last executing test programs: 6.667086174s ago: executing program 4 (id=7368): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x160, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0x8, 0x81}}, @filter_kind_options=@f_bpf={{0x8}, {0x124, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x104, 0x1, [@m_simple={0xcc, 0x1e, 0x0, 0x0, {{0xb}, {0xa0, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x68f6, 0x6, 0x2, 0x8, 0x9}}, @TCA_DEF_DATA={0x9, 0x3, '/-@@\x00'}, @TCA_DEF_DATA={0x3d, 0x3, '\x00\x94\xe4\xe2X\xce\xbar\x069\xf3\xff\x8d\x94\x1ao\xa1,\xa4\xc1\xcc\x1e\x9aS>\a\xd2R\x85\v\x80\xea\x1e\xc8W\xea\x99\xacos\x80\x1d\x8b\xd9`Ewb\xa5&iu@\xfd\x8c\xde\x00'}, @TCA_DEF_DATA={0x1e, 0x3, 'cpuacct.usage_percpu_user\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x4a66, 0x4, 0x3, 0x9}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_connmark={0x34, 0x15, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x160}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 6.619975307s ago: executing program 4 (id=7373): timer_create(0x3, 0x0, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{}, {0x0, 0xe4c}}, 0x0) 6.59566312s ago: executing program 4 (id=7375): syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000d80)=ANY=[], 0x1, 0x36b, &(0x7f0000000a00)="$eJzs3U1vG1UXAODTvM1H85I6C4QECHFVNrCxkvAHGqFWQkQChRoVFkhTMgEr0zjyWEGuEHTHlt9RsWSHhPgDWcCeHbtsWHZRdVDsuPloCIvUHgrPI0X3xPce+4zHM7qb0dm//d3drc2yuZn1Yup6iqmImHoYsTiIhi4djlODeCaOux9vNW7/9tqHH3/y3ura2o31lG6u3np7JaV09fWfvvzq+2s/9/7/0Q9Xf5yNvcVP9/9Y+X3vpb2X9x/f+qJdpnaZtju9lKU7nU4vu1PkaaNdbjVT+qDIszJP7e0y756Y3yw6Ozv9lG1vLMzvdPOyTNl2P23l/dTrpF63n7LPs/Z2ajabaWE++DutB+vr2eownjtn3fVJFcQYdLur2cE1PPvUTOtBLQUBALW66P5/5pnu/6fD/n+Sju//+bc62P/PHF6/J9n/AwAAAAAAAAAAAADA8+BhVTWqqmqMxmr0kPDh/zWXx5g9df5P/dVdH+N17MG9uYji293Wbms4DudXN6MdReSxFI14dHBbGBnGN99du7GUBhZj4e43g/xrv0S0/ncyfzkasXh2/vIwPz3Jj4NxOuaP569EI148O3/lzPyZePONY/nNaMSvn0UnitgY3N6O8r9eTumd99dO5c8O1gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw39BMI6/GsO/9biviSuwe9u9vHi1YPNkff5j/pL/+UjTi0dn9+ZfO7M9/OV65XO+xAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBI2b+3lRVF3p1UMOr5P3hlZhT8ddal4fL7p6auxARrLop86lm94eOqqsZV6txkT+VFgumI885gdfgrufhnvRAR56yZjYj6v41/YlDXHQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADqc9T0u+5KAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAqFPZv7eVFUXeHWNQ9zECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8T/4MAAD//yeQEY0=") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r0 = open(&(0x7f0000000140)='./file2\x00', 0x147842, 0x126) preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) 6.552995113s ago: executing program 4 (id=7379): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000220000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85847817353d2dbad05dd5", 0x1c, 0xfffffffffffffffd) 6.521567055s ago: executing program 4 (id=7381): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0xc0800, 0x80) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) creat(&(0x7f0000000000)='./bus\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x4) 6.520769705s ago: executing program 4 (id=7384): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000001700)=ANY=[@ANYBLOB="540200001600010000000000fedbdf25ff0100000000000000000000000000010a0101010000000000000000000000004e2200004e2300000a00200021000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc0000000000000000000000000000000000000033000000e0000002000000000000000000000000060000000000000019d000000000000009000000000000000000000000000000000000000000000008000000000000000000000000000000ff030000100000000300000000000000ffffffff00000000ffffff7f000000000900000000000000000000007f000000070000002bbd7000000000000200013f000000000000000001000000060000002c001300200100000000000000000000000000010000000000000000000000020000001c00040003004e204e210000fe"], 0x254}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1.186938375s ago: executing program 1 (id=7612): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x1c, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xf, 0x3, 0x1}}, @TCA_GRED_LIMIT={0x6, 0x5, 0x2}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x51}, 0x20040000) 1.165404456s ago: executing program 1 (id=7614): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) mknod$loop(0x0, 0x0, 0x1) 1.095552992s ago: executing program 1 (id=7616): r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x2014, 0xfffe, 0x0, 0x1, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x7fefffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) futex(0x0, 0x5, 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000380)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32], 0x48}}, 0x0) 855.453231ms ago: executing program 1 (id=7622): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo\x00') fchdir(r0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x16ac40, 0xf2) 854.599071ms ago: executing program 1 (id=7624): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file1\x00', 0x8000, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2b2, &(0x7f0000000880)="$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") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000, &(0x7f00000000c0)={[{@jqfmt_vfsold}, {@data_err_abort}, {@debug}, {@noload}, {@mblk_io_submit}, {@commit={'commit', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@debug}]}, 0xfe, 0x46d, &(0x7f0000000f00)="$eJzs3M1vFOUfAPDvTF94+/FrRXwBQapoJL60tLzIwYtGEw6amOgB46m2hVQKNbQmQohWD3g0JN6N/4XxpBejXjTxqndDQgwXUC9rZmemLMtu2aXbLnQ/n2S6zzPzdJ/nOzPP7jPz7G4APWsk+5NE/C8ifo+IoTx7a4GR/OHGtYtTf1+7OJVEpfLWX0m13PVrF6fKouX/bcszlUqR39Sg3kvvRkzOzc2cK/Jji2c+GFs4f+GF2TOTp2ZOzZydOHbs8KG9g0cnjnQkziyu67s/nt+z6/g7l9+YOnH5vZ+S/sjjjro4OmUk37sNPd3pyrpse026umOX7fvlZrrRmUA39UVEdrgGqv1/KPpiy/K2oXjts642DlhTlUqlssKr8lIF2MCS6HYLgO4o3+iz699yWaehxz3h6sv5BVAW941iybf0R5on9g3UXd920khEnFj656tsiTW6DwEAUOu7bPzzfKPxXxoP54nB7M//izmU4Yh4ICJ2RMSDEbEzIh6KqJZ9JCIebbP++hmS28c/6ZW7Dq4F2fjvpWJu69bxX1oWGe4rctur8Q8kJ2fnZg4W++RADGw6OZvMjK9Qx/ev/vZFs221479syeovx4JFO670192gm55cnFxNzLWufhqxu79R/EmU0zhJROyKiN13Wcfss/1Nt905/hU0f9qWVb6OeCY//ktRF38paTo/Of7i0YkjY5tjbubgWHlW3O7nXy+92az+VcXfAdnx39rw/F+OfzjZHLFw/sLp6nztQvt1XPrj86bXNG2e/8e3F+f/YPJ2dcVgseGjycXFc+MRg8nrt6+fuPlsZb4sn8V/YH/j/r8jbu6JxyJiT0TsjYjHs4vCou1PRMSTEbF/hfh/fOWp99uPf33mSrP4p+90/KP2+Lef6Dv9w7d3jn9zRDQ7/oerqQPFmlZe/1pt4Gr2HQAAANwv0upn4JN0dDmdpqOj+Wf4d8bWdG5+YfG5k/Mfnp3OPys/HANpeadrqOZ+6Hhxb7jMT9TlDxX3jb/s21LNj07Nz013O3jocdua9P/Mn33dbh2w5jowjwbcp/R/6F36P/SmRP+Hnqb/Q+9q1P8/aVp69Js1bQywrrz/Q+9qof8v5Q/NRwXA/cn7P/Qu/R96UtPvxqer+sr/uif+LX7P8F5pz8ZPRHpPNGPjJ/pb/jGLNhKVobz/Z2s2NSzT7VcmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAzvgvAAD//w3J5b0=") mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 650.604778ms ago: executing program 1 (id=7631): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x2c, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}, @in={0x2, 0x4e24, @remote}]}, &(0x7f0000000380)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000200)=@assoc_value={r1, 0x6d}, 0x8) 420.400546ms ago: executing program 0 (id=7643): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x14105, 0x32, 0xfffffc00, 0x3, 0x1, 0x100000, 0x5, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000001c0)='cpu~-0\t\t\t') 345.718812ms ago: executing program 0 (id=7648): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000df0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) quotactl_fd$Q_SYNC(0xffffffffffffffff, 0xffffffff80000102, 0x0, 0x0) 267.918888ms ago: executing program 3 (id=7651): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 256.186799ms ago: executing program 0 (id=7652): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xfffffffffffffff8, 0x5}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) ioctl$sock_SIOCGIFBR(r1, 0x8941, &(0x7f0000000080)=@add_del={0x3, &(0x7f0000000100)='ip6erspan0\x00', 0x2a0ffffffff}) 220.824012ms ago: executing program 3 (id=7653): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00', r0}, 0x10) r1 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$selinux_create(r1, &(0x7f0000000380)=@objname={'system_u:object_r:setrans_var_run_t:s0', 0x20, '/usr/lib/telepathy/mission-control-5', 0x20, 0xd, 0x20, './file0\x00'}, 0x69) 201.760544ms ago: executing program 3 (id=7655): r0 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESDEC], 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0) recvmmsg$unix(r0, &(0x7f0000008f40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000004740)=""/199, 0xc7}, {&(0x7f0000004840)=""/220, 0xdc}, {&(0x7f0000004940)=""/255, 0xff}, {&(0x7f0000004a40)=""/159, 0x9f}, {&(0x7f0000004b00)=""/209, 0xd1}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005d00)=""/215, 0xd7}], 0x7}}], 0x1, 0x0, 0x0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80c296f8528f912210", 0x14) 160.939187ms ago: executing program 3 (id=7657): bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000240)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x10, 0x2c, 0x0, @dev, @mcast2, {[@hopopts={0x3c}], @echo_reply}}}}}, 0x0) 147.730398ms ago: executing program 2 (id=7658): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a400020095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000480)='netlink_extack\x00', r0}, 0x18) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="040100001a00010000020000000000f2ff1c5622cfc5ad3203b000000000000000000000000000879828f6bf00000000fc020000000000000000000000000001", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000001000000003c000000ac1414bb000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000300000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000700000000000000000000000000000002000400000000000000000014000e"], 0x104}}, 0x40800) 110.648261ms ago: executing program 3 (id=7659): r0 = gettid() r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x0) ppoll(&(0x7f0000000240)=[{r1}], 0x1, 0x0, 0x0, 0x0) tkill(r0, 0x7) 110.195961ms ago: executing program 0 (id=7660): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x81, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f00000004c0), &(0x7f0000000400)=@udp6=r1}, 0x3f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000007c0)={r0, &(0x7f0000000000), &(0x7f0000000780)=@udp6=r1}, 0x20) 109.844701ms ago: executing program 2 (id=7661): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000240)='4', 0x1}], 0x1) 95.894512ms ago: executing program 0 (id=7662): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x700, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x10, 0x11, 0x4000}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x4000}]}}]}, 0x40}}, 0x0) 80.765233ms ago: executing program 2 (id=7663): prctl$PR_SET_NAME(0xf, &(0x7f0000000180)='wg1\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48284b70043dc6124d877142a48448b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d4023f210fa34b63a715a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f01000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb796ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab04000000ffe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890decace0200f404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef29cd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf0100483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6c354463d7d0917fc80e5009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab4000000000000000028df75cf43f8ecc8d37b126602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89fa516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f49198e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85eff010000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1099e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c391339878b699644c96bd6ea589765ed2a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac4741201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6d00000000000000000000008f6555f3b7d5021dfc8eb504f1e4fef716d60f0d50b03fc014fd3dff46f56750f0ba4f1b9f7de5c17e7d1f18522897edab8e9e76b667ec6b01908400f55e16f0cfbf026be5f5acc681053f697d62b3545aec4606e190216c22c1d8807b6c43f0f0a4b53619fe5c9412821c3816194a5e29cf12cc7a197b5bdafb096d2d7f6be483814c92ef29c3a21c169794c7de3b4c706f4de5f4b93c831944c7b66fa49f317aa22dbc211e19f031c4f8bee14ecd5eb061a052044adc4dd1b63a1500a9c0e09dbba23f2726a55975efb4519d864d984dcb3a1dcafa1124a6b004029a706478df3be2438d2e35e6ca674dc190143a0b6f7db3408c0c08011e5d8f54711a0bd410ab53a15b1596cb77d2b58df2d8d8"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x2) 34.140497ms ago: executing program 2 (id=7664): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) umount2(&(0x7f0000000000)='./file1\x00', 0x0) 33.796367ms ago: executing program 0 (id=7665): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) 33.523098ms ago: executing program 3 (id=7666): r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg$sock(r0, &(0x7f00000000c0)={&(0x7f0000000040)=@phonet={0x23, 0x0, 0x0, 0x11}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80720, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x2040) 515.36µs ago: executing program 2 (id=7667): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000000)={0x8, {{0x2, 0x4e23, @multicast1}}, {{0x2, 0x4e23, @local}}}, 0x108) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f00000004c0)={0x8, {{0x2, 0x4e20, @multicast2}}, {{0x2, 0x4e1d, @empty}}}, 0x108) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000280)={0x6, {{0x2, 0x4e1f, @multicast1}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xb}}}}, 0x108) 0s ago: executing program 2 (id=7668): r0 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0xade4, 0x0, 0x0, 0x2084}, &(0x7f00000001c0)=0x0, &(0x7f0000000440)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000380)='./cgroup\x00', 0x2, 0x40001}) io_uring_enter(r0, 0x3516, 0xaddf, 0x2, 0x0, 0x1517f) kernel console output (not intermixed with test programs): ent: 21 vs 268369941 free clusters [ 134.698372][T14433] EXT4-fs (loop4): Remounting filesystem read-only [ 134.726268][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.756231][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.900076][T14475] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5014'. [ 134.945261][T14481] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5030'. [ 134.996072][T14488] loop2: detected capacity change from 0 to 1024 [ 135.023588][T14488] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.035953][T14494] loop3: detected capacity change from 0 to 512 [ 135.054913][T14488] ext4 filesystem being mounted at /1007/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.073855][T14500] wireguard0: entered promiscuous mode [ 135.079603][T14500] wireguard0: entered allmulticast mode [ 135.102751][T14488] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 135.120871][T14494] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.149936][T14494] ext4 filesystem being mounted at /1006/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 135.190086][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.201944][T14494] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #2: block 18: comm syz.3.5020: lblock 23 mapped to illegal pblock 18 (length 1) [ 135.219410][T14494] EXT4-fs (loop3): Remounting filesystem read-only [ 135.237384][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.379437][T14541] loop1: detected capacity change from 0 to 1024 [ 135.391601][T14541] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.416110][T14541] ext4 filesystem being mounted at /1040/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.432919][T14541] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 135.460442][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.486329][T14550] loop0: detected capacity change from 0 to 512 [ 135.498420][T14554] wireguard0: entered promiscuous mode [ 135.504068][T14554] wireguard0: entered allmulticast mode [ 135.513443][T14550] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.526437][T14550] ext4 filesystem being mounted at /982/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 135.562725][T14550] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #2: block 18: comm syz.0.5050: lblock 23 mapped to illegal pblock 18 (length 1) [ 135.578320][T14550] EXT4-fs (loop0): Remounting filesystem read-only [ 135.596791][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.077602][T14589] loop2: detected capacity change from 0 to 512 [ 136.097192][T14589] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.119946][T14589] ext4 filesystem being mounted at /1009/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 136.197811][T14589] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #2: block 18: comm syz.2.5067: lblock 23 mapped to illegal pblock 18 (length 1) [ 136.218329][T14589] EXT4-fs (loop2): Remounting filesystem read-only [ 136.251057][T14607] wireguard0: entered promiscuous mode [ 136.256605][T14607] wireguard0: entered allmulticast mode [ 136.267689][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.411984][T14644] loop4: detected capacity change from 0 to 512 [ 136.446337][T14644] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.463264][T14644] ext4 filesystem being mounted at /1016/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 136.510615][T14644] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #2: block 18: comm syz.4.5094: lblock 23 mapped to illegal pblock 18 (length 1) [ 136.526803][T14644] EXT4-fs (loop4): Remounting filesystem read-only [ 136.544744][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.601621][T14669] wireguard0: entered promiscuous mode [ 136.607327][T14669] wireguard0: entered allmulticast mode [ 136.610628][T14672] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5118'. [ 136.728190][T14694] loop3: detected capacity change from 0 to 128 [ 136.790782][T14705] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5122'. [ 136.925134][T14733] loop4: detected capacity change from 0 to 128 [ 136.952997][T14738] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5136'. [ 136.970279][T14736] wireguard0: entered promiscuous mode [ 136.975802][T14736] wireguard0: entered allmulticast mode [ 137.009958][T14750] loop0: detected capacity change from 0 to 128 [ 137.122520][T14773] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5152'. [ 137.203047][T14789] loop1: detected capacity change from 0 to 128 [ 137.272421][T14802] wireguard0: entered promiscuous mode [ 137.277960][T14802] wireguard0: entered allmulticast mode [ 137.387655][T14827] SELinux: failed to load policy [ 137.470750][T14843] SELinux: failed to load policy [ 137.488977][T14844] wireguard0: entered promiscuous mode [ 137.494683][T14844] wireguard0: entered allmulticast mode [ 137.674993][T14887] SELinux: failed to load policy [ 137.794886][T14910] wireguard0: entered promiscuous mode [ 137.800536][T14910] wireguard0: entered allmulticast mode [ 137.918004][T14928] SELinux: failed to load policy [ 138.094254][T14955] loop2: detected capacity change from 0 to 1024 [ 138.095903][T14958] wireguard0: entered promiscuous mode [ 138.106215][T14958] wireguard0: entered allmulticast mode [ 138.115774][T14955] EXT4-fs: Ignoring removed bh option [ 138.148591][T14963] SELinux: Context system_u:object_r:mouse_device_t:s0 is not valid (left unmapped). [ 138.176534][T14955] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 138.225029][T14973] loop3: detected capacity change from 0 to 1024 [ 138.232928][T14973] EXT4-fs: Ignoring removed nobh option [ 138.238518][T14973] EXT4-fs: Ignoring removed bh option [ 138.268354][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 138.283953][T14973] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.351228][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.489984][T15026] loop3: detected capacity change from 0 to 2048 [ 138.527553][T15022] loop0: detected capacity change from 0 to 8192 [ 138.536686][T15026] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.684964][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.913938][T15072] loop3: detected capacity change from 0 to 8192 [ 138.929584][T15072] msdos: Unknown parameter 'A' [ 138.948263][ T29] kauditd_printk_skb: 39 callbacks suppressed [ 138.948282][ T29] audit: type=1326 audit(1756603675.600:3573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15087 comm="syz.1.5298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bc418ebe9 code=0x7ffc0000 [ 138.996156][ T29] audit: type=1326 audit(1756603675.640:3574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15087 comm="syz.1.5298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7f6bc418ebe9 code=0x7ffc0000 [ 139.019917][ T29] audit: type=1326 audit(1756603675.640:3575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15087 comm="syz.1.5298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bc418ebe9 code=0x7ffc0000 [ 139.048099][ T29] audit: type=1326 audit(1756603675.700:3576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15096 comm="syz.1.5302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bc418ebe9 code=0x7ffc0000 [ 139.074465][ T29] audit: type=1326 audit(1756603675.730:3577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15096 comm="syz.1.5302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6bc418ebe9 code=0x7ffc0000 [ 139.098073][ T29] audit: type=1326 audit(1756603675.730:3578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15096 comm="syz.1.5302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bc418ebe9 code=0x7ffc0000 [ 139.121710][ T29] audit: type=1326 audit(1756603675.730:3579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15096 comm="syz.1.5302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6bc418ebe9 code=0x7ffc0000 [ 139.225036][ T29] audit: type=1326 audit(1756603675.800:3580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15096 comm="syz.1.5302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bc418ebe9 code=0x7ffc0000 [ 139.248720][ T29] audit: type=1326 audit(1756603675.810:3581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15096 comm="syz.1.5302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7f6bc418ebe9 code=0x7ffc0000 [ 139.272268][ T29] audit: type=1326 audit(1756603675.810:3582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15096 comm="syz.1.5302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bc418ebe9 code=0x7ffc0000 [ 139.406045][T15127] IPv6: Can't replace route, no match found [ 139.584546][T15147] loop0: detected capacity change from 0 to 512 [ 139.603020][T15147] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 139.657637][T15149] capability: warning: `syz.1.5325' uses 32-bit capabilities (legacy support in use) [ 139.680774][T15147] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a01ec018, mo2=0002] [ 139.697379][T15147] System zones: 1-12 [ 139.714893][T15154] tun0: tun_chr_ioctl cmd 1074812117 [ 139.723703][T15147] EXT4-fs (loop0): 1 truncate cleaned up [ 139.745145][T15147] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.805491][ T3380] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=3380 comm=kworker/0:3 [ 139.831134][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.123071][T15196] loop3: detected capacity change from 0 to 4096 [ 140.133838][T15196] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.230081][T15209] loop0: detected capacity change from 0 to 2048 [ 140.270692][T15209] EXT4-fs (loop0): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.286597][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.334059][ T3305] EXT4-fs (loop0): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 140.584452][T15254] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.5371'. [ 140.607223][T15254] netlink: zone id is out of range [ 140.612571][T15256] netlink: 'syz.3.5373': attribute type 4 has an invalid length. [ 140.613147][T15254] netlink: del zone limit has 8 unknown bytes [ 140.673668][T15264] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5376'. [ 140.689281][T15264] netem: change failed [ 140.764257][T15276] loop3: detected capacity change from 0 to 2048 [ 140.768501][T15275] loop0: detected capacity change from 0 to 4096 [ 140.780350][T15275] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 140.792445][T15275] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.829913][T15281] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5385'. [ 140.839007][T15281] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5385'. [ 140.851674][T15276] GPT:first_usable_lbas don't match. [ 140.857008][T15276] GPT:34 != 290 [ 140.860559][T15276] GPT: Use GNU Parted to correct GPT errors. [ 140.866657][T15276] loop3: p1 p2 p3 [ 141.032571][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.220621][T15313] netlink: 1 bytes leftover after parsing attributes in process `syz.0.5400'. [ 141.496855][T15327] loop0: detected capacity change from 0 to 128 [ 142.008098][T15361] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5423'. [ 142.017181][T15361] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5423'. [ 142.026248][T15361] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5423'. [ 142.040143][T15366] netlink: 'syz.4.5424': attribute type 21 has an invalid length. [ 142.048030][T15366] netlink: 'syz.4.5424': attribute type 1 has an invalid length. [ 142.055831][T15366] netlink: 'syz.4.5424': attribute type 2 has an invalid length. [ 142.063614][T15366] netlink: 9062 bytes leftover after parsing attributes in process `syz.4.5424'. [ 142.088988][T15369] IPv6: Can't replace route, no match found [ 142.131320][T15378] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 142.439814][T15398] netlink: 1 bytes leftover after parsing attributes in process `syz.4.5440'. [ 142.465469][T15400] netlink: 'syz.0.5439': attribute type 21 has an invalid length. [ 142.473383][T15400] netlink: 'syz.0.5439': attribute type 1 has an invalid length. [ 142.481193][T15400] netlink: 'syz.0.5439': attribute type 2 has an invalid length. [ 142.488967][T15400] netlink: 9062 bytes leftover after parsing attributes in process `syz.0.5439'. [ 142.562770][T15412] netlink: 1 bytes leftover after parsing attributes in process `syz.1.5456'. [ 142.686261][T15438] netlink: 'syz.1.5455': attribute type 21 has an invalid length. [ 142.694245][T15438] netlink: 'syz.1.5455': attribute type 1 has an invalid length. [ 142.702052][T15438] netlink: 'syz.1.5455': attribute type 2 has an invalid length. [ 142.709845][T15438] netlink: 9062 bytes leftover after parsing attributes in process `syz.1.5455'. [ 142.810171][T15446] loop4: detected capacity change from 0 to 128 [ 143.147898][T15487] loop3: detected capacity change from 0 to 128 [ 143.366366][T15521] netlink: 9062 bytes leftover after parsing attributes in process `syz.3.5497'. [ 143.380244][T15520] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5498'. [ 143.506223][T15541] loop2: detected capacity change from 0 to 128 [ 143.575677][T15546] loop1: detected capacity change from 0 to 2048 [ 143.629293][T15546] GPT:first_usable_lbas don't match. [ 143.634630][T15546] GPT:34 != 290 [ 143.638116][T15546] GPT: Use GNU Parted to correct GPT errors. [ 143.644280][T15546] loop1: p1 p2 p3 [ 143.914872][T15586] vhci_hcd: invalid port number 96 [ 143.920230][T15586] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 143.956595][T15593] loop3: detected capacity change from 0 to 1024 [ 143.973097][T15593] EXT4-fs: Ignoring removed nobh option [ 143.978797][T15593] EXT4-fs: Ignoring removed bh option [ 144.024990][T15593] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.053932][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 144.053950][ T29] audit: type=1400 audit(1756603680.710:3612): avc: denied { create } for pid=15609 comm="syz.0.5541" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 144.100955][ T29] audit: type=1400 audit(1756603680.710:3613): avc: denied { write } for pid=15609 comm="syz.0.5541" name="file0" dev="tmpfs" ino=5651 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 144.123771][ T29] audit: type=1400 audit(1756603680.710:3614): avc: denied { open } for pid=15609 comm="syz.0.5541" path="/1099/file0" dev="tmpfs" ino=5651 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 144.146779][ T29] audit: type=1400 audit(1756603680.710:3615): avc: denied { ioctl } for pid=15609 comm="syz.0.5541" path="/1099/file0" dev="tmpfs" ino=5651 ioctlcmd=0x1276 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 144.173298][ T29] audit: type=1400 audit(1756603680.720:3616): avc: denied { unlink } for pid=3305 comm="syz-executor" name="file0" dev="tmpfs" ino=5651 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 144.196147][ T29] audit: type=1400 audit(1756603680.750:3617): avc: denied { quotaon } for pid=15592 comm="syz.3.5534" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 144.219523][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.327438][T15640] geneve2: entered promiscuous mode [ 144.332874][T15640] geneve2: entered allmulticast mode [ 144.367411][T15644] loop2: detected capacity change from 0 to 1764 [ 144.385617][T15644] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 144.420465][ T29] audit: type=1400 audit(1756603681.080:3618): avc: denied { map } for pid=15649 comm="syz.3.5561" path="/proc/2360/net/fib_trie" dev="proc" ino=4026532522 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 144.551341][T15661] loop3: detected capacity change from 0 to 8192 [ 144.609486][T15661] loop3: p1 p2 p4 [ 144.613423][T15661] loop3: p1 size 65536 extends beyond EOD, truncated [ 144.625560][T15661] loop3: p2 start 861536256 is beyond EOD, truncated [ 144.632474][T15661] loop3: p4 size 65536 extends beyond EOD, truncated [ 144.637537][T15687] loop2: detected capacity change from 0 to 512 [ 144.651497][T15687] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #3: comm syz.2.5578: corrupted inode contents [ 144.664609][T15687] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #3: comm syz.2.5578: mark_inode_dirty error [ 144.677299][T15687] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #3: comm syz.2.5578: corrupted inode contents [ 144.691079][T15687] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #3: comm syz.2.5578: mark_inode_dirty error [ 144.702566][T15694] loop3: detected capacity change from 0 to 128 [ 144.709526][T15694] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 144.713854][T15687] Quota error (device loop2): write_blk: dquota write failed [ 144.721668][T15694] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 144.728888][T15687] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 144.748319][T15687] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.5578: Failed to acquire dquot type 0 [ 144.760195][T15687] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.5578: corrupted inode contents [ 144.773246][T15687] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #16: comm syz.2.5578: mark_inode_dirty error [ 144.792219][T15687] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.5578: corrupted inode contents [ 144.804821][T15687] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.5578: mark_inode_dirty error [ 144.816411][T15687] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.5578: corrupted inode contents [ 144.828440][T15687] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 144.837168][T15687] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.5578: corrupted inode contents [ 144.849143][T15687] EXT4-fs error (device loop2): ext4_truncate:4666: inode #16: comm syz.2.5578: mark_inode_dirty error [ 144.860325][T15687] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 144.869594][T15687] EXT4-fs (loop2): 1 truncate cleaned up [ 144.875601][T15687] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.888329][T15687] ext4 filesystem being mounted at /1098/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.923022][T15706] loop0: detected capacity change from 0 to 512 [ 144.932009][T15706] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.945720][T15706] ext4 filesystem being mounted at /1108/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 144.957077][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.998039][ T29] audit: type=1400 audit(1756603681.650:3619): avc: denied { write } for pid=15713 comm="syz.2.5589" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 145.052470][T15718] syz.2.5592 uses obsolete (PF_INET,SOCK_PACKET) [ 145.065718][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.161767][T15732] loop3: detected capacity change from 0 to 164 [ 145.177418][T15732] Unable to read rock-ridge attributes [ 145.186809][T15732] Unable to read rock-ridge attributes [ 145.405199][T15778] loop0: detected capacity change from 0 to 512 [ 145.433583][T15778] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #15: comm syz.0.5618: corrupted in-inode xattr: invalid ea_ino [ 145.463627][T15778] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.5618: couldn't read orphan inode 15 (err -117) [ 145.487384][T15778] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.513810][T15789] loop3: detected capacity change from 0 to 512 [ 145.532973][T15789] EXT4-fs warning (device loop3): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 145.553476][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.562900][T15789] EXT4-fs (loop3): mount failed [ 145.836707][T15841] C: entered promiscuous mode [ 145.841560][T15841] team_slave_1: entered promiscuous mode [ 145.848934][T15841] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 145.885615][T15854] loop1: detected capacity change from 0 to 512 [ 145.893789][T15854] /dev/loop1: Can't open blockdev [ 145.924961][T15861] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 145.964370][T15870] loop4: detected capacity change from 0 to 512 [ 145.979482][T15870] EXT4-fs: Ignoring removed oldalloc option [ 145.999212][T15870] EXT4-fs (loop4): 1 truncate cleaned up [ 146.005232][T15870] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.053205][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.088155][T15887] loop1: detected capacity change from 0 to 1024 [ 146.095252][T15887] EXT4-fs: Ignoring removed nobh option [ 146.110802][T15887] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.136874][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.222731][T15895] validate_nla: 4 callbacks suppressed [ 146.222748][T15895] netlink: 'syz.3.5667': attribute type 4 has an invalid length. [ 146.451240][T15933] netlink: 'syz.3.5682': attribute type 21 has an invalid length. [ 146.492529][T15938] IPv6: Can't replace route, no match found [ 146.642209][T15960] loop0: detected capacity change from 0 to 512 [ 146.652481][T15960] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 146.661981][T15960] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 146.670746][T15960] System zones: 1-12 [ 146.675056][T15960] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #15: comm syz.0.5696: corrupted in-inode xattr: e_value size too large [ 146.691469][T15960] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.5696: couldn't read orphan inode 15 (err -117) [ 146.705033][T15960] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.726970][T15960] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.020166][T16012] loop4: detected capacity change from 0 to 164 [ 147.080011][T16023] loop4: detected capacity change from 0 to 512 [ 147.087402][T16023] EXT4-fs (loop4): orphan cleanup on readonly fs [ 147.094422][T16023] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.5723: Failed to acquire dquot type 1 [ 147.111406][T16023] EXT4-fs (loop4): 1 truncate cleaned up [ 147.117691][T16023] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 147.145072][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.195280][T16036] loop2: detected capacity change from 0 to 2048 [ 147.272381][T16036] Alternate GPT is invalid, using primary GPT. [ 147.278760][T16036] loop2: p2 p3 p7 [ 147.491139][T16080] __nla_validate_parse: 18 callbacks suppressed [ 147.491156][T16080] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5748'. [ 147.655522][T16111] loop2: detected capacity change from 0 to 128 [ 147.662433][T16111] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 147.841627][T16134] loop3: detected capacity change from 0 to 1024 [ 147.851062][T16134] ext4 filesystem being mounted at /1188/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.887896][T16140] random: crng reseeded on system resumption [ 147.918750][T16144] netlink: 19 bytes leftover after parsing attributes in process `syz.3.5778'. [ 148.064882][T16158] ipvlan2: entered promiscuous mode [ 148.094967][T16164] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5788'. [ 148.164056][T16179] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5795'. [ 148.386536][T16219] loop1: detected capacity change from 0 to 256 [ 148.432115][T16226] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5818'. [ 148.474858][T16234] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5820'. [ 148.518933][T16243] loop0: detected capacity change from 0 to 764 [ 148.526017][T16243] rock: directory entry would overflow storage [ 148.532233][T16243] rock: sig=0x4654, size=5, remaining=4 [ 148.703351][T16268] loop0: detected capacity change from 0 to 512 [ 148.710174][T16268] EXT4-fs: Ignoring removed nobh option [ 148.717381][T16268] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 148.725892][T16268] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #13: comm syz.0.5837: casefold flag without casefold feature [ 148.738786][T16268] EXT4-fs (loop0): Remounting filesystem read-only [ 148.812300][T16284] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 148.915348][T16298] loop3: detected capacity change from 0 to 1024 [ 148.923197][T16298] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 148.934928][T16298] EXT4-fs warning (device loop3): ext4_enable_quotas:7172: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 148.950307][T16298] EXT4-fs (loop3): mount failed [ 149.004878][T16307] Falling back ldisc for ptm0. [ 149.142559][T16337] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5869'. [ 149.181600][ T29] kauditd_printk_skb: 207 callbacks suppressed [ 149.181618][ T29] audit: type=1400 audit(1756603685.840:3823): avc: denied { ioctl } for pid=16344 comm="syz.0.5873" path="socket:[45902]" dev="sockfs" ino=45902 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 149.181685][T16345] netdevsim netdevsim0: Direct firmware load for .. failed with error -2 [ 149.250434][T16352] netlink: 256 bytes leftover after parsing attributes in process `syz.0.5876'. [ 149.273665][ T29] audit: type=1326 audit(1756603685.930:3824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16355 comm="syz.0.5877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f207be9ebe9 code=0x7ffc0000 [ 149.308959][ T29] audit: type=1326 audit(1756603685.930:3825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16355 comm="syz.0.5877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f207be9ebe9 code=0x7ffc0000 [ 149.332752][ T29] audit: type=1326 audit(1756603685.930:3826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16355 comm="syz.0.5877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7f207be9ebe9 code=0x7ffc0000 [ 149.356614][ T29] audit: type=1326 audit(1756603685.930:3827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16355 comm="syz.0.5877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f207be9ebe9 code=0x7ffc0000 [ 149.380259][ T29] audit: type=1326 audit(1756603685.930:3828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16355 comm="syz.0.5877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f207be9ebe9 code=0x7ffc0000 [ 149.427067][ T29] audit: type=1326 audit(1756603685.980:3829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16359 comm="syz.0.5879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f207be9ebe9 code=0x7ffc0000 [ 149.450805][ T29] audit: type=1326 audit(1756603685.980:3830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16359 comm="syz.0.5879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f207be9ebe9 code=0x7ffc0000 [ 149.474412][ T29] audit: type=1326 audit(1756603685.980:3831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16359 comm="syz.0.5879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f207be9ebe9 code=0x7ffc0000 [ 149.498162][ T29] audit: type=1326 audit(1756603685.980:3832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16359 comm="syz.0.5879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f207be9ebe9 code=0x7ffc0000 [ 149.772975][T16418] loop1: detected capacity change from 0 to 256 [ 149.801946][T16420] loop1: detected capacity change from 0 to 512 [ 149.808759][T16420] journal_path: Non-blockdev passed as './bus' [ 149.815068][T16420] EXT4-fs: error: could not find journal device path [ 150.102784][T16445] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5918'. [ 150.111959][T16445] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5918'. [ 150.124603][T16445] bridge0: port 3(vlan0) entered blocking state [ 150.131052][T16445] bridge0: port 3(vlan0) entered disabled state [ 150.137698][T16445] vlan0: entered allmulticast mode [ 150.143006][T16445] bridge0: entered allmulticast mode [ 150.158704][T16445] vlan0: left allmulticast mode [ 150.163701][T16445] bridge0: left allmulticast mode [ 150.668715][T16496] netlink: zone id is out of range [ 150.677282][T16496] netlink: del zone limit has 8 unknown bytes [ 150.703470][T16501] IPv6: Can't replace route, no match found [ 150.724609][T16504] loop4: detected capacity change from 0 to 4096 [ 150.732262][T16504] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 150.909537][T16509] loop2: detected capacity change from 0 to 2048 [ 150.942583][T16509] GPT:first_usable_lbas don't match. [ 150.947921][T16509] GPT:34 != 290 [ 150.951468][T16509] GPT: Use GNU Parted to correct GPT errors. [ 150.957621][T16509] loop2: p1 p2 p3 [ 151.360212][T16552] loop1: detected capacity change from 0 to 4096 [ 151.428846][T16563] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 151.561455][T16587] loop3: detected capacity change from 0 to 1024 [ 151.578740][T16587] EXT4-fs: Ignoring removed bh option [ 151.818265][T16610] loop0: detected capacity change from 0 to 164 [ 151.860339][T16610] Unable to read rock-ridge attributes [ 151.869298][T16610] Unable to read rock-ridge attributes [ 152.113117][T16676] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 152.162186][T16685] loop4: detected capacity change from 0 to 1024 [ 152.170907][T16685] EXT4-fs: Ignoring removed nobh option [ 152.181838][T16687] smc: net device bond0 applied user defined pnetid SYZ0 [ 152.199727][T16687] smc: net device bond0 erased user defined pnetid SYZ0 [ 152.374928][T16720] bridge2: entered allmulticast mode [ 152.600822][T16752] loop3: detected capacity change from 0 to 128 [ 152.609510][T16749] __nla_validate_parse: 13 callbacks suppressed [ 152.609528][T16749] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6055'. [ 152.617572][T16752] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 152.641990][T16752] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 152.691856][T16758] netlink: 'syz.0.6061': attribute type 1 has an invalid length. [ 152.713354][ T41] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 152.767836][ T3304] cgroup: fork rejected by pids controller in /syz3 [ 152.986016][T16779] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6070'. [ 153.069205][T16785] loop2: detected capacity change from 0 to 8192 [ 153.094817][T16789] loop0: detected capacity change from 0 to 128 [ 153.148610][ T2669] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.214182][ T2669] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.268598][T16820] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6089'. [ 153.278461][T16820] netem: change failed [ 153.285202][ T2669] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.322446][ T2669] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.404542][ T2669] bridge_slave_1: left allmulticast mode [ 153.410283][ T2669] bridge_slave_1: left promiscuous mode [ 153.416036][ T2669] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.426221][ T2669] bridge_slave_0: left allmulticast mode [ 153.431982][ T2669] bridge_slave_0: left promiscuous mode [ 153.437854][ T2669] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.522613][T16852] loop0: detected capacity change from 0 to 2048 [ 153.554141][T16855] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6105'. [ 153.576562][T16852] Alternate GPT is invalid, using primary GPT. [ 153.582953][T16852] loop0: p2 p3 p7 [ 153.621916][ T2669] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 153.638990][ T2669] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 153.656873][T16869] loop0: detected capacity change from 0 to 256 [ 153.671051][ T2669] bond0 (unregistering): (slave bond1): Releasing backup interface [ 153.684987][ T2669] bond0 (unregistering): Released all slaves [ 153.703713][ T2669] bond1 (unregistering): Released all slaves [ 153.772140][ T2669] hsr_slave_0: left promiscuous mode [ 153.779141][ T2669] hsr_slave_1: left promiscuous mode [ 153.789803][ T2669] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.797223][ T2669] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 153.814827][ T2669] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.822387][ T2669] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 153.831747][T16890] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6120'. [ 153.841005][ T2669] veth1_macvtap: left promiscuous mode [ 153.846776][ T2669] veth1_vlan: left promiscuous mode [ 153.852370][ T2669] veth0_vlan: left promiscuous mode [ 153.919904][ T2669] team0 (unregistering): Port device team_slave_1 removed [ 153.930415][ T2669] team0 (unregistering): Port device C removed [ 154.003338][T16899] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6123'. [ 154.046623][T16813] chnl_net:caif_netlink_parms(): no params data found [ 154.097330][T16813] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.104474][T16813] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.111751][T16813] bridge_slave_0: entered allmulticast mode [ 154.118274][T16813] bridge_slave_0: entered promiscuous mode [ 154.125527][T16813] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.132732][T16813] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.140757][T16813] bridge_slave_1: entered allmulticast mode [ 154.147273][T16813] bridge_slave_1: entered promiscuous mode [ 154.166898][T16813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 154.177430][T16813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 154.198878][T16813] team0: Port device team_slave_0 added [ 154.205787][T16813] team0: Port device team_slave_1 added [ 154.223918][T16813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 154.230963][T16813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.232595][T16914] loop2: detected capacity change from 0 to 2048 [ 154.257509][T16813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 154.258331][T16813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 154.281417][T16813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.307379][T16813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 154.338121][T16813] hsr_slave_0: entered promiscuous mode [ 154.344317][T16813] hsr_slave_1: entered promiscuous mode [ 154.351216][T16813] debugfs: 'hsr0' already exists in 'hsr' [ 154.357045][T16813] Cannot create hsr debugfs directory [ 154.359253][ T29] kauditd_printk_skb: 155 callbacks suppressed [ 154.359311][ T29] audit: type=1400 audit(1756603691.020:3988): avc: denied { create } for pid=16913 comm="syz.2.6126" name="control" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 154.408093][ T29] audit: type=1326 audit(1756603691.060:3989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16918 comm="syz.0.6139" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f207be9ebe9 code=0x0 [ 154.439928][T16921] loop2: detected capacity change from 0 to 764 [ 154.458119][T16921] rock: directory entry would overflow storage [ 154.461379][ T29] audit: type=1400 audit(1756603691.110:3990): avc: denied { bind } for pid=16922 comm="syz.1.6129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 154.464383][T16921] rock: sig=0x4654, size=5, remaining=4 [ 154.484192][ T29] audit: type=1400 audit(1756603691.110:3991): avc: denied { listen } for pid=16922 comm="syz.1.6129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 154.509847][ T29] audit: type=1400 audit(1756603691.110:3992): avc: denied { setopt } for pid=16922 comm="syz.1.6129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 154.533036][ T29] audit: type=1400 audit(1756603691.150:3993): avc: denied { mount } for pid=16920 comm="syz.2.6127" name="/" dev="loop2" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 154.562625][ T29] audit: type=1400 audit(1756603691.200:3994): avc: denied { unmount } for pid=3313 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 154.628099][ T29] audit: type=1326 audit(1756603691.280:3995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16931 comm="syz.1.6144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bc418ebe9 code=0x7ffc0000 [ 154.651692][ T29] audit: type=1326 audit(1756603691.280:3996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16931 comm="syz.1.6144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bc418ebe9 code=0x7ffc0000 [ 154.676291][ T29] audit: type=1326 audit(1756603691.300:3997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16931 comm="syz.1.6144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7f6bc418ebe9 code=0x7ffc0000 [ 154.719983][ T3418] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=3418 comm=kworker/1:4 [ 154.807925][T16813] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 154.816981][T16813] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 154.827801][T16813] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 154.836504][T16813] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 154.879364][T16813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.901344][T16813] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.912251][ T1870] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.919423][ T1870] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.933610][T16968] vhci_hcd: invalid port number 96 [ 154.938776][T16968] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 154.944195][T16813] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 154.956238][T16813] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 154.987125][ T2669] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.994302][ T2669] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.015846][T16976] loop1: detected capacity change from 0 to 2048 [ 155.048159][T16813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.063671][T16976] Alternate GPT is invalid, using primary GPT. [ 155.070037][T16976] loop1: p2 p3 p7 [ 155.126211][T16992] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6156'. [ 155.138029][T16813] veth0_vlan: entered promiscuous mode [ 155.148634][T16813] veth1_vlan: entered promiscuous mode [ 155.178090][T16813] veth0_macvtap: entered promiscuous mode [ 155.186192][T16813] veth1_macvtap: entered promiscuous mode [ 155.196817][T16999] wireguard0: entered promiscuous mode [ 155.202438][T16999] wireguard0: entered allmulticast mode [ 155.222078][T16813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 155.233725][T16813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 155.255316][ T41] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.270087][ T41] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.287417][ T2669] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.296908][ T2669] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.338115][T17012] loop0: detected capacity change from 0 to 1024 [ 155.345337][T17012] EXT4-fs: Ignoring removed nobh option [ 155.350975][T17012] EXT4-fs: Ignoring removed bh option [ 155.621163][T17054] netlink: 19 bytes leftover after parsing attributes in process `syz.0.6179'. [ 155.648239][T17058] loop1: detected capacity change from 0 to 128 [ 155.655047][T17058] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 155.667765][T17058] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 155.713308][ T1870] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 155.780223][T17074] loop0: detected capacity change from 0 to 8192 [ 155.819468][T17074] loop0: p1 p2 p4 [ 155.823297][T17074] loop0: p1 size 65536 extends beyond EOD, truncated [ 155.833089][T17074] loop0: p2 start 861536256 is beyond EOD, truncated [ 155.839957][T17074] loop0: p4 size 65536 extends beyond EOD, truncated [ 155.916075][T17096] loop3: detected capacity change from 0 to 256 [ 155.998800][T17112] netlink: 'syz.1.6207': attribute type 3 has an invalid length. [ 156.003883][T17115] loop2: detected capacity change from 0 to 512 [ 156.128889][T17121] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6211'. [ 156.137930][T17121] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6211'. [ 156.191564][T17134] pimreg: tun_chr_ioctl cmd 1074025677 [ 156.200464][T17134] pimreg: linktype set to 780 [ 156.227586][ T3415] hid-generic 0000:0006:0007.0001: unknown main item tag 0x0 [ 156.235100][ T3415] hid-generic 0000:0006:0007.0001: unknown main item tag 0x0 [ 156.242601][ T3415] hid-generic 0000:0006:0007.0001: unknown main item tag 0x0 [ 156.250068][ T3415] hid-generic 0000:0006:0007.0001: unknown main item tag 0x0 [ 156.257491][ T3415] hid-generic 0000:0006:0007.0001: unknown main item tag 0x0 [ 156.264982][ T3415] hid-generic 0000:0006:0007.0001: unknown main item tag 0x0 [ 156.272374][ T3415] hid-generic 0000:0006:0007.0001: unknown main item tag 0x0 [ 156.279765][ T3415] hid-generic 0000:0006:0007.0001: unknown main item tag 0x0 [ 156.287249][ T3415] hid-generic 0000:0006:0007.0001: unknown main item tag 0x0 [ 156.294618][ T3415] hid-generic 0000:0006:0007.0001: unknown main item tag 0x0 [ 156.302925][ T3415] hid-generic 0000:0006:0007.0001: hidraw0: HID v0.0b Device [syz1] on syz1 [ 156.381165][T17158] loop1: detected capacity change from 0 to 512 [ 156.393983][T17158] EXT4-fs: Ignoring removed orlov option [ 156.401799][T17158] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 156.426900][T17158] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 156.444284][T17158] EXT4-fs (loop1): 1 orphan inode deleted [ 156.484116][T17173] loop0: detected capacity change from 0 to 164 [ 156.513782][T17173] rock: directory entry would overflow storage [ 156.520244][T17173] rock: sig=0x66, size=4, remaining=3 [ 156.531500][T17179] netlink: 'syz.4.6241': attribute type 1 has an invalid length. [ 156.536343][T17173] rock: directory entry would overflow storage [ 156.545675][T17173] rock: sig=0x66, size=4, remaining=3 [ 156.552970][T17173] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 156.585051][T17187] loop3: detected capacity change from 0 to 1024 [ 156.620880][T17195] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 156.668492][T17202] SELinux: failed to load policy [ 156.770355][T17219] netlink: 'syz.0.6259': attribute type 9 has an invalid length. [ 156.866648][T17233] SELinux: policydb version 0 does not match my version range 15-35 [ 156.874863][T17233] SELinux: failed to load policy [ 157.217771][T17261] loop4: detected capacity change from 0 to 512 [ 157.233725][T17261] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 157.279519][T17261] EXT4-fs (loop4): 1 truncate cleaned up [ 157.477529][T17300] loop3: detected capacity change from 0 to 1024 [ 157.484372][T17300] EXT4-fs: Ignoring removed orlov option [ 157.490085][T17300] EXT4-fs: Ignoring removed nomblk_io_submit option [ 157.493750][T17298] loop4: detected capacity change from 0 to 512 [ 157.517502][T17298] ext4 filesystem being mounted at /1211/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.620542][T17324] netlink: 'syz.2.6308': attribute type 15 has an invalid length. [ 157.904686][T17373] loop3: detected capacity change from 0 to 512 [ 157.913643][T17373] EXT4-fs: Ignoring removed nobh option [ 157.920791][T17375] __nla_validate_parse: 7 callbacks suppressed [ 157.920805][T17375] netlink: 88 bytes leftover after parsing attributes in process `syz.1.6331'. [ 157.925142][T17373] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 157.937139][T17375] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6331'. [ 157.944351][T17373] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #13: comm syz.3.6338: casefold flag without casefold feature [ 157.966148][T17373] EXT4-fs (loop3): Remounting filesystem read-only [ 158.112424][T17398] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 158.148206][T17407] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6342'. [ 158.228553][T17421] loop0: detected capacity change from 0 to 1024 [ 158.235627][T17421] EXT4-fs: Ignoring removed nobh option [ 158.289733][T17432] loop0: detected capacity change from 0 to 1764 [ 158.298928][T17432] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 158.437956][T17447] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.6372'. [ 158.447493][T17447] netlink: zone id is out of range [ 158.452795][T17447] netlink: del zone limit has 8 unknown bytes [ 158.878165][T17453] tun0: tun_chr_ioctl cmd 1074812117 [ 158.914338][T17459] loop2: detected capacity change from 0 to 1024 [ 158.922371][T17459] EXT4-fs: Ignoring removed nobh option [ 158.928036][T17459] EXT4-fs: Ignoring removed bh option [ 158.960762][T17469] netlink: 92 bytes leftover after parsing attributes in process `syz.1.6370'. [ 158.993923][T17474] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6371'. [ 159.004727][T17474] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6371'. [ 159.008808][T17473] IPv6: Can't replace route, no match found [ 159.052164][T17483] IPv6: Can't replace route, no match found [ 159.165864][T17507] loop4: detected capacity change from 0 to 512 [ 159.175744][T17507] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.6389: corrupted in-inode xattr: invalid ea_ino [ 159.197306][T17507] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.6389: couldn't read orphan inode 15 (err -117) [ 159.224571][T17518] loop3: detected capacity change from 0 to 512 [ 159.244944][T17518] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 159.260726][T17518] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.6395: Failed to acquire dquot type 1 [ 159.284054][T17518] EXT4-fs (loop3): 1 truncate cleaned up [ 159.317136][T17536] program syz.3.6404 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 159.371944][T17549] loop4: detected capacity change from 0 to 128 [ 159.388968][T17549] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 159.406248][T17549] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 159.417232][ T29] kauditd_printk_skb: 217 callbacks suppressed [ 159.417249][ T29] audit: type=1400 audit(1756603697.073:4213): avc: denied { mount } for pid=17548 comm="syz.4.6410" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 159.446393][ T29] audit: type=1400 audit(1756603697.083:4214): avc: denied { unmount } for pid=3309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 159.495814][T17560] loop4: detected capacity change from 0 to 512 [ 159.512061][T17560] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.6414: corrupted inode contents [ 159.524365][T17560] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #3: comm syz.4.6414: mark_inode_dirty error [ 159.538058][T17560] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.6414: corrupted inode contents [ 159.550341][ T29] audit: type=1400 audit(1756603697.193:4215): avc: denied { getopt } for pid=17569 comm="syz.0.6417" laddr=fe80::a lport=57310 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 159.619285][T17560] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #3: comm syz.4.6414: mark_inode_dirty error [ 159.630818][ T29] audit: type=1400 audit(1756603697.213:4216): avc: denied { module_request } for pid=17574 comm="syz.2.6418" kmod="ip_set_" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 159.641077][T17581] loop2: detected capacity change from 0 to 512 [ 159.652423][ T29] audit: type=1400 audit(1756603697.243:4217): avc: denied { allowed } for pid=17578 comm="syz.0.6420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 159.678115][ T29] audit: type=1400 audit(1756603697.243:4218): avc: denied { write } for pid=17578 comm="syz.0.6420" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=50017 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 159.705455][T17560] Quota error (device loop4): write_blk: dquota write failed [ 159.712999][T17560] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 159.723152][T17560] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.6414: Failed to acquire dquot type 0 [ 159.735474][T17560] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.6414: corrupted inode contents [ 159.735824][T17581] Quota error (device loop2): v2_read_file_info: Free block number 1 out of range (1, 6). [ 159.758890][T17581] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 159.775204][T17581] EXT4-fs (loop2): mount failed [ 159.782193][T17560] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #16: comm syz.4.6414: mark_inode_dirty error [ 159.800264][T17560] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.6414: corrupted inode contents [ 159.815422][ T29] audit: type=1400 audit(1756603697.463:4219): avc: denied { write } for pid=17585 comm="syz.3.6423" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 159.854965][T17560] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.6414: mark_inode_dirty error [ 159.871578][T17560] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.6414: corrupted inode contents [ 159.894216][T17560] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 159.903168][T17560] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.6414: corrupted inode contents [ 159.916934][T17560] EXT4-fs error (device loop4): ext4_truncate:4666: inode #16: comm syz.4.6414: mark_inode_dirty error [ 159.945951][T17560] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 159.958509][T17560] EXT4-fs (loop4): 1 truncate cleaned up [ 159.965062][T17560] ext4 filesystem being mounted at /1238/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.003032][T17601] loop2: detected capacity change from 0 to 512 [ 160.024723][T17601] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: inode #11: comm syz.2.6431: missing EA_INODE flag [ 160.037546][T17601] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.6431: error while reading EA inode 11 err=-117 [ 160.051073][T17601] EXT4-fs (loop2): 1 orphan inode deleted [ 160.125928][T17622] loop4: detected capacity change from 0 to 2048 [ 160.136121][T17619] Falling back ldisc for ptm0. [ 160.182913][T17627] loop1: detected capacity change from 0 to 512 [ 160.214936][T17627] EXT4-fs warning (device loop1): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 160.231858][T17627] EXT4-fs (loop1): mount failed [ 160.287182][T17641] loop2: detected capacity change from 0 to 512 [ 160.459514][T17645] tmpfs: Bad value for 'mpol' [ 160.480854][T17647] loop2: detected capacity change from 0 to 512 [ 160.487569][T17647] EXT4-fs: Ignoring removed i_version option [ 160.495610][T17647] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 160.506813][T17647] EXT4-fs (loop2): 1 truncate cleaned up [ 160.674564][T17669] openvswitch: netlink: Message has 6 unknown bytes. [ 160.841990][T17674] loop2: detected capacity change from 0 to 512 [ 160.892199][T17674] EXT4-fs mount: 44 callbacks suppressed [ 160.892218][T17674] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.916661][T17674] ext4 filesystem being mounted at /1262/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 160.954169][T17677] ------------[ cut here ]------------ [ 160.959830][T17677] verifier bug: REG INVARIANTS VIOLATION (true_reg1): range bounds violation u64=[0x1f, 0x1f] s64=[0x1f, 0x1f] u32=[0x1f, 0x17] s32=[0x1f, 0x1f] var_off=(0x1f, 0x0)(1) [ 160.976742][T17677] WARNING: CPU: 0 PID: 17677 at kernel/bpf/verifier.c:2728 reg_bounds_sanity_check+0x673/0x680 [ 160.987273][T17677] Modules linked in: [ 160.991202][T17677] CPU: 0 UID: 0 PID: 17677 Comm: syz.3.6462 Not tainted syzkaller #0 PREEMPT(voluntary) [ 161.001051][T17677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 161.011164][T17677] RIP: 0010:reg_bounds_sanity_check+0x673/0x680 [ 161.017491][T17677] Code: 7c 24 18 41 ff 74 24 20 55 41 56 4d 89 ee 53 48 8b 5c 24 30 ff 74 24 40 ff 74 24 50 ff 74 24 30 e8 92 80 ba ff 48 83 c4 38 90 <0f> 0b 90 90 e9 02 fb ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 [ 161.037213][T17677] RSP: 0018:ffffc90001857440 EFLAGS: 00010292 [ 161.043355][T17677] RAX: e7a371fef5f71800 RBX: ffff8881196b59a8 RCX: 0000000000080000 [ 161.051470][T17677] RDX: ffffc90010bdf000 RSI: 00000000000156b4 RDI: 00000000000156b5 [ 161.059534][T17677] RBP: 000000000000001f R08: 0001c9000185727f R09: 0000000000000000 [ 161.067552][T17677] R10: 00000000ffffffff R11: 0000000000000002 R12: ffff8881196b5968 [ 161.075637][T17677] R13: ffff88811b748000 R14: ffff88811b748000 R15: ffff8881196b59a0 [ 161.083830][T17677] FS: 00007fb92db3f6c0(0000) GS:ffff8882aee43000(0000) knlGS:0000000000000000 [ 161.092819][T17677] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 161.099456][T17677] CR2: 000020000009de80 CR3: 000000011bae6000 CR4: 00000000003506f0 [ 161.107464][T17677] DR0: 0000000000000000 DR1: 0000200000000300 DR2: 0000200000000300 [ 161.115472][T17677] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 161.123481][T17677] Call Trace: [ 161.126806][T17677] [ 161.129818][T17677] reg_set_min_max+0x1c1/0x260 [ 161.134631][T17677] check_cond_jmp_op+0x1080/0x16e0 [ 161.139880][T17677] do_check+0x332a/0x7a10 [ 161.144418][T17677] do_check_common+0xc3a/0x12a0 [ 161.149569][T17677] bpf_check+0x942b/0xd9e0 [ 161.154010][T17677] ? __rcu_read_unlock+0x4f/0x70 [ 161.159091][T17677] ? __alloc_frozen_pages_noprof+0x188/0x360 [ 161.165230][T17677] ? alloc_pages_bulk_noprof+0x4b8/0x540 [ 161.170967][T17677] ? __vmap_pages_range_noflush+0xbb3/0xbd0 [ 161.176909][T17677] ? css_rstat_updated+0xb7/0x240 [ 161.182012][T17677] ? __rcu_read_unlock+0x4f/0x70 [ 161.187032][T17677] ? pcpu_block_update+0x24e/0x3b0 [ 161.192206][T17677] ? pcpu_block_update_hint_alloc+0x5a2/0x660 [ 161.198297][T17677] ? pcpu_block_update_hint_alloc+0x63d/0x660 [ 161.204961][T17677] ? css_rstat_updated+0xb7/0x240 [ 161.210057][T17677] ? __rcu_read_unlock+0x4f/0x70 [ 161.215054][T17677] ? pcpu_memcg_post_alloc_hook+0xf1/0x150 [ 161.220965][T17677] ? selinux_bpf_prog_load+0x36/0xf0 [ 161.226268][T17677] ? __kmalloc_cache_noprof+0x299/0x320 [ 161.231879][T17677] ? selinux_bpf_prog_load+0xbf/0xf0 [ 161.237174][T17677] ? security_bpf_prog_load+0x2c/0xa0 [ 161.242770][T17677] bpf_prog_load+0xedd/0x1070 [ 161.247592][T17677] ? security_bpf+0x2b/0x90 [ 161.252125][T17677] __sys_bpf+0x462/0x7b0 [ 161.256416][T17677] __x64_sys_bpf+0x41/0x50 [ 161.260861][T17677] x64_sys_call+0x2aea/0x2ff0 [ 161.265587][T17677] do_syscall_64+0xd2/0x200 [ 161.270145][T17677] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 161.276231][T17677] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 161.282009][T17677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.287930][T17677] RIP: 0033:0x7fb92f0debe9 [ 161.292545][T17677] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.312281][T17677] RSP: 002b:00007fb92db3f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 161.320816][T17677] RAX: ffffffffffffffda RBX: 00007fb92f315fa0 RCX: 00007fb92f0debe9 [ 161.328911][T17677] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 161.336945][T17677] RBP: 00007fb92f161e19 R08: 0000000000000000 R09: 0000000000000000 [ 161.345000][T17677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 161.352991][T17677] R13: 00007fb92f316038 R14: 00007fb92f315fa0 R15: 00007ffcb1a78f58 [ 161.361098][T17677] [ 161.364120][T17677] ---[ end trace 0000000000000000 ]--- [ 161.371352][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.410710][T17679] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6463'. [ 161.492507][T17687] SELinux: security policydb version 17 (MLS) not backwards compatible [ 161.520044][T17693] loop2: detected capacity change from 0 to 128 [ 161.539203][T17687] SELinux: failed to load policy [ 161.767189][T17729] loop4: detected capacity change from 0 to 512 [ 161.872274][T17729] EXT4-fs: Ignoring removed oldalloc option [ 161.892971][T17729] EXT4-fs (loop4): 1 truncate cleaned up [ 161.912394][T17729] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.958991][T17729] EXT4-fs (loop4): shut down requested (2) [ 161.989233][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.019609][T17737] loop0: detected capacity change from 0 to 512 [ 162.070790][T17741] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6494'. [ 162.079842][T17741] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6494'. [ 162.146808][T17749] netlink: 'syz.0.6496': attribute type 7 has an invalid length. [ 162.313188][T17764] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 162.404162][T17782] loop1: detected capacity change from 0 to 128 [ 162.675661][T17805] loop0: detected capacity change from 0 to 128 [ 162.682563][T17805] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 162.699213][T17805] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 162.821627][T17826] netlink: 'syz.2.6532': attribute type 21 has an invalid length. [ 162.870146][T17834] loop2: detected capacity change from 0 to 512 [ 162.882081][T17834] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.894670][T17834] ext4 filesystem being mounted at /1277/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 162.931345][T17834] EXT4-fs (loop2): shut down requested (0) [ 162.965691][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.981396][T17844] loop3: detected capacity change from 0 to 1024 [ 162.988745][T17844] EXT4-fs: Ignoring removed bh option [ 163.019743][T17844] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 163.050544][T17844] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.081833][T16813] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.095131][T17856] netlink: 'syz.0.6544': attribute type 10 has an invalid length. [ 163.168325][T17866] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17866 comm=syz.0.6549 [ 163.241608][T17871] sctp: [Deprecated]: syz.0.6552 (pid 17871) Use of int in max_burst socket option deprecated. [ 163.241608][T17871] Use struct sctp_assoc_value instead [ 163.319971][T17880] __nla_validate_parse: 3 callbacks suppressed [ 163.319991][T17880] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6555'. [ 163.335970][T17880] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6555'. [ 163.493972][T17906] netlink: 76 bytes leftover after parsing attributes in process `syz.4.6564'. [ 163.525519][T17910] geneve2: entered promiscuous mode [ 163.530884][T17910] geneve2: entered allmulticast mode [ 163.553103][T17916] netlink: 'syz.1.6572': attribute type 6 has an invalid length. [ 163.560922][T17916] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6572'. [ 163.567404][T17914] loop3: detected capacity change from 0 to 512 [ 163.577393][T17914] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 163.590056][T17914] EXT4-fs (loop3): orphan cleanup on readonly fs [ 163.596696][T17914] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.6571: Block bitmap for bg 0 marked uninitialized [ 163.610523][T17914] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 163.620944][T17914] EXT4-fs (loop3): 1 orphan inode deleted [ 163.628761][T17914] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 163.666838][T17914] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.6571: Block bitmap for bg 0 marked uninitialized [ 163.768305][T16813] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.788347][T17938] loop2: detected capacity change from 0 to 1024 [ 163.815242][T17938] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.6581: Failed to acquire dquot type 0 [ 163.857170][T17938] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 163.919521][T17938] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.6581: corrupted inode contents [ 163.960787][T17938] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #13: comm syz.2.6581: mark_inode_dirty error [ 163.986293][T17938] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.6581: corrupted inode contents [ 164.010500][T17938] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #13: comm syz.2.6581: mark_inode_dirty error [ 164.103269][T17938] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.6581: corrupted inode contents [ 164.187856][T17938] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 164.199161][T17938] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.6581: corrupted inode contents [ 164.224146][T17938] EXT4-fs error (device loop2): ext4_truncate:4666: inode #13: comm syz.2.6581: mark_inode_dirty error [ 164.235517][T17938] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 164.244827][T17938] EXT4-fs (loop2): 1 truncate cleaned up [ 164.251878][T17938] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.284367][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.296141][T17982] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6610'. [ 164.332512][T17987] loop4: detected capacity change from 0 to 512 [ 164.348326][T17987] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.370100][T17987] ext4 filesystem being mounted at /1270/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 164.404746][T17997] netlink: 76 bytes leftover after parsing attributes in process `syz.2.6606'. [ 164.425862][T17999] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6607'. [ 164.435033][T17999] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6607'. [ 164.444116][T17999] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6607'. [ 164.465734][ T29] kauditd_printk_skb: 120 callbacks suppressed [ 164.465751][ T29] audit: type=1400 audit(1756603702.113:4337): avc: denied { map } for pid=17985 comm="syz.4.6603" path="/1270/bus/blkio.bfq.avg_queue_size" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 164.468407][T17999] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6607'. [ 164.472015][ T29] audit: type=1400 audit(1756603702.113:4338): avc: denied { write } for pid=17985 comm="syz.4.6603" path="/1270/bus/blkio.bfq.avg_queue_size" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 164.536991][T18001] loop1: detected capacity change from 0 to 512 [ 164.537356][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.587000][T18005] loop2: detected capacity change from 0 to 4096 [ 164.592097][ T29] audit: type=1400 audit(1756603702.113:4339): avc: denied { unmount } for pid=3309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 164.613184][ T29] audit: type=1326 audit(1756603702.223:4340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18006 comm="syz.0.6613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f207be9ebe9 code=0x7ffc0000 [ 164.614389][T18005] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 164.636792][ T29] audit: type=1326 audit(1756603702.223:4341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18006 comm="syz.0.6613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f207be9ebe9 code=0x7ffc0000 [ 164.671006][ T29] audit: type=1326 audit(1756603702.223:4342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18006 comm="syz.0.6613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f207be9ebe9 code=0x7ffc0000 [ 164.694510][ T29] audit: type=1326 audit(1756603702.223:4343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18006 comm="syz.0.6613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f207be9ebe9 code=0x7ffc0000 [ 164.718185][ T29] audit: type=1326 audit(1756603702.223:4344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18006 comm="syz.0.6613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f207be9ebe9 code=0x7ffc0000 [ 164.741955][ T29] audit: type=1326 audit(1756603702.223:4345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18006 comm="syz.0.6613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f207be9ebe9 code=0x7ffc0000 [ 164.765952][ T29] audit: type=1326 audit(1756603702.223:4346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18006 comm="syz.0.6613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=74 compat=0 ip=0x7f207be9ebe9 code=0x7ffc0000 [ 164.770395][T18005] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.834857][T18016] loop3: detected capacity change from 0 to 1024 [ 164.850345][T18016] EXT4-fs: Ignoring removed nobh option [ 164.873658][T18016] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.957283][T16813] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.017952][T18040] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 165.072659][T18044] loop3: detected capacity change from 0 to 512 [ 165.102312][T18046] loop4: detected capacity change from 0 to 512 [ 165.109000][T18046] EXT4-fs: Ignoring removed orlov option [ 165.131872][T18044] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.133379][T18046] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 165.154558][T18044] ext4 filesystem being mounted at /96/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 165.158000][T18046] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 165.207730][T18046] EXT4-fs (loop4): 1 orphan inode deleted [ 165.214798][T18046] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.215629][T16813] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.265576][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.285343][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.548816][T18077] loop2: detected capacity change from 0 to 512 [ 165.566385][T18080] netlink: 'syz.4.6644': attribute type 9 has an invalid length. [ 165.597223][T18077] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.617400][T18077] ext4 filesystem being mounted at /1292/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 165.746416][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.430096][T18159] loop0: detected capacity change from 0 to 1024 [ 166.458127][T18159] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.6681: Failed to acquire dquot type 0 [ 166.473784][T18159] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 166.494901][T18159] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #13: comm syz.0.6681: corrupted inode contents [ 166.507446][T18159] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #13: comm syz.0.6681: mark_inode_dirty error [ 166.520371][T18159] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #13: comm syz.0.6681: corrupted inode contents [ 166.533084][T18159] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #13: comm syz.0.6681: mark_inode_dirty error [ 166.545706][T18159] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #13: comm syz.0.6681: corrupted inode contents [ 166.562626][T18159] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 166.571563][T18159] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #13: comm syz.0.6681: corrupted inode contents [ 166.583794][T18159] EXT4-fs error (device loop0): ext4_truncate:4666: inode #13: comm syz.0.6681: mark_inode_dirty error [ 166.595629][T18159] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 166.607524][T18159] EXT4-fs (loop0): 1 truncate cleaned up [ 166.613903][T18159] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.668844][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.746704][T18199] netlink: 'syz.4.6698': attribute type 6 has an invalid length. [ 166.776047][T18206] loop1: detected capacity change from 0 to 512 [ 166.790657][T18209] loop0: detected capacity change from 0 to 512 [ 166.824340][T18211] loop4: detected capacity change from 0 to 1024 [ 166.831401][T18209] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 166.845602][T18209] EXT4-fs (loop0): 1 orphan inode deleted [ 166.851468][T18209] EXT4-fs (loop0): 1 truncate cleaned up [ 166.857771][T18209] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.874515][T18206] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.897366][T18206] ext4 filesystem being mounted at /1372/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 166.913707][T18211] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.6704: Failed to acquire dquot type 0 [ 166.926626][T18211] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 166.942768][T18211] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.6704: corrupted inode contents [ 166.955431][T18211] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #13: comm syz.4.6704: mark_inode_dirty error [ 166.968176][T18211] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.6704: corrupted inode contents [ 166.982248][T18211] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #13: comm syz.4.6704: mark_inode_dirty error [ 166.994472][T18211] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.6704: corrupted inode contents [ 167.007253][T18211] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 167.015999][T18211] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.6704: corrupted inode contents [ 167.030329][T18211] EXT4-fs error (device loop4): ext4_truncate:4666: inode #13: comm syz.4.6704: mark_inode_dirty error [ 167.041749][T18211] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 167.054322][T18211] EXT4-fs (loop4): 1 truncate cleaned up [ 167.076987][T18211] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.100507][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.111492][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.157268][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.166798][T18223] netlink: 'syz.0.6705': attribute type 4 has an invalid length. [ 167.364874][T18250] loop1: detected capacity change from 0 to 512 [ 167.380832][T18250] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 167.409901][T18250] EXT4-fs (loop1): orphan cleanup on readonly fs [ 167.428226][T18250] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:517: comm syz.1.6720: Block bitmap for bg 0 marked uninitialized [ 167.431526][T18257] netlink: 'syz.2.6723': attribute type 4 has an invalid length. [ 167.442614][T18250] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 167.458305][T18250] EXT4-fs (loop1): 1 orphan inode deleted [ 167.466006][T18250] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 167.489983][T18250] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:517: comm syz.1.6720: Block bitmap for bg 0 marked uninitialized [ 167.517906][T18261] vhci_hcd: default hub control req: 400f v00e6 i0005 l0 [ 167.551174][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.863589][T18296] netlink: 'syz.4.6738': attribute type 15 has an invalid length. [ 168.051233][T18314] SELinux: failed to load policy [ 168.162945][T18334] program syz.2.6758 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 168.204270][T18338] SELinux: policydb version 0 does not match my version range 15-35 [ 168.215022][T18338] SELinux: failed to load policy [ 168.604868][T18376] SELinux: failed to load policy [ 168.656308][T18386] loop1: detected capacity change from 0 to 1024 [ 168.667534][T18386] EXT4-fs: Ignoring removed orlov option [ 168.673281][T18386] EXT4-fs: Ignoring removed nomblk_io_submit option [ 168.692468][T18386] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.718758][T18393] loop3: detected capacity change from 0 to 1024 [ 168.736181][T18393] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.775019][T16813] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.885028][T18413] loop0: detected capacity change from 0 to 128 [ 168.899710][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.913877][T18413] FAT-fs (loop0): Directory bread(block 32) failed [ 168.920625][T18413] FAT-fs (loop0): Directory bread(block 33) failed [ 168.928527][T18413] FAT-fs (loop0): Directory bread(block 34) failed [ 168.936717][T18413] FAT-fs (loop0): Directory bread(block 35) failed [ 168.959122][T18413] FAT-fs (loop0): Directory bread(block 36) failed [ 168.965754][T18413] FAT-fs (loop0): Directory bread(block 37) failed [ 168.972854][T18413] FAT-fs (loop0): Directory bread(block 38) failed [ 168.979536][T18413] FAT-fs (loop0): Directory bread(block 39) failed [ 168.986283][T18413] FAT-fs (loop0): Directory bread(block 40) failed [ 168.993101][T18423] loop1: detected capacity change from 0 to 512 [ 168.993164][T18413] FAT-fs (loop0): Directory bread(block 41) failed [ 169.000466][T18423] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 169.017657][T18423] EXT4-fs (loop1): 1 orphan inode deleted [ 169.023530][T18423] EXT4-fs (loop1): 1 truncate cleaned up [ 169.029753][T18423] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.081204][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.112267][T18434] loop1: detected capacity change from 0 to 2048 [ 169.116518][T18432] netlink: 'syz.2.6800': attribute type 4 has an invalid length. [ 169.126665][T18432] __nla_validate_parse: 12 callbacks suppressed [ 169.126684][T18432] netlink: 116 bytes leftover after parsing attributes in process `syz.2.6800'. [ 169.132092][T18434] EXT4-fs (loop1): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.173613][T18438] loop0: detected capacity change from 0 to 1024 [ 169.192467][ T3308] EXT4-fs (loop1): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 169.200914][T18444] loop4: detected capacity change from 0 to 1024 [ 169.208223][T18444] EXT4-fs: Ignoring removed orlov option [ 169.214245][T18444] EXT4-fs: Ignoring removed nomblk_io_submit option [ 169.237427][T18438] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.275591][T18444] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.289521][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.309233][T18457] SELinux: failed to load policy [ 169.309938][T18462] tipc: Started in network mode [ 169.319382][T18462] tipc: Node identity 7, cluster identity 4711 [ 169.325608][T18462] tipc: Node number set to 7 [ 169.362943][T18469] loop3: detected capacity change from 0 to 512 [ 169.472987][ T29] kauditd_printk_skb: 206 callbacks suppressed [ 169.473003][ T29] audit: type=1400 audit(1756603707.123:4549): avc: denied { write } for pid=18484 comm="syz.3.6825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 169.506863][ T29] audit: type=1400 audit(1756603707.123:4550): avc: denied { name_connect } for pid=18484 comm="syz.3.6825" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 169.529247][ T29] audit: type=1400 audit(1756603707.123:4551): avc: denied { shutdown } for pid=18484 comm="syz.3.6825" lport=41022 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 169.550162][ T29] audit: type=1400 audit(1756603707.123:4552): avc: denied { setopt } for pid=18484 comm="syz.3.6825" lport=41022 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 169.570922][ T29] audit: type=1400 audit(1756603707.153:4553): avc: denied { map_create } for pid=18487 comm="syz.2.6826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 169.590258][ T29] audit: type=1400 audit(1756603707.153:4554): avc: denied { map_read map_write } for pid=18487 comm="syz.2.6826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 169.638471][ T29] audit: type=1400 audit(1756603707.283:4555): avc: denied { create } for pid=18498 comm="syz.0.6831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 169.676572][T18495] loop3: detected capacity change from 0 to 512 [ 169.689257][ T29] audit: type=1400 audit(1756603707.293:4556): avc: denied { bind } for pid=18498 comm="syz.0.6831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 169.696608][T18503] netlink: 'syz.0.6833': attribute type 4 has an invalid length. [ 169.708730][ T29] audit: type=1400 audit(1756603707.293:4557): avc: denied { write } for pid=18498 comm="syz.0.6831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 169.716634][T18503] netlink: 116 bytes leftover after parsing attributes in process `syz.0.6833'. [ 169.736149][ T29] audit: type=1400 audit(1756603707.293:4558): avc: denied { setopt } for pid=18498 comm="syz.0.6831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 169.748999][T18495] EXT4-fs: Ignoring removed i_version option [ 169.782929][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.787896][T18495] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 169.807659][T18495] EXT4-fs (loop3): 1 truncate cleaned up [ 169.813776][T18495] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.901156][T16813] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.095923][T18541] atomic_op ffff888103774528 conn xmit_atomic 0000000000000000 [ 170.122931][T18545] loop0: detected capacity change from 0 to 512 [ 170.131632][T18545] EXT4-fs: Ignoring removed i_version option [ 170.139266][T18545] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 170.152361][T18545] EXT4-fs (loop0): 1 truncate cleaned up [ 170.158410][T18545] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.186356][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.275367][T18566] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6862'. [ 170.393147][T18590] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6875'. [ 170.429383][T18598] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6879'. [ 170.442224][T18597] loop0: detected capacity change from 0 to 1024 [ 170.452459][T18597] EXT4-fs: Ignoring removed orlov option [ 170.458196][T18597] EXT4-fs: Ignoring removed nomblk_io_submit option [ 170.483187][T18597] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.636871][T18612] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 170.711328][T18616] loop4: detected capacity change from 0 to 128 [ 170.752195][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.873819][T18633] netlink: 'syz.4.6894': attribute type 21 has an invalid length. [ 170.881751][T18633] netlink: 14565 bytes leftover after parsing attributes in process `syz.4.6894'. [ 171.343184][T18646] netlink: 'syz.4.6901': attribute type 10 has an invalid length. [ 171.490431][T18662] loop0: detected capacity change from 0 to 8192 [ 171.509232][T18676] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6914'. [ 171.518426][T18676] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6914'. [ 171.557150][T18676] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6914'. [ 171.600207][T18676] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6914'. [ 171.627329][T18689] netlink: 'syz.4.6921': attribute type 49 has an invalid length. [ 171.642391][T18692] netlink: 'syz.2.6920': attribute type 10 has an invalid length. [ 171.746892][T18707] Invalid ELF header magic: != ELF [ 171.800231][T18715] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 171.939735][T18751] serio: Serial port ptm0 [ 171.956911][T18756] loop0: detected capacity change from 0 to 1024 [ 171.964473][T18753] loop4: detected capacity change from 0 to 512 [ 171.973993][T18753] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 171.986203][T18753] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.6951: invalid indirect mapped block 4294967295 (level 0) [ 172.001842][T18753] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.6951: invalid indirect mapped block 4294967295 (level 1) [ 172.017824][T18756] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.019556][T18753] EXT4-fs (loop4): 1 orphan inode deleted [ 172.035649][T18753] EXT4-fs (loop4): 1 truncate cleaned up [ 172.060679][T18753] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.126487][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.331363][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.532538][T18802] netlink: 'syz.4.6970': attribute type 1 has an invalid length. [ 172.540392][T18802] netlink: 'syz.4.6970': attribute type 2 has an invalid length. [ 172.662415][T18809] loop0: detected capacity change from 0 to 8192 [ 172.885842][T18843] loop3: detected capacity change from 0 to 8192 [ 172.977391][T18871] loop2: detected capacity change from 0 to 512 [ 172.993333][T18871] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 173.023562][T18880] loop1: detected capacity change from 0 to 512 [ 173.030468][T18880] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 173.031144][ T41] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 173.041656][T18880] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.7007: invalid indirect mapped block 4294967295 (level 0) [ 173.064252][T18880] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.7007: invalid indirect mapped block 4294967295 (level 1) [ 173.094593][T18880] EXT4-fs (loop1): 1 orphan inode deleted [ 173.100396][T18880] EXT4-fs (loop1): 1 truncate cleaned up [ 173.110537][T18880] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.133319][T18888] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 173.170238][T18888] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 173.201107][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.362713][T18927] loop0: detected capacity change from 0 to 512 [ 173.373456][T18917] loop2: detected capacity change from 0 to 8192 [ 173.419104][T18927] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 173.451628][T18927] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.7025: invalid indirect mapped block 4294967295 (level 0) [ 173.485900][T18927] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.7025: invalid indirect mapped block 4294967295 (level 1) [ 173.508250][T18927] EXT4-fs (loop0): 1 orphan inode deleted [ 173.514097][T18927] EXT4-fs (loop0): 1 truncate cleaned up [ 173.532683][T18927] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.562772][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.707046][T18965] delete_channel: no stack [ 173.834423][T18986] loop2: detected capacity change from 0 to 1024 [ 173.844964][T18988] sit0: entered promiscuous mode [ 173.864131][T18986] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.877209][T18988] netlink: 'syz.3.7055': attribute type 1 has an invalid length. [ 173.931792][T18998] loop0: detected capacity change from 0 to 512 [ 173.954172][T18998] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 173.988099][ T2669] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 174.181017][T19015] netlink: 'syz.3.7066': attribute type 49 has an invalid length. [ 174.209904][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.245108][T19024] __nla_validate_parse: 15 callbacks suppressed [ 174.245127][T19024] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7079'. [ 174.260711][T19024] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7079'. [ 174.270345][T19024] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7079'. [ 174.284568][T19025] loop3: detected capacity change from 0 to 1024 [ 174.301086][T19029] sit0: entered promiscuous mode [ 174.314626][T19024] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7079'. [ 174.316660][T19029] netlink: 'syz.1.7082': attribute type 1 has an invalid length. [ 174.323732][T19024] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7079'. [ 174.329154][T19024] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7079'. [ 174.331613][T19029] netlink: 1 bytes leftover after parsing attributes in process `syz.1.7082'. [ 174.358179][T19025] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.419087][T19024] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7079'. [ 174.428108][T19024] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7079'. [ 174.446656][T19024] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7079'. [ 174.471710][T19048] loop2: detected capacity change from 0 to 512 [ 174.478532][T19048] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 174.527644][T19048] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.7077: invalid indirect mapped block 4294967295 (level 0) [ 174.542820][T19056] delete_channel: no stack [ 174.562472][T19048] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.7077: invalid indirect mapped block 4294967295 (level 1) [ 174.580253][T19053] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 174.595042][T19048] EXT4-fs (loop2): 1 orphan inode deleted [ 174.600986][T19048] EXT4-fs (loop2): 1 truncate cleaned up [ 174.607213][T19048] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.791835][T19070] Invalid ELF header magic: != ELF [ 174.917113][T19086] loop1: detected capacity change from 0 to 512 [ 174.957171][T19086] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 175.050454][T19101] netlink: 'syz.0.7101': attribute type 2 has an invalid length. [ 175.165292][ T29] kauditd_printk_skb: 113 callbacks suppressed [ 175.165310][ T29] audit: type=1400 audit(1756603712.813:4672): avc: denied { create } for pid=19119 comm="syz.1.7110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 175.200669][ T29] audit: type=1400 audit(1756603712.843:4673): avc: denied { setopt } for pid=19119 comm="syz.1.7110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 175.220919][ T29] audit: type=1400 audit(1756603712.843:4674): avc: denied { read } for pid=19119 comm="syz.1.7110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 175.282193][ T29] audit: type=1326 audit(1756603712.903:4675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19126 comm="syz.3.7114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb92f0debe9 code=0x7ffc0000 [ 175.305966][ T29] audit: type=1326 audit(1756603712.903:4676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19126 comm="syz.3.7114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7fb92f0debe9 code=0x7ffc0000 [ 175.329705][ T29] audit: type=1326 audit(1756603712.903:4677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19126 comm="syz.3.7114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb92f0debe9 code=0x7ffc0000 [ 175.340006][T19136] loop4: detected capacity change from 0 to 1024 [ 175.353411][ T29] audit: type=1326 audit(1756603712.903:4678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19126 comm="syz.3.7114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb92f0debe9 code=0x7ffc0000 [ 175.383282][ T29] audit: type=1400 audit(1756603712.923:4679): avc: denied { ioctl } for pid=19130 comm="syz.3.7116" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 175.415270][T19136] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 175.427506][T19136] Quota error (device loop4): v2_read_file_info: Number of blocks too big for quota file size (4243427694592 > 6144). [ 175.441729][ T29] audit: type=1400 audit(1756603713.093:4680): avc: denied { write } for pid=19137 comm="syz.3.7118" name="001" dev="devtmpfs" ino=156 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 175.460361][T19136] EXT4-fs warning (device loop4): ext4_enable_quotas:7172: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 175.480163][T19138] usb usb4: usbfs: interface 0 claimed by hub while 'syz.3.7118' sets config #0 [ 175.504210][T19136] EXT4-fs (loop4): mount failed [ 175.569273][T19156] loop0: detected capacity change from 0 to 256 [ 175.575807][T19156] vfat: Unknown parameter '1844674407370955161500000000000000000000' [ 175.623700][T19165] sctp: [Deprecated]: syz.3.7130 (pid 19165) Use of struct sctp_assoc_value in delayed_ack socket option. [ 175.623700][T19165] Use struct sctp_sack_info instead [ 175.964617][T19237] loop1: detected capacity change from 0 to 164 [ 175.997384][T19237] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 176.032935][T19237] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 176.088969][T19255] RDS: rds_bind could not find a transport for 0:0:20::, load rds_tcp or rds_rdma? [ 176.574372][T19287] loop2: detected capacity change from 0 to 2048 [ 176.629740][T19287] loop2: p1 < > p2 p3 < p5 p6 > p4 [ 176.635077][T19287] loop2: partition table partially beyond EOD, truncated [ 176.643182][T19287] loop2: p1 start 4278190080 is beyond EOD, truncated [ 176.650044][T19287] loop2: p2 start 16908800 is beyond EOD, truncated [ 176.665659][T19287] loop2: p5 start 16908800 is beyond EOD, truncated [ 176.716208][T19302] RDS: rds_bind could not find a transport for 0:0:20::, load rds_tcp or rds_rdma? [ 177.300597][T19337] SELinux: Context is not valid (left unmapped). [ 177.393150][T19344] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19344 comm=syz.0.7208 [ 177.831508][T19355] wireguard0: entered promiscuous mode [ 177.837040][T19355] wireguard0: entered allmulticast mode [ 177.907495][T19368] loop3: detected capacity change from 0 to 2048 [ 177.969702][T19368] loop3: p1 < > p2 p3 < p5 p6 > p4 [ 177.974945][T19368] loop3: partition table partially beyond EOD, truncated [ 178.001310][T19368] loop3: p1 start 4278190080 is beyond EOD, truncated [ 178.008154][T19368] loop3: p2 start 16908800 is beyond EOD, truncated [ 178.038186][T19368] loop3: p5 start 16908800 is beyond EOD, truncated [ 178.145551][T19385] loop3: detected capacity change from 0 to 164 [ 178.175837][T19385] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 178.209585][T19395] syzkaller1: tun_chr_ioctl cmd 2147767507 [ 178.221988][T19385] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 178.500932][T19430] loop0: detected capacity change from 0 to 512 [ 178.513011][T19430] EXT4-fs: Ignoring removed mblk_io_submit option [ 178.522948][T19430] EXT4-fs (loop0): failed to initialize system zone (-117) [ 178.530386][T19430] EXT4-fs (loop0): mount failed [ 178.564614][T19436] loop0: detected capacity change from 0 to 2048 [ 178.619653][T19436] loop0: p1 < > p2 p3 < p5 p6 > p4 [ 178.624914][T19436] loop0: partition table partially beyond EOD, truncated [ 178.632248][T19436] loop0: p1 start 4278190080 is beyond EOD, truncated [ 178.639021][T19436] loop0: p2 start 16908800 is beyond EOD, truncated [ 178.647235][T19436] loop0: p5 start 16908800 is beyond EOD, truncated [ 178.693989][T19444] loop3: detected capacity change from 0 to 512 [ 178.711239][T19444] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #3: comm wޣ: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 178.730627][T19444] EXT4-fs error (device loop3): ext4_quota_enable:7131: comm wޣ: Bad quota inode: 3, type: 0 [ 178.742774][T19444] EXT4-fs warning (device loop3): ext4_enable_quotas:7172: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 178.757739][T19444] EXT4-fs (loop3): mount failed [ 179.029184][T19467] wireguard0: entered promiscuous mode [ 179.034693][T19467] wireguard0: entered allmulticast mode [ 179.217134][T19478] loop4: detected capacity change from 0 to 2048 [ 179.259404][T19484] __nla_validate_parse: 18 callbacks suppressed [ 179.259455][T19478] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 179.259469][T19484] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.7269'. [ 179.265828][T19478] loop4: partition table partially beyond EOD, truncated [ 179.288179][T19478] loop4: p1 start 4278190080 is beyond EOD, truncated [ 179.295099][T19478] loop4: p2 start 16908800 is beyond EOD, truncated [ 179.304497][T19478] loop4: p5 start 16908800 is beyond EOD, truncated [ 179.313327][T19486] tmpfs: Unknown parameter 'smackfstransmute' [ 179.364674][T19494] loop3: detected capacity change from 0 to 128 [ 179.373472][T19494] ext4 filesystem being mounted at /211/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 179.406610][T19499] wireguard0: entered promiscuous mode [ 179.412203][T19499] wireguard0: entered allmulticast mode [ 179.426048][T19502] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7279'. [ 179.435147][T19502] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7279'. [ 179.482784][T19508] loop3: detected capacity change from 0 to 1024 [ 179.490275][T19508] EXT4-fs: Ignoring removed mblk_io_submit option [ 179.505928][T19508] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 179.521402][T19508] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 179.533633][T19508] EXT4-fs (loop3): This should not happen!! Data will be lost [ 179.533633][T19508] [ 179.543287][T19508] EXT4-fs (loop3): Total free blocks count 0 [ 179.549355][T19508] EXT4-fs (loop3): Free/Dirty block details [ 179.555504][T19508] EXT4-fs (loop3): free_blocks=68451041280 [ 179.561376][T19508] EXT4-fs (loop3): dirty_blocks=80 [ 179.566533][T19508] EXT4-fs (loop3): Block reservation details [ 179.572566][T19508] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 179.589790][ T31] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 3 with error 28 [ 179.602064][ T31] EXT4-fs (loop3): This should not happen!! Data will be lost [ 179.602064][ T31] [ 179.818753][T19525] loop1: detected capacity change from 0 to 2048 [ 179.864290][T19536] wireguard0: entered promiscuous mode [ 179.869820][T19536] wireguard0: entered allmulticast mode [ 179.879580][T19525] loop1: p1 < > p2 p3 < p5 p6 > p4 [ 179.884798][T19525] loop1: partition table partially beyond EOD, truncated [ 179.891962][T19525] loop1: p1 start 4278190080 is beyond EOD, truncated [ 179.898809][T19525] loop1: p2 start 16908800 is beyond EOD, truncated [ 179.906776][T19525] loop1: p5 start 16908800 is beyond EOD, truncated [ 180.213750][T19562] 9pnet_fd: Insufficient options for proto=fd [ 180.221464][ T29] kauditd_printk_skb: 108 callbacks suppressed [ 180.221484][ T29] audit: type=1400 audit(1756603717.863:4789): avc: denied { mounton } for pid=19561 comm="syz.2.7305" path="/1413/file0" dev="tmpfs" ino=7256 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 180.297178][T19566] loop4: detected capacity change from 0 to 2048 [ 180.298748][ T29] audit: type=1400 audit(1756603717.943:4790): avc: denied { write } for pid=19567 comm="syz.2.7308" name="cgroup.procs" dev="cgroup" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object" [ 180.329155][ T29] audit: type=1400 audit(1756603717.943:4791): avc: denied { setattr } for pid=19567 comm="syz.2.7308" name="cgroup.procs" dev="cgroup" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object" [ 180.381041][ T29] audit: type=1400 audit(1756603718.033:4792): avc: denied { load_policy } for pid=19572 comm="syz.3.7310" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 180.381074][T19574] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 180.381173][T19574] SELinux: failed to load policy [ 180.404082][ T29] audit: type=1400 audit(1756603718.063:4793): avc: denied { unmount } for pid=3308 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 180.435132][T19566] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 180.440426][T19566] loop4: partition table partially beyond EOD, truncated [ 180.459212][T19566] loop4: p1 start 4278190080 is beyond EOD, truncated [ 180.466192][T19566] loop4: p2 start 16908800 is beyond EOD, truncated [ 180.473800][T19566] loop4: p5 start 16908800 is beyond EOD, truncated [ 180.506673][ T29] audit: type=1400 audit(1756603718.153:4794): avc: denied { bind } for pid=19580 comm="syz.1.7314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 180.551205][ T29] audit: type=1400 audit(1756603718.193:4795): avc: denied { ioctl } for pid=19582 comm="syz.2.7315" path="socket:[55948]" dev="sockfs" ino=55948 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 180.577118][ T29] audit: type=1400 audit(1756603718.203:4796): avc: denied { read } for pid=19585 comm="syz.4.7316" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 180.600441][ T29] audit: type=1400 audit(1756603718.203:4797): avc: denied { open } for pid=19585 comm="syz.4.7316" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 180.624182][ T29] audit: type=1400 audit(1756603718.203:4798): avc: denied { ioctl } for pid=19585 comm="syz.4.7316" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 180.692239][T19601] loop0: detected capacity change from 0 to 1024 [ 180.714707][T19601] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.7320: Failed to acquire dquot type 0 [ 180.736864][T19601] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 180.756280][T19601] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #13: comm syz.0.7320: corrupted inode contents [ 180.779538][T19601] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #13: comm syz.0.7320: mark_inode_dirty error [ 180.791214][T19601] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #13: comm syz.0.7320: corrupted inode contents [ 180.806624][T19601] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #13: comm syz.0.7320: mark_inode_dirty error [ 180.821962][T19601] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #13: comm syz.0.7320: corrupted inode contents [ 180.855210][T19601] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 180.873567][T19601] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #13: comm syz.0.7320: corrupted inode contents [ 180.885734][T19601] EXT4-fs error (device loop0): ext4_truncate:4666: inode #13: comm syz.0.7320: mark_inode_dirty error [ 180.907047][T19601] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 180.927756][T19629] loop3: detected capacity change from 0 to 512 [ 180.939198][T19601] EXT4-fs (loop0): 1 truncate cleaned up [ 180.951696][T19635] loop2: detected capacity change from 0 to 512 [ 180.961021][T19601] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 180.973255][T19629] EXT4-fs error (device loop3): ext4_xattr_inode_iget:442: comm syz.3.7336: error while reading EA inode 32 err=-116 [ 180.996170][T19635] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 181.019651][T19601] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.7320: Failed to acquire dquot type 0 [ 181.020696][T19629] EXT4-fs (loop3): Remounting filesystem read-only [ 181.037516][T19629] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 181.050441][T19635] EXT4-fs (loop2): mount failed [ 181.059945][T19644] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7342'. [ 181.069601][T19629] EXT4-fs (loop3): 1 orphan inode deleted [ 181.120356][T19654] netlink: 1 bytes leftover after parsing attributes in process `syz.2.7347'. [ 181.249702][T19685] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7362'. [ 181.372317][T19711] loop4: detected capacity change from 0 to 512 [ 181.501862][T19739] tc_dump_action: action bad kind [ 181.725861][T19741] loop3: detected capacity change from 0 to 32768 [ 182.282549][T19810] netlink: 'syz.3.7423': attribute type 10 has an invalid length. [ 182.298396][T19810] ipvlan0: entered allmulticast mode [ 182.303797][T19810] veth0_vlan: entered allmulticast mode [ 182.313769][T19810] team0: Device ipvlan0 failed to register rx_handler [ 182.435475][T19824] loop3: detected capacity change from 0 to 512 [ 182.518062][T19828] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7432'. [ 182.946932][T19847] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7440'. [ 183.003215][T19855] loop2: detected capacity change from 0 to 512 [ 183.009946][T19855] EXT4-fs: Ignoring removed mblk_io_submit option [ 183.026510][T19855] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 183.038771][T19855] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e002c018, mo2=0002] [ 183.046910][T19855] System zones: 1-12 [ 183.052344][T19855] EXT4-fs (loop2): 1 truncate cleaned up [ 183.090339][T19860] loop2: detected capacity change from 0 to 256 [ 183.105873][T19862] 9pnet_fd: Insufficient options for proto=fd [ 183.113555][T19860] FAT-fs (loop2): Directory bread(block 1285) failed [ 183.133055][T19860] FAT-fs (loop2): Directory bread(block 1285) failed [ 183.354796][T19890] sch_fq: defrate 4294967295 ignored. [ 183.824903][T19932] loop3: detected capacity change from 0 to 1024 [ 183.856932][T19938] netlink: 268 bytes leftover after parsing attributes in process `syz.1.7484'. [ 183.913926][T19942] loop2: detected capacity change from 0 to 128 [ 184.113518][T19960] SELinux: ebitmap: truncated map [ 184.113815][T19963] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7496'. [ 184.125425][T19964] loop2: detected capacity change from 0 to 1024 [ 184.133939][T19960] SELinux: failed to load policy [ 184.169432][T19964] ext4 filesystem being mounted at /1466/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.191003][T19964] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: block 3: comm syz.2.7495: lblock 3 mapped to illegal pblock 3 (length 1) [ 184.216486][T19964] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 184.228841][T19964] EXT4-fs (loop2): This should not happen!! Data will be lost [ 184.228841][T19964] [ 184.250939][T19964] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: comm syz.2.7495: lblock 0 mapped to illegal pblock 0 (length 3) [ 184.302444][T19964] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 117 [ 184.314827][T19964] EXT4-fs (loop2): This should not happen!! Data will be lost [ 184.314827][T19964] [ 184.330834][T19979] loop3: detected capacity change from 0 to 512 [ 184.365963][T19979] ext4 filesystem being mounted at /274/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.414940][ T31] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: block 4: comm kworker/u8:1: lblock 4 mapped to illegal pblock 4 (length 1) [ 184.452015][ T31] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 1 with error 117 [ 184.464501][ T31] EXT4-fs (loop2): This should not happen!! Data will be lost [ 184.464501][ T31] [ 184.555476][T19994] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 184.576948][T19994] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.584215][T19994] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.683075][T20011] loop3: detected capacity change from 0 to 512 [ 184.716750][T20011] ext4 filesystem being mounted at /278/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.779168][T20011] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.7516: corrupted xattr block 33: overlapping e_value [ 184.802221][T20011] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 184.815048][T20011] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.7516: corrupted xattr block 33: overlapping e_value [ 184.831847][T20011] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 184.843614][T20011] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.7516: corrupted xattr block 33: overlapping e_value [ 184.849390][T20019] loop2: detected capacity change from 0 to 2048 [ 184.870868][T20011] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 184.927070][T20030] netlink: 703 bytes leftover after parsing attributes in process `syz.0.7525'. [ 184.944129][T20019] Alternate GPT is invalid, using primary GPT. [ 184.950570][T20019] loop2: p2 p3 p7 [ 185.215308][T20064] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 185.215308][T20064] The task syz.3.7533 (20064) triggered the difference, watch for misbehavior. [ 185.292724][ T29] kauditd_printk_skb: 213 callbacks suppressed [ 185.292743][ T29] audit: type=1400 audit(1756603722.943:5007): avc: denied { append } for pid=20073 comm="syz.1.7544" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 185.354958][T20080] loop0: detected capacity change from 0 to 512 [ 185.385025][T20080] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 185.399172][T20080] System zones: 0-2, 18-18, 34-35 [ 185.411264][T20080] ext4 filesystem being mounted at /1556/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.412293][T20083] SELinux: ebitmap: truncated map [ 185.430594][T20083] SELinux: failed to load policy [ 185.437850][ T29] audit: type=1400 audit(1756603723.083:5008): avc: denied { unmount } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 185.495692][ T29] audit: type=1400 audit(1756603723.133:5009): avc: denied { setopt } for pid=20090 comm="syz.0.7551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 185.515346][ T29] audit: type=1400 audit(1756603723.133:5010): avc: denied { read } for pid=20090 comm="syz.0.7551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 185.534943][ T29] audit: type=1400 audit(1756603723.143:5011): avc: denied { read } for pid=20093 comm="syz.2.7553" path="socket:[57825]" dev="sockfs" ino=57825 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 185.562300][ T29] audit: type=1400 audit(1756603723.213:5012): avc: denied { write } for pid=20093 comm="syz.2.7553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 185.598407][T20102] loop2: detected capacity change from 0 to 512 [ 185.613811][ T29] audit: type=1400 audit(1756603723.263:5013): avc: denied { add_name } for pid=20101 comm="syz.2.7556" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 185.645328][ T29] audit: type=1400 audit(1756603723.283:5014): avc: denied { rename } for pid=20101 comm="syz.2.7556" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 185.667762][ T29] audit: type=1400 audit(1756603723.283:5015): avc: denied { reparent } for pid=20101 comm="syz.2.7556" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 185.678192][T20098] loop0: detected capacity change from 0 to 512 [ 185.733855][T20113] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7560'. [ 185.744170][ T29] audit: type=1400 audit(1756603723.363:5016): avc: denied { connect } for pid=20110 comm="syz.1.7559" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 185.768093][T20098] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 185.780022][T20098] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #13: comm syz.0.7555: iget: bad i_size value: 12154757448730 [ 185.814826][T20098] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.7555: couldn't read orphan inode 13 (err -117) [ 185.954784][T20122] loop0: detected capacity change from 0 to 4096 [ 185.976385][T20126] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7566'. [ 185.989738][T20122] EXT4-fs: test_dummy_encryption option not supported [ 186.051221][T20134] loop0: detected capacity change from 0 to 128 [ 186.076082][T20137] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 186.097240][T20134] syz.0.7569: attempt to access beyond end of device [ 186.097240][T20134] loop0: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 186.110724][T20137] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.117901][T20137] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.128142][T20141] loop3: detected capacity change from 0 to 512 [ 186.138079][T20141] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 186.183819][T20141] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.7573: bad orphan inode 131083 [ 186.230004][T20150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.238614][T20150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.493392][T20186] loop1: detected capacity change from 0 to 512 [ 186.532580][T20186] ext4 filesystem being mounted at /1576/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.609755][T20200] loop1: detected capacity change from 0 to 164 [ 186.621732][T20200] ISOFS: unable to read i-node block [ 186.627067][T20200] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 186.637951][T20202] netlink: 112 bytes leftover after parsing attributes in process `syz.3.7602'. [ 186.774073][T20224] netlink: 'syz.1.7612': attribute type 5 has an invalid length. [ 186.828556][T20232] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7616'. [ 186.867635][T20226] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.877433][T20226] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.885684][T20234] netlink: 'syz.3.7615': attribute type 4 has an invalid length. [ 186.919476][ T2669] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.928455][ T2669] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 186.953417][ T2669] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.962465][ T2669] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 187.004493][ T2669] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.013702][ T2669] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 187.047415][ T2669] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.056599][ T2669] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 187.113503][T20251] loop1: detected capacity change from 0 to 128 [ 187.124054][T20251] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 187.154110][T20256] netlink: 47 bytes leftover after parsing attributes in process `syz.3.7626'. [ 187.163449][T20253] netlink: 'syz.0.7625': attribute type 3 has an invalid length. [ 187.171580][T20251] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 187.240506][T20261] loop2: detected capacity change from 0 to 7 [ 187.272102][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 187.281299][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 187.291170][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 187.300363][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 187.308728][T20261] loop2: unable to read partition table [ 187.314766][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 187.326399][T20261] loop_reread_partitions: partition scan of loop2 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 187.330404][T20266] sctp: [Deprecated]: syz.1.7631 (pid 20266) Use of struct sctp_assoc_value in delayed_ack socket option. [ 187.330404][T20266] Use struct sctp_sack_info instead [ 187.507002][T20288] netlink: 27 bytes leftover after parsing attributes in process `syz.3.7641'. [ 187.585006][T20299] loop2: detected capacity change from 0 to 1024 [ 187.602195][T20299] ext4 filesystem being mounted at /1496/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 187.623558][T20299] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: comm syz.2.7646: lblock 0 mapped to illegal pblock 0 (length 1) [ 187.654778][T20311] netlink: 'syz.3.7651': attribute type 10 has an invalid length. [ 187.661104][T20299] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 187.666004][T20311] team0: Port device dummy0 added [ 187.675010][T20299] EXT4-fs (loop2): This should not happen!! Data will be lost [ 187.675010][T20299] [ 187.694845][T20311] netlink: 'syz.3.7651': attribute type 10 has an invalid length. [ 187.706191][T20311] team0: Port device dummy0 removed [ 187.713920][T20311] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 187.766064][T20319] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=20319 comm=syz.3.7655 [ 187.976887][T20348] ================================================================== [ 187.985025][T20348] BUG: KCSAN: data-race in selinux_inode_permission / selinux_inode_permission [ 187.993990][T20348] [ 187.996311][T20348] write to 0xffff8881022c90a0 of 4 bytes by task 20349 on cpu 0: [ 188.004023][T20348] selinux_inode_permission+0x3ac/0x740 [ 188.009589][T20348] security_inode_permission+0x6d/0xb0 [ 188.015059][T20348] inode_permission+0x106/0x310 [ 188.019922][T20348] link_path_walk+0x162/0x900 [ 188.024604][T20348] path_openat+0x1de/0x2170 [ 188.029109][T20348] do_filp_open+0x109/0x230 [ 188.033612][T20348] io_openat2+0x272/0x390 [ 188.037945][T20348] io_openat+0x1b/0x30 [ 188.042019][T20348] __io_issue_sqe+0xfe/0x2e0 [ 188.046606][T20348] io_issue_sqe+0x53/0x970 [ 188.051021][T20348] io_wq_submit_work+0x3f7/0x5f0 [ 188.055960][T20348] io_worker_handle_work+0x44e/0x9b0 [ 188.061253][T20348] io_wq_worker+0x22e/0x870 [ 188.065758][T20348] ret_from_fork+0xda/0x150 [ 188.070260][T20348] ret_from_fork_asm+0x1a/0x30 [ 188.075025][T20348] [ 188.077344][T20348] read to 0xffff8881022c90a0 of 4 bytes by task 20348 on cpu 1: [ 188.084967][T20348] selinux_inode_permission+0x334/0x740 [ 188.090623][T20348] security_inode_permission+0x6d/0xb0 [ 188.096091][T20348] inode_permission+0x106/0x310 [ 188.100951][T20348] link_path_walk+0x162/0x900 [ 188.105670][T20348] path_openat+0x1de/0x2170 [ 188.110170][T20348] do_filp_open+0x109/0x230 [ 188.114670][T20348] io_openat2+0x272/0x390 [ 188.119087][T20348] io_openat+0x1b/0x30 [ 188.123159][T20348] __io_issue_sqe+0xfe/0x2e0 [ 188.127744][T20348] io_issue_sqe+0x53/0x970 [ 188.132154][T20348] io_submit_sqes+0x675/0x1060 [ 188.136921][T20348] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 188.142474][T20348] __x64_sys_io_uring_enter+0x78/0x90 [ 188.147847][T20348] x64_sys_call+0x2de1/0x2ff0 [ 188.152528][T20348] do_syscall_64+0xd2/0x200 [ 188.157036][T20348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.162929][T20348] [ 188.165244][T20348] value changed: 0x00000000 -> 0x00000001 [ 188.170952][T20348] [ 188.173269][T20348] Reported by Kernel Concurrency Sanitizer on: [ 188.179416][T20348] CPU: 1 UID: 0 PID: 20348 Comm: syz.2.7668 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 188.190785][T20348] Tainted: [W]=WARN [ 188.194584][T20348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 188.204635][T20348] ==================================================================