disconnect device [ 122.729960][T13118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.739362][T13118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.778740][T13127] loop1: detected capacity change from 0 to 512 [ 122.785666][T13127] EXT4-fs: Ignoring removed mblk_io_submit option [ 122.855540][T13140] loop7: detected capacity change from 0 to 128 [ 123.425987][T13209] 0ªX¹¦À: renamed from caif0 [ 123.435432][T13209] 0ªX¹¦À: entered allmulticast mode [ 123.440677][T13209] net_ratelimit: 3495 callbacks suppressed [ 123.440690][T13209] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 123.457325][T13213] loop3: detected capacity change from 0 to 512 [ 123.488054][T13213] ext4 filesystem being mounted at /927/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.503414][T13213] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 123.588097][T13223] loop3: detected capacity change from 0 to 8192 [ 123.599506][T13223] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 123.713716][T13238] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 123.734623][T13242] IPVS: stopping master sync thread 13243 ... [ 123.737296][T13243] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 0 [ 123.835814][T13235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.852544][T13235] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.912509][T13261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.921338][T13261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.030963][T13270] loop0: detected capacity change from 0 to 512 [ 124.038873][T13270] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 124.050087][T13270] EXT4-fs (loop0): 1 truncate cleaned up [ 124.087545][T13275] loop7: detected capacity change from 0 to 128 [ 124.207724][T13287] netem: incorrect gi model size [ 124.213523][T13287] netem: change failed [ 124.250386][ T8057] IPVS: starting estimator thread 0... [ 124.258890][T13291] __nla_validate_parse: 14 callbacks suppressed [ 124.258903][T13291] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4189'. [ 124.308622][T13301] loop7: detected capacity change from 0 to 512 [ 124.322392][T13301] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 124.330482][T13301] EXT4-fs (loop7): orphan cleanup on readonly fs [ 124.338919][T13301] EXT4-fs error (device loop7): ext4_do_update_inode:5628: inode #16: comm syz.7.4183: corrupted inode contents [ 124.351031][T13301] EXT4-fs (loop7): Remounting filesystem read-only [ 124.357811][T13301] EXT4-fs (loop7): 1 truncate cleaned up [ 124.361708][T13294] IPVS: using max 2112 ests per chain, 105600 per kthread [ 124.364496][ T1706] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 124.381208][ T1706] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 124.393106][ T1706] EXT4-fs (loop7): Quota write (off=8, len=24) cancelled because transaction is not started [ 124.688683][T13354] loop6: detected capacity change from 0 to 512 [ 124.707425][T13361] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4210'. [ 124.716534][T13361] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4210'. [ 124.733513][T13354] ext4 filesystem being mounted at /602/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 124.754844][T13354] EXT4-fs error (device loop6): ext4_do_update_inode:5628: inode #2: comm syz.6.4206: corrupted inode contents [ 124.785517][T13354] EXT4-fs error (device loop6): ext4_dirty_inode:6513: inode #2: comm syz.6.4206: mark_inode_dirty error [ 124.804149][T13354] EXT4-fs error (device loop6): ext4_do_update_inode:5628: inode #2: comm syz.6.4206: corrupted inode contents [ 124.890575][T13357] loop0: detected capacity change from 0 to 32768 [ 124.942018][T13357] loop0: p1 p2 p3 < > p4 < p5 p6 > [ 124.951720][T13357] loop0: p1 start 460800 is beyond EOD, truncated [ 124.958223][T13357] loop0: p2 size 83886080 extends beyond EOD, truncated [ 124.969226][T13390] loop6: detected capacity change from 0 to 512 [ 125.010396][T13357] loop0: p5 start 460800 is beyond EOD, truncated [ 125.016921][T13357] loop0: p6 size 83886080 extends beyond EOD, truncated [ 125.179680][T13409] loop7: detected capacity change from 0 to 1024 [ 125.189973][T13409] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 125.201279][T13409] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 125.205591][T13412] loop1: detected capacity change from 0 to 128 [ 125.219528][T13412] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 125.219582][T13409] JBD2: no valid journal superblock found [ 125.238429][T13409] EXT4-fs (loop7): Could not load journal inode [ 125.247147][T13412] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 125.259320][T13414] loop0: detected capacity change from 0 to 2048 [ 125.290207][T13409] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 125.307177][T13414] ext4 filesystem being mounted at /914/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.353526][T13432] validate_nla: 2 callbacks suppressed [ 125.353540][T13432] netlink: 'syz.0.4242': attribute type 3 has an invalid length. [ 125.363809][T13434] loop7: detected capacity change from 0 to 736 [ 125.367424][T13432] netlink: 13435 bytes leftover after parsing attributes in process `syz.0.4242'. [ 125.424972][T13441] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.4247'. [ 125.468894][T13447] loop0: detected capacity change from 0 to 128 [ 125.481019][T13449] loop1: detected capacity change from 0 to 1024 [ 125.507416][T13447] EXT4-fs mount: 64 callbacks suppressed [ 125.507430][T13447] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 125.525965][T13449] EXT4-fs: Ignoring removed bh option [ 125.534676][T13449] EXT4-fs: inline encryption not supported [ 125.541208][T13449] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 125.554144][T13447] ext4 filesystem being mounted at /917/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 125.590570][T13449] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 125.625682][T13449] EXT4-fs error (device loop1): ext4_map_blocks:777: inode #3: block 2: comm syz.1.4257: lblock 2 mapped to illegal pblock 2 (length 1) [ 125.640471][T13449] EXT4-fs error (device loop1): ext4_map_blocks:777: inode #3: block 48: comm syz.1.4257: lblock 0 mapped to illegal pblock 48 (length 1) [ 125.663302][T13449] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.4257: Failed to acquire dquot type 0 [ 125.679538][ T3321] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 125.708157][T13449] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6309: Corrupt filesystem [ 125.730419][T13449] EXT4-fs error (device loop1): ext4_evict_inode:253: inode #11: comm syz.1.4257: mark_inode_dirty error [ 125.731830][T13477] loop6: detected capacity change from 0 to 512 [ 125.744584][T13449] EXT4-fs warning (device loop1): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 125.756861][T13481] loop3: detected capacity change from 0 to 128 [ 125.782941][T13481] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 125.795940][T13449] EXT4-fs (loop1): 1 orphan inode deleted [ 125.803497][T13483] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 125.814159][ T42] EXT4-fs error (device loop1): ext4_map_blocks:777: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 125.814293][T13481] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 125.838871][ T42] EXT4-fs error (device loop1): ext4_release_dquot:6981: comm kworker/u8:2: Failed to release dquot type 0 [ 125.839634][T13449] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.927680][ T42] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 125.956537][T13493] hub 6-0:1.0: USB hub found [ 125.961636][T13493] hub 6-0:1.0: 8 ports detected [ 125.974088][T13497] loop3: detected capacity change from 0 to 764 [ 125.983404][T13497] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 126.002076][T13449] EXT4-fs error (device loop1): ext4_map_blocks:777: inode #3: block 48: comm syz.1.4257: lblock 0 mapped to illegal pblock 48 (length 1) [ 126.022381][T13497] Symlink component flag not implemented [ 126.028278][T13497] Symlink component flag not implemented (7) [ 126.031621][T13449] __quota_error: 133 callbacks suppressed [ 126.031635][T13449] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=-117 [ 126.034839][T13501] loop7: detected capacity change from 0 to 1024 [ 126.087673][T13501] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.128925][ T3326] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.147811][T13501] EXT4-fs error (device loop7): ext4_read_inline_dir:1476: inode #12: block 7: comm syz.7.4273: path /435/file1/file0: bad entry in directory: inode out of bounds - offset=24, inode=150994957, rec_len=16, size=80 fake=0 [ 126.175524][T13513] IPv6: NLM_F_CREATE should be specified when creating new route [ 126.221972][T13518] xt_hashlimit: max too large, truncated to 1048576 [ 126.233561][ T29] audit: type=1326 audit(1764774261.252:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13521 comm="syz.3.4285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb60ed0f749 code=0x7ffc0000 [ 126.258371][ T8429] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.264493][ T29] audit: type=1326 audit(1764774261.282:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13521 comm="syz.3.4285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7fb60ed0f749 code=0x7ffc0000 [ 126.291478][ T29] audit: type=1326 audit(1764774261.282:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13521 comm="syz.3.4285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb60ed0f749 code=0x7ffc0000 [ 126.315163][ T29] audit: type=1326 audit(1764774261.282:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13521 comm="syz.3.4285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb60ed0f749 code=0x7ffc0000 [ 126.399955][ T29] audit: type=1326 audit(1764774261.412:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13532 comm="syz.0.4290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71ffd1f749 code=0x7ffc0000 [ 126.456418][ T29] audit: type=1326 audit(1764774261.412:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13532 comm="syz.0.4290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71ffd1f749 code=0x7ffc0000 [ 126.480050][ T29] audit: type=1326 audit(1764774261.412:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13532 comm="syz.0.4290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f71ffd1f749 code=0x7ffc0000 [ 126.503673][ T29] audit: type=1326 audit(1764774261.412:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13532 comm="syz.0.4290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71ffd1f749 code=0x7ffc0000 [ 126.528055][ T29] audit: type=1326 audit(1764774261.412:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13532 comm="syz.0.4290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71ffd1f749 code=0x7ffc0000 [ 126.605730][T13548] program syz.6.4295 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 126.667564][T13540] loop0: detected capacity change from 0 to 1024 [ 126.691540][T13540] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 126.702331][T13540] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 126.715637][T13540] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 126.726498][T13540] EXT4-fs (loop0): orphan cleanup on readonly fs [ 126.734023][T13540] EXT4-fs error (device loop0): ext4_read_inode_bitmap:167: comm syz.0.4291: Inode bitmap for bg 0 marked uninitialized [ 126.759226][T13540] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 126.776853][T13540] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:517: comm syz.0.4291: Block bitmap for bg 0 marked uninitialized [ 126.815100][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.913752][T13574] loop0: detected capacity change from 0 to 1764 [ 126.980254][T13583] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4312'. [ 127.055430][T13591] loop6: detected capacity change from 0 to 1024 [ 127.067747][T13591] EXT4-fs: Ignoring removed orlov option [ 127.074887][T13591] EXT4-fs (loop6): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 127.104906][T13591] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.121314][T13595] loop1: detected capacity change from 0 to 1024 [ 127.143127][T13595] EXT4-fs: Ignoring removed orlov option [ 127.157079][ T6240] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.167565][T13595] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.185189][T13595] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.212181][T13613] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4326'. [ 127.222242][T13613] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4326'. [ 127.222368][T13616] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.4327'. [ 127.267924][T13622] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4330'. [ 127.329658][T13630] loop7: detected capacity change from 0 to 128 [ 127.364259][T13630] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 127.380759][T13630] ext4 filesystem being mounted at /449/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 127.419799][T13649] vlan2: entered allmulticast mode [ 127.433977][ T8429] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 127.448998][T13654] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in; [ 127.448998][T13654] program syz.3.4347 not setting count and/or reply_len properly [ 127.671600][T13690] tipc: Started in network mode [ 127.676654][T13690] tipc: Node identity , cluster identity 4711 [ 127.683736][T13690] tipc: Failed to obtain node identity [ 127.689421][T13690] tipc: Enabling of bearer rejected, failed to enable media [ 127.964957][ T3430] hid_parser_main: 9 callbacks suppressed [ 127.965056][ T3430] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 127.983955][ T3430] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 128.174144][T13770] loop3: detected capacity change from 0 to 128 [ 128.333730][T13784] loop1: detected capacity change from 0 to 8192 [ 128.338006][T13795] loop7: detected capacity change from 0 to 1024 [ 128.365199][T13795] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 128.382870][T13802] netlink: 'syz.6.4413': attribute type 5 has an invalid length. [ 128.391858][T13795] ext4 filesystem being mounted at /464/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.436731][ T8429] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 128.569794][T13834] loop1: detected capacity change from 0 to 1024 [ 128.581042][T13832] sctp: [Deprecated]: syz.7.4429 (pid 13832) Use of int in max_burst socket option. [ 128.581042][T13832] Use struct sctp_assoc_value instead [ 128.639171][T13847] netlink: 'syz.7.4436': attribute type 29 has an invalid length. [ 128.647268][T13847] netlink: 'syz.7.4436': attribute type 4 has an invalid length. [ 128.674300][T13853] netlink: 'syz.1.4439': attribute type 1 has an invalid length. [ 128.678288][T13852] loop7: detected capacity change from 0 to 1024 [ 128.682758][T13853] netlink: 'syz.1.4439': attribute type 4 has an invalid length. [ 128.682774][T13853] NCSI netlink: No device for ifindex 3321692160 [ 128.699490][T13855] No control pipe specified [ 128.723240][T13852] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 128.736549][T13852] ext4 filesystem being mounted at /470/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.755199][T13852] EXT4-fs error (device loop7): ext4_map_blocks:813: inode #15: block 1: comm syz.7.4438: lblock 1 mapped to illegal pblock 1 (length 5) [ 128.759674][T13861] A link change request failed with some changes committed already. Interface nicvf0 may have been left with an inconsistent configuration, please check. [ 128.772212][T13852] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 5 with error 117 [ 128.798767][T13852] EXT4-fs (loop7): This should not happen!! Data will be lost [ 128.798767][T13852] [ 128.889579][T13868] loop6: detected capacity change from 0 to 512 [ 128.906928][ T31] EXT4-fs error (device loop7): ext4_map_blocks:813: inode #15: block 8: comm kworker/u8:1: lblock 8 mapped to illegal pblock 8 (length 8) [ 128.922569][ T31] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 128.935536][ T31] EXT4-fs (loop7): This should not happen!! Data will be lost [ 128.935536][ T31] [ 128.938958][T13868] EXT4-fs warning (device loop6): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 128.960319][ T8429] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 128.961951][T13868] EXT4-fs (loop6): mount failed [ 129.048404][T13886] loop6: detected capacity change from 0 to 128 [ 129.069426][T13886] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 129.077336][T13886] FAT-fs (loop6): Filesystem has been set read-only [ 129.097130][T13894] loop7: detected capacity change from 0 to 512 [ 129.106003][T13894] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (3832!=33349) [ 129.118264][T13894] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e02c, mo2=0002] [ 129.137892][T13894] EXT4-fs (loop7): failed to initialize system zone (-117) [ 129.145458][T13894] EXT4-fs (loop7): mount failed [ 129.310866][T13928] loop1: detected capacity change from 0 to 8192 [ 129.328106][T13936] sd 0:0:1:0: device reset [ 129.424041][T13957] netlink: 'syz.3.4485': attribute type 1 has an invalid length. [ 129.431844][T13957] __nla_validate_parse: 13 callbacks suppressed [ 129.431858][T13957] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4485'. [ 129.466806][T13960] loop1: detected capacity change from 0 to 512 [ 129.559852][T13980] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4492'. [ 129.619404][T13987] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4498'. [ 129.716243][T14006] netlink: 3 bytes leftover after parsing attributes in process `syz.3.4508'. [ 129.729191][T14006] 0ªX¹¦À: renamed from caif0 [ 129.744352][T14008] loop1: detected capacity change from 0 to 128 [ 129.760128][T14010] loop6: detected capacity change from 0 to 128 [ 129.767875][T14006] 0ªX¹¦À: entered allmulticast mode [ 129.773785][T14006] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 129.791065][T14010] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 129.819607][T14010] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 129.908345][T14033] loop6: detected capacity change from 0 to 128 [ 129.924211][T14029] loop7: detected capacity change from 0 to 1024 [ 129.936083][T14033] syz.6.4520: attempt to access beyond end of device [ 129.936083][T14033] loop6: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 129.959735][T14033] syz.6.4520: attempt to access beyond end of device [ 129.959735][T14033] loop6: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 129.973262][T14033] Buffer I/O error on dev loop6, logical block 79, lost async page write [ 130.012740][T14029] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.025814][T14033] syz.6.4520: attempt to access beyond end of device [ 130.025814][T14033] loop6: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 130.040839][T14033] Buffer I/O error on dev loop6, logical block 80, lost async page write [ 130.099700][ T8429] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.109356][T14033] syz.6.4520: attempt to access beyond end of device [ 130.109356][T14033] loop6: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 130.109704][T14033] syz.6.4520: attempt to access beyond end of device [ 130.109704][T14033] loop6: rw=2049, sector=166, nr_sectors = 2 limit=128 [ 130.136815][T14033] Buffer I/O error on dev loop6, logical block 83, lost async page write [ 130.145255][T14033] syz.6.4520: attempt to access beyond end of device [ 130.145255][T14033] loop6: rw=2049, sector=168, nr_sectors = 2 limit=128 [ 130.158717][T14033] Buffer I/O error on dev loop6, logical block 84, lost async page write [ 130.170343][T14033] syz.6.4520: attempt to access beyond end of device [ 130.170343][T14033] loop6: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 130.184371][T14033] syz.6.4520: attempt to access beyond end of device [ 130.184371][T14033] loop6: rw=2049, sector=190, nr_sectors = 2 limit=128 [ 130.199466][T14033] Buffer I/O error on dev loop6, logical block 95, lost async page write [ 130.210443][T14033] syz.6.4520: attempt to access beyond end of device [ 130.210443][T14033] loop6: rw=2049, sector=192, nr_sectors = 2 limit=128 [ 130.225660][T14033] Buffer I/O error on dev loop6, logical block 96, lost async page write [ 130.235715][T14033] syz.6.4520: attempt to access beyond end of device [ 130.235715][T14033] loop6: rw=2049, sector=194, nr_sectors = 6 limit=128 [ 130.236418][T14050] loop1: detected capacity change from 0 to 512 [ 130.251296][T14033] Buffer I/O error on dev loop6, logical block 99, lost async page write [ 130.325889][T14033] Buffer I/O error on dev loop6, logical block 100, lost async page write [ 130.339182][T14062] loop1: detected capacity change from 0 to 512 [ 130.347250][T14033] Buffer I/O error on dev loop6, logical block 111, lost async page write [ 130.362356][T14033] Buffer I/O error on dev loop6, logical block 112, lost async page write [ 130.377240][T14064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.387904][T14064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.435204][T14068] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 130.546759][T14082] loop0: detected capacity change from 0 to 512 [ 130.555349][T14082] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.4543: inode has both inline data and extents flags [ 130.568850][T14082] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.4543: couldn't read orphan inode 15 (err -117) [ 130.582235][T14082] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.607951][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.676107][T14099] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 130.686826][T14095] loop0: detected capacity change from 0 to 2048 [ 130.714823][T14095] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.781078][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.859903][T14117] IPv6: NLM_F_CREATE should be specified when creating new route [ 130.889222][T14119] loop7: detected capacity change from 0 to 1024 [ 130.897214][T14119] EXT4-fs: Ignoring removed bh option [ 130.906994][T14119] EXT4-fs: inline encryption not supported [ 130.924207][T14119] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 130.941247][T14119] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 130.953702][T14119] EXT4-fs error (device loop7): ext4_map_blocks:777: inode #3: block 2: comm syz.7.4559: lblock 2 mapped to illegal pblock 2 (length 1) [ 130.970249][T14119] EXT4-fs error (device loop7): ext4_map_blocks:777: inode #3: block 48: comm syz.7.4559: lblock 0 mapped to illegal pblock 48 (length 1) [ 130.987603][T14119] EXT4-fs error (device loop7): ext4_acquire_dquot:6945: comm syz.7.4559: Failed to acquire dquot type 0 [ 131.002473][T14119] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6309: Corrupt filesystem [ 131.013744][T14119] EXT4-fs error (device loop7): ext4_evict_inode:253: inode #11: comm syz.7.4559: mark_inode_dirty error [ 131.026068][T14119] EXT4-fs warning (device loop7): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 131.038064][T14119] EXT4-fs (loop7): 1 orphan inode deleted [ 131.038733][T14138] netlink: 'syz.6.4568': attribute type 1 has an invalid length. [ 131.045021][T14119] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.067735][ T52] EXT4-fs error (device loop7): ext4_map_blocks:777: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 131.083726][ T29] kauditd_printk_skb: 185 callbacks suppressed [ 131.083740][ T29] audit: type=1326 audit(1764774522.098:1335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14114 comm="syz.0.4557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f71ffd52005 code=0x7ffc0000 [ 131.115852][ T29] audit: type=1326 audit(1764774522.098:1336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14114 comm="syz.0.4557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f71ffd52005 code=0x7ffc0000 [ 131.141422][ T29] audit: type=1326 audit(1764774522.098:1337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14114 comm="syz.0.4557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f71ffd52005 code=0x7ffc0000 [ 131.159984][ T52] Quota error (device loop7): remove_tree: Can't read quota data block 1 [ 131.167314][ T29] audit: type=1326 audit(1764774522.098:1338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14114 comm="syz.0.4557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f71ffd52005 code=0x7ffc0000 [ 131.173536][ T52] EXT4-fs error (device loop7): ext4_release_dquot:6981: comm kworker/u8:3: Failed to release dquot type 0 [ 131.174625][T14119] EXT4-fs error (device loop7): ext4_map_blocks:777: inode #3: block 1: comm syz.7.4559: lblock 1 mapped to illegal pblock 1 (length 1) [ 131.199677][ T29] audit: type=1326 audit(1764774522.098:1339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14141 comm="syz.1.4570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f450e28f749 code=0x7ffc0000 [ 131.211327][T14119] Quota error (device loop7): find_next_id: Can't read quota tree block 1 [ 131.225663][ T29] audit: type=1326 audit(1764774522.098:1340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14141 comm="syz.1.4570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f450e28f749 code=0x7ffc0000 [ 131.284698][ T29] audit: type=1326 audit(1764774522.098:1341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14114 comm="syz.0.4557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f71ffd52005 code=0x7ffc0000 [ 131.309848][ T29] audit: type=1326 audit(1764774522.098:1342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14114 comm="syz.0.4557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f71ffd52005 code=0x7ffc0000 [ 131.335848][ T8429] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.346611][ T8429] EXT4-fs error (device loop7): __ext4_get_inode_loc:4828: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 131.361608][ T8429] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6309: Corrupt filesystem [ 131.372210][ T8429] EXT4-fs error (device loop7): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 131.492243][T14166] loop7: detected capacity change from 0 to 512 [ 131.551182][T14166] EXT4-fs: Ignoring removed oldalloc option [ 131.556971][T14175] loop1: detected capacity change from 0 to 512 [ 131.567969][T14166] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.581433][T14166] ext4 filesystem being mounted at /503/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 131.611197][ T8429] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.668951][T14182] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4586'. [ 131.814209][T14188] netlink: 7 bytes leftover after parsing attributes in process `syz.7.4596'. [ 131.848407][T14194] loop7: detected capacity change from 0 to 128 [ 131.961610][T14210] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4600'. [ 132.048569][T14227] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4608'. [ 132.090177][T14232] loop7: detected capacity change from 0 to 512 [ 132.097803][T14232] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 132.109384][T14232] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=200ec018, mo2=0002] [ 132.119634][T14232] System zones: 1-12 [ 132.129733][T14232] EXT4-fs (loop7): 1 truncate cleaned up [ 132.138351][T14232] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.201341][ T8429] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.352036][T14261] hub 6-0:1.0: USB hub found [ 132.357531][T14261] hub 6-0:1.0: 8 ports detected [ 132.413580][T14276] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4629'. [ 132.461712][T14281] loop0: detected capacity change from 0 to 512 [ 132.470263][T14281] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 132.499685][T14281] EXT4-fs (loop0): orphan cleanup on readonly fs [ 132.500298][T14285] netlink: 'syz.1.4635': attribute type 3 has an invalid length. [ 132.514040][T14281] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm wÞ£ÿ: Failed to acquire dquot type 1 [ 132.515351][T14285] netlink: 13435 bytes leftover after parsing attributes in process `syz.1.4635'. [ 132.527121][T14281] EXT4-fs (loop0): 1 truncate cleaned up [ 132.542978][T14281] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 132.579762][T14292] netlink: 'syz.7.4646': attribute type 1 has an invalid length. [ 132.614010][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.631339][T14297] loop6: detected capacity change from 0 to 736 [ 132.639074][T14288] xt_hashlimit: max too large, truncated to 1048576 [ 132.684282][T14307] netlink: 'syz.3.4645': attribute type 1 has an invalid length. [ 132.695001][T14304] loop7: detected capacity change from 0 to 128 [ 132.701815][T14304] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 132.714006][T14304] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 132.742613][ T52] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 132.865765][T14327] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=14327 comm=syz.1.4654 [ 133.198363][T14374] loop0: detected capacity change from 0 to 512 [ 133.225656][T14374] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 133.235313][T14374] EXT4-fs (loop0): orphan cleanup on readonly fs [ 133.243637][T14374] EXT4-fs error (device loop0): ext4_do_update_inode:5628: inode #16: comm syz.0.4684: corrupted inode contents [ 133.257045][T14374] EXT4-fs (loop0): Remounting filesystem read-only [ 133.265561][T14374] EXT4-fs (loop0): 1 truncate cleaned up [ 133.271386][ T52] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 133.283287][ T52] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 133.294692][ T52] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 133.307055][T14374] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 133.333074][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.364979][T14388] loop0: detected capacity change from 0 to 764 [ 133.374095][T14388] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 133.383668][T14388] Symlink component flag not implemented [ 133.389593][T14388] Symlink component flag not implemented (7) [ 133.396736][T14391] netlink: 'syz.6.4681': attribute type 1 has an invalid length. [ 133.404568][T14391] netlink: 'syz.6.4681': attribute type 2 has an invalid length. [ 133.422542][T14391] netlink: 'syz.6.4681': attribute type 1 has an invalid length. [ 133.430749][T14391] netlink: 'syz.6.4681': attribute type 2 has an invalid length. [ 133.449541][T14399] program syz.0.4683 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 133.732559][ T1592] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.783095][ T1592] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.857102][ T1592] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.921105][ T1592] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.945837][T14418] chnl_net:caif_netlink_parms(): no params data found [ 133.984528][T14418] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.991592][T14418] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.998767][T14418] bridge_slave_0: entered allmulticast mode [ 134.005811][T14418] bridge_slave_0: entered promiscuous mode [ 134.012657][T14418] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.019773][T14418] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.027128][T14418] bridge_slave_1: entered allmulticast mode [ 134.033748][T14418] bridge_slave_1: entered promiscuous mode [ 134.055680][T14418] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 134.070605][T14418] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 134.100033][T14418] team0: Port device team_slave_0 added [ 134.106554][ T1592] bridge_slave_1: left allmulticast mode [ 134.113421][ T1592] bridge_slave_1: left promiscuous mode [ 134.119540][ T1592] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.127686][ T1592] bridge_slave_0: left allmulticast mode [ 134.134148][ T1592] bridge_slave_0: left promiscuous mode [ 134.139994][ T1592] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.229642][ T1592] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 134.239937][ T1592] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 134.250396][ T1592] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 134.262376][ T1592] bond0 (unregistering): Released all slaves [ 134.271797][T14418] team0: Port device team_slave_1 added [ 134.289828][T14418] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 134.297471][T14418] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 134.324034][T14418] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 134.334840][ T1592] tipc: Left network mode [ 134.335285][T14418] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.346145][T14418] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 134.372692][T14418] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 134.386483][ T1592] hsr_slave_0: left promiscuous mode [ 134.392120][ T1592] hsr_slave_1: left promiscuous mode [ 134.397718][ T1592] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.405865][ T1592] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 134.413721][ T1592] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.421150][ T1592] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 134.434278][ T1592] veth1_macvtap: left promiscuous mode [ 134.439834][ T1592] veth0_macvtap: left promiscuous mode [ 134.493151][T14453] loop6: detected capacity change from 0 to 1024 [ 134.501137][T14453] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 134.513357][T14453] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 134.525465][T14453] JBD2: no valid journal superblock found [ 134.532362][T14453] EXT4-fs (loop6): Could not load journal inode [ 134.544153][ T1592] team0 (unregistering): Port device team_slave_1 removed [ 134.551811][T14453] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 134.565478][ T1592] team0 (unregistering): Port device team_slave_0 removed [ 134.604255][T14457] vlan2: entered allmulticast mode [ 134.645684][T14418] hsr_slave_0: entered promiscuous mode [ 134.652421][T14418] hsr_slave_1: entered promiscuous mode [ 134.662274][T14418] debugfs: 'hsr0' already exists in 'hsr' [ 134.668116][T14418] Cannot create hsr debugfs directory [ 134.775514][T14418] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 134.794431][T14418] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 134.806170][T14418] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 134.826140][T14418] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 134.858473][ T1592] IPVS: stop unused estimator thread 0... [ 134.993538][T14418] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.014765][T14418] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.031738][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.039231][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.051279][T14504] SELinux: Context Ü is not valid (left unmapped). [ 135.080524][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.088050][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.176415][T14522] IPv6: NLM_F_CREATE should be specified when creating new route [ 135.233079][T14529] loop3: detected capacity change from 0 to 1024 [ 135.237122][T14418] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 135.242108][T14529] EXT4-fs: Ignoring removed bh option [ 135.314766][T14545] loop6: detected capacity change from 0 to 256 [ 135.324617][T14529] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 135.425895][T14556] __nla_validate_parse: 6 callbacks suppressed [ 135.425911][T14556] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4745'. [ 135.478246][ T3333] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 135.537449][T14418] veth0_vlan: entered promiscuous mode [ 135.553859][T14418] veth1_vlan: entered promiscuous mode [ 135.579135][T14418] veth0_macvtap: entered promiscuous mode [ 135.587161][T14580] loop1: detected capacity change from 0 to 1024 [ 135.596532][T14418] veth1_macvtap: entered promiscuous mode [ 135.607944][T14418] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 135.621766][T14418] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 135.633509][ T187] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.646513][ T187] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.657811][ T187] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.668197][ T187] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.798802][T14604] loop8: detected capacity change from 0 to 512 [ 135.940627][T14622] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4773'. [ 135.961252][T14624] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4774'. [ 135.971712][T14624] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 136.046578][T14638] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4781'. [ 136.056211][T14638] netlink: 196 bytes leftover after parsing attributes in process `syz.6.4781'. [ 136.067409][T14638] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4781'. [ 136.077119][T14638] netlink: 196 bytes leftover after parsing attributes in process `syz.6.4781'. [ 136.286271][T14668] No control pipe specified [ 136.321276][T14672] netlink: 'syz.8.4798': attribute type 5 has an invalid length. [ 136.346828][T14676] loop8: detected capacity change from 0 to 512 [ 136.353474][T14676] EXT4-fs: Ignoring removed nobh option [ 136.368960][T14676] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.383285][T14676] ext4 filesystem being mounted at /22/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 136.430143][T14418] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.486612][ T29] kauditd_printk_skb: 328 callbacks suppressed [ 136.486627][ T29] audit: type=1326 audit(1764774527.177:1663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14693 comm="syz.8.4803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50b461f749 code=0x7ffc0000 [ 136.522190][ T29] audit: type=1326 audit(1764774527.177:1664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14693 comm="syz.8.4803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50b461f749 code=0x7ffc0000 [ 136.545794][ T29] audit: type=1326 audit(1764774527.177:1665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14693 comm="syz.8.4803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f50b461f749 code=0x7ffc0000 [ 136.569994][ T29] audit: type=1326 audit(1764774527.177:1666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14693 comm="syz.8.4803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50b461f749 code=0x7ffc0000 [ 136.593543][ T29] audit: type=1326 audit(1764774527.177:1667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14693 comm="syz.8.4803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50b461f749 code=0x7ffc0000 [ 136.617670][ T29] audit: type=1326 audit(1764774527.177:1668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14693 comm="syz.8.4803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f50b461df90 code=0x7ffc0000 [ 136.630757][T14696] loop7: detected capacity change from 0 to 512 [ 136.641389][ T29] audit: type=1326 audit(1764774527.205:1669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14693 comm="syz.8.4803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50b461f749 code=0x7ffc0000 [ 136.641417][ T29] audit: type=1326 audit(1764774527.205:1670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14693 comm="syz.8.4803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f50b461f749 code=0x7ffc0000 [ 136.641506][ T29] audit: type=1326 audit(1764774527.205:1671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14693 comm="syz.8.4803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50b461f749 code=0x7ffc0000 [ 136.641528][ T29] audit: type=1326 audit(1764774527.205:1672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14693 comm="syz.8.4803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50b461f749 code=0x7ffc0000 [ 136.768090][T14696] EXT4-fs error (device loop7): ext4_orphan_get:1392: inode #15: comm syz.7.4809: inode has both inline data and extents flags [ 136.783140][T14696] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.4809: couldn't read orphan inode 15 (err -117) [ 136.796682][T14696] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.816360][T14696] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.4809: bg 0: block 320: padding at end of block bitmap is not set [ 136.835222][T14702] loop3: detected capacity change from 0 to 2048 [ 136.848646][T14702] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.881490][ T8429] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.904625][ T3333] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.101277][T14740] loop7: detected capacity change from 0 to 1024 [ 137.104615][T14742] loop8: detected capacity change from 0 to 512 [ 137.116956][T14740] EXT4-fs: Ignoring removed nomblk_io_submit option [ 137.125817][T14740] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 137.135626][T14740] System zones: 0-1, 3-36 [ 137.142225][T14742] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.145430][T14740] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.155740][T14742] ext4 filesystem being mounted at /27/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.200431][T14742] EXT4-fs error (device loop8): ext4_xattr_block_get:597: inode #15: comm syz.8.4827: corrupted xattr block 33: bad e_name length [ 137.215155][T14742] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop8 ino=15 [ 137.226121][T14740] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 137.238673][T14742] EXT4-fs error (device loop8): ext4_xattr_block_get:597: inode #15: comm syz.8.4827: corrupted xattr block 33: bad e_name length [ 137.253663][T14742] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop8 ino=15 [ 137.264272][T14742] EXT4-fs error (device loop8): ext4_xattr_block_get:597: inode #15: comm syz.8.4827: corrupted xattr block 33: bad e_name length [ 137.278661][T14740] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 137.278751][T14742] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop8 ino=15 [ 137.279243][T14742] EXT4-fs error (device loop8): ext4_do_update_inode:5628: inode #4: comm syz.8.4827: corrupted inode contents [ 137.287338][T14740] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 137.319959][T14742] EXT4-fs error (device loop8): ext4_dirty_inode:6513: inode #4: comm syz.8.4827: mark_inode_dirty error [ 137.333371][T14742] EXT4-fs error (device loop8): ext4_do_update_inode:5628: inode #4: comm syz.8.4827: corrupted inode contents [ 137.333476][ T8429] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.346483][T14742] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #4: comm syz.8.4827: mark_inode_dirty error [ 137.374326][T14742] EXT4-fs error (device loop8): ext4_acquire_dquot:6945: comm syz.8.4827: Failed to acquire dquot type 1 [ 137.459850][T14418] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.474007][T14753] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4833'. [ 137.528478][T14761] vhci_hcd: invalid port number 23 [ 137.586345][T14768] netlink: 'syz.7.4838': attribute type 10 has an invalid length. [ 137.596115][T14768] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 137.606313][T14768] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 137.619299][T14768] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 137.660078][T14771] loop7: detected capacity change from 0 to 1024 [ 137.673241][T14771] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.698197][ T8429] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.891232][T14803] loop6: detected capacity change from 0 to 1024 [ 137.901123][T14803] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 137.912059][T14803] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 137.924217][T14803] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 137.938374][T14803] JBD2: no valid journal superblock found [ 137.944108][T14803] EXT4-fs (loop6): Could not load journal inode [ 138.004046][T14817] loop8: detected capacity change from 0 to 512 [ 138.036544][T14817] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 138.078973][ T52] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 138.108949][T14831] loop8: detected capacity change from 0 to 512 [ 138.120772][T14835] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4870'. [ 138.139783][T14831] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.155411][T14831] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.169079][T14831] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 138.203483][T14418] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.398746][T14852] loop3: detected capacity change from 0 to 1024 [ 138.416400][T14852] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.445065][T14861] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4880'. [ 138.482979][ T3333] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.542485][ C1] hrtimer: interrupt took 15176 ns [ 138.748235][T14893] loop6: detected capacity change from 0 to 512 [ 138.767938][T14893] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #15: comm syz.6.4903: inode has both inline data and extents flags [ 138.788927][T14898] dummy0: entered allmulticast mode [ 138.794584][T14898] dummy0: left allmulticast mode [ 138.803620][T14893] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.4903: couldn't read orphan inode 15 (err -117) [ 138.832589][T14893] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.897696][ T6240] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.107715][T14922] loop1: detected capacity change from 0 to 256 [ 139.164088][T14924] loop6: detected capacity change from 0 to 1024 [ 139.182983][T14924] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 139.210500][T14924] ext4 filesystem being mounted at /749/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.226746][T14924] EXT4-fs error (device loop6): ext4_map_blocks:813: inode #15: comm syz.6.4909: lblock 0 mapped to illegal pblock 0 (length 1) [ 139.233444][T14930] sctp: [Deprecated]: syz.1.4911 (pid 14930) Use of int in max_burst socket option. [ 139.233444][T14930] Use struct sctp_assoc_value instead [ 139.256817][T14924] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 139.269130][T14924] EXT4-fs (loop6): This should not happen!! Data will be lost [ 139.269130][T14924] [ 139.323481][ T6240] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 139.584293][T14958] netlink: 'syz.3.4924': attribute type 1 has an invalid length. [ 139.643490][T14965] macvtap0: refused to change device tx_queue_len [ 139.691748][T14974] loop3: detected capacity change from 0 to 512 [ 140.324042][T15040] hub 6-0:1.0: USB hub found [ 140.328802][T15040] hub 6-0:1.0: 8 ports detected [ 140.415599][T15052] loop3: detected capacity change from 0 to 128 [ 140.442778][T15052] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 140.455574][T15052] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 140.645166][T15078] loop1: detected capacity change from 0 to 512 [ 140.675889][T15085] loop8: detected capacity change from 0 to 128 [ 140.684417][T15085] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 140.736823][T15091] netlink: 'syz.7.4989': attribute type 1 has an invalid length. [ 140.753424][T15085] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 140.814807][ T12] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 140.871013][T15108] 9pnet: Could not find request transport: t [ 140.917917][T15118] random: crng reseeded on system resumption [ 140.981958][T15127] loop8: detected capacity change from 0 to 512 [ 141.001291][T15127] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 141.015434][T15132] loop7: detected capacity change from 0 to 2048 [ 141.031215][T15127] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=200ec018, mo2=0002] [ 141.044547][T15137] __nla_validate_parse: 10 callbacks suppressed [ 141.044570][T15137] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5008'. [ 141.063776][T15127] System zones: 1-12 [ 141.071020][T15136] loop3: detected capacity change from 0 to 128 [ 141.080092][T15127] EXT4-fs (loop8): 1 truncate cleaned up [ 141.087378][T15132] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.101255][T15136] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 141.110295][T15127] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.124433][T15132] ext4 filesystem being mounted at /583/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.182716][ T8429] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.236269][T15146] xt_hashlimit: max too large, truncated to 1048576 [ 141.243674][T15143] 9pnet: Could not find request transport: 0xffffffffffffffff [ 141.266696][T15146] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 141.299524][T14418] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.309119][T15148] netlink: 'syz.1.5012': attribute type 1 has an invalid length. [ 141.711638][T15184] netlink: 'syz.1.5028': attribute type 1 has an invalid length. [ 141.719431][T15184] netlink: 'syz.1.5028': attribute type 2 has an invalid length. [ 141.753131][T15184] netlink: 'syz.1.5028': attribute type 1 has an invalid length. [ 141.760867][T15184] netlink: 'syz.1.5028': attribute type 2 has an invalid length. [ 141.815521][T15188] loop8: detected capacity change from 0 to 764 [ 141.849648][T15188] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 141.863393][T15194] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5034'. [ 141.874643][ T29] kauditd_printk_skb: 177 callbacks suppressed [ 141.874656][ T29] audit: type=1400 audit(1764774532.210:1847): avc: denied { mount } for pid=15187 comm="syz.8.5029" name="/" dev="loop8" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 141.910460][T15188] Symlink component flag not implemented [ 141.917431][T15196] sch_tbf: burst 0 is lower than device veth0_to_bridge mtu (1514) ! [ 141.925665][T15188] Symlink component flag not implemented (7) [ 141.958692][ T29] audit: type=1400 audit(1764774532.294:1848): avc: denied { unmount } for pid=14418 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 141.994422][T15208] loop8: detected capacity change from 0 to 512 [ 142.067822][ T52] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.070162][T15215] loop3: detected capacity change from 0 to 1764 [ 142.156829][ T52] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.158160][T15222] loop8: detected capacity change from 0 to 1764 [ 142.262241][ T52] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.287360][ T29] audit: type=1400 audit(1764774532.556:1849): avc: denied { mounton } for pid=15223 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 142.309018][ T29] audit: type=1400 audit(1764774532.594:1850): avc: denied { sys_module } for pid=15223 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 142.354801][ T52] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.440560][ T29] audit: type=1400 audit(1764774532.743:1851): avc: denied { ioctl } for pid=15236 comm="syz.7.5052" path="socket:[42737]" dev="sockfs" ino=42737 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 142.515114][ T52] bridge_slave_1: left allmulticast mode [ 142.521135][ T52] bridge_slave_1: left promiscuous mode [ 142.528021][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.547223][ T52] bridge_slave_0: left promiscuous mode [ 142.553192][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.564618][ T29] audit: type=1326 audit(1764774532.855:1852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15246 comm="syz.7.5054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89a174f749 code=0x7ffc0000 [ 142.588870][ T29] audit: type=1326 audit(1764774532.855:1853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15246 comm="syz.7.5054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89a174f749 code=0x7ffc0000 [ 142.612416][ T29] audit: type=1326 audit(1764774532.855:1854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15246 comm="syz.7.5054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f89a174f749 code=0x7ffc0000 [ 142.637893][ T29] audit: type=1326 audit(1764774532.865:1855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15246 comm="syz.7.5054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89a174f749 code=0x7ffc0000 [ 142.662025][ T29] audit: type=1326 audit(1764774532.865:1856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15246 comm="syz.7.5054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89a174f749 code=0x7ffc0000 [ 142.791513][T15256] netlink: 'syz.7.5060': attribute type 8 has an invalid length. [ 142.805152][T15262] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 142.862608][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 142.883942][T15266] 9pnet_fd: Insufficient options for proto=fd [ 142.896856][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 142.907703][ T52] bond0 (unregistering): Released all slaves [ 142.919425][ T52] bond1 (unregistering): Released all slaves [ 142.930394][T15278] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5071'. [ 142.940770][T15278] netlink: 108 bytes leftover after parsing attributes in process `syz.1.5071'. [ 142.950970][T15278] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5071'. [ 142.960179][T15278] netlink: 108 bytes leftover after parsing attributes in process `syz.1.5071'. [ 142.969224][T15278] netlink: 84 bytes leftover after parsing attributes in process `syz.1.5071'. [ 142.984604][T15280] hsr0: entered allmulticast mode [ 142.989737][T15280] hsr_slave_0: entered allmulticast mode [ 142.995490][T15280] hsr_slave_1: entered allmulticast mode [ 143.025027][ T52] hsr_slave_0: left promiscuous mode [ 143.036500][ T52] hsr_slave_1: left promiscuous mode [ 143.057720][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.065564][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 143.083614][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.092089][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.108979][ T52] team0: left promiscuous mode [ 143.115198][ T52] team_slave_0: left promiscuous mode [ 143.121025][ T52] team_slave_1: left promiscuous mode [ 143.127600][ T52] veth1_macvtap: left promiscuous mode [ 143.134210][ T52] veth0_macvtap: left promiscuous mode [ 143.140140][ T52] veth1_vlan: left promiscuous mode [ 143.145747][ T52] veth0_vlan: left promiscuous mode [ 143.233937][ T52] team0 (unregistering): Port device team_slave_1 removed [ 143.244404][ T52] team0 (unregistering): Port device team_slave_0 removed [ 143.386856][T15223] chnl_net:caif_netlink_parms(): no params data found [ 143.526562][ T52] IPVS: stop unused estimator thread 0... [ 143.592130][T15223] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.599242][T15223] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.637256][T15334] loop8: detected capacity change from 0 to 1024 [ 143.656027][T15223] bridge_slave_0: entered allmulticast mode [ 143.663595][T15223] bridge_slave_0: entered promiscuous mode [ 143.670882][T15223] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.679153][T15223] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.692141][T15223] bridge_slave_1: entered allmulticast mode [ 143.698724][T15334] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 143.698790][T15334] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.731512][T15223] bridge_slave_1: entered promiscuous mode [ 143.739170][T15333] EXT4-fs error (device loop8): ext4_free_blocks:6706: comm syz.8.5094: Freeing blocks not in datazone - block = 0, count = 16 [ 143.754288][T15333] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.5094: bg 0: block 112: padding at end of block bitmap is not set [ 143.769690][T15333] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 143.813061][T15223] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 143.826796][T14418] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 143.838663][T15223] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 143.878982][T15223] team0: Port device team_slave_0 added [ 143.888954][T15223] team0: Port device team_slave_1 added [ 143.899391][T15346] loop7: detected capacity change from 0 to 1024 [ 143.915083][T15346] EXT4-fs: Ignoring removed bh option [ 143.922131][T15223] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.929426][T15223] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 143.957532][T15223] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.983921][T15346] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 144.008436][T15223] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 144.015784][T15223] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 144.043897][T15223] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 144.064707][ T8429] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 144.099511][T15223] hsr_slave_0: entered promiscuous mode [ 144.114852][T15223] hsr_slave_1: entered promiscuous mode [ 144.121041][T15223] debugfs: 'hsr0' already exists in 'hsr' [ 144.127843][T15223] Cannot create hsr debugfs directory [ 144.184977][T15365] loop7: detected capacity change from 0 to 512 [ 144.258330][T15223] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 144.268826][T15223] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 144.277393][T15223] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 144.286839][T15223] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 144.335924][T15391] loop1: detected capacity change from 0 to 512 [ 144.368743][T15223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.371724][T15396] program syz.7.5114 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 144.393183][T15223] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.418209][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.425758][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.438864][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.445933][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.488947][T15410] bond1: ARP target 9.0.0.0 is already present [ 144.495277][T15410] bond1: option arp_ip_target: invalid value (9) [ 144.507402][T15410] bond1 (unregistering): Released all slaves [ 144.515761][T15415] ref_ctr_offset mismatch. inode: 0x160c offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x23000000 [ 144.597058][T15223] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 144.688428][T15437] loop1: detected capacity change from 0 to 512 [ 144.780071][T15449] loop1: detected capacity change from 0 to 512 [ 144.787696][T15223] veth0_vlan: entered promiscuous mode [ 144.804560][T15223] veth1_vlan: entered promiscuous mode [ 144.848717][T15223] veth0_macvtap: entered promiscuous mode [ 144.857655][T15455] loop1: detected capacity change from 0 to 512 [ 144.872284][T15223] veth1_macvtap: entered promiscuous mode [ 144.903998][T15223] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 144.919425][T15223] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 144.937998][ T31] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.946765][ T31] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.965576][ T31] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.980993][ T31] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.021914][T15465] netlink: 2184 bytes leftover after parsing attributes in process `syz.7.5143'. [ 145.038837][T15465] netlink: 144 bytes leftover after parsing attributes in process `syz.7.5143'. [ 145.112502][T15478] loop8: detected capacity change from 0 to 1024 [ 145.119528][T15478] EXT4-fs: Ignoring removed nomblk_io_submit option [ 145.143254][T15478] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 145.162002][T15478] System zones: 0-1, 3-36 [ 145.184936][T15478] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 145.213422][T15478] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 145.233810][T15492] loop7: detected capacity change from 0 to 1024 [ 145.256633][T15478] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 145.259417][T15492] EXT4-fs: Ignoring removed bh option [ 145.279937][T15492] EXT4-fs: inline encryption not supported [ 145.286178][T15492] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 145.299685][T15492] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 145.310129][T15492] EXT4-fs error (device loop7): ext4_map_blocks:777: inode #3: block 2: comm syz.7.5153: lblock 2 mapped to illegal pblock 2 (length 1) [ 145.351490][T15492] EXT4-fs error (device loop7): ext4_map_blocks:777: inode #3: block 48: comm syz.7.5153: lblock 0 mapped to illegal pblock 48 (length 1) [ 145.368011][T15492] EXT4-fs error (device loop7): ext4_acquire_dquot:6945: comm syz.7.5153: Failed to acquire dquot type 0 [ 145.380784][T15492] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6309: Corrupt filesystem [ 145.391936][T15492] EXT4-fs error (device loop7): ext4_evict_inode:253: inode #11: comm syz.7.5153: mark_inode_dirty error [ 145.410562][T15492] EXT4-fs warning (device loop7): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 145.422512][T15492] EXT4-fs (loop7): 1 orphan inode deleted [ 145.434486][T15507] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5160'. [ 145.451168][ T187] EXT4-fs error (device loop7): ext4_map_blocks:777: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 145.474660][ T187] EXT4-fs error (device loop7): ext4_release_dquot:6981: comm kworker/u8:6: Failed to release dquot type 0 [ 145.526687][T15514] loop1: detected capacity change from 0 to 1024 [ 145.534155][T15514] EXT4-fs: Ignoring removed orlov option [ 145.545915][T15492] EXT4-fs error (device loop7): ext4_map_blocks:777: inode #3: block 48: comm syz.7.5153: lblock 0 mapped to illegal pblock 48 (length 1) [ 145.613828][T15527] loop9: detected capacity change from 0 to 512 [ 145.631685][T15527] ext4 filesystem being mounted at /7/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.645996][T15530] vhci_hcd: invalid port number 23 [ 145.662325][T15527] EXT4-fs error (device loop9): ext4_xattr_block_get:597: inode #15: comm syz.9.5170: corrupted xattr block 33: bad e_name length [ 145.669070][T15535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.687828][T15527] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop9 ino=15 [ 145.702550][T15535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.711148][T15527] EXT4-fs error (device loop9): ext4_xattr_block_get:597: inode #15: comm syz.9.5170: corrupted xattr block 33: bad e_name length [ 145.725230][T15527] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop9 ino=15 [ 145.735014][T15527] EXT4-fs error (device loop9): ext4_xattr_block_get:597: inode #15: comm syz.9.5170: corrupted xattr block 33: bad e_name length [ 145.749009][T15527] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop9 ino=15 [ 145.758415][T15527] EXT4-fs error (device loop9): ext4_do_update_inode:5628: inode #4: comm syz.9.5170: corrupted inode contents [ 145.773760][T15527] EXT4-fs error (device loop9): ext4_dirty_inode:6513: inode #4: comm syz.9.5170: mark_inode_dirty error [ 145.785446][T15527] EXT4-fs error (device loop9): ext4_do_update_inode:5628: inode #4: comm syz.9.5170: corrupted inode contents [ 145.797523][T15527] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #4: comm syz.9.5170: mark_inode_dirty error [ 145.809286][T15527] EXT4-fs error (device loop9): ext4_acquire_dquot:6945: comm syz.9.5170: Failed to acquire dquot type 1 [ 145.853875][ T3488] hid-generic 0003:0004:0000.0007: unknown main item tag 0x0 [ 145.861400][ T3488] hid-generic 0003:0004:0000.0007: unknown main item tag 0x0 [ 145.868968][ T3488] hid-generic 0003:0004:0000.0007: unknown main item tag 0x0 [ 145.876449][ T3488] hid-generic 0003:0004:0000.0007: unknown main item tag 0x0 [ 145.883847][ T3488] hid-generic 0003:0004:0000.0007: unknown main item tag 0x0 [ 145.891265][ T3488] hid-generic 0003:0004:0000.0007: unknown main item tag 0x0 [ 145.898785][ T3488] hid-generic 0003:0004:0000.0007: unknown main item tag 0x0 [ 145.906214][ T3488] hid-generic 0003:0004:0000.0007: unknown main item tag 0x0 [ 145.913698][ T3488] hid-generic 0003:0004:0000.0007: unknown main item tag 0x0 [ 145.921136][ T3488] hid-generic 0003:0004:0000.0007: unknown main item tag 0x0 [ 145.929342][ T3488] hid-generic 0003:0004:0000.0007: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 146.236042][T15594] netlink: 'syz.1.5199': attribute type 1 has an invalid length. [ 146.464073][T15607] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 147.002298][T15659] xt_hashlimit: max too large, truncated to 1048576 [ 147.045976][T15663] loop3: detected capacity change from 0 to 512 [ 147.054971][T15663] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 147.082577][T15670] netlink: 'syz.7.5236': attribute type 1 has an invalid length. [ 147.117369][ T187] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 147.176000][T15690] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 147.182550][T15690] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 147.190687][T15690] vhci_hcd vhci_hcd.0: Device attached [ 147.197650][T15691] vhci_hcd: connection closed [ 147.197864][ T31] vhci_hcd: stop threads [ 147.208116][ T31] vhci_hcd: release socket [ 147.212795][ T31] vhci_hcd: disconnect device [ 147.237738][T15696] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in; [ 147.237738][T15696] program syz.7.5248 not setting count and/or reply_len properly [ 147.295621][ T29] kauditd_printk_skb: 121 callbacks suppressed [ 147.295633][ T29] audit: type=1400 audit(1764774537.281:1971): avc: denied { execute } for pid=15706 comm="syz.1.5253" dev="tmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 147.338196][ T29] audit: type=1400 audit(1764774537.318:1972): avc: denied { execute_no_trans } for pid=15706 comm="syz.1.5253" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 147.386664][ T29] audit: type=1400 audit(1764774537.365:1973): avc: denied { write } for pid=15713 comm="syz.1.5256" name="mcfilter6" dev="proc" ino=4026532464 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 147.417548][ T29] audit: type=1326 audit(1764774537.383:1974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15717 comm="syz.8.5259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50b461f749 code=0x7ffc0000 [ 147.443333][ T29] audit: type=1326 audit(1764774537.383:1975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15717 comm="syz.8.5259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50b461f749 code=0x7ffc0000 [ 147.468904][ T29] audit: type=1326 audit(1764774537.383:1976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15717 comm="syz.8.5259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f50b461f749 code=0x7ffc0000 [ 147.494264][ T29] audit: type=1326 audit(1764774537.383:1977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15717 comm="syz.8.5259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50b461f749 code=0x7ffc0000 [ 147.519574][ T29] audit: type=1326 audit(1764774537.383:1978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15717 comm="syz.8.5259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50b461f749 code=0x7ffc0000 [ 147.545134][ T29] audit: type=1326 audit(1764774537.383:1979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15717 comm="syz.8.5259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f50b461f749 code=0x7ffc0000 [ 147.570593][ T29] audit: type=1326 audit(1764774537.393:1980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15717 comm="syz.8.5259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50b461f749 code=0x7ffc0000 [ 147.675363][T15738] loop1: detected capacity change from 0 to 128 [ 148.019267][T15805] loop3: detected capacity change from 0 to 1024 [ 148.049752][T15814] sctp: [Deprecated]: syz.9.5279 (pid 15814) Use of int in max_burst socket option. [ 148.049752][T15814] Use struct sctp_assoc_value instead [ 148.073927][T15805] ext4 filesystem being mounted at /1136/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.094844][T15805] EXT4-fs error (device loop3): ext4_map_blocks:813: inode #15: comm syz.3.5278: lblock 0 mapped to illegal pblock 0 (length 1) [ 148.096418][T15821] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5280'. [ 148.117110][T15821] netlink: 32 bytes leftover after parsing attributes in process `syz.9.5280'. [ 148.126075][T15821] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5280'. [ 148.131411][T15805] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 148.148658][T15805] EXT4-fs (loop3): This should not happen!! Data will be lost [ 148.148658][T15805] [ 148.265353][T15838] macvtap0: refused to change device tx_queue_len [ 148.445813][T15873] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5292'. [ 148.471423][T15879] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 148.471423][T15879] program syz.3.5293 not setting count and/or reply_len properly [ 148.533580][T15886] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) ! [ 148.765523][T15933] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=15933 comm=syz.9.5309 [ 148.812674][T15943] loop3: detected capacity change from 0 to 512 [ 148.839360][T15943] EXT4-fs (loop3): too many log groups per flexible block group [ 148.839408][T15943] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 148.839429][T15943] EXT4-fs (loop3): mount failed [ 148.952145][T15967] loop1: detected capacity change from 0 to 128 [ 148.958867][T15967] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 148.987502][T15974] random: crng reseeded on system resumption [ 149.048267][T15986] loop9: detected capacity change from 0 to 512 [ 149.058496][T15986] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 149.080529][T15986] EXT4-fs (loop9): orphan cleanup on readonly fs [ 149.089023][T15986] EXT4-fs error (device loop9): ext4_acquire_dquot:6945: comm wÞ£ÿ: Failed to acquire dquot type 1 [ 149.102325][T15986] EXT4-fs (loop9): 1 truncate cleaned up [ 149.243068][T16015] 9pnet: Could not find request transport: ler [ 149.360306][T16037] loop9: detected capacity change from 0 to 128 [ 149.372456][T16037] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 149.386990][T16037] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 149.411211][ T42] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 149.467101][T16051] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5352'. [ 149.842423][T16100] loop1: detected capacity change from 0 to 512 [ 149.867491][T16102] loop7: detected capacity change from 0 to 1764 [ 149.939559][T16116] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5383'. [ 149.949352][T16116] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5383'. [ 150.137534][T16135] program syz.1.5392 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 150.272674][T16142] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 150.338170][T16154] 9p: Unknown uid 00000000004294967295 [ 150.362477][T16156] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5401'. [ 150.421585][T16139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.434186][T16139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.536448][T16176] netlink: 40 bytes leftover after parsing attributes in process `syz.8.5411'. [ 150.559308][T16180] netlink: 'syz.3.5413': attribute type 8 has an invalid length. [ 150.597130][T16184] loop3: detected capacity change from 0 to 4096 [ 150.603991][T16184] EXT4-fs: Ignoring removed nomblk_io_submit option [ 150.810553][ T3333] ================================================================== [ 150.818645][ T3333] BUG: KCSAN: data-race in __xa_clear_mark / xas_find_marked [ 150.826007][ T3333] [ 150.828314][ T3333] read-write to 0xffff888106e0fb48 of 8 bytes by task 167 on cpu 0: [ 150.836270][ T3333] __xa_clear_mark+0xf5/0x1e0 [ 150.840940][ T3333] __folio_end_writeback+0xf7/0x3b0 [ 150.846124][ T3333] folio_end_writeback_no_dropbehind+0x6d/0x1b0 [ 150.852355][ T3333] folio_end_writeback+0x1c/0x70 [ 150.857284][ T3333] ext4_finish_bio+0x459/0x8c0 [ 150.862040][ T3333] ext4_release_io_end+0x9f/0x1f0 [ 150.867056][ T3333] ext4_end_io_end+0x18d/0x240 [ 150.871809][ T3333] ext4_end_io_rsv_work+0x151/0x1e0 [ 150.876998][ T3333] process_scheduled_works+0x4ce/0x9d0 [ 150.882440][ T3333] worker_thread+0x582/0x770 [ 150.887012][ T3333] kthread+0x489/0x510 [ 150.891068][ T3333] ret_from_fork+0x149/0x290 [ 150.895644][ T3333] ret_from_fork_asm+0x1a/0x30 [ 150.900393][ T3333] [ 150.902700][ T3333] read to 0xffff888106e0fb48 of 8 bytes by task 3333 on cpu 1: [ 150.910222][ T3333] xas_find_marked+0x218/0x620 [ 150.914976][ T3333] find_get_entry+0x5d/0x380 [ 150.919554][ T3333] filemap_get_folios_tag+0x13b/0x210 [ 150.924916][ T3333] filemap_fdatawait_keep_errors+0x6c/0x180 [ 150.930795][ T3333] sync_inodes_sb+0x3b3/0x460 [ 150.935460][ T3333] sync_filesystem+0x102/0x190 [ 150.940213][ T3333] generic_shutdown_super+0x44/0x210 [ 150.945481][ T3333] kill_block_super+0x2a/0x70 [ 150.950145][ T3333] ext4_kill_sb+0x42/0x80 [ 150.954457][ T3333] deactivate_locked_super+0x75/0x1c0 [ 150.959809][ T3333] deactivate_super+0x97/0xa0 [ 150.964465][ T3333] cleanup_mnt+0x2a9/0x320 [ 150.968870][ T3333] __cleanup_mnt+0x19/0x20 [ 150.973283][ T3333] task_work_run+0x131/0x1a0 [ 150.977862][ T3333] exit_to_user_mode_loop+0x1fe/0x740 [ 150.983231][ T3333] do_syscall_64+0x202/0x2a0 [ 150.987806][ T3333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.993684][ T3333] [ 150.995987][ T3333] value changed: 0xffffffffffff0000 -> 0xfffffff000000000 [ 151.003071][ T3333] [ 151.005373][ T3333] Reported by Kernel Concurrency Sanitizer on: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 151.011514][ T3333] CPU: 1 UID: 0 PID: 3333 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 151.022956][ T3333] Tainted: [W]=WARN [ 151.026737][ T3333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 151.036775][ T3333] ================================================================== [ 151.389780][ T42] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.493089][ T42] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.546804][ T42] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.590708][ T42] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.665349][ T42] bridge_slave_1: left allmulticast mode [ 151.671262][ T42] bridge_slave_1: left promiscuous mode [ 151.677711][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.685851][ T42] bridge_slave_0: left allmulticast mode [ 151.691662][ T42] bridge_slave_0: left promiscuous mode [ 151.698070][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.791451][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 151.802187][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 151.811946][ T42] bond0 (unregistering): Released all slaves [ 151.856981][ T42] hsr_slave_0: left promiscuous mode [ 151.862568][ T42] hsr_slave_1: left promiscuous mode [ 151.868147][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 151.875575][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 151.883230][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 151.890670][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 151.901257][ T42] veth1_macvtap: left promiscuous mode [ 151.907458][ T42] veth0_macvtap: left promiscuous mode [ 151.913193][ T42] veth1_vlan: left promiscuous mode [ 151.918585][ T42] veth0_vlan: left promiscuous mode [ 151.979322][ T42] hsr0 (unregistering): left allmulticast mode [ 151.995824][ T42] team0 (unregistering): Port device team_slave_1 removed [ 152.006674][ T42] team0 (unregistering): Port device team_slave_0 removed [ 152.328261][ T42] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 152.338931][ T42] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.410777][ T42] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 152.421331][ T42] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.453805][ T42] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 152.463640][ T42] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.517499][ T42] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 152.528230][ T42] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.577172][ T42] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.625725][ T42] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.701333][ T42] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.765376][ T42] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.832392][ T42] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.882498][ T42] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.947018][ T42] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.010594][ T42] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.067054][ T42] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.117624][ T42] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.160138][ T42] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.214111][ T42] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.301026][ T42] bridge_slave_1: left allmulticast mode [ 153.306904][ T42] bridge_slave_1: left promiscuous mode [ 153.312898][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.321628][ T42] bridge_slave_0: left promiscuous mode [ 153.327508][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.336178][ T42] bridge_slave_1: left allmulticast mode [ 153.342580][ T42] bridge_slave_1: left promiscuous mode [ 153.348530][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.356741][ T42] bridge_slave_0: left allmulticast mode [ 153.363154][ T42] bridge_slave_0: left promiscuous mode [ 153.369177][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.377574][ T42] bridge_slave_1: left allmulticast mode [ 153.385290][ T42] bridge_slave_1: left promiscuous mode [ 153.391191][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.399630][ T42] bridge_slave_0: left promiscuous mode [ 153.405276][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.413785][ T42] bridge_slave_1: left allmulticast mode [ 153.419576][ T42] bridge_slave_1: left promiscuous mode [ 153.425238][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.433137][ T42] bridge_slave_0: left promiscuous mode [ 153.438820][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.587674][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 153.598198][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 153.607974][ T42] bond0 (unregistering): Released all slaves [ 153.673086][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 153.683641][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 153.693544][ T42] bond0 (unregistering): Released all slaves [ 153.758171][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 153.768367][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 153.777993][ T42] bond0 (unregistering): Released all slaves [ 153.865007][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 153.875071][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 153.885473][ T42] bond0 (unregistering): Released all slaves [ 153.933035][ T42] tipc: Disabling bearer [ 153.938449][ T42] tipc: Left network mode [ 153.951529][ T42] IPVS: stopping master sync thread 3535 ... [ 153.959759][ T42] hsr_slave_0: left promiscuous mode [ 153.965572][ T42] hsr_slave_1: left promiscuous mode [ 153.971488][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.979140][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 153.987055][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.994499][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 154.004305][ T42] hsr_slave_0: left promiscuous mode [ 154.010016][ T42] hsr_slave_1: left promiscuous mode [ 154.015878][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 154.023625][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 154.031361][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 154.038978][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 154.048073][ T42] hsr_slave_0: left promiscuous mode [ 154.053913][ T42] hsr_slave_1: left promiscuous mode [ 154.059624][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 154.067291][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 154.075140][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 154.082875][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 154.092332][ T42] hsr_slave_0: left promiscuous mode [ 154.098216][ T42] hsr_slave_1: left promiscuous mode [ 154.104191][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 154.111848][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 154.119853][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 154.127498][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 154.146481][ T42] veth0_macvtap: left promiscuous mode [ 154.152160][ T42] veth1_vlan: left promiscuous mode [ 154.157515][ T42] veth0_vlan: left promiscuous mode [ 154.163244][ T42] veth1_macvtap: left promiscuous mode [ 154.168759][ T42] veth0_macvtap: left promiscuous mode [ 154.174376][ T42] veth1_vlan: left promiscuous mode [ 154.179615][ T42] veth0_vlan: left promiscuous mode [ 154.185484][ T42] veth0_macvtap: left promiscuous mode [ 154.190945][ T42] veth1_vlan: left promiscuous mode [ 154.196217][ T42] veth0_vlan: left promiscuous mode [ 154.201809][ T42] veth1_macvtap: left promiscuous mode [ 154.207269][ T42] veth0_macvtap: left promiscuous mode [ 154.213056][ T42] veth1_vlan: left promiscuous mode [ 154.218270][ T42] veth0_vlan: left promiscuous mode [ 154.361323][ T42] team_slave_1 (unregistering): left promiscuous mode [ 154.368759][ T42] team0 (unregistering): Port device team_slave_1 removed [ 154.378152][ T42] team_slave_0 (unregistering): left promiscuous mode [ 154.385163][ T42] team0 (unregistering): Port device team_slave_0 removed [ 154.433146][ T42] team0 (unregistering): Port device team_slave_1 removed [ 154.442536][ T42] team0 (unregistering): Port device team_slave_0 removed [ 154.490253][ T42] team0 (unregistering): Port device team_slave_1 removed [ 154.499379][ T42] team0 (unregistering): Port device team_slave_0 removed [ 154.549412][ T42] team0 (unregistering): Port device team_slave_1 removed [ 154.559996][ T42] team0 (unregistering): Port device team_slave_0 removed [ 155.592117][ T42] IPVS: stop unused estimator thread 0... [ 155.598400][ T42] IPVS: stop unused estimator thread 0...