last executing test programs: 1m2.782407475s ago: executing program 2 (id=20): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6d, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kfree\x00', r0, 0x0, 0x9}, 0x3a) statx(0xffffffffffffffff, &(0x7f0000000c80)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0/file0\x00', 0x6000, 0x10, 0x0) 1m2.73037692s ago: executing program 2 (id=23): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, 0x0) 1m2.646345298s ago: executing program 2 (id=28): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x94}}, 0x40000) 1m2.605970812s ago: executing program 2 (id=31): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) fcntl$setstatus(r0, 0x4, 0x2400) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 1m2.460932686s ago: executing program 2 (id=38): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) 1m2.380150994s ago: executing program 2 (id=42): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_XFRM_DIR={0x5, 0x3, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) 47.291725276s ago: executing program 32 (id=42): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_XFRM_DIR={0x5, 0x3, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) 35.250003008s ago: executing program 3 (id=1045): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000040)={0xf684, 0x200400, 0x4, 0xc7cc, 0x3, "4000450a0000b031000400", 0x23fffd, 0x1fd}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0xd) 35.183641025s ago: executing program 3 (id=1048): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x34, r1, 0x1, 0x0, 0x4000000, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0x34000000}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1=0xe0000002}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}]}, 0x34}, 0x2, 0x34005}, 0x0) 35.059312477s ago: executing program 3 (id=1052): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0x10000009, 0x5, 0xe, 0xfdff, 0x0, "4ae23ae17df2e18c69ba36c4095c911abad88f", 0x5a6}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x9) 34.832949459s ago: executing program 3 (id=1059): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff0001}, [@call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='block_bio_remap\x00', r0}, 0x18) sync() 34.61892843s ago: executing program 3 (id=1063): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x20080, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x6000, 0x1) 34.573940595s ago: executing program 3 (id=1067): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) link(&(0x7f0000000280)='./file0/../file0/file0\x00', 0x0) 19.524531893s ago: executing program 33 (id=1067): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) link(&(0x7f0000000280)='./file0/../file0/file0\x00', 0x0) 744.301407ms ago: executing program 6 (id=2561): r0 = memfd_create(&(0x7f0000000080)=',\xea\x00', 0x4) ftruncate(r0, 0x7000000) preadv(r0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000380)=""/4090, 0xffa}], 0x2, 0xa, 0x203) 674.090234ms ago: executing program 6 (id=2565): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000580), 0x5, 0x504, &(0x7f0000002580)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000002700)=ANY=[], 0x1015, 0x0) lgetxattr(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)=@known='trusted.overlay.upper\x00', 0x0, 0x0) 531.694597ms ago: executing program 6 (id=2574): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a85}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) pipe2(0x0, 0x80) 437.198497ms ago: executing program 0 (id=2582): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000480)={0x13, 0x10, 0x7, {0x0, r1, 0x3}}, 0x18) 430.124998ms ago: executing program 6 (id=2583): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000f00)={0x54, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x6}, {0xc, 0x90, 0x8}}]}, 0x54}, 0x1, 0x0, 0x0, 0x22000811}, 0x44004080) 406.31678ms ago: executing program 0 (id=2585): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000000104010100000000000000000d0000040500010001"], 0x34}}, 0x44084) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x24, 0x1, 0x4, 0x401, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000040) 377.331913ms ago: executing program 6 (id=2588): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000002c80), &(0x7f00000061c0)=0x4) 348.393575ms ago: executing program 4 (id=2589): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, 0x0, 0x4) 324.142388ms ago: executing program 0 (id=2590): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000140)={0x80, 0x6, 0x3, 0xfff, 0x0, 0x0, 0x0}) 314.732919ms ago: executing program 6 (id=2591): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='ns\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) getdents64(r0, 0x0, 0x0) 279.557312ms ago: executing program 1 (id=2594): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000300000001000000", @ANYRES32], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r0, &(0x7f0000000140), &(0x7f0000000000)=""/48}, 0x20) 274.762453ms ago: executing program 0 (id=2595): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x10, 0x3, "1c4bf1f8cf3b69a3ab942767"}, @NFTA_MATCH_NAME={0x8, 0x1, 'mac\x00'}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x8c}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 247.658986ms ago: executing program 4 (id=2596): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8}}]}, 0x38}}, 0x4004010) 245.841126ms ago: executing program 0 (id=2597): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x3}, 0x18) syz_mount_image$iso9660(&(0x7f0000000380), &(0x7f00000000c0)='./file0\x00', 0x204818, &(0x7f0000000a40)={[{@map_off}, {@check_relaxed}, {@cruft}, {@dmode={'dmode', 0x3d, 0x2}}, {@dmode={'dmode', 0x3d, 0xffff}}, {@unhide}, {@map_off}, {@check_strict}]}, 0xff, 0x572, &(0x7f00000003c0)="$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") 242.774716ms ago: executing program 1 (id=2598): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x14, r1, 0x917, 0x1000, 0xfffffffc}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x0) 237.588206ms ago: executing program 5 (id=2599): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="8c0000001000030425bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0005000000000000640012800e00010069703665727370616e0000005000028008000100", @ANYRES32=0x0, @ANYBLOB="0500160001000000040012"], 0x8c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) 214.838599ms ago: executing program 4 (id=2600): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000340)='mm_page_free\x00', r0, 0x0, 0x2}, 0x18) syz_read_part_table(0x611, &(0x7f00000007c0)="$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") 211.557989ms ago: executing program 1 (id=2610): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x3, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) 138.909526ms ago: executing program 0 (id=2601): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000040)=0xa, 0x4) 138.784096ms ago: executing program 1 (id=2602): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc094, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x10000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="5000000010004b040000966ce0b200007a000000", @ANYRES32=0x0, @ANYBLOB="00000000181002001c0012800b00010067656e65766500000c00028008000200ac1414341400030067656e65766530"], 0x50}}, 0x80) 138.131307ms ago: executing program 5 (id=2603): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000050000000000000080000000850000007500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 116.970448ms ago: executing program 5 (id=2604): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000240)=ANY=[], 0x310) 94.351581ms ago: executing program 5 (id=2605): r0 = epoll_create1(0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0xc000201e}) 92.352911ms ago: executing program 1 (id=2606): unshare(0x28000600) r0 = socket(0x2d, 0x2, 0x0) connect$qrtr(r0, &(0x7f00000002c0)={0x2d, 0x0, 0x8000}, 0xc) 84.741381ms ago: executing program 4 (id=2607): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x8, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) rmdir(&(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 68.376783ms ago: executing program 5 (id=2608): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='attr\x00') getdents(r0, &(0x7f0000001080)=""/4096, 0x1000) mkdirat(r0, &(0x7f0000000080)='./file0\x00', 0x143) 60.543054ms ago: executing program 1 (id=2609): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000400000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r0}, 0x10) sync() 47.605665ms ago: executing program 4 (id=2611): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x3, 0x81, 0xffffffff}) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="04", 0x1}], 0x1) 47.298075ms ago: executing program 5 (id=2612): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='sys_enter\x00', r0, 0x0, 0x8001}, 0x18) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0) 0s ago: executing program 4 (id=2613): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@ipv6_getroute={0x30, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x6}, [@RTA_GATEWAY={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x7f}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000858}, 0x8040) kernel console output (not intermixed with test programs): ssive=1 [ 46.340277][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.342278][ T29] audit: type=1400 audit(1760171548.862:206): avc: denied { bind } for pid=3933 comm="syz.1.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 46.369284][ T29] audit: type=1400 audit(1760171548.862:207): avc: denied { name_bind } for pid=3933 comm="syz.1.201" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 46.390835][ T29] audit: type=1400 audit(1760171548.862:208): avc: denied { node_bind } for pid=3933 comm="syz.1.201" saddr=172.20.20.18 src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 46.474991][ T3940] loop4: detected capacity change from 0 to 1024 [ 46.542773][ T3940] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 46.565660][ T3940] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 46.576411][ T3940] EXT4-fs (loop4): orphan cleanup on readonly fs [ 46.583458][ T3940] EXT4-fs error (device loop4): ext4_free_blocks:6706: comm syz.4.203: Freeing blocks not in datazone - block = 0, count = 4096 [ 46.598280][ T3940] EXT4-fs (loop4): 1 orphan inode deleted [ 46.605044][ T3940] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 46.666343][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.682349][ T3957] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 46.748004][ T3962] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 46.896699][ T3976] can0: slcan on ttyS3. [ 46.918142][ T3978] capability: warning: `syz.0.220' uses deprecated v2 capabilities in a way that may be insecure [ 46.952410][ T3976] can0 (unregistered): slcan off ttyS3. [ 47.006197][ T3982] loop1: detected capacity change from 0 to 512 [ 47.034792][ T3982] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=684ec018, mo2=0002] [ 47.050347][ T3982] System zones: 0-2, 18-18, 34-34 [ 47.060434][ T3982] EXT4-fs (loop1): orphan cleanup on readonly fs [ 47.071408][ T3982] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.223: bad orphan inode 13 [ 47.082326][ T3982] ext4_test_bit(bit=12, block=18) = 1 [ 47.087931][ T3982] is_bad_inode(inode)=0 [ 47.092361][ T3982] NEXT_ORPHAN(inode)=2130706432 [ 47.097559][ T3982] max_ino=32 [ 47.100902][ T3982] i_nlink=1 [ 47.104846][ T3982] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 47.121116][ T3982] __nla_validate_parse: 5 callbacks suppressed [ 47.121135][ T3982] netlink: 124 bytes leftover after parsing attributes in process `syz.1.223'. [ 47.136666][ T3982] netlink: 40 bytes leftover after parsing attributes in process `syz.1.223'. [ 47.164237][ T3995] hsr0: entered promiscuous mode [ 47.174057][ T3993] tmpfs: Bad value for 'mpol' [ 47.184208][ T3995] macsec1: entered allmulticast mode [ 47.189724][ T3995] hsr0: entered allmulticast mode [ 47.195079][ T3995] hsr_slave_0: entered allmulticast mode [ 47.200925][ T3995] hsr_slave_1: entered allmulticast mode [ 47.282729][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.457210][ T4015] loop1: detected capacity change from 0 to 164 [ 47.681055][ T4028] loop3: detected capacity change from 0 to 164 [ 47.723737][ T4028] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 47.756816][ T4028] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 47.766041][ T4028] Symlink component flag not implemented [ 47.771707][ T4028] Symlink component flag not implemented [ 47.792338][ T4028] Symlink component flag not implemented (7) [ 47.798465][ T4028] Symlink component flag not implemented (116) [ 48.014423][ T4035] loop3: detected capacity change from 0 to 512 [ 48.053482][ T4035] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 48.072002][ T4035] EXT4-fs (loop3): orphan cleanup on readonly fs [ 48.094654][ T4035] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #16: comm syz.3.247: corrupted inode contents [ 48.129288][ T4035] EXT4-fs (loop3): Remounting filesystem read-only [ 48.162482][ T4035] EXT4-fs (loop3): 1 truncate cleaned up [ 48.168622][ T52] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 48.180640][ T52] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 48.231161][ T52] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 48.258239][ T4035] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 48.339071][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.436156][ T4072] loop4: detected capacity change from 0 to 164 [ 48.478999][ T4072] rock: directory entry would overflow storage [ 48.485426][ T4072] rock: sig=0x4f50, size=4, remaining=3 [ 48.491017][ T4072] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 48.756441][ T4097] loop0: detected capacity change from 0 to 8192 [ 48.791938][ T4097] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 48.832466][ T4097] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 48.841145][ T4097] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 48.870375][ T4123] process 'syz.3.279' launched '/dev/fd/3' with NULL argv: empty string added [ 48.877259][ T4121] loop4: detected capacity change from 0 to 512 [ 48.890425][ T4097] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 48.910212][ T4097] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 48.928183][ T4121] EXT4-fs: Ignoring removed bh option [ 48.941850][ T4097] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 48.981738][ T4121] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 49.007715][ T4097] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 49.008315][ T4121] EXT4-fs (loop4): 1 truncate cleaned up [ 49.023144][ T4121] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.121016][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.341931][ T4158] loop3: detected capacity change from 0 to 128 [ 49.365285][ T4158] FAT-fs (loop3): Directory bread(block 162) failed [ 49.382391][ T4158] FAT-fs (loop3): Directory bread(block 163) failed [ 49.389489][ T4158] FAT-fs (loop3): Directory bread(block 164) failed [ 49.422292][ T4158] FAT-fs (loop3): Directory bread(block 165) failed [ 49.432503][ T4158] FAT-fs (loop3): Directory bread(block 166) failed [ 49.439154][ T4158] FAT-fs (loop3): Directory bread(block 167) failed [ 49.466736][ T4158] FAT-fs (loop3): Directory bread(block 168) failed [ 49.482382][ T4158] FAT-fs (loop3): Directory bread(block 169) failed [ 49.502056][ T4158] FAT-fs (loop3): Directory bread(block 162) failed [ 49.525116][ T4158] FAT-fs (loop3): Directory bread(block 163) failed [ 49.542712][ T4158] syz.3.291: attempt to access beyond end of device [ 49.542712][ T4158] loop3: rw=3, sector=226, nr_sectors = 6 limit=128 [ 49.572627][ T4158] syz.3.291: attempt to access beyond end of device [ 49.572627][ T4158] loop3: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 49.599773][ T4164] syz.3.291: attempt to access beyond end of device [ 49.599773][ T4164] loop3: rw=3, sector=234, nr_sectors = 6 limit=128 [ 49.638318][ T4164] syz.3.291: attempt to access beyond end of device [ 49.638318][ T4164] loop3: rw=2051, sector=240, nr_sectors = 2 limit=128 [ 49.663720][ T4172] loop1: detected capacity change from 0 to 512 [ 49.716430][ T4172] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.749945][ T4172] ext4 filesystem being mounted at /80/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.845790][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.975867][ T4189] netlink: 24 bytes leftover after parsing attributes in process `syz.1.304'. [ 50.019125][ T4191] netlink: 'syz.0.305': attribute type 15 has an invalid length. [ 50.162879][ T4198] loop0: detected capacity change from 0 to 512 [ 50.188685][ T4198] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.212455][ T4198] ext4 filesystem being mounted at /66/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.281944][ T4207] loop3: detected capacity change from 0 to 1024 [ 50.312801][ T4211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.321592][ T4211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.348449][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.364529][ T4207] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.471646][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.592382][ T4229] loop0: detected capacity change from 0 to 512 [ 50.607400][ T4229] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 50.621002][ T4229] EXT4-fs error (device loop0): xattr_find_entry:337: inode #15: comm syz.0.321: corrupted xattr entries [ 50.633435][ T4229] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 50.647577][ T4229] EXT4-fs (loop0): 1 truncate cleaned up [ 50.653968][ T4229] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.671490][ T4236] loop3: detected capacity change from 0 to 1024 [ 50.676319][ T4229] EXT4-fs error (device loop0): ext4_iget_extra_inode:5075: inode #15: comm syz.0.321: corrupted in-inode xattr: e_name out of bounds [ 50.683947][ T4236] EXT4-fs: Ignoring removed nobh option [ 50.698608][ T4236] EXT4-fs: Ignoring removed bh option [ 50.705680][ T4236] EXT4-fs (loop3): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 50.736958][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.746889][ T4236] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.803411][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.887073][ T4248] netlink: 160 bytes leftover after parsing attributes in process `syz.0.329'. [ 50.896244][ T4248] netlink: 160 bytes leftover after parsing attributes in process `syz.0.329'. [ 51.142962][ T4267] loop0: detected capacity change from 0 to 512 [ 51.167316][ T4267] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.182388][ T4267] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.211408][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.524243][ T29] kauditd_printk_skb: 48 callbacks suppressed [ 51.524259][ T29] audit: type=1400 audit(1760171554.092:251): avc: denied { read write } for pid=4282 comm="syz.1.345" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 51.527462][ T1037] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 51.532175][ T29] audit: type=1400 audit(1760171554.092:252): avc: denied { open } for pid=4282 comm="syz.1.345" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 51.553866][ T1037] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 51.592897][ T1037] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 51.600405][ T1037] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 51.607847][ T1037] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 51.615341][ T1037] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 51.622954][ T1037] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 51.630615][ T1037] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 51.638253][ T1037] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 51.645950][ T1037] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 51.751847][ T1037] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.43 Device [syz1] on syz1 [ 51.793945][ T4292] loop1: detected capacity change from 0 to 128 [ 51.809405][ T29] audit: type=1400 audit(1760171554.372:253): avc: denied { mount } for pid=4291 comm="syz.1.349" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 51.872118][ T4290] fido_id[4290]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 51.885371][ T29] audit: type=1400 audit(1760171554.412:254): avc: denied { unmount } for pid=3311 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 51.953046][ T4302] SELinux: Context system_u:object is not valid (left unmapped). [ 51.955782][ T4299] loop0: detected capacity change from 0 to 512 [ 51.989331][ T29] audit: type=1326 audit(1760171554.512:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4297 comm="syz.0.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa89bb1eec9 code=0x7ffc0000 [ 52.012956][ T29] audit: type=1326 audit(1760171554.512:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4297 comm="syz.0.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa89bb1eec9 code=0x7ffc0000 [ 52.036668][ T29] audit: type=1326 audit(1760171554.522:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4297 comm="syz.0.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fa89bb1eec9 code=0x7ffc0000 [ 52.060460][ T29] audit: type=1326 audit(1760171554.522:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4297 comm="syz.0.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa89bb1ef03 code=0x7ffc0000 [ 52.083887][ T29] audit: type=1400 audit(1760171554.522:259): avc: denied { watch } for pid=4301 comm="syz.3.354" path="/syzcgroup/cpu/syz3/cgroup.procs" dev="cgroup" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 52.108718][ T29] audit: type=1326 audit(1760171554.522:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4297 comm="syz.0.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa89bb1d97f code=0x7ffc0000 [ 52.141537][ T4299] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 52.166191][ T4299] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.352: invalid indirect mapped block 2683928664 (level 1) [ 52.198679][ T4299] EXT4-fs (loop0): 1 truncate cleaned up [ 52.221288][ T4299] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.239688][ T4315] loop3: detected capacity change from 0 to 512 [ 52.297770][ T4315] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.320729][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.325903][ T4315] ext4 filesystem being mounted at /93/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.373352][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.595154][ T4343] loop3: detected capacity change from 0 to 512 [ 52.602180][ T4343] EXT4-fs: Ignoring removed oldalloc option [ 52.615240][ T4345] sock: sock_timestamping_bind_phc: sock not bind to device [ 52.627916][ T4343] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 52.646444][ T4343] EXT4-fs (loop3): 1 truncate cleaned up [ 52.661719][ T4343] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.793335][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.010920][ T1037] IPVS: starting estimator thread 0... [ 53.114812][ T4371] IPVS: using max 2016 ests per chain, 100800 per kthread [ 53.225491][ T4397] loop0: detected capacity change from 0 to 164 [ 53.266511][ T4397] Unable to read rock-ridge attributes [ 53.291188][ T4397] Unable to read rock-ridge attributes [ 53.331755][ T4408] loop1: detected capacity change from 0 to 512 [ 53.373222][ T4408] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.402: bad orphan inode 11862016 [ 53.386702][ T4408] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 53.400106][ T4408] ext4 filesystem being mounted at /107/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.475024][ T4421] netlink: 224 bytes leftover after parsing attributes in process `syz.4.408'. [ 53.484154][ T4421] netlink: 16 bytes leftover after parsing attributes in process `syz.4.408'. [ 53.493989][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 53.698502][ T4441] program syz.4.418 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 53.747801][ T4449] program syz.4.418 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 53.789459][ T4450] loop1: detected capacity change from 0 to 512 [ 53.802901][ T3393] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz0 [ 53.818421][ T4450] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.836741][ T4450] ext4 filesystem being mounted at /111/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.869387][ T4458] fido_id[4458]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 53.927099][ T4450] SELinux: Context @ is not valid (left unmapped). [ 53.972580][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.205102][ T4490] vhci_hcd: invalid port number 129 [ 54.210366][ T4490] vhci_hcd: default hub control req: 0218 v0004 i0081 l0 [ 54.313086][ T4499] netlink: 40 bytes leftover after parsing attributes in process `syz.3.444'. [ 54.332737][ T4499] netlink: 40 bytes leftover after parsing attributes in process `syz.3.444'. [ 54.389676][ T4509] loop7: detected capacity change from 0 to 7 [ 54.412861][ T4508] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 54.547938][ T4515] netlink: 156 bytes leftover after parsing attributes in process `syz.1.451'. [ 54.632607][ T4515] netlink: 156 bytes leftover after parsing attributes in process `syz.1.451'. [ 54.753120][ T4526] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 54.969710][ T4512] syz.4.435 (4512) used greatest stack depth: 10488 bytes left [ 55.190124][ T4561] netlink: 32 bytes leftover after parsing attributes in process `syz.0.473'. [ 55.435360][ T4588] netlink: 8 bytes leftover after parsing attributes in process `syz.0.487'. [ 55.453349][ T4591] loop3: detected capacity change from 0 to 128 [ 55.480097][ T4595] mmap: syz.1.490 (4595) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 55.550592][ T4593] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 55.573170][ T4593] vhci_hcd: invalid port number 253 [ 55.578588][ T4593] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub [ 55.707963][ T4611] netlink: 24 bytes leftover after parsing attributes in process `syz.1.498'. [ 55.748578][ T4619] netlink: 16 bytes leftover after parsing attributes in process `syz.0.501'. [ 56.884448][ T4670] loop3: detected capacity change from 0 to 164 [ 57.078860][ T29] kauditd_printk_skb: 72 callbacks suppressed [ 57.078876][ T29] audit: type=1400 audit(1760171559.642:333): avc: denied { write } for pid=4693 comm="syz.4.534" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 57.108820][ T29] audit: type=1400 audit(1760171559.642:334): avc: denied { open } for pid=4693 comm="syz.4.534" path="/dev/input/event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 57.194358][ T29] audit: type=1400 audit(1760171559.662:335): avc: denied { mounton } for pid=4696 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 57.216786][ T29] audit: type=1400 audit(1760171559.762:336): avc: denied { create } for pid=4702 comm="syz.4.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 57.252985][ T4712] loop3: detected capacity change from 0 to 128 [ 57.341370][ T55] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.371138][ T4723] bridge_slave_0: default FDB implementation only supports local addresses [ 57.395930][ T55] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.465888][ T29] audit: type=1400 audit(1760171560.022:337): avc: denied { write } for pid=4740 comm="syz.0.552" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 57.488844][ T29] audit: type=1400 audit(1760171560.022:338): avc: denied { open } for pid=4740 comm="syz.0.552" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 57.515842][ T55] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.539533][ T29] audit: type=1400 audit(1760171560.032:339): avc: denied { ioctl } for pid=4740 comm="syz.0.552" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 57.564665][ T29] audit: type=1400 audit(1760171560.102:340): avc: denied { ioctl } for pid=4748 comm="syz.4.556" path="socket:[8774]" dev="sockfs" ino=8774 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 57.614162][ T4752] loop1: detected capacity change from 0 to 512 [ 57.628201][ T4752] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 57.649637][ T29] audit: type=1400 audit(1760171560.212:341): avc: denied { getopt } for pid=4757 comm="syz.4.559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 57.670885][ T4752] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.684237][ T4752] ext4 filesystem being mounted at /154/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.705967][ T55] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.762945][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.786533][ T4696] chnl_net:caif_netlink_parms(): no params data found [ 57.835100][ T1037] hid_parser_main: 74 callbacks suppressed [ 57.835132][ T1037] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 57.848758][ T1037] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 57.856319][ T1037] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 57.863848][ T1037] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 57.871825][ T1037] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 57.879471][ T1037] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 57.887041][ T1037] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 57.894770][ T1037] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 57.902641][ T1037] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 57.911099][ T1037] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 57.953105][ T4780] loop0: detected capacity change from 0 to 512 [ 57.975815][ T55] bridge_slave_1: left allmulticast mode [ 57.981529][ T55] bridge_slave_1: left promiscuous mode [ 57.987631][ T55] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.993364][ T4780] EXT4-fs: Ignoring removed nobh option [ 58.026452][ T55] bridge_slave_0: left allmulticast mode [ 58.032904][ T55] bridge_slave_0: left promiscuous mode [ 58.038735][ T55] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.046745][ T4780] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -117 [ 58.071714][ T4780] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.567: invalid indirect mapped block 256 (level 1) [ 58.086342][ T4780] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.567: invalid indirect mapped block 2683928664 (level 1) [ 58.100851][ T1037] hid-generic 0000:0000:0000.0003: hidraw0: HID v8.00 Device [syz0] on syz0 [ 58.120983][ T4780] EXT4-fs (loop0): 1 truncate cleaned up [ 58.128272][ T4780] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.152662][ T4797] fido_id[4797]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 58.207554][ T4780] EXT4-fs error (device loop0): ext4_lookup:1787: inode #14: comm syz.0.567: invalid fast symlink length 39 [ 58.278689][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.300851][ T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 58.336915][ T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 58.369372][ T55] bond0 (unregistering): Released all slaves [ 58.406884][ T4696] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.414450][ T4696] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.428430][ T4696] bridge_slave_0: entered allmulticast mode [ 58.435446][ T4696] bridge_slave_0: entered promiscuous mode [ 58.442574][ T4696] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.449707][ T4696] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.457277][ T4696] bridge_slave_1: entered allmulticast mode [ 58.464087][ T4696] bridge_slave_1: entered promiscuous mode [ 58.484236][ T55] hsr_slave_0: left promiscuous mode [ 58.500634][ T55] hsr_slave_1: left promiscuous mode [ 58.525106][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 58.532878][ T55] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 58.535388][ T29] audit: type=1400 audit(1760171561.092:342): avc: denied { create } for pid=4828 comm="syz.4.582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 58.561947][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 58.569515][ T55] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 58.590668][ T55] veth1_macvtap: left promiscuous mode [ 58.606670][ T55] veth0_macvtap: left promiscuous mode [ 58.615230][ T55] veth1_vlan: left promiscuous mode [ 58.620926][ T55] veth0_vlan: left promiscuous mode [ 58.810512][ T55] team0 (unregistering): Port device team_slave_1 removed [ 58.818721][ T4863] loop1: detected capacity change from 0 to 512 [ 58.835173][ T4865] loop0: detected capacity change from 0 to 512 [ 58.845196][ T4863] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 58.845290][ T55] team0 (unregistering): Port device team_slave_0 removed [ 58.917129][ T4865] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.593: bad orphan inode 11862016 [ 58.943281][ T4865] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 58.964648][ T4865] ext4 filesystem being mounted at /153/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.008363][ T4884] __nla_validate_parse: 7 callbacks suppressed [ 59.008450][ T4884] netlink: 8 bytes leftover after parsing attributes in process `syz.1.599'. [ 59.008793][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 59.014775][ T4884] netlink: 4 bytes leftover after parsing attributes in process `syz.1.599'. [ 59.014802][ T4884] netlink: 'syz.1.599': attribute type 12 has an invalid length. [ 59.014815][ T4884] netlink: 'syz.1.599': attribute type 11 has an invalid length. [ 59.056959][ C1] hrtimer: interrupt took 26781 ns [ 59.075499][ T4696] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.107645][ T4696] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.198903][ T4696] team0: Port device team_slave_0 added [ 59.227138][ T4696] team0: Port device team_slave_1 added [ 59.310535][ T4696] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.317714][ T4696] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.343728][ T4696] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.385255][ T4696] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.392418][ T4696] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.418879][ T4696] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.550102][ T4696] hsr_slave_0: entered promiscuous mode [ 59.569174][ T4696] hsr_slave_1: entered promiscuous mode [ 59.584096][ T4948] netlink: 8 bytes leftover after parsing attributes in process `syz.3.622'. [ 59.628686][ T4954] loop0: detected capacity change from 0 to 256 [ 59.773038][ T4696] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 59.790135][ T4696] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 59.814513][ T4696] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 59.839306][ T4696] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 59.949607][ T4696] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.979054][ T4696] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.998960][ T314] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.006303][ T314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.031689][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.038965][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.100400][ T5008] loop3: detected capacity change from 0 to 1024 [ 60.171456][ T5008] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 60.244828][ T4696] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.377928][ T5045] loop3: detected capacity change from 0 to 256 [ 60.408014][ T5049] loop0: detected capacity change from 0 to 1024 [ 60.460059][ T5054] netlink: 32 bytes leftover after parsing attributes in process `syz.3.657'. [ 60.490587][ T5049] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.505157][ T5061] netlink: 12 bytes leftover after parsing attributes in process `syz.4.659'. [ 60.577355][ T4696] veth0_vlan: entered promiscuous mode [ 60.585228][ T4696] veth1_vlan: entered promiscuous mode [ 60.613905][ T4696] veth0_macvtap: entered promiscuous mode [ 60.623131][ T4696] veth1_macvtap: entered promiscuous mode [ 60.630707][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.648408][ T4696] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.660666][ T4696] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.671686][ T55] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.709929][ T55] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.742689][ T5079] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 60.755717][ T55] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.776378][ T55] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.831406][ T5089] loop1: detected capacity change from 0 to 128 [ 60.866904][ T5089] FAT-fs (loop1): Directory bread(block 414) failed [ 60.880797][ T5097] loop5: detected capacity change from 0 to 1024 [ 60.894734][ T5098] netlink: 44 bytes leftover after parsing attributes in process `syz.0.672'. [ 60.903996][ T5089] FAT-fs (loop1): Directory bread(block 415) failed [ 60.910752][ T5089] FAT-fs (loop1): Directory bread(block 416) failed [ 60.919913][ T5097] EXT4-fs: Ignoring removed orlov option [ 60.928635][ T5089] FAT-fs (loop1): Directory bread(block 417) failed [ 60.939578][ T5089] FAT-fs (loop1): Directory bread(block 418) failed [ 60.946357][ T5089] FAT-fs (loop1): Directory bread(block 419) failed [ 60.956111][ T5089] FAT-fs (loop1): Directory bread(block 420) failed [ 60.967989][ T5097] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.992734][ T5089] FAT-fs (loop1): Directory bread(block 421) failed [ 61.034427][ T5089] syz.1.669: attempt to access beyond end of device [ 61.034427][ T5089] loop1: rw=3, sector=462, nr_sectors = 2 limit=128 [ 61.050715][ T5089] syz.1.669: attempt to access beyond end of device [ 61.050715][ T5089] loop1: rw=2051, sector=464, nr_sectors = 6 limit=128 [ 61.051071][ T4696] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.148512][ T5118] netlink: 56 bytes leftover after parsing attributes in process `syz.5.677'. [ 61.302895][ T5133] xt_l2tp: invalid flags combination: 8 [ 61.642782][ T5162] netlink: 8 bytes leftover after parsing attributes in process `syz.1.701'. [ 61.749236][ T5170] loop0: detected capacity change from 0 to 1024 [ 61.765881][ T5170] EXT4-fs: Ignoring removed orlov option [ 61.771874][ T5170] EXT4-fs: Ignoring removed nomblk_io_submit option [ 61.795859][ T5176] loop1: detected capacity change from 0 to 1764 [ 61.820629][ T5170] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.933143][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.242290][ T5221] netlink: 312 bytes leftover after parsing attributes in process `syz.3.729'. [ 62.251512][ T5221] netlink: 312 bytes leftover after parsing attributes in process `syz.3.729'. [ 62.281488][ T5227] loop1: detected capacity change from 0 to 128 [ 62.282075][ T29] kauditd_printk_skb: 42 callbacks suppressed [ 62.282094][ T29] audit: type=1400 audit(1760171564.842:385): avc: denied { connect } for pid=5225 comm="syz.5.732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 62.288796][ T5227] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 62.294037][ T29] audit: type=1400 audit(1760171564.842:386): avc: denied { ioctl } for pid=5225 comm="syz.5.732" path="socket:[10928]" dev="sockfs" ino=10928 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 62.355915][ T5227] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 62.391781][ T29] audit: type=1400 audit(1760171564.952:387): avc: denied { write } for pid=5230 comm="syz.3.735" name="usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 62.467950][ T310] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 62.531656][ T29] audit: type=1400 audit(1760171565.092:388): avc: denied { execute } for pid=5244 comm="syz.3.741" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=9840 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 62.558038][ T29] audit: type=1400 audit(1760171565.092:389): avc: denied { ioctl } for pid=5245 comm="syz.5.742" path="socket:[9839]" dev="sockfs" ino=9839 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 62.583128][ T29] audit: type=1400 audit(1760171565.092:390): avc: denied { write } for pid=5245 comm="syz.5.742" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 62.701166][ T5265] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 62.701166][ T5265] program syz.0.751 not setting count and/or reply_len properly [ 62.724343][ T5263] hub 6-0:1.0: USB hub found [ 62.738033][ T5263] hub 6-0:1.0: 8 ports detected [ 63.014759][ T5305] syz_tun: entered promiscuous mode [ 63.030816][ T5305] macsec1: entered allmulticast mode [ 63.036344][ T5305] syz_tun: entered allmulticast mode [ 63.044681][ T5305] syz_tun: left allmulticast mode [ 63.049979][ T5305] syz_tun: left promiscuous mode [ 63.070591][ T29] audit: type=1400 audit(1760171565.632:391): avc: denied { mount } for pid=5308 comm="syz.1.773" name="/" dev="hugetlbfs" ino=11099 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 63.118272][ T29] audit: type=1400 audit(1760171565.632:392): avc: denied { unmount } for pid=3311 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 63.139803][ T29] audit: type=1400 audit(1760171565.672:393): avc: denied { bind } for pid=5311 comm="syz.0.775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 63.182036][ T29] audit: type=1400 audit(1760171565.742:394): avc: denied { setopt } for pid=5318 comm="syz.0.778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 63.246155][ T5323] loop0: detected capacity change from 0 to 512 [ 63.276783][ T5323] ------------[ cut here ]------------ [ 63.282427][ T5323] EA inode 11 i_nlink=2 [ 63.282702][ T5323] WARNING: CPU: 1 PID: 5323 at fs/ext4/xattr.c:1058 ext4_xattr_inode_update_ref+0x36a/0x380 [ 63.297298][ T5323] Modules linked in: [ 63.301429][ T5323] CPU: 1 UID: 0 PID: 5323 Comm: syz.0.780 Not tainted syzkaller #0 PREEMPT(voluntary) [ 63.311440][ T5323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 63.322015][ T5323] RIP: 0010:ext4_xattr_inode_update_ref+0x36a/0x380 [ 63.329242][ T5323] Code: 90 49 8d 7e 40 e8 e6 02 b9 ff 4d 8b 6e 40 4c 89 e7 e8 fa fd b8 ff 41 8b 56 48 48 c7 c7 d5 4d 55 86 4c 89 ee e8 c7 09 68 ff 90 <0f> 0b 90 90 e9 ff fe ff ff e8 08 68 b0 03 0f 1f 84 00 00 00 00 00 [ 63.349825][ T5323] RSP: 0018:ffffc90010b8f5a0 EFLAGS: 00010246 [ 63.356161][ T5323] RAX: 2eeb7c9e2b2dcb00 RBX: ffff888119899308 RCX: 0000000000080000 [ 63.364538][ T5323] RDX: ffffc9000209b000 RSI: 0000000000004245 RDI: 0000000000004246 [ 63.372579][ T5323] RBP: 0000000000000002 R08: 0001c90010b8f427 R09: 0000000000000000 [ 63.380625][ T5323] R10: 00000000ffffffff R11: 0000000000000002 R12: ffff8881198992b8 [ 63.389016][ T5323] R13: 000000000000000b R14: ffff888119899270 R15: 0000000000000001 [ 63.397220][ T5323] FS: 00007fa89a57f6c0(0000) GS:ffff8882aef3a000(0000) knlGS:0000000000000000 [ 63.406369][ T5323] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 63.413036][ T5323] CR2: 00007fdec22686ec CR3: 0000000127f7a000 CR4: 00000000003506f0 [ 63.421053][ T5323] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 63.429862][ T5323] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 63.438296][ T5323] Call Trace: [ 63.441909][ T5323] [ 63.444911][ T5323] ext4_xattr_set_entry+0x77f/0x1020 [ 63.450301][ T5323] ext4_xattr_ibody_set+0x184/0x3c0 [ 63.455648][ T5323] ext4_expand_extra_isize_ea+0xcbb/0x11f0 [ 63.461569][ T5323] __ext4_expand_extra_isize+0x246/0x280 [ 63.467395][ T5323] __ext4_mark_inode_dirty+0x29d/0x3f0 [ 63.473179][ T5323] ext4_evict_inode+0x80e/0xd90 [ 63.478274][ T5323] ? __pfx_ext4_evict_inode+0x10/0x10 [ 63.483743][ T5323] evict+0x2e3/0x550 [ 63.487734][ T5323] ? __dquot_initialize+0x146/0x7c0 [ 63.493137][ T5323] iput+0x4ed/0x650 [ 63.497003][ T5323] ext4_process_orphan+0x1a9/0x1c0 [ 63.502365][ T5323] ext4_orphan_cleanup+0x6a8/0xa00 [ 63.507615][ T5323] ext4_fill_super+0x3483/0x3810 [ 63.512658][ T5323] ? snprintf+0x86/0xb0 [ 63.517165][ T5323] ? set_blocksize+0x1a8/0x310 [ 63.522064][ T5323] ? sb_set_blocksize+0xe3/0x100 [ 63.527359][ T5323] ? setup_bdev_super+0x30e/0x370 [ 63.532526][ T5323] ? __pfx_ext4_fill_super+0x10/0x10 [ 63.538150][ T5323] get_tree_bdev_flags+0x291/0x300 [ 63.543447][ T5323] ? __pfx_ext4_fill_super+0x10/0x10 [ 63.549281][ T5323] get_tree_bdev+0x1f/0x30 [ 63.554045][ T5323] ext4_get_tree+0x1c/0x30 [ 63.558636][ T5323] vfs_get_tree+0x54/0x1d0 [ 63.563394][ T5323] do_new_mount+0x24d/0x660 [ 63.567957][ T5323] path_mount+0x4a5/0xb70 [ 63.572364][ T5323] ? user_path_at+0x109/0x130 [ 63.577246][ T5323] __se_sys_mount+0x28c/0x2e0 [ 63.582265][ T5323] __x64_sys_mount+0x67/0x80 [ 63.587259][ T5323] x64_sys_call+0x2b51/0x3000 [ 63.592330][ T5323] do_syscall_64+0xd2/0x200 [ 63.596880][ T5323] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 63.603219][ T5323] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 63.609063][ T5323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.615331][ T5323] RIP: 0033:0x7fa89bb2066a [ 63.620026][ T5323] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.640007][ T5323] RSP: 002b:00007fa89a57ee68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 63.648620][ T5323] RAX: ffffffffffffffda RBX: 00007fa89a57eef0 RCX: 00007fa89bb2066a [ 63.656801][ T5323] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007fa89a57eeb0 [ 63.664834][ T5323] RBP: 0000200000000180 R08: 00007fa89a57eef0 R09: 0000000000800700 [ 63.673086][ T5323] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 63.681281][ T5323] R13: 00007fa89a57eeb0 R14: 0000000000000473 R15: 0000200000000680 [ 63.689549][ T5323] [ 63.692639][ T5323] ---[ end trace 0000000000000000 ]--- [ 63.699169][ T5323] EXT4-fs (loop0): 1 orphan inode deleted [ 63.705495][ T5323] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.756978][ T5339] erspan1: entered allmulticast mode [ 63.787950][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.263319][ T5374] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5374 comm=syz.1.803 [ 65.067881][ T5474] tipc: Started in network mode [ 65.072982][ T5474] tipc: Node identity , cluster identity 4711 [ 65.079359][ T5474] tipc: Failed to obtain node identity [ 65.084991][ T5474] tipc: Enabling of bearer rejected, failed to enable media [ 65.301145][ T5499] netlink: 'syz.4.865': attribute type 1 has an invalid length. [ 65.319080][ T5506] loop3: detected capacity change from 0 to 512 [ 65.347297][ T5506] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 65.379090][ T5506] FAT-fs (loop3): FAT read failed (blocknr 1568) [ 65.684786][ T3398] IPVS: starting estimator thread 0... [ 65.772658][ T5553] IPVS: using max 2352 ests per chain, 117600 per kthread [ 66.063879][ T5596] loop4: detected capacity change from 0 to 1024 [ 66.097382][ T5596] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.129503][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.141843][ T5601] loop0: detected capacity change from 0 to 1024 [ 66.151230][ T5601] EXT4-fs: Ignoring removed orlov option [ 66.184206][ T5601] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.243008][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.334177][ T5626] netlink: 'syz.4.920': attribute type 3 has an invalid length. [ 66.423288][ T5637] loop0: detected capacity change from 0 to 128 [ 66.432683][ T5639] loop3: detected capacity change from 0 to 512 [ 66.452759][ T5637] FAT-fs (loop0): error, invalid FAT chain (i_pos 548, last_block 8) [ 66.460917][ T5637] FAT-fs (loop0): Filesystem has been set read-only [ 66.541295][ T5651] __nla_validate_parse: 7 callbacks suppressed [ 66.541309][ T5651] netlink: 12 bytes leftover after parsing attributes in process `syz.4.932'. [ 66.556581][ T5651] tipc: Started in network mode [ 66.561564][ T5651] tipc: Node identity fff50000000000000000000000000001, cluster identity 4711 [ 66.570581][ T5651] tipc: Enabling of bearer rejected, failed to enable media [ 66.815214][ T5688] macvtap0: refused to change device tx_queue_len [ 66.822418][ T5686] loop4: detected capacity change from 0 to 512 [ 66.835599][ T5686] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.862435][ T5686] ext4 filesystem being mounted at /190/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 66.883938][ T5686] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #2: comm syz.4.948: corrupted inode contents [ 66.896404][ T5686] EXT4-fs error (device loop4): ext4_dirty_inode:6509: inode #2: comm syz.4.948: mark_inode_dirty error [ 66.908235][ T5686] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #2: comm syz.4.948: corrupted inode contents [ 66.935797][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.999058][ T5704] loop5: detected capacity change from 0 to 512 [ 67.036764][ T5704] EXT4-fs (loop5): too many log groups per flexible block group [ 67.046981][ T5704] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 67.055599][ T5704] EXT4-fs (loop5): mount failed [ 67.059096][ T5716] netlink: 'syz.4.959': attribute type 2 has an invalid length. [ 67.156939][ T5726] netlink: 'syz.5.966': attribute type 10 has an invalid length. [ 67.166186][ T5726] veth0_vlan: entered allmulticast mode [ 67.176308][ T5729] netlink: 8 bytes leftover after parsing attributes in process `syz.4.965'. [ 67.179233][ T5726] veth0_vlan: left promiscuous mode [ 67.192942][ T5726] veth0_vlan: entered promiscuous mode [ 67.201005][ T5726] team0: Device veth0_vlan failed to register rx_handler [ 67.278481][ T5726] syz.5.966 (5726) used greatest stack depth: 10176 bytes left [ 67.323556][ T5740] loop3: detected capacity change from 0 to 1764 [ 67.411572][ T5753] loop0: detected capacity change from 0 to 512 [ 67.419517][ T5753] journal_path: Non-blockdev passed as './file0' [ 67.426100][ T5753] EXT4-fs: error: could not find journal device path [ 67.529477][ T29] kauditd_printk_skb: 50 callbacks suppressed [ 67.529492][ T29] audit: type=1400 audit(1760171570.092:445): avc: denied { ioctl } for pid=5763 comm="syz.4.984" path="socket:[12607]" dev="sockfs" ino=12607 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 67.563510][ T5766] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 67.571584][ T29] audit: type=1400 audit(1760171570.132:446): avc: denied { getopt } for pid=5763 comm="syz.4.984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 67.977309][ T29] audit: type=1400 audit(1760171570.542:447): avc: denied { mount } for pid=5800 comm="syz.3.1002" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 68.002640][ T5801] tracefs: Bad value for 'uid' [ 68.007721][ T5801] tracefs: Bad value for 'uid' [ 68.036711][ T29] audit: type=1400 audit(1760171570.572:448): avc: denied { remount } for pid=5800 comm="syz.3.1002" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 68.088602][ T29] audit: type=1400 audit(1760171570.642:449): avc: denied { unmount } for pid=3312 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 68.162000][ T29] audit: type=1326 audit(1760171570.722:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5814 comm="syz.1.1008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07d239eec9 code=0x7ffc0000 [ 68.243473][ T29] audit: type=1326 audit(1760171570.762:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5814 comm="syz.1.1008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07d239eec9 code=0x7ffc0000 [ 68.267107][ T29] audit: type=1326 audit(1760171570.762:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5814 comm="syz.1.1008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f07d239eec9 code=0x7ffc0000 [ 68.290809][ T29] audit: type=1326 audit(1760171570.762:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5814 comm="syz.1.1008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07d239eec9 code=0x7ffc0000 [ 68.314770][ T29] audit: type=1326 audit(1760171570.762:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5814 comm="syz.1.1008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07d239eec9 code=0x7ffc0000 [ 68.624855][ T5843] netlink: 432 bytes leftover after parsing attributes in process `syz.1.1022'. [ 68.647150][ T5843] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1022'. [ 68.658192][ T5846] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1023'. [ 68.661833][ T5848] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1024'. [ 68.703703][ T5846] bond1: entered promiscuous mode [ 68.708902][ T5846] bond1: entered allmulticast mode [ 68.727778][ T5846] 8021q: adding VLAN 0 to HW filter on device bond1 [ 69.225775][ T5916] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1050'. [ 69.278939][ T5926] loop0: detected capacity change from 0 to 1024 [ 69.279340][ T5926] EXT4-fs: Ignoring removed orlov option [ 69.321669][ T5932] loop4: detected capacity change from 0 to 128 [ 69.322774][ T5926] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.344999][ T5932] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 69.345182][ T5932] ext4 filesystem being mounted at /208/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 69.694364][ T5959] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 70.075349][ T6006] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1081'. [ 70.108959][ T6006] bond1: entered promiscuous mode [ 70.114201][ T6006] bond1: entered allmulticast mode [ 70.132609][ T6006] 8021q: adding VLAN 0 to HW filter on device bond1 [ 70.190199][ T6019] loop4: detected capacity change from 0 to 128 [ 70.197452][ T6019] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 70.252069][ T6019] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 70.287625][ T31] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 70.339479][ T6026] ipvlan2: entered promiscuous mode [ 70.346249][ T6026] bridge0: port 3(ipvlan2) entered blocking state [ 70.352884][ T6026] bridge0: port 3(ipvlan2) entered disabled state [ 70.359961][ T6026] ipvlan2: entered allmulticast mode [ 70.365597][ T6026] bridge0: entered allmulticast mode [ 70.371510][ T6026] ipvlan2: left allmulticast mode [ 70.376632][ T6026] bridge0: left allmulticast mode [ 70.695852][ T6050] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 70.761794][ T6050] xt_socket: unknown flags 0x50 [ 70.884396][ T6067] loop5: detected capacity change from 0 to 512 [ 70.891608][ T6067] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 71.130297][ T6097] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1121'. [ 71.139636][ T6097] tipc: Invalid UDP bearer configuration [ 71.139649][ T6097] tipc: Enabling of bearer rejected, failed to enable media [ 71.178942][ T6103] vhci_hcd: invalid port number 255 [ 71.233570][ T6113] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 71.316429][ T6125] loop5: detected capacity change from 0 to 512 [ 71.321723][ T6125] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 71.337226][ T6125] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 71.362806][ T6125] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 71.363023][ T6125] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 71.363497][ T6125] EXT4-fs mount: 2 callbacks suppressed [ 71.363510][ T6125] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.447566][ T4696] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.492495][ T6134] netlink: 'syz.5.1138': attribute type 21 has an invalid length. [ 71.492620][ T6134] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1138'. [ 71.554710][ T6143] macvlan2: entered promiscuous mode [ 71.554784][ T6143] macvlan2: entered allmulticast mode [ 71.554798][ T6143] gretap0: entered allmulticast mode [ 71.787216][ T6158] loop1: detected capacity change from 0 to 512 [ 71.798739][ T6160] loop5: detected capacity change from 0 to 1024 [ 71.799258][ T6158] EXT4-fs (loop1): bad s_want_extra_isize: 288 [ 71.840889][ T6160] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.854782][ T4696] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.928018][ T6170] ipvlan2: entered promiscuous mode [ 71.930097][ T6170] bridge0: port 3(ipvlan2) entered blocking state [ 71.941051][ T6170] bridge0: port 3(ipvlan2) entered disabled state [ 71.948299][ T6170] ipvlan2: entered allmulticast mode [ 71.948318][ T6170] bridge0: entered allmulticast mode [ 71.948952][ T6170] ipvlan2: left allmulticast mode [ 71.965401][ T6170] bridge0: left allmulticast mode [ 72.198022][ T6178] loop4: detected capacity change from 0 to 512 [ 72.202199][ T6178] msdos: Unknown parameter 'allow_uime' [ 73.055575][ T6211] __nla_validate_parse: 1 callbacks suppressed [ 73.055597][ T6211] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1173'. [ 73.089165][ T6214] loop1: detected capacity change from 0 to 128 [ 73.096775][ T6214] FAT-fs (loop1): Directory bread(block 162) failed [ 73.103776][ T6214] FAT-fs (loop1): Directory bread(block 163) failed [ 73.110650][ T6214] FAT-fs (loop1): Directory bread(block 164) failed [ 73.118489][ T6214] FAT-fs (loop1): Directory bread(block 165) failed [ 73.125635][ T6214] FAT-fs (loop1): Directory bread(block 166) failed [ 73.133086][ T6214] FAT-fs (loop1): Directory bread(block 167) failed [ 73.144574][ T6219] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 73.157716][ T6214] FAT-fs (loop1): Directory bread(block 168) failed [ 73.164636][ T6220] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1177'. [ 73.164734][ T6220] IPVS: Error connecting to the multicast addr [ 73.194384][ T6214] FAT-fs (loop1): Directory bread(block 169) failed [ 73.237774][ T6227] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.1181'. [ 73.318417][ T6236] loop0: detected capacity change from 0 to 512 [ 73.340121][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 73.340140][ T29] audit: type=1400 audit(1760171575.902:473): avc: denied { setopt } for pid=6237 comm="syz.5.1187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 73.393496][ T6236] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 73.401936][ T6236] EXT4-fs (loop0): orphan cleanup on readonly fs [ 73.418690][ T6236] EXT4-fs error (device loop0): ext4_do_update_inode:5624: inode #16: comm syz.0.1186: corrupted inode contents [ 73.434144][ T6236] EXT4-fs (loop0): Remounting filesystem read-only [ 73.440962][ T6236] EXT4-fs (loop0): 1 truncate cleaned up [ 73.446816][ T31] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 73.457600][ T31] Quota error (device loop0): write_blk: dquota write failed [ 73.465197][ T31] Quota error (device loop0): remove_free_dqentry: Can't write block (5) with free entries [ 73.475479][ T31] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 73.486094][ T31] Quota error (device loop0): write_blk: dquota write failed [ 73.493606][ T31] Quota error (device loop0): free_dqentry: Can't move quota data block (5) to free list [ 73.521361][ T6244] loop5: detected capacity change from 0 to 2048 [ 73.580431][ T31] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 73.590890][ T31] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 73.602354][ T6244] loop5: p1 < > p3 p4 < > [ 73.606913][ T6244] loop5: partition table partially beyond EOD, truncated [ 73.622389][ T6244] loop5: p1 start 8388352 is beyond EOD, truncated [ 73.629154][ T6244] loop5: p3 size 16777216 extends beyond EOD, truncated [ 73.636908][ T31] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 73.648167][ T6236] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 73.683464][ T29] audit: type=1400 audit(1760171576.242:474): avc: denied { read write } for pid=6243 comm="syz.5.1189" name="loop5p4" dev="devtmpfs" ino=782 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 73.707716][ T29] audit: type=1400 audit(1760171576.242:475): avc: denied { open } for pid=6243 comm="syz.5.1189" path="/dev/loop5p4" dev="devtmpfs" ino=782 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 73.731409][ T6236] EXT4-fs warning (device loop0): ext4_resize_begin:82: There are errors in the filesystem, so online resizing is not allowed [ 73.793833][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.920816][ T29] audit: type=1400 audit(1760171576.482:476): avc: denied { name_bind } for pid=6258 comm="syz.0.1195" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 74.237398][ T6280] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1206'. [ 74.273448][ T6287] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1208'. [ 74.314394][ T6293] loop1: detected capacity change from 0 to 512 [ 74.363736][ T6293] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.363956][ T6293] ext4 filesystem being mounted at /303/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.436813][ T6293] syz.1.1212 (6293) used greatest stack depth: 10064 bytes left [ 74.470923][ T6295] loop0: detected capacity change from 0 to 8192 [ 74.485643][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.502735][ T6295] loop0: p1 p2 p3 p4 [ 74.535110][ T6295] loop0: p3 start 331777 is beyond EOD, truncated [ 74.535206][ T6295] loop0: p4 size 262144 extends beyond EOD, truncated [ 74.803409][ T6315] loop1: detected capacity change from 0 to 2048 [ 74.814741][ T6315] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.843507][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.939078][ T6327] wireguard0: entered promiscuous mode [ 74.939101][ T6327] wireguard0: entered allmulticast mode [ 75.384601][ T6369] xt_hashlimit: max too large, truncated to 1048576 [ 75.402385][ T6369] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 75.604440][ T6393] loop5: detected capacity change from 0 to 164 [ 75.618607][ T6393] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 75.918516][ T6431] loop4: detected capacity change from 0 to 512 [ 75.936642][ T6431] EXT4-fs (loop4): orphan cleanup on readonly fs [ 75.950355][ T6431] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #11: block 1728053262: comm syz.4.1277: lblock 0 mapped to illegal pblock 1728053262 (length 1) [ 75.972373][ T6431] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 75.985762][ T6431] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #15: comm syz.4.1277: corrupted inode contents [ 76.002266][ T6431] EXT4-fs error (device loop4): ext4_dirty_inode:6509: inode #15: comm syz.4.1277: mark_inode_dirty error [ 76.016883][ T6431] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #15: comm syz.4.1277: corrupted inode contents [ 76.041143][ T6431] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2996: inode #15: comm syz.4.1277: mark_inode_dirty error [ 76.065582][ T6431] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2999: inode #15: comm syz.4.1277: mark inode dirty (error -117) [ 76.093198][ T6431] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117) [ 76.112343][ T6431] EXT4-fs (loop4): 1 orphan inode deleted [ 76.118768][ T6431] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 76.177673][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.326982][ T6472] loop1: detected capacity change from 0 to 512 [ 76.362393][ T6472] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 76.397471][ T6472] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.463867][ T6472] ext4 filesystem being mounted at /323/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.640324][ T6482] loop5: detected capacity change from 0 to 8192 [ 76.738770][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.847300][ T6508] loop5: detected capacity change from 0 to 764 [ 76.948905][ T6522] syz.4.1315 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 76.980832][ T6524] loop5: detected capacity change from 0 to 512 [ 76.988013][ T6524] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 76.999825][ T6524] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 77.014255][ T6524] EXT4-fs (loop5): 1 truncate cleaned up [ 77.020390][ T6524] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.061779][ T4696] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.094213][ T6531] debugfs: Bad value for 'gid' [ 77.099147][ T6531] debugfs: Bad value for 'gid' [ 77.500601][ T6586] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1345'. [ 78.082294][ T6627] loop5: detected capacity change from 0 to 512 [ 78.092285][ T6627] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 78.092510][ T6627] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.1364: invalid indirect mapped block 8 (level 2) [ 78.092677][ T6627] EXT4-fs (loop5): Remounting filesystem read-only [ 78.092853][ T6627] EXT4-fs (loop5): 1 truncate cleaned up [ 78.093368][ T6627] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.130735][ T4696] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.233270][ T6637] netlink: 332 bytes leftover after parsing attributes in process `syz.5.1368'. [ 78.253010][ T6637] netlink: 'syz.5.1368': attribute type 9 has an invalid length. [ 78.260937][ T6637] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1368'. [ 78.270943][ T6637] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1368'. [ 78.518157][ T6660] loop4: detected capacity change from 0 to 512 [ 78.534247][ T6660] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.549477][ T6660] EXT4-fs (loop4): Online resizing not supported with sparse_super2 [ 78.590923][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.818308][ T6688] loop0: detected capacity change from 0 to 512 [ 78.831276][ T6688] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 78.855122][ T6688] __quota_error: 25 callbacks suppressed [ 78.855142][ T6688] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 78.872654][ T6688] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 78.883381][ T6688] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.1390: Failed to acquire dquot type 1 [ 78.904695][ T29] audit: type=1400 audit(1760171587.468:502): avc: denied { append } for pid=6694 comm="syz.4.1393" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 78.912323][ T6688] EXT4-fs (loop0): 1 truncate cleaned up [ 78.943891][ T6688] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.981324][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.043576][ T6706] loop0: detected capacity change from 0 to 1024 [ 79.050869][ T6706] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 79.087443][ T6706] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.1398: Invalid block bitmap block 0 in block_group 0 [ 79.111277][ T6706] Quota error (device loop0): write_blk: dquota write failed [ 79.118883][ T6706] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 79.134268][ T6706] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.1398: Failed to acquire dquot type 0 [ 79.153047][ T6706] EXT4-fs error (device loop0): ext4_free_blocks:6706: comm syz.0.1398: Freeing blocks not in datazone - block = 0, count = 4096 [ 79.175603][ T6706] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.1398: Invalid inode bitmap blk 0 in block_group 0 [ 79.206783][ T31] Quota error (device loop0): do_check_range: Getting block 0 out of range 1-7 [ 79.216196][ T31] EXT4-fs error (device loop0): ext4_release_dquot:6981: comm kworker/u8:1: Failed to release dquot type 0 [ 79.237233][ T6717] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1402'. [ 79.258597][ T6706] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 79.278791][ T6706] EXT4-fs (loop0): 1 orphan inode deleted [ 79.286918][ T6706] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.359730][ T29] audit: type=1400 audit(1760171587.918:503): avc: denied { create } for pid=6705 comm="syz.0.1398" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 79.360536][ T6706] syz.0.1398 (6706) used greatest stack depth: 9232 bytes left [ 79.476811][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.490341][ T310] Quota error (device loop0): do_check_range: Getting block 0 out of range 1-7 [ 79.501137][ T310] EXT4-fs error (device loop0): ext4_release_dquot:6981: comm kworker/u8:5: Failed to release dquot type 0 [ 79.523114][ T29] audit: type=1400 audit(1760171588.088:504): avc: denied { read write } for pid=6731 comm="syz.5.1410" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 79.548082][ T29] audit: type=1400 audit(1760171588.088:505): avc: denied { open } for pid=6731 comm="syz.5.1410" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 79.750905][ T6756] loop5: detected capacity change from 0 to 764 [ 79.776419][ T6756] rock: directory entry would overflow storage [ 79.783549][ T6756] rock: sig=0x4654, size=5, remaining=4 [ 80.323572][ T6805] netlink: 'syz.5.1444': attribute type 10 has an invalid length. [ 80.423511][ T6815] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1449'. [ 80.434711][ T6817] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.1450'. [ 80.489864][ T6823] loop1: detected capacity change from 0 to 256 [ 80.511141][ T6823] FAT-fs (loop1): error, clusters badly computed (0 != 128) [ 80.518540][ T6823] FAT-fs (loop1): Filesystem has been set read-only [ 80.542363][ T6823] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 80.559629][ T6828] loop5: detected capacity change from 0 to 512 [ 80.585659][ T6828] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 80.607907][ T6828] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.1455: Failed to acquire dquot type 1 [ 80.634734][ T6828] EXT4-fs (loop5): 1 truncate cleaned up [ 80.647842][ T6828] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.731925][ T4696] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.828658][ T6842] loop5: detected capacity change from 0 to 1024 [ 80.859133][ T6842] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.908611][ T4696] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.043923][ T6861] loop4: detected capacity change from 0 to 4096 [ 81.054016][ T6861] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.098330][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.155445][ T6870] loop4: detected capacity change from 0 to 1024 [ 81.162551][ T6870] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 81.175089][ T6870] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.1474: Invalid block bitmap block 0 in block_group 0 [ 81.188949][ T6870] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.1474: Failed to acquire dquot type 0 [ 81.213650][ T6870] EXT4-fs error (device loop4): ext4_free_blocks:6706: comm syz.4.1474: Freeing blocks not in datazone - block = 0, count = 4096 [ 81.227268][ T6870] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.1474: Invalid inode bitmap blk 0 in block_group 0 [ 81.241574][ T310] EXT4-fs error (device loop4): ext4_release_dquot:6981: comm kworker/u8:5: Failed to release dquot type 0 [ 81.253749][ T6870] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 81.262527][ T6870] EXT4-fs (loop4): 1 orphan inode deleted [ 81.268805][ T6873] random: crng reseeded on system resumption [ 81.268834][ T6870] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.341692][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.368424][ T35] EXT4-fs error (device loop4): ext4_release_dquot:6981: comm kworker/u8:2: Failed to release dquot type 0 [ 81.387903][ T6876] tipc: Failed to obtain node identity [ 81.394302][ T6876] tipc: Enabling of bearer rejected, failed to enable media [ 81.576239][ T6902] loop1: detected capacity change from 0 to 1024 [ 81.586638][ T6902] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 81.599019][ T6902] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.1488: Invalid block bitmap block 0 in block_group 0 [ 81.621304][ T6902] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.1488: Failed to acquire dquot type 0 [ 81.636028][ T6902] EXT4-fs error (device loop1): ext4_free_blocks:6706: comm syz.1.1488: Freeing blocks not in datazone - block = 0, count = 4096 [ 81.637159][ T6908] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1490'. [ 81.671626][ T6902] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.1488: Invalid inode bitmap blk 0 in block_group 0 [ 81.692747][ T35] EXT4-fs error (device loop1): ext4_release_dquot:6981: comm kworker/u8:2: Failed to release dquot type 0 [ 81.719812][ T6913] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1491'. [ 81.753466][ T6902] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 81.794099][ T6902] EXT4-fs (loop1): 1 orphan inode deleted [ 81.806867][ T6902] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.878049][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.891690][ T310] EXT4-fs error (device loop1): ext4_release_dquot:6981: comm kworker/u8:5: Failed to release dquot type 0 [ 82.091225][ T6943] loop4: detected capacity change from 0 to 4096 [ 82.136824][ T6943] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.140140][ T6948] team_slave_0: entered promiscuous mode [ 82.155568][ T6948] team_slave_1: entered promiscuous mode [ 82.163964][ T6948] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 82.172543][ T6948] team0: Device macvtap1 is already an upper device of the team interface [ 82.182007][ T6948] team_slave_0: left promiscuous mode [ 82.187542][ T6948] team_slave_1: left promiscuous mode [ 82.196179][ T6950] loop0: detected capacity change from 0 to 1024 [ 82.224936][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.243762][ T6950] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.303550][ T6954] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1512'. [ 82.322622][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.477018][ T6968] loop0: detected capacity change from 0 to 2048 [ 82.567777][ T6968] loop0: p2 p3 p7 [ 82.664852][ T6989] xt_HMARK: spi-set and port-set can't be combined [ 82.929396][ T7023] loop1: detected capacity change from 0 to 512 [ 82.969568][ T7023] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 83.095528][ T7033] loop1: detected capacity change from 0 to 164 [ 83.128609][ T7033] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 83.151457][ T7043] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1555'. [ 83.607048][ T7089] hub 6-0:1.0: USB hub found [ 83.623910][ T7089] hub 6-0:1.0: 8 ports detected [ 83.716510][ T7099] loop4: detected capacity change from 0 to 512 [ 83.752687][ T7099] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 83.794032][ T7099] EXT4-fs (loop4): 1 truncate cleaned up [ 83.800276][ T7099] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.903144][ T7099] EXT4-fs error (device loop4): ext4_generic_delete_entry:2668: inode #2: block 13: comm syz.4.1583: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 83.923858][ T29] kauditd_printk_skb: 37 callbacks suppressed [ 83.923874][ T29] audit: type=1400 audit(1760171592.468:533): avc: denied { rename } for pid=7097 comm="syz.4.1583" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 83.952453][ T29] audit: type=1400 audit(1760171592.468:534): avc: denied { reparent } for pid=7097 comm="syz.4.1583" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 83.975331][ T29] audit: type=1400 audit(1760171592.468:535): avc: denied { add_name } for pid=7097 comm="syz.4.1583" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 84.006393][ T7099] EXT4-fs (loop4): Remounting filesystem read-only [ 84.013106][ T7099] EXT4-fs warning (device loop4): ext4_rename_delete:3731: inode #2: comm syz.4.1583: Deleting old file: nlink 5, error=-117 [ 84.063842][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.142534][ T29] audit: type=1326 audit(1760171592.698:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7115 comm="syz.4.1589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc26046eec9 code=0x7ffc0000 [ 84.166400][ T29] audit: type=1326 audit(1760171592.698:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7115 comm="syz.4.1589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc26046eec9 code=0x7ffc0000 [ 84.189957][ T29] audit: type=1326 audit(1760171592.698:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7115 comm="syz.4.1589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7fc26046eec9 code=0x7ffc0000 [ 84.213256][ T29] audit: type=1326 audit(1760171592.698:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7115 comm="syz.4.1589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc26046eec9 code=0x7ffc0000 [ 84.236925][ T29] audit: type=1326 audit(1760171592.698:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7115 comm="syz.4.1589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc26046eec9 code=0x7ffc0000 [ 84.376081][ T29] audit: type=1400 audit(1760171592.938:541): avc: denied { setopt } for pid=7131 comm="syz.0.1597" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 84.945419][ T7160] loop0: detected capacity change from 0 to 164 [ 84.960411][ T310] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.981479][ T7160] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 85.044926][ T310] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.118338][ T310] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.195306][ T310] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.211105][ T7182] loop1: detected capacity change from 0 to 128 [ 85.248184][ T7150] chnl_net:caif_netlink_parms(): no params data found [ 85.260575][ T7182] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 85.289976][ T29] audit: type=1326 audit(1760171593.848:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7186 comm="syz.0.1620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa89bb1eec9 code=0x7ffc0000 [ 85.336833][ T35] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 85.369830][ T7194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.379765][ T7150] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.386954][ T7150] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.394730][ T7194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.408553][ T7150] bridge_slave_0: entered allmulticast mode [ 85.426516][ T7150] bridge_slave_0: entered promiscuous mode [ 85.441869][ T7198] team_slave_0: entered promiscuous mode [ 85.447683][ T7198] team_slave_1: entered promiscuous mode [ 85.464855][ T7150] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.472112][ T7150] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.481925][ T7150] bridge_slave_1: entered allmulticast mode [ 85.489438][ T7150] bridge_slave_1: entered promiscuous mode [ 85.497107][ T310] bridge_slave_1: left allmulticast mode [ 85.502866][ T310] bridge_slave_1: left promiscuous mode [ 85.508960][ T310] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.517338][ T310] bridge_slave_0: left allmulticast mode [ 85.523328][ T310] bridge_slave_0: left promiscuous mode [ 85.529148][ T310] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.664683][ T310] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 85.676120][ T310] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 85.686810][ T310] bond0 (unregistering): Released all slaves [ 85.695480][ T7196] team_slave_0: left promiscuous mode [ 85.700992][ T7196] team_slave_1: left promiscuous mode [ 85.719844][ T7210] gretap0: entered promiscuous mode [ 85.725685][ T7210] vlan2: entered promiscuous mode [ 85.745861][ T310] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.753635][ T310] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 85.761391][ T310] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.769083][ T310] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.780409][ T310] hsr0: left allmulticast mode [ 85.786714][ T310] veth1_macvtap: left promiscuous mode [ 85.792251][ T310] veth0_macvtap: left promiscuous mode [ 85.797882][ T310] veth1_vlan: left promiscuous mode [ 85.803885][ T310] veth0_vlan: left promiscuous mode [ 85.892516][ T310] team0 (unregistering): Port device team_slave_1 removed [ 85.904539][ T310] team0 (unregistering): Port device team_slave_0 removed [ 85.951284][ T7150] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.962135][ T7150] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.045468][ T7150] team0: Port device team_slave_0 added [ 86.062974][ T7150] team0: Port device team_slave_1 added [ 86.101458][ T7150] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.110047][ T7150] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.136994][ T7150] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.154499][ T7237] gretap0: entered promiscuous mode [ 86.161658][ T7239] loop0: detected capacity change from 0 to 128 [ 86.163047][ T7237] vlan2: entered promiscuous mode [ 86.186555][ T7150] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.193692][ T7150] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.220309][ T7150] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.257791][ T7150] hsr_slave_0: entered promiscuous mode [ 86.268810][ T7150] hsr_slave_1: entered promiscuous mode [ 86.278964][ T7150] debugfs: 'hsr0' already exists in 'hsr' [ 86.284913][ T7150] Cannot create hsr debugfs directory [ 86.450553][ T7150] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 86.460302][ T7150] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 86.469933][ T7150] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 86.493360][ T7150] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 86.542147][ T7150] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.554350][ T7150] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.568919][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.576191][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.585374][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.592609][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.655605][ T7150] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.767511][ T7150] veth0_vlan: entered promiscuous mode [ 86.776044][ T7150] veth1_vlan: entered promiscuous mode [ 86.791127][ T7150] veth0_macvtap: entered promiscuous mode [ 86.798604][ T7150] veth1_macvtap: entered promiscuous mode [ 86.810768][ T7150] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.820344][ T7150] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.832912][ T52] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.843894][ T52] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.855008][ T52] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.865712][ T52] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.938547][ T7288] netlink: 'syz.4.1664': attribute type 21 has an invalid length. [ 86.947813][ T7288] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1664'. [ 86.957656][ T7288] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1664'. [ 87.886627][ T7305] loop5: detected capacity change from 0 to 736 [ 88.038034][ T7330] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1675'. [ 88.124551][ T7345] netlink: 'syz.5.1682': attribute type 1 has an invalid length. [ 88.125149][ T7346] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1683'. [ 88.210831][ T7357] loop5: detected capacity change from 0 to 512 [ 88.212008][ T7360] loop4: detected capacity change from 0 to 512 [ 88.226463][ T7357] EXT4-fs error (device loop5): ext4_iget_extra_inode:5075: inode #15: comm syz.5.1688: corrupted in-inode xattr: invalid ea_ino [ 88.240908][ T7357] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.1688: couldn't read orphan inode 15 (err -117) [ 88.256058][ T7357] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.257730][ T7360] EXT4-fs (loop4): 1 orphan inode deleted [ 88.282131][ T7360] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.300167][ T4696] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.309499][ T7360] ext4 filesystem being mounted at /378/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.354433][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.390440][ T7380] loop0: detected capacity change from 0 to 512 [ 88.405626][ T7380] EXT4-fs warning (device loop0): ext4_xattr_inode_get:560: inode #11: comm syz.0.1697: EA inode hash validation failed [ 88.422191][ T7380] EXT4-fs error (device loop0): ext4_do_update_inode:5624: inode #15: comm syz.0.1697: corrupted inode contents [ 88.436447][ T7380] EXT4-fs error (device loop0): ext4_dirty_inode:6509: inode #15: comm syz.0.1697: mark_inode_dirty error [ 88.452608][ T7380] EXT4-fs error (device loop0): ext4_do_update_inode:5624: inode #15: comm syz.0.1697: corrupted inode contents [ 88.470627][ T7380] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2996: inode #15: comm syz.0.1697: mark_inode_dirty error [ 88.488093][ T7380] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2999: inode #15: comm syz.0.1697: mark inode dirty (error -117) [ 88.512311][ T7380] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -117) [ 88.523672][ T7380] EXT4-fs (loop0): 1 orphan inode deleted [ 88.546645][ T7380] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.578961][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.661209][ T7407] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1709'. [ 88.711587][ T7411] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1711'. [ 88.721573][ T7411] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1711'. [ 88.942479][ T7431] loop1: detected capacity change from 0 to 512 [ 88.949216][ T7431] EXT4-fs: Ignoring removed bh option [ 88.963039][ T7431] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 88.983066][ T7431] EXT4-fs (loop1): 1 truncate cleaned up [ 88.998018][ T7431] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.036228][ T7444] loop0: detected capacity change from 0 to 512 [ 89.052630][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.073130][ T7444] EXT4-fs: Ignoring removed nomblk_io_submit option [ 89.082493][ T7444] EXT4-fs (loop0): filesystem is read-only [ 89.113240][ T7444] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 89.140201][ T7444] EXT4-fs (loop0): filesystem is read-only [ 89.146256][ T7444] EXT4-fs (loop0): orphan cleanup on readonly fs [ 89.162517][ T7444] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #16: comm syz.0.1737: iget: bad i_size value: 648518346341360424 [ 89.193122][ T7444] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.1737: couldn't read orphan inode 16 (err -117) [ 89.212732][ T7444] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 89.244201][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.257507][ T7465] bridge_slave_0: left allmulticast mode [ 89.263365][ T7465] bridge_slave_0: left promiscuous mode [ 89.269353][ T7465] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.279944][ T7465] bridge_slave_1: left allmulticast mode [ 89.285789][ T7465] bridge_slave_1: left promiscuous mode [ 89.291639][ T7465] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.311934][ T7465] bond0: (slave bond_slave_0): Releasing backup interface [ 89.331246][ T7465] bond0: (slave bond_slave_1): Releasing backup interface [ 89.361376][ T7483] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1744'. [ 89.363461][ T7480] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1743'. [ 89.381493][ T7465] team0: Port device team_slave_0 removed [ 89.409689][ T7465] team0: Port device team_slave_1 removed [ 89.417572][ T7465] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.425248][ T7465] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 89.450519][ T7465] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.458188][ T7465] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.471807][ T7465] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 89.497259][ T7480] bond_slave_0: entered promiscuous mode [ 89.503074][ T7480] bond_slave_1: entered promiscuous mode [ 89.524045][ T7480] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 89.534102][ T7480] bond_slave_0: left promiscuous mode [ 89.539596][ T7480] bond_slave_1: left promiscuous mode [ 89.576446][ T7495] loop0: detected capacity change from 0 to 512 [ 89.583448][ T7495] EXT4-fs: Ignoring removed nobh option [ 89.591086][ T7495] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.1750: iget: bad i_size value: 38620345925642 [ 89.604725][ T7495] EXT4-fs (loop0): Remounting filesystem read-only [ 89.613471][ T7495] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.656109][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.668194][ T7500] random: crng reseeded on system resumption [ 89.785418][ T7504] hub 2-0:1.0: USB hub found [ 89.806985][ T7504] hub 2-0:1.0: 8 ports detected [ 89.845943][ T7519] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1761'. [ 89.857086][ T7519] xt_time: unknown flags 0xf4 [ 89.874404][ T7522] loop0: detected capacity change from 0 to 1024 [ 89.894006][ T7522] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.965175][ T7522] ext4 filesystem being mounted at /417/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.014021][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.026408][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 90.026428][ T29] audit: type=1400 audit(1760171598.598:567): avc: denied { read } for pid=7548 comm="syz.4.1775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 90.085240][ T29] audit: type=1400 audit(1760171598.648:568): avc: denied { create } for pid=7553 comm="syz.5.1778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 90.121293][ T29] audit: type=1400 audit(1760171598.678:569): avc: denied { setopt } for pid=7553 comm="syz.5.1778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 90.336712][ T7591] loop5: detected capacity change from 0 to 512 [ 90.344670][ T7591] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 90.362437][ T29] audit: type=1400 audit(1760171598.918:570): avc: denied { lock } for pid=7594 comm="syz.4.1797" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=17348 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 90.401107][ T7591] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.1796: bg 0: block 104: invalid block bitmap [ 90.435145][ T7591] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 90.439100][ T29] audit: type=1326 audit(1760171598.998:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7600 comm="syz.1.1799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07d239eec9 code=0x7ffc0000 [ 90.467941][ T29] audit: type=1326 audit(1760171598.998:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7600 comm="syz.1.1799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f07d239eec9 code=0x7ffc0000 [ 90.491656][ T29] audit: type=1326 audit(1760171598.998:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7600 comm="syz.1.1799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07d239eec9 code=0x7ffc0000 [ 90.515186][ T29] audit: type=1326 audit(1760171598.998:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7600 comm="syz.1.1799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07d239eec9 code=0x7ffc0000 [ 90.538731][ T29] audit: type=1326 audit(1760171598.998:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7600 comm="syz.1.1799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7f07d239eec9 code=0x7ffc0000 [ 90.562246][ T29] audit: type=1326 audit(1760171598.998:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7600 comm="syz.1.1799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07d239eec9 code=0x7ffc0000 [ 90.616904][ T7591] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.1796: invalid indirect mapped block 1 (level 1) [ 90.661508][ T7591] EXT4-fs (loop5): 1 truncate cleaned up [ 90.691983][ T7591] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.770310][ T7616] 0X: renamed from caif0 [ 90.776682][ T7616] 0X: entered allmulticast mode [ 90.782096][ T7616] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 90.805023][ T4696] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.074987][ T7652] loop4: detected capacity change from 0 to 512 [ 91.082018][ T7652] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 91.094705][ T7652] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.1823: invalid indirect mapped block 4294967295 (level 0) [ 91.113353][ T7652] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.1823: invalid indirect mapped block 4294967295 (level 1) [ 91.142306][ T7652] EXT4-fs (loop4): 1 orphan inode deleted [ 91.148133][ T7652] EXT4-fs (loop4): 1 truncate cleaned up [ 91.165963][ T7652] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.238872][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.721694][ T7747] netlink: 'syz.4.1869': attribute type 2 has an invalid length. [ 91.903004][ T7783] netlink: 'syz.4.1887': attribute type 5 has an invalid length. [ 91.911422][ T7783] netlink: 'syz.4.1887': attribute type 6 has an invalid length. [ 91.931474][ T7786] loop0: detected capacity change from 0 to 512 [ 91.939660][ T7786] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 91.947326][ T7789] loop6: detected capacity change from 0 to 1024 [ 91.967333][ T7786] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.1888: invalid indirect mapped block 4294967295 (level 0) [ 91.984848][ T7786] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.1888: invalid indirect mapped block 4294967295 (level 1) [ 91.989963][ T7789] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.012770][ T7789] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.017026][ T7786] EXT4-fs (loop0): 1 orphan inode deleted [ 92.030594][ T7786] EXT4-fs (loop0): 1 truncate cleaned up [ 92.045334][ T7786] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.065993][ T7150] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.124826][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.202970][ T7819] xt_l2tp: wrong L2TP version: 1 [ 92.316501][ T7843] loop1: detected capacity change from 0 to 128 [ 92.396876][ T7853] loop4: detected capacity change from 0 to 1024 [ 92.427313][ T7853] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.480911][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.660547][ T7901] __nla_validate_parse: 12 callbacks suppressed [ 92.660586][ T7901] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1941'. [ 92.678050][ T7903] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1942'. [ 92.687462][ T7903] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1942'. [ 92.709978][ T7905] loop4: detected capacity change from 0 to 512 [ 92.720310][ T7905] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 92.749910][ T7905] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.1943: bg 0: block 104: invalid block bitmap [ 92.766324][ T7912] loop1: detected capacity change from 0 to 2048 [ 92.773850][ T7905] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 92.783634][ T7905] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1943: invalid indirect mapped block 1 (level 1) [ 92.796343][ T7912] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.1946: bg 0: block 2: invalid block bitmap [ 92.810937][ T7912] EXT4-fs (loop1): Remounting filesystem read-only [ 92.831984][ T7905] EXT4-fs (loop4): 1 truncate cleaned up [ 92.920120][ T7938] loop0: detected capacity change from 0 to 128 [ 92.931971][ T7940] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1961'. [ 92.946029][ T7938] ext4 filesystem being mounted at /447/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 92.956661][ T7942] geneve0: entered allmulticast mode [ 93.205947][ T7983] netlink: 128 bytes leftover after parsing attributes in process `syz.6.1981'. [ 93.375736][ T8010] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1992'. [ 93.417648][ T8017] loop4: detected capacity change from 0 to 512 [ 93.431535][ T8016] loop5: detected capacity change from 0 to 1024 [ 93.497462][ T8017] ext4 filesystem being mounted at /455/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.551535][ T8017] EXT4-fs error (device loop4): ext4_empty_dir:3077: inode #12: comm syz.4.1995: invalid size [ 93.598747][ T8046] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2008'. [ 93.658981][ T8054] random: crng reseeded on system resumption [ 93.703048][ T8060] 8021q: adding VLAN 0 to HW filter on device bond1 [ 93.711475][ T8060] team0: Port device bond1 added [ 93.741411][ T8066] netlink: 'syz.4.2018': attribute type 1 has an invalid length. [ 93.749790][ T8066] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2018'. [ 94.144149][ T8118] netlink: 256 bytes leftover after parsing attributes in process `syz.5.2044'. [ 94.210019][ T8119] bridge_slave_0: left allmulticast mode [ 94.217733][ T8119] bridge_slave_0: left promiscuous mode [ 94.223782][ T8119] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.275848][ T8119] bridge_slave_1: left allmulticast mode [ 94.282703][ T8119] bridge_slave_1: left promiscuous mode [ 94.288560][ T8119] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.313783][ T8119] bond0: (slave bond_slave_0): Releasing backup interface [ 94.373427][ T8119] bond0: (slave bond_slave_1): Releasing backup interface [ 94.413799][ T8119] team0: Port device team_slave_0 removed [ 94.432803][ T8119] team0: Port device team_slave_1 removed [ 94.450309][ T8119] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.458338][ T8119] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.485129][ T8119] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.492754][ T8119] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.497926][ T8159] hub 2-0:1.0: USB hub found [ 94.518217][ T8119] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 94.518665][ T8159] hub 2-0:1.0: 8 ports detected [ 94.594717][ T8172] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2070'. [ 94.605606][ T8172] netlink: 'syz.0.2070': attribute type 2 has an invalid length. [ 94.622369][ T8177] loop1: detected capacity change from 0 to 164 [ 94.795744][ T8192] loop6: detected capacity change from 0 to 1024 [ 95.102105][ T8242] hub 2-0:1.0: USB hub found [ 95.121145][ T8242] hub 2-0:1.0: 8 ports detected [ 95.149683][ T29] kauditd_printk_skb: 68 callbacks suppressed [ 95.149699][ T29] audit: type=1400 audit(1760172371.720:645): avc: denied { bind } for pid=8250 comm="syz.5.2109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 95.212550][ T8261] netlink: 'syz.1.2111': attribute type 1 has an invalid length. [ 95.306648][ T8274] loop1: detected capacity change from 0 to 256 [ 95.337658][ T8276] loop6: detected capacity change from 0 to 512 [ 95.358032][ T8276] Quota error (device loop6): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 95.368218][ T8276] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 95.378985][ T8276] EXT4-fs error (device loop6): ext4_acquire_dquot:6945: comm syz.6.2119: Failed to acquire dquot type 1 [ 95.408288][ T8284] SELinux: security_context_str_to_sid ( ) failed with errno=-22 [ 95.485324][ T8276] Quota error (device loop6): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 95.497146][ T8276] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 95.507505][ T8276] EXT4-fs error (device loop6): ext4_acquire_dquot:6945: comm syz.6.2119: Failed to acquire dquot type 1 [ 95.554277][ T8276] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2119: bg 0: block 248: padding at end of block bitmap is not set [ 95.629255][ T8302] random: crng reseeded on system resumption [ 95.637375][ T8276] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 95.677686][ T8276] Quota error (device loop6): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 95.689078][ T8276] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 95.700048][ T8276] EXT4-fs error (device loop6): ext4_acquire_dquot:6945: comm syz.6.2119: Failed to acquire dquot type 1 [ 95.761584][ T8276] EXT4-fs (loop6): 1 orphan inode deleted [ 95.781668][ T8276] ext4 filesystem being mounted at /86/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.839745][ T29] audit: type=1400 audit(1760172372.448:646): avc: denied { create } for pid=8299 comm="syz.5.2131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 95.927909][ T29] audit: type=1400 audit(1760172372.448:647): avc: denied { ioctl } for pid=8299 comm="syz.5.2131" path="socket:[20474]" dev="sockfs" ino=20474 ioctlcmd=0x4944 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 96.059632][ T8316] loop4: detected capacity change from 0 to 512 [ 96.141424][ T29] audit: type=1326 audit(1760172372.776:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8329 comm="syz.4.2141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc26046eec9 code=0x7ffc0000 [ 96.587428][ T8362] tipc: Enabling of bearer rejected, failed to enable media [ 97.394972][ T8446] loop4: detected capacity change from 0 to 256 [ 97.455098][ T8456] xt_l2tp: missing protocol rule (udp|l2tpip) [ 97.557329][ T8468] loop6: detected capacity change from 0 to 512 [ 97.786243][ T8488] loop4: detected capacity change from 0 to 128 [ 97.894525][ T8498] __nla_validate_parse: 3 callbacks suppressed [ 97.894619][ T8498] netlink: 7 bytes leftover after parsing attributes in process `syz.0.2222'. [ 97.929198][ T8498] netlink: 7 bytes leftover after parsing attributes in process `syz.0.2222'. [ 97.988420][ T8521] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2233'. [ 98.026208][ T8525] loop9: detected capacity change from 0 to 7 [ 98.034388][ T8525] Buffer I/O error on dev loop9, logical block 0, async page read [ 98.042698][ T8525] Buffer I/O error on dev loop9, logical block 0, async page read [ 98.050639][ T8525] loop9: unable to read partition table [ 98.057262][ T8525] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 98.057262][ T8525] ) failed (rc=-5) [ 98.154615][ T8547] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.162141][ T8547] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.179988][ T8547] bridge0: entered allmulticast mode [ 98.214503][ T8541] loop1: detected capacity change from 0 to 2048 [ 98.256973][ T8541] loop1: p1 p3 p4 [ 98.264854][ T8541] loop1: p4 size 589824 extends beyond EOD, truncated [ 98.352821][ T8573] loop4: detected capacity change from 0 to 512 [ 98.373173][ T8573] ext4 filesystem being mounted at /512/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 98.419553][ T8573] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #2: block 3: comm syz.4.2257: lblock 8 mapped to illegal pblock 3 (length 26) [ 98.478989][ T8573] EXT4-fs (loop4): Remounting filesystem read-only [ 98.510278][ T8588] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2264'. [ 98.565711][ T8587] bridge_slave_0: left allmulticast mode [ 98.571684][ T8587] bridge_slave_0: left promiscuous mode [ 98.577425][ T8587] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.618976][ T8587] bridge_slave_1: left allmulticast mode [ 98.624730][ T8587] bridge_slave_1: left promiscuous mode [ 98.630760][ T8587] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.670073][ T8587] bond0: (slave bond_slave_0): Releasing backup interface [ 98.683277][ T8587] bond0: (slave bond_slave_1): Releasing backup interface [ 98.713514][ T8587] team0: Port device team_slave_0 removed [ 98.735671][ T8587] team0: Port device team_slave_1 removed [ 98.744516][ T8587] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.752586][ T8587] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.765513][ T8587] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.773002][ T8587] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.791494][ T8587] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 99.038200][ T8630] nftables ruleset with unbound set [ 99.183491][ T8649] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2290'. [ 99.219050][ T8647] loop4: detected capacity change from 0 to 2048 [ 99.284175][ T8647] loop4: p1 p3 p4 [ 99.339517][ T8647] loop4: p4 size 589824 extends beyond EOD, truncated [ 99.363347][ T8676] netlink: 'syz.6.2304': attribute type 1 has an invalid length. [ 99.372085][ T8676] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2304'. [ 99.528670][ T37] hid_parser_main: 33 callbacks suppressed [ 99.528693][ T37] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 99.543186][ T37] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 99.553238][ T37] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 99.560796][ T37] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 99.568308][ T37] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 99.576677][ T37] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 99.585272][ T37] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 99.593670][ T37] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 99.601302][ T37] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 99.608977][ T37] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 99.662262][ T8706] loop6: detected capacity change from 0 to 2048 [ 99.689994][ T37] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.03 Device [syz1] on syz1 [ 99.714487][ T8706] loop6: p1 p3 p4 [ 99.719343][ T8706] loop6: p4 size 589824 extends beyond EOD, truncated [ 99.741826][ T8715] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2323'. [ 99.763994][ T8717] loop6: detected capacity change from 0 to 512 [ 99.849814][ T8717] ext4 filesystem being mounted at /118/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.866122][ T8717] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.2324: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 99.893555][ T8717] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 99.920865][ T8717] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.2324: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 99.958472][ T8742] 9pnet: Could not find request transport: a [ 99.968001][ T8717] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 100.010611][ T29] kauditd_printk_skb: 65 callbacks suppressed [ 100.010675][ T29] audit: type=1400 audit(1760172382.848:714): avc: denied { setattr } for pid=8716 comm="syz.6.2324" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 100.059184][ T8717] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.2324: bg 0: block 18: invalid block bitmap [ 100.088503][ T8717] Quota error (device loop6): write_blk: dquota write failed [ 100.097028][ T8717] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 100.105881][ T8752] loop1: detected capacity change from 0 to 2048 [ 100.107221][ T8717] EXT4-fs error (device loop6): ext4_acquire_dquot:6945: comm syz.6.2324: Failed to acquire dquot type 1 [ 100.141219][ T8717] syz.6.2324 (8717) used greatest stack depth: 9056 bytes left [ 100.142899][ T8752] EXT4-fs: Ignoring removed bh option [ 100.241480][ T29] audit: type=1400 audit(1760172383.090:715): avc: denied { create } for pid=8768 comm="syz.0.2348" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 100.276086][ T29] audit: type=1400 audit(1760172383.132:716): avc: denied { write } for pid=8768 comm="syz.0.2348" name="file0" dev="tmpfs" ino=2724 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 100.276213][ T29] audit: type=1400 audit(1760172383.132:717): avc: denied { open } for pid=8768 comm="syz.0.2348" path="/529/file0" dev="tmpfs" ino=2724 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 100.278470][ T8770] block device autoloading is deprecated and will be removed. [ 100.288563][ T29] audit: type=1400 audit(1760172383.142:718): avc: denied { ioctl } for pid=8768 comm="syz.0.2348" path="/529/file0" dev="tmpfs" ino=2724 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 100.382747][ T29] audit: type=1400 audit(1760172383.247:719): avc: denied { unlink } for pid=3315 comm="syz-executor" name="file0" dev="tmpfs" ino=2724 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 100.488233][ T29] audit: type=1400 audit(1760172383.300:720): avc: denied { ioctl } for pid=3315 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=801 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 100.488271][ T29] audit: type=1326 audit(1760172383.300:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8782 comm="syz.0.2354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa89bb1eec9 code=0x7ffc0000 [ 100.544125][ T8799] netlink: 'syz.1.2362': attribute type 10 has an invalid length. [ 100.547658][ T8799] team0: Port device dummy0 added [ 100.552285][ T8799] netlink: 'syz.1.2362': attribute type 10 has an invalid length. [ 100.564066][ T8799] team0: Port device dummy0 removed [ 100.566397][ T8799] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 100.638861][ T8807] loop9: detected capacity change from 0 to 7 [ 100.664573][ T8809] loop6: detected capacity change from 0 to 512 [ 100.671914][ T8807] Buffer I/O error on dev loop9, logical block 0, async page read [ 100.672006][ T8807] Buffer I/O error on dev loop9, logical block 0, async page read [ 100.672038][ T8807] loop9: unable to read partition table [ 100.672062][ T8807] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 100.672062][ T8807] ) failed (rc=-5) [ 100.674482][ T8813] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2369'. [ 100.725140][ T8809] EXT4-fs error (device loop6): ext4_quota_enable:7136: inode #3: comm syz.6.2368: unexpected EA_INODE flag [ 100.725316][ T8809] EXT4-fs (loop6): Remounting filesystem read-only [ 100.725349][ T8809] EXT4-fs warning (device loop6): ext4_enable_quotas:7180: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 100.725508][ T8809] EXT4-fs (loop6): mount failed [ 100.728045][ T3369] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz1 [ 100.915882][ T8839] loop9: detected capacity change from 0 to 7 [ 100.922274][ T8839] Buffer I/O error on dev loop9, logical block 0, async page read [ 100.961730][ T8839] Buffer I/O error on dev loop9, logical block 0, async page read [ 100.969636][ T8839] loop9: unable to read partition table [ 101.000465][ T8839] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 101.000465][ T8839] ) failed (rc=-5) [ 101.016790][ T37] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz1 [ 101.070394][ T8858] loop4: detected capacity change from 0 to 2048 [ 101.082789][ T8863] netlink: 34 bytes leftover after parsing attributes in process `syz.0.2393'. [ 101.137508][ T8869] loop5: detected capacity change from 0 to 512 [ 101.151563][ T8869] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.2395: Invalid inode bitmap blk 4 in block_group 0 [ 101.171704][ T8869] EXT4-fs mount: 20 callbacks suppressed [ 101.171721][ T8869] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.190312][ T8858] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.209564][ T8881] netlink: 'syz.6.2400': attribute type 41 has an invalid length. [ 101.243403][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.266388][ T4696] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.318045][ T8897] loop9: detected capacity change from 0 to 7 [ 101.352248][ T8897] Buffer I/O error on dev loop9, logical block 0, async page read [ 101.364333][ T8897] Buffer I/O error on dev loop9, logical block 0, async page read [ 101.373980][ T8897] loop9: unable to read partition table [ 101.385408][ T8897] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 101.385408][ T8897] ) failed (rc=-5) [ 101.572874][ T8944] netlink: 'syz.5.2431': attribute type 30 has an invalid length. [ 101.588005][ T8948] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2432'. [ 102.069158][ T9030] loop5: detected capacity change from 0 to 1024 [ 102.084395][ T9030] EXT4-fs: Ignoring removed nobh option [ 102.091238][ T9030] EXT4-fs: Ignoring removed bh option [ 102.124630][ T9030] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.171432][ T4696] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.228263][ T9066] loop5: detected capacity change from 0 to 512 [ 102.257074][ T9070] netlink: 'syz.4.2491': attribute type 3 has an invalid length. [ 102.271497][ T9066] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.295106][ T9066] ext4 filesystem being mounted at /377/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 102.359300][ T4696] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.389595][ T9081] loop4: detected capacity change from 0 to 2048 [ 102.437852][ T9081] Alternate GPT is invalid, using primary GPT. [ 102.444163][ T9081] loop4: p1 p2 p3 [ 102.474100][ T9089] syz_tun: entered promiscuous mode [ 102.488190][ T9089] macvtap1: entered promiscuous mode [ 102.494317][ T9089] macvtap1: entered allmulticast mode [ 102.499900][ T9089] syz_tun: entered allmulticast mode [ 102.508783][ T9089] syz_tun: left allmulticast mode [ 102.514807][ T9089] syz_tun: left promiscuous mode [ 102.700383][ T9114] loop5: detected capacity change from 0 to 512 [ 102.719031][ T9114] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.743440][ T9114] ext4 filesystem being mounted at /385/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.808048][ T4696] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.846122][ T9124] loop4: detected capacity change from 0 to 1024 [ 102.868102][ T9124] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.905790][ T9124] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4193: comm syz.4.2515: Allocating blocks 497-513 which overlap fs metadata [ 102.906655][ T9123] EXT4-fs (loop4): pa ffff8881072b32a0: logic 16, phys. 129, len 24 [ 102.906758][ T9123] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 1 [ 102.946337][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.961021][ T9138] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 102.961063][ T9138] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 102.961107][ T9138] vhci_hcd vhci_hcd.0: Device attached [ 102.974028][ T9139] vhci_hcd: connection closed [ 103.078635][ T35] vhci_hcd: stop threads [ 103.088750][ T35] vhci_hcd: release socket [ 103.093175][ T9152] loop1: detected capacity change from 0 to 128 [ 103.093344][ T35] vhci_hcd: disconnect device [ 103.144055][ T37] vhci_hcd: vhci_device speed not set [ 103.377344][ T9202] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 103.397474][ T9206] loop5: detected capacity change from 0 to 1024 [ 103.406434][ T9206] EXT4-fs: Ignoring removed orlov option [ 103.443275][ T9209] loop0: detected capacity change from 0 to 4096 [ 103.450920][ T9211] loop1: detected capacity change from 0 to 2048 [ 103.458482][ T9206] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.494955][ T9206] EXT4-fs warning (device loop5): ext4_resize_begin:72: won't resize using backup superblock at 1 [ 103.495908][ T9209] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.519800][ T9211] loop1: p1 < > p4 [ 103.525774][ T9211] loop1: p4 size 8388608 extends beyond EOD, truncated [ 103.533099][ T9221] Zero length message leads to an empty skb [ 103.545572][ T4696] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.576318][ T9226] __nla_validate_parse: 5 callbacks suppressed [ 103.576351][ T9226] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2563'. [ 103.592291][ T9226] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2563'. [ 103.601452][ T9226] netlink: 540 bytes leftover after parsing attributes in process `syz.1.2563'. [ 103.629264][ T9229] loop6: detected capacity change from 0 to 512 [ 103.633035][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.667945][ T9229] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.691684][ T9229] ext4 filesystem being mounted at /172/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.729612][ T9245] sch_tbf: burst 0 is lower than device ip6tnl0 mtu (1452) ! [ 103.755436][ T7150] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.893131][ T9271] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2584'. [ 103.912682][ T9275] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2585'. [ 103.925201][ T9279] sctp: [Deprecated]: syz.6.2588 (pid 9279) Use of int in max_burst socket option. [ 103.925201][ T9279] Use struct sctp_assoc_value instead [ 104.054125][ T9297] loop0: detected capacity change from 0 to 164 [ 104.077986][ T9302] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2599'. [ 104.087972][ T9302] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2599'. [ 104.097424][ T9297] ISOFS: unable to read i-node block [ 104.101742][ T9302] ip6erspan0: entered promiscuous mode [ 104.108356][ T9297] isofs_fill_super: get root inode failed [ 104.125567][ T9306] loop4: detected capacity change from 0 to 2048 [ 104.161797][ T9306] loop4: p1 < > p4 [ 104.166500][ T9306] loop4: p4 size 8388608 extends beyond EOD, truncated [ 104.267422][ T9325] ================================================================== [ 104.275846][ T9325] BUG: KCSAN: data-race in __xa_clear_mark / xas_find_marked [ 104.283895][ T9325] [ 104.286248][ T9325] read-write to 0xffff8881072276b8 of 8 bytes by interrupt on cpu 1: [ 104.294552][ T9325] __xa_clear_mark+0xf5/0x1e0 [ 104.299356][ T9325] __folio_end_writeback+0xf7/0x3b0 [ 104.304752][ T9325] folio_end_writeback_no_dropbehind+0x6d/0x1b0 [ 104.311128][ T9325] folio_end_writeback+0x1c/0x70 [ 104.316182][ T9325] ext4_finish_bio+0x459/0x8c0 [ 104.321336][ T9325] ext4_end_bio+0x298/0x3b0 [ 104.325877][ T9325] bio_endio+0x37b/0x420 [ 104.330201][ T9325] blk_update_request+0x336/0x730 [ 104.335270][ T9325] scsi_end_request+0x53/0x4c0 [ 104.340049][ T9325] scsi_io_completion+0x7f/0x200 [ 104.345095][ T9325] scsi_finish_command+0x1c7/0x1e0 [ 104.350491][ T9325] scsi_complete+0xc3/0x1e0 [ 104.355031][ T9325] blk_done_softirq+0x77/0xb0 [ 104.359996][ T9325] handle_softirqs+0xb7/0x290 [ 104.364695][ T9325] __irq_exit_rcu+0x3a/0xc0 [ 104.369315][ T9325] common_interrupt+0x83/0x90 [ 104.374020][ T9325] asm_common_interrupt+0x26/0x40 [ 104.379315][ T9325] crng_make_state+0xf7/0x250 [ 104.384187][ T9325] _get_random_bytes+0x85/0x190 [ 104.389436][ T9325] get_random_bytes+0x1d/0x30 [ 104.394247][ T9325] nsim_dev_trap_report_work+0x23c/0x630 [ 104.400012][ T9325] process_scheduled_works+0x4cb/0x9d0 [ 104.405601][ T9325] worker_thread+0x582/0x770 [ 104.410391][ T9325] kthread+0x486/0x510 [ 104.414659][ T9325] ret_from_fork+0x122/0x1b0 [ 104.419270][ T9325] ret_from_fork_asm+0x1a/0x30 [ 104.424191][ T9325] [ 104.426622][ T9325] read to 0xffff8881072276b8 of 8 bytes by task 9325 on cpu 0: [ 104.434355][ T9325] xas_find_marked+0x218/0x620 [ 104.439161][ T9325] find_get_entry+0x5d/0x380 [ 104.443813][ T9325] filemap_get_folios_tag+0x13b/0x210 [ 104.449308][ T9325] filemap_fdatawait_keep_errors+0x6c/0x180 [ 104.455340][ T9325] sync_inodes_sb+0x39c/0x440 [ 104.460191][ T9325] sync_inodes_one_sb+0x3d/0x50 [ 104.465070][ T9325] __iterate_supers+0x110/0x220 [ 104.469937][ T9325] iterate_supers+0x1f/0x30 [ 104.474453][ T9325] ksys_sync+0x5c/0xe0 [ 104.478831][ T9325] __ia32_sys_sync+0xe/0x20 [ 104.483361][ T9325] x64_sys_call+0x2d1f/0x3000 [ 104.488465][ T9325] do_syscall_64+0xd2/0x200 [ 104.493266][ T9325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.499277][ T9325] [ 104.501696][ T9325] value changed: 0x00e0000000000000 -> 0x0000000000000000 [ 104.509033][ T9325] [ 104.511733][ T9325] Reported by Kernel Concurrency Sanitizer on: [ 104.518341][ T9325] CPU: 0 UID: 0 PID: 9325 Comm: syz.1.2609 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 104.529808][ T9325] Tainted: [W]=WARN [ 104.533632][ T9325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 104.546175][ T9325] ================================================================== [ 104.559182][ T9331] netlink: 'syz.4.2613': attribute type 5 has an invalid length.