last executing test programs: 1.392554593s ago: executing program 4 (id=902): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000280)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x44d, &(0x7f0000000900)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x10) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x40000003, 0xdd, 0x479c28ea, 0x1, 0x402, 0x809}) 1.271649026s ago: executing program 2 (id=907): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x40}, 0xffffffffffffff1c) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000005c0)='sched_switch\x00', r0}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x441, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCXONC(r1, 0x540a, 0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 1.227650627s ago: executing program 0 (id=910): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x42, &(0x7f00000002c0)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300, {[@end]}}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x1c, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @local}}}}}}, 0x0) 1.180754058s ago: executing program 0 (id=912): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'pim6reg1\x00', 0x2}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) 1.173352677s ago: executing program 3 (id=913): prctl$PR_SET_NAME(0xf, &(0x7f00000014c0)='w\xde\xa1\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd\xde\xad\xf5\x1eM\x11[\xb6\x98\xda\xd2y\xbd\xad\x87P\xd8\xb2\xe5\xd2\xe7\xf6\xa1\xc8\'\x1e\xbc\xf4\xa0\xe6\xcf*(\xfb_\x9fL\xa2\x86\f\xcd\x1b\xd1\xe7\x11\xe8\xe1-\x0f\x1b:\xff\x11~') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x22, &(0x7f0000000340)={@broadcast, @multicast, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x2, 0x13, 0x14, 0x67, 0x0, 0x2, 0x32, 0x0, @empty, @broadcast}}}}}, 0x0) 1.121961609s ago: executing program 2 (id=915): unshare(0x22020400) r0 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) sendfile(0xffffffffffffffff, r0, &(0x7f0000001000)=0xffffffffffffffff, 0x1) 1.121610179s ago: executing program 3 (id=916): bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x40000002}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001a80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f005dd1be0ffff00fe3a21632f77fbac14141de007031762079f4b4d2f87e5feca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0x8, 0x60000000}, 0x1e) 1.096247789s ago: executing program 4 (id=917): unshare(0x60060200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socketpair(0x22, 0x2, 0x1, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) 1.04763855s ago: executing program 2 (id=919): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000090900010073797a300000080080000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000003f3c001280140001800c000100636f756e7465720004000280100001800c000100636f756e74657200140001801c000100636f756e746572000400028008000340000001"], 0xc8}, 0x1, 0x0, 0x0, 0x8000}, 0x20050800) 1.04748692s ago: executing program 3 (id=920): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x208e24b) timer_create(0x2, 0x0, &(0x7f0000000000)=0x0) timer_settime(r1, 0x1, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_gettime(r1, 0x0) 1.04731362s ago: executing program 2 (id=921): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000380)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x13) r2 = socket(0x1d, 0x2, 0x6) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x2) readv(r3, &(0x7f0000000000)=[{&(0x7f0000000580)=""/244, 0xf4}], 0x1) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) setsockopt$sock_attach_bpf(r2, 0x6a, 0x6e, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffff}, 0x50) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) bind$packet(r4, &(0x7f0000000080)={0x11, 0x1a, r5, 0x1, 0x1, 0x6, @broadcast}, 0x14) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r6, 0x0, 0xfffffffffffffffd}, 0x18) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 1.012484701s ago: executing program 0 (id=923): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x18) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @private=0xa010103}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r2, &(0x7f0000001740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}}, 0x0) 985.594381ms ago: executing program 0 (id=924): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x56c, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000380)="09000000e700140000007e7bfbf788a83baa9900d6f18f8e950088a808008100", 0x20, 0x8085, &(0x7f00000000c0)={0x11, 0x88a8, r1, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}, 0x14) 929.772332ms ago: executing program 2 (id=926): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f0000000300)="0906c422e0243219ff7b440e76a1b51b82ba23599f81b52c9d4db4486cec105e4b9f0f859f8a43eef6352f1e46e3145089b6a22f618ca14e288029b613a329c422481c6b7aff6806bce699cea461ecf591d9018b2a1d84e389a8d3127fd35913fe69754435c2", 0xffffffffffffffbb, 0x40040011, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000200), &(0x7f0000000240)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) 929.403682ms ago: executing program 0 (id=928): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="65fd7f52f10700"/24], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) recvmsg(0xffffffffffffffff, 0x0, 0x10000) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0xfffffda4, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000000)={{0x3, 0x1, 0x0, 0x2, 0x5}}) close(r4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r8) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_PHY(r10, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000000c0)={0x14, r9, 0x30b, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x240448c3}, 0x20060000) 867.976954ms ago: executing program 1 (id=929): add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r0, 0x800) keyctl$get_security(0x11, r0, 0x0, 0x0) 867.811324ms ago: executing program 1 (id=930): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0xb, &(0x7f0000000100)=0xfff, 0x4) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0) 867.623634ms ago: executing program 0 (id=931): bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000180), 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r3) sendmsg$NFC_CMD_GET_SE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r4, 0x5143fad7b81663e7, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) 795.218435ms ago: executing program 1 (id=932): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg(r0, &(0x7f00000021c0)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x0, 0x1}, 0x80, 0x0}, 0x2004c845) 773.367185ms ago: executing program 1 (id=933): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sys_enter\x00'}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffff53a2513743897e44000d0001007564703aa3"], 0x54}}, 0x0) 720.023657ms ago: executing program 3 (id=934): r0 = io_uring_setup(0x299, &(0x7f0000000300)={0x0, 0xf76b, 0x2, 0xfffffffd, 0xfffffffe}) io_uring_register$IORING_REGISTER_RING_FDS(r0, 0x14, 0x0, 0x0) 671.868007ms ago: executing program 1 (id=935): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r1}, 0x10) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') renameat2(0xffffffffffffff9c, &(0x7f0000002480)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffffff, 0x0, 0x4) 615.187618ms ago: executing program 4 (id=936): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000000906010200000c0000000000020000000900020073797a310000000005000100070000002c0007801800018014000240fe8000000000000000000000000000bb060004404e1f000005000700"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) 523.87291ms ago: executing program 1 (id=937): shutdown(0xffffffffffffffff, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020047b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000020000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r1, 0x0, 0x2ca}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x94eb2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r4 = gettid() process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 446.480572ms ago: executing program 4 (id=938): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f00000001c0)='cgroup.clone_children\x00', 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 316.913084ms ago: executing program 3 (id=939): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x56c, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000380)="09000000e700140000007e7bfbf788a83baa9900d6f18f8e950088a808008100", 0x20, 0x8085, &(0x7f00000000c0)={0x11, 0x88a8, r1, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}, 0x14) 263.988376ms ago: executing program 4 (id=940): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff038}, {0x6, 0x0, 0x0, 0x4}]}, 0x10) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xa) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'gre0\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000140)=0x8, 0x4) sendto$packet(r1, &(0x7f0000000340)="05030006e8fe091c6202a0ffffffff006003000000007f141434e3177f43055762cb80948864113b022543424aa608", 0xfef2, 0x0, &(0x7f0000000a80)={0x11, 0x88a8, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x40040000}, 0x0) 180.301177ms ago: executing program 4 (id=941): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000940)=0x28, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x8004, &(0x7f0000000140)={0xa, 0x4621, 0x3ffffffc, @local}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000006780)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="b3ab706204ee39c9dae21a1718ee351ebc92d2f0d482a863ae5c0b4d768ffe745af2c53a083d9b761b", 0xfff7}], 0x1}, 0xb00}], 0x1, 0x0) 99.671528ms ago: executing program 3 (id=942): socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300020000000000fedbdf25fc0000000000000000f7ffffff000000ac1414bb00000000000000000000000000000004000000000a0060803b000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0x8}}}, 0xb8}}, 0x0) 0s ago: executing program 2 (id=943): r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000010c0)='ns/ipc\x00') setns(r0, 0x0) kernel console output (not intermixed with test programs): udit(1757453927.138:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=544 comm="syz.1.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9163faebe9 code=0x7ffc0000 [ 49.042699][ T555] exfat: Deprecated parameter 'namecase' [ 49.071073][ T555] exfat: Deprecated parameter 'utf8' [ 49.076499][ T30] audit: type=1326 audit(1757453927.138:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=544 comm="syz.1.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9163faebe9 code=0x7ffc0000 [ 49.099755][ T30] audit: type=1326 audit(1757453927.138:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=544 comm="syz.1.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f9163faebe9 code=0x7ffc0000 [ 49.122928][ T30] audit: type=1326 audit(1757453927.138:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=544 comm="syz.1.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9163faebe9 code=0x7ffc0000 [ 49.163849][ T555] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 49.179169][ T30] audit: type=1326 audit(1757453927.138:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=544 comm="syz.1.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9163faebe9 code=0x7ffc0000 [ 49.204239][ T30] audit: type=1400 audit(1757453927.148:163): avc: denied { unmount } for pid=284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 49.240048][ T30] audit: type=1400 audit(1757453927.358:164): avc: denied { write } for pid=552 comm="syz.0.48" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 49.240118][ T30] audit: type=1400 audit(1757453927.358:165): avc: denied { add_name } for pid=552 comm="syz.0.48" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 49.240287][ T30] audit: type=1400 audit(1757453927.358:166): avc: denied { associate } for pid=552 comm="syz.0.48" name="bus" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 49.252917][ T558] tipc: Started in network mode [ 49.252948][ T558] tipc: Node identity ced11aa611fc, cluster identity 4711 [ 49.253006][ T558] tipc: Enabled bearer , priority 0 [ 49.253784][ T557] tipc: Resetting bearer [ 49.262873][ T557] tipc: Disabling bearer [ 49.581112][ T564] netlink: 2308 bytes leftover after parsing attributes in process `syz.0.48'. [ 49.591084][ T564] netlink: 'syz.0.48': attribute type 1 has an invalid length. [ 49.598737][ T564] netlink: 'syz.0.48': attribute type 5 has an invalid length. [ 49.606344][ T564] netlink: 4 bytes leftover after parsing attributes in process `syz.0.48'. [ 49.662290][ T564] overlayfs: filesystem on './file0' not supported [ 49.670015][ T30] audit: type=1400 audit(1757453927.778:167): avc: denied { mounton } for pid=552 comm="syz.0.48" path="/12/file0/file0" dev="loop0" ino=1048596 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 51.483682][ T577] loop0: detected capacity change from 0 to 256 [ 52.216126][ T577] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 52.229964][ T577] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 1) [ 52.238053][ T577] exFAT-fs (loop0): failed to load alloc-bitmap [ 52.244475][ T577] exFAT-fs (loop0): failed to recognize exfat type [ 52.496982][ T580] tipc: Started in network mode [ 52.609689][ T580] tipc: Node identity ac14140f, cluster identity 4711 [ 52.616604][ T580] tipc: New replicast peer: 255.255.255.255 [ 52.623075][ T580] tipc: Enabled bearer , priority 10 [ 52.791458][ T584] loop4: detected capacity change from 0 to 256 [ 52.879682][ T584] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 52.893566][ T584] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 1) [ 52.901804][ T584] exFAT-fs (loop4): failed to load alloc-bitmap [ 52.908306][ T584] exFAT-fs (loop4): failed to recognize exfat type [ 53.834761][ T20] tipc: Node number set to 2886997007 [ 53.842769][ T587] loop0: detected capacity change from 0 to 256 [ 53.903261][ T587] exfat: Deprecated parameter 'namecase' [ 53.913938][ T587] exfat: Deprecated parameter 'utf8' [ 53.948452][ T587] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 54.372813][ T597] loop4: detected capacity change from 0 to 512 [ 54.824899][ T597] EXT4-fs (loop4): Test dummy encryption mode enabled [ 54.832007][ T597] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 55.161976][ T599] netlink: 2308 bytes leftover after parsing attributes in process `syz.0.58'. [ 55.171197][ T599] netlink: 'syz.0.58': attribute type 1 has an invalid length. [ 55.178778][ T599] netlink: 'syz.0.58': attribute type 5 has an invalid length. [ 55.186341][ T599] netlink: 4 bytes leftover after parsing attributes in process `syz.0.58'. [ 55.197227][ T599] overlayfs: filesystem on './file0' not supported [ 55.730671][ T597] EXT4-fs error (device loop4): ext4_orphan_get:1427: comm syz.4.61: bad orphan inode 131083 [ 56.027096][ T597] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none. [ 56.343124][ T616] loop2: detected capacity change from 0 to 512 [ 56.385617][ T617] loop0: detected capacity change from 0 to 256 [ 56.412483][ T616] EXT4-fs (loop2): Test dummy encryption mode enabled [ 56.420147][ T616] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 58.576685][ T616] EXT4-fs error (device loop2): ext4_orphan_get:1427: comm syz.2.65: bad orphan inode 131083 [ 58.701485][ T624] loop1: detected capacity change from 0 to 512 [ 59.482584][ T616] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none. [ 60.292181][ T629] loop3: detected capacity change from 0 to 512 [ 61.950671][ T631] loop4: detected capacity change from 0 to 256 [ 62.439463][ T624] EXT4-fs (loop1): Test dummy encryption mode enabled [ 62.446298][ T624] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 62.463426][ T624] EXT4-fs: failed to create workqueue [ 62.468921][ T624] EXT4-fs (loop1): mount failed [ 62.481157][ T629] EXT4-fs (loop3): Test dummy encryption mode enabled [ 62.488012][ T629] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 62.528355][ T631] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 62.542616][ T631] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 1) [ 62.550731][ T631] exFAT-fs (loop4): failed to load alloc-bitmap [ 62.557260][ T631] exFAT-fs (loop4): failed to recognize exfat type [ 63.364248][ T640] loop0: detected capacity change from 0 to 256 [ 63.377299][ T629] EXT4-fs error (device loop3): ext4_orphan_get:1427: comm syz.3.70: bad orphan inode 131083 [ 63.388145][ T629] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none. [ 63.438881][ T642] loop1: detected capacity change from 0 to 256 [ 63.468111][ T640] exfat: Deprecated parameter 'namecase' [ 63.473892][ T640] exfat: Deprecated parameter 'utf8' [ 63.479703][ T642] exfat: Deprecated parameter 'namecase' [ 63.485910][ T642] exfat: Deprecated parameter 'utf8' [ 63.495843][ T642] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 64.230754][ T640] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 64.444381][ T651] netlink: 2308 bytes leftover after parsing attributes in process `syz.1.73'. [ 64.454328][ T651] netlink: 'syz.1.73': attribute type 1 has an invalid length. [ 64.461962][ T651] netlink: 'syz.1.73': attribute type 5 has an invalid length. [ 64.469610][ T651] netlink: 4 bytes leftover after parsing attributes in process `syz.1.73'. [ 64.516560][ T651] overlayfs: filesystem on './file0' not supported [ 65.409357][ T658] capability: warning: `syz.4.77' uses deprecated v2 capabilities in a way that may be insecure [ 66.027260][ T660] netlink: 2308 bytes leftover after parsing attributes in process `syz.0.72'. [ 66.038096][ T660] netlink: 'syz.0.72': attribute type 1 has an invalid length. [ 66.045791][ T660] netlink: 'syz.0.72': attribute type 5 has an invalid length. [ 66.053513][ T660] netlink: 4 bytes leftover after parsing attributes in process `syz.0.72'. [ 66.206249][ T660] overlayfs: filesystem on './file0' not supported [ 66.783524][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 66.783539][ T30] audit: type=1400 audit(1757453944.898:174): avc: denied { mounton } for pid=657 comm="syz.4.77" path="/proc/53/task" dev="proc" ino=17120 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 66.812462][ T663] tipc: Enabling of bearer rejected, already enabled [ 67.031492][ T679] loop0: detected capacity change from 0 to 256 [ 67.069105][ T679] exfat: Deprecated parameter 'namecase' [ 67.074813][ T679] exfat: Deprecated parameter 'utf8' [ 67.485719][ T680] loop2: detected capacity change from 0 to 8192 [ 67.494142][ T26] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 68.264707][ T679] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 68.627080][ T687] netlink: 2308 bytes leftover after parsing attributes in process `syz.0.80'. [ 68.636596][ T687] netlink: 'syz.0.80': attribute type 1 has an invalid length. [ 68.644234][ T687] netlink: 'syz.0.80': attribute type 5 has an invalid length. [ 68.651853][ T687] netlink: 4 bytes leftover after parsing attributes in process `syz.0.80'. [ 68.693266][ T687] overlayfs: filesystem on './file0' not supported [ 69.594023][ T691] loop2: detected capacity change from 0 to 256 [ 69.688518][ T698] loop4: detected capacity change from 0 to 256 [ 69.778543][ T698] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 69.792497][ T698] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 1) [ 69.800601][ T698] exFAT-fs (loop4): failed to load alloc-bitmap [ 69.807059][ T698] exFAT-fs (loop4): failed to recognize exfat type [ 69.832447][ T691] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 70.607057][ T703] loop0: detected capacity change from 0 to 256 [ 70.662959][ T691] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 1) [ 71.512486][ T691] exFAT-fs (loop2): failed to load alloc-bitmap [ 71.574224][ T703] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 71.587992][ T703] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 1) [ 71.596050][ T703] exFAT-fs (loop0): failed to load alloc-bitmap [ 71.602500][ T703] exFAT-fs (loop0): failed to recognize exfat type [ 71.736066][ T691] exFAT-fs (loop2): failed to recognize exfat type [ 71.786772][ T707] loop4: detected capacity change from 0 to 256 [ 71.823962][ T30] audit: type=1400 audit(1757453949.938:175): avc: denied { setopt } for pid=692 comm="syz.1.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 71.848815][ T707] exfat: Deprecated parameter 'namecase' [ 71.858492][ T707] exfat: Deprecated parameter 'utf8' [ 71.894465][ T30] audit: type=1400 audit(1757453950.008:176): avc: denied { mounton } for pid=710 comm="syz.1.89" path="/17/file0" dev="tmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 71.960743][ T707] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 71.975166][ T714] tipc: Enabling of bearer rejected, already enabled [ 72.351262][ T716] loop3: detected capacity change from 0 to 512 [ 72.491977][ T716] EXT4-fs (loop3): Test dummy encryption mode enabled [ 72.499056][ T716] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 72.594933][ T716] EXT4-fs error (device loop3): ext4_orphan_get:1427: comm syz.3.88: bad orphan inode 131083 [ 72.606401][ T716] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none. [ 74.927470][ T728] netlink: 2308 bytes leftover after parsing attributes in process `syz.4.87'. [ 74.938142][ T728] netlink: 'syz.4.87': attribute type 1 has an invalid length. [ 74.945793][ T728] netlink: 'syz.4.87': attribute type 5 has an invalid length. [ 74.953445][ T728] netlink: 4 bytes leftover after parsing attributes in process `syz.4.87'. [ 75.157193][ T728] overlayfs: filesystem on './file0' not supported [ 75.968097][ T731] loop3: detected capacity change from 0 to 256 [ 75.988293][ T731] exfat: Deprecated parameter 'namecase' [ 75.994008][ T731] exfat: Deprecated parameter 'utf8' [ 76.331136][ T30] audit: type=1326 audit(1757453954.218:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=723 comm="syz.2.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f852f97abe9 code=0x7ffc0000 [ 76.415034][ T731] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 76.475010][ T30] audit: type=1326 audit(1757453954.218:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=723 comm="syz.2.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f852f97abe9 code=0x7ffc0000 [ 76.498398][ T30] audit: type=1326 audit(1757453954.238:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=723 comm="syz.2.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f852f97abe9 code=0x7ffc0000 [ 76.522983][ T30] audit: type=1326 audit(1757453954.248:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=723 comm="syz.2.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f852f97abe9 code=0x7ffc0000 [ 76.546161][ T30] audit: type=1326 audit(1757453954.248:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=723 comm="syz.2.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f852f97abe9 code=0x7ffc0000 [ 76.637839][ T370] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 76.878018][ T30] audit: type=1400 audit(1757453954.938:182): avc: denied { mount } for pid=746 comm="syz.2.98" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 77.183820][ T751] netlink: 2308 bytes leftover after parsing attributes in process `syz.3.94'. [ 77.193706][ T751] netlink: 'syz.3.94': attribute type 1 has an invalid length. [ 77.201373][ T751] netlink: 'syz.3.94': attribute type 5 has an invalid length. [ 77.209022][ T751] netlink: 4 bytes leftover after parsing attributes in process `syz.3.94'. [ 77.289052][ T751] overlayfs: filesystem on './file0' not supported [ 77.791548][ T30] audit: type=1400 audit(1757453955.478:183): avc: denied { remount } for pid=746 comm="syz.2.98" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 77.811572][ T754] loop1: detected capacity change from 0 to 256 [ 77.828247][ T30] audit: type=1400 audit(1757453955.948:184): avc: denied { unmount } for pid=285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 77.862854][ T756] loop2: detected capacity change from 0 to 256 [ 77.890461][ T756] exfat: Deprecated parameter 'namecase' [ 77.896284][ T756] exfat: Deprecated parameter 'utf8' [ 77.902116][ T754] exfat: Deprecated parameter 'namecase' [ 77.911394][ T754] exfat: Deprecated parameter 'utf8' [ 77.941119][ T756] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 77.970848][ T754] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 78.141483][ T30] audit: type=1400 audit(1757453956.258:185): avc: denied { write } for pid=763 comm="syz.3.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 78.487499][ T765] netlink: 2308 bytes leftover after parsing attributes in process `syz.2.100'. [ 78.497452][ T765] netlink: 'syz.2.100': attribute type 1 has an invalid length. [ 78.505188][ T765] netlink: 'syz.2.100': attribute type 5 has an invalid length. [ 78.512935][ T765] netlink: 4 bytes leftover after parsing attributes in process `syz.2.100'. [ 78.589879][ T765] overlayfs: filesystem on './file0' not supported [ 79.251005][ T30] audit: type=1400 audit(1757453957.368:186): avc: denied { create } for pid=766 comm="syz.4.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 79.284605][ T30] audit: type=1400 audit(1757453957.378:187): avc: denied { setopt } for pid=766 comm="syz.4.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 79.364837][ T30] audit: type=1400 audit(1757453957.388:188): avc: denied { setopt } for pid=768 comm="syz.3.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 79.384491][ T30] audit: type=1400 audit(1757453957.398:189): avc: denied { bind } for pid=768 comm="syz.3.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 79.388301][ T760] netlink: 12 bytes leftover after parsing attributes in process `syz.0.102'. [ 79.413069][ T30] audit: type=1400 audit(1757453957.398:190): avc: denied { create } for pid=768 comm="syz.3.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 79.423213][ T760] netlink: 20 bytes leftover after parsing attributes in process `syz.0.102'. [ 79.441816][ T760] netlink: 20 bytes leftover after parsing attributes in process `syz.0.102'. [ 81.118451][ T30] audit: type=1400 audit(1757453959.238:191): avc: denied { create } for pid=784 comm="syz.0.110" dev="anon_inodefs" ino=17430 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 81.315632][ T788] loop4: detected capacity change from 0 to 512 [ 81.544532][ T788] EXT4-fs (loop4): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 81.562510][ T788] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.978466][ T30] audit: type=1400 audit(1757453959.678:192): avc: denied { mount } for pid=781 comm="syz.4.109" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 82.048572][ T788] syz.4.109 (788) used greatest stack depth: 22016 bytes left [ 82.144278][ T30] audit: type=1400 audit(1757453960.258:193): avc: denied { unmount } for pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 82.322585][ T785] loop0: detected capacity change from 0 to 40427 [ 82.381117][ T785] F2FS-fs (loop0): fault_injection options not supported [ 82.950881][ T805] loop4: detected capacity change from 0 to 8192 [ 82.984147][ T785] F2FS-fs (loop0): invalid crc value [ 83.452539][ T785] F2FS-fs (loop0): Found nat_bits in checkpoint [ 83.490707][ T809] tipc: Started in network mode [ 83.495648][ T809] tipc: Node identity ac14140f, cluster identity 4711 [ 83.503188][ T809] tipc: New replicast peer: 255.255.255.255 [ 83.509505][ T809] tipc: Enabled bearer , priority 10 [ 83.843530][ T815] loop4: detected capacity change from 0 to 512 [ 83.928769][ T815] EXT4-fs (loop4): Test dummy encryption mode enabled [ 83.935915][ T815] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 84.063572][ T815] EXT4-fs error (device loop4): ext4_orphan_get:1427: comm syz.4.113: bad orphan inode 131083 [ 84.076173][ T815] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none. [ 84.702125][ T6] tipc: Node number set to 2886997007 [ 84.932842][ T825] loop0: detected capacity change from 0 to 512 [ 85.017678][ T825] EXT4-fs (loop0): too many log groups per flexible block group [ 85.027926][ T825] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 85.034791][ T825] EXT4-fs (loop0): mount failed [ 86.501160][ T30] audit: type=1400 audit(1757453964.618:194): avc: denied { bind } for pid=845 comm="syz.0.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 86.677788][ T632] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 86.988376][ T864] loop0: detected capacity change from 0 to 512 [ 87.184899][ T864] EXT4-fs (loop0): Test dummy encryption mode enabled [ 87.192296][ T864] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 87.713430][ T865] loop4: detected capacity change from 0 to 8192 [ 87.733499][ T864] EXT4-fs error (device loop0): ext4_orphan_get:1427: comm syz.0.125: bad orphan inode 131083 [ 87.744186][ T864] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none. [ 87.821334][ T860] loop3: detected capacity change from 0 to 40427 [ 87.837796][ T632] usb 2-1: Using ep0 maxpacket: 16 [ 87.958551][ T860] F2FS-fs (loop3): fault_injection options not supported [ 88.010930][ T860] F2FS-fs (loop3): Unrecognized mount option "fault_type=00V000000000000327I7" or missing value [ 88.218193][ T632] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 88.327488][ T632] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 88.340678][ T30] audit: type=1400 audit(1757453966.458:195): avc: denied { read } for pid=874 comm="syz.0.128" dev="nsfs" ino=4026532291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 88.361676][ T632] usb 2-1: config 0 has no interface number 0 [ 88.378810][ T30] audit: type=1400 audit(1757453966.458:196): avc: denied { open } for pid=874 comm="syz.0.128" path="net:[4026532291]" dev="nsfs" ino=4026532291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 88.402467][ T30] audit: type=1400 audit(1757453966.458:197): avc: denied { create } for pid=874 comm="syz.0.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 88.441092][ T30] audit: type=1400 audit(1757453966.458:198): avc: denied { bind } for pid=874 comm="syz.0.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 88.469519][ T632] usb 2-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice= 0.5b [ 88.479062][ T632] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.492383][ T632] usb 2-1: config 0 descriptor?? [ 88.527875][ T632] usb 2-1: can't set config #0, error -71 [ 88.537131][ T632] usb 2-1: USB disconnect, device number 4 [ 88.868639][ T30] audit: type=1400 audit(1757453966.988:199): avc: denied { create } for pid=858 comm="syz.3.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 88.903679][ T30] audit: type=1400 audit(1757453966.998:200): avc: denied { name_bind } for pid=885 comm="syz.2.132" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 88.925342][ T30] audit: type=1400 audit(1757453966.998:201): avc: denied { node_bind } for pid=885 comm="syz.2.132" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 89.115499][ T895] syz.0.133[895] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 89.115599][ T895] syz.0.133[895] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 89.129809][ T895] loop0: detected capacity change from 0 to 256 [ 89.217640][ T883] syz.1.130 (883) used greatest stack depth: 19424 bytes left [ 89.280854][ T895] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 89.280879][ T895] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 89.307853][ T30] audit: type=1326 audit(1757453967.418:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=896 comm="syz.1.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9163faebe9 code=0x7ffc0000 [ 89.307890][ T30] audit: type=1326 audit(1757453967.418:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=896 comm="syz.1.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9163faebe9 code=0x7ffc0000 [ 89.307916][ T30] audit: type=1326 audit(1757453967.418:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=896 comm="syz.1.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f9163faebe9 code=0x7ffc0000 [ 89.338320][ T895] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 89.446507][ T906] netlink: 36 bytes leftover after parsing attributes in process `syz.1.138'. [ 89.588784][ T922] loop4: detected capacity change from 0 to 256 [ 89.634767][ T922] FAT-fs (loop4): Directory bread(block 64) failed [ 89.641646][ T922] FAT-fs (loop4): Directory bread(block 65) failed [ 89.649691][ T922] FAT-fs (loop4): Directory bread(block 66) failed [ 89.651947][ T932] loop1: detected capacity change from 0 to 512 [ 89.656427][ T922] FAT-fs (loop4): Directory bread(block 67) failed [ 89.669198][ T922] FAT-fs (loop4): Directory bread(block 68) failed [ 89.675893][ T922] FAT-fs (loop4): Directory bread(block 69) failed [ 89.682886][ T922] FAT-fs (loop4): Directory bread(block 70) failed [ 89.689724][ T922] FAT-fs (loop4): Directory bread(block 71) failed [ 89.690524][ T932] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 89.696728][ T922] FAT-fs (loop4): Directory bread(block 72) failed [ 89.707796][ T932] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.714616][ T922] FAT-fs (loop4): Directory bread(block 73) failed [ 89.785569][ T936] netlink: 96 bytes leftover after parsing attributes in process `syz.0.152'. [ 89.842403][ T945] loop4: detected capacity change from 0 to 1024 [ 89.852810][ T945] EXT4-fs (loop4): Ignoring removed nobh option [ 89.875874][ T945] EXT4-fs (loop4): Ignoring removed bh option [ 89.909541][ T945] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 89.932016][ T950] 9pnet: Could not find request transport: tcpÿÿÿ [ 89.968646][ T945] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 90.017091][ T945] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3871: comm syz.4.156: Allocating blocks 385-513 which overlap fs metadata [ 90.032677][ T944] EXT4-fs (loop4): pa ffff88811155fbd0: logic 16, phys. 129, len 24 [ 90.040766][ T944] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 8 [ 90.076167][ T963] loop1: detected capacity change from 0 to 512 [ 90.085320][ T963] EXT4-fs (loop1): orphan cleanup on readonly fs [ 90.092410][ T963] EXT4-fs warning (device loop1): ext4_xattr_inode_get:509: inode #11: comm syz.1.163: EA inode hash validation failed [ 90.105150][ T963] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2825: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 90.137893][ T963] ------------[ cut here ]------------ [ 90.143588][ T963] EA inode 11 ref_count=-1 [ 90.143729][ T963] WARNING: CPU: 1 PID: 963 at fs/ext4/xattr.c:1016 ext4_xattr_inode_update_ref+0x476/0x570 [ 90.158614][ T963] Modules linked in: [ 90.162761][ T963] CPU: 1 PID: 963 Comm: syz.1.163 Not tainted syzkaller #0 [ 90.172360][ T963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 90.172395][ T963] RIP: 0010:ext4_xattr_inode_update_ref+0x476/0x570 [ 90.172428][ T963] Code: 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 f7 e8 bc a4 be ff 49 8b 36 48 c7 c7 e0 20 4f 85 4c 89 e2 e8 9a fc b6 02 <0f> 0b 48 8b 5c 24 10 4c 8b 7c 24 18 4c 8d 6c 24 60 e9 af fe ff ff [ 90.172447][ T963] RSP: 0018:ffffc90000d8f180 EFLAGS: 00010246 [ 90.172465][ T963] RAX: 3d0295f6ef44c500 RBX: 00000000ffffffff RCX: 0000000000080000 [ 90.172481][ T963] RDX: ffffc9000135b000 RSI: 000000000000d844 RDI: 000000000000d845 [ 90.172495][ T963] RBP: ffffc90000d8f270 R08: dffffc0000000000 R09: ffffed103ee24e93 [ 90.172510][ T963] R10: ffffed103ee24e93 R11: 1ffff1103ee24e92 R12: ffffffffffffffff [ 90.172525][ T963] R13: ffffc90000d8f1e0 R14: ffff88811158c1e0 R15: 0000000000000001 [ 90.172539][ T963] FS: 00007f9162a176c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 90.172556][ T963] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 90.172571][ T963] CR2: 0000000000000000 CR3: 000000011e4e8000 CR4: 00000000003506a0 [ 90.172588][ T963] Call Trace: [ 90.172594][ T963] [ 90.172603][ T963] ? ext4_xattr_block_csum+0x530/0x530 [ 90.172630][ T963] ? ext4_xattr_inode_dec_ref_all+0x399/0xf30 [ 90.172654][ T963] ext4_xattr_inode_dec_ref_all+0x982/0xf30 [ 90.172678][ T963] ? __cond_resched+0xb0/0xb0 [ 90.172701][ T963] ? ext4_xattr_delete_inode+0xbb0/0xbb0 [ 90.172726][ T963] ? ext4_xattr_delete_inode+0x9c7/0xbb0 [ 90.172761][ T963] ext4_xattr_delete_inode+0x9f1/0xbb0 [ 90.172785][ T963] ? ext4_truncate+0xbde/0xfa0 [ 90.172804][ T963] ? ext4_expand_extra_isize_ea+0x1a10/0x1a10 [ 90.172828][ T963] ext4_evict_inode+0xe44/0x1450 [ 90.172845][ T963] ? _raw_spin_unlock+0x4d/0x70 [ 90.172868][ T963] ? ext4_inode_is_fast_symlink+0x3a0/0x3a0 [ 90.172888][ T963] ? unlock_new_inode+0x97/0xc0 [ 90.172908][ T963] ? ext4_inode_is_fast_symlink+0x3a0/0x3a0 [ 90.172938][ T963] evict+0x485/0x870 [ 90.172961][ T963] ? proc_nr_inodes+0x310/0x310 [ 90.172981][ T963] ? _raw_spin_lock+0x8e/0xe0 [ 90.172999][ T963] ? _raw_spin_trylock_bh+0x130/0x130 [ 90.173022][ T963] ? __kasan_check_write+0x14/0x20 [ 90.173042][ T963] iput+0x635/0x7c0 [ 90.173061][ T963] ext4_process_orphan+0x2b1/0x320 [ 90.173081][ T963] ext4_orphan_cleanup+0x9d1/0x10c0 [ 90.173101][ T963] ? ext4_orphan_del+0xb90/0xb90 [ 90.173120][ T963] ? ext4_register_sysfs+0x285/0x2c0 [ 90.173140][ T963] ? errseq_check_and_advance+0x66/0x130 [ 90.173159][ T963] ext4_fill_super+0x8974/0x9090 [ 90.173187][ T963] ? ext4_mount+0x40/0x40 [ 90.173204][ T963] ? set_blocksize+0x1fc/0x380 [ 90.173226][ T963] ? sb_set_blocksize+0xaa/0xf0 [ 90.173248][ T963] ? ext4_mount+0x40/0x40 [ 90.173266][ T963] mount_bdev+0x2ae/0x3e0 [ 90.173284][ T963] ? ext4_mount+0x40/0x40 [ 90.173303][ T963] ext4_mount+0x34/0x40 [ 90.173330][ T963] legacy_get_tree+0xed/0x190 [ 90.173349][ T963] ? ext4_errno_to_code+0x160/0x160 [ 90.173370][ T963] vfs_get_tree+0x89/0x260 [ 90.173390][ T963] do_new_mount+0x25a/0xa20 [ 90.173411][ T963] path_mount+0x675/0x1020 [ 90.173428][ T963] ? user_path_at_empty+0x161/0x1c0 [ 90.173447][ T963] __se_sys_mount+0x318/0x380 [ 90.173466][ T963] ? __x64_sys_mount+0xd0/0xd0 [ 90.173504][ T963] __x64_sys_mount+0xbf/0xd0 [ 90.173536][ T963] x64_sys_call+0x6bf/0x9a0 [ 90.173555][ T963] do_syscall_64+0x4c/0xa0 [ 90.173574][ T963] ? clear_bhb_loop+0x50/0xa0 [ 90.173594][ T963] ? clear_bhb_loop+0x50/0xa0 [ 90.173614][ T963] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 90.173634][ T963] RIP: 0033:0x7f9163fb038a [ 90.173650][ T963] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.173666][ T963] RSP: 002b:00007f9162a16e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 90.173686][ T963] RAX: ffffffffffffffda RBX: 00007f9162a16ef0 RCX: 00007f9163fb038a [ 90.173700][ T963] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f9162a16eb0 [ 90.173714][ T963] RBP: 0000200000000180 R08: 00007f9162a16ef0 R09: 000000000080078b [ 90.173726][ T963] R10: 000000000080078b R11: 0000000000000246 R12: 00002000000001c0 [ 90.173739][ T963] R13: 00007f9162a16eb0 R14: 0000000000000473 R15: 0000200000000680 [ 90.173756][ T963] [ 90.173762][ T963] ---[ end trace cd00a8ba217b05c5 ]--- [ 90.173854][ T963] EXT4-fs error (device loop1): ext4_do_update_inode:5235: inode #15: comm syz.1.163: corrupted inode contents [ 90.177900][ T963] EXT4-fs error (device loop1): ext4_dirty_inode:6071: inode #15: comm syz.1.163: mark_inode_dirty error [ 90.180610][ T963] EXT4-fs error (device loop1): ext4_do_update_inode:5235: inode #15: comm syz.1.163: corrupted inode contents [ 90.183091][ T963] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2970: inode #15: comm syz.1.163: mark_inode_dirty error [ 90.184888][ T963] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2973: inode #15: comm syz.1.163: mark inode dirty (error -117) [ 90.187052][ T963] EXT4-fs warning (device loop1): ext4_evict_inode:303: xattr delete (err -117) [ 90.189063][ T963] EXT4-fs (loop1): 1 orphan inode deleted [ 90.189231][ T963] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodioread_nolock,journal_dev=0x00000000000000ff,debug_want_extra_isize=0x000000000000005c,nouid32,resgid=0x0000000000000000,acl,init_itable=0x0000000000008d55,,errors=continue. Quota mode: none. [ 90.665278][ T986] netlink: 4 bytes leftover after parsing attributes in process `syz.3.172'. [ 90.665611][ T986] netlink: 12 bytes leftover after parsing attributes in process `syz.3.172'. [ 90.840413][ T992] loop3: detected capacity change from 0 to 1024 [ 90.921369][ T992] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 91.002719][ T997] netlink: 44 bytes leftover after parsing attributes in process `syz.3.176'. [ 91.499847][ T1013] loop0: detected capacity change from 0 to 1024 [ 91.521319][ T1012] device syzkaller0 entered promiscuous mode [ 91.530454][ T1012] device syzkaller0 left promiscuous mode [ 91.587323][ T1013] EXT4-fs (loop0): mounted filesystem without journal. Opts: noinit_itable,dioread_lock,barrier=0x0000000000000000,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,abort,errors=continue,. Quota mode: none. [ 91.593650][ T1022] netlink: 100 bytes leftover after parsing attributes in process `syz.4.186'. [ 91.621237][ T1018] Zero length message leads to an empty skb [ 91.669468][ T1024] device syzkaller0 entered promiscuous mode [ 91.711102][ T1033] loop1: detected capacity change from 0 to 1024 [ 91.732893][ T1033] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 91.757399][ T1033] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 91.772944][ T1033] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 91.781394][ T1033] System zones: 0-1, 3-36 [ 91.788536][ T1033] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 91.836157][ T1040] loop0: detected capacity change from 0 to 1024 [ 91.878303][ T1040] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 91.888420][ T1046] loop1: detected capacity change from 0 to 512 [ 91.895521][ T1040] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.982511][ T1046] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 91.999170][ T1046] ext4 filesystem being mounted at /48/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.052670][ T1058] loop3: detected capacity change from 0 to 512 [ 92.074002][ T1061] loop1: detected capacity change from 0 to 1024 [ 92.092291][ T1061] EXT4-fs (loop1): Ignoring removed nobh option [ 92.100919][ T1061] EXT4-fs (loop1): Ignoring removed bh option [ 92.112894][ T1061] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 92.114644][ T1058] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 92.136692][ T1058] ext4 filesystem being mounted at /41/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 92.158343][ T1061] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 92.185765][ T1058] EXT4-fs error (device loop3): ext4_do_update_inode:5235: inode #2: comm syz.3.197: corrupted inode contents [ 92.206524][ T1058] EXT4-fs error (device loop3): ext4_dirty_inode:6071: inode #2: comm syz.3.197: mark_inode_dirty error [ 92.253081][ T1058] EXT4-fs error (device loop3): ext4_do_update_inode:5235: inode #2: comm syz.3.197: corrupted inode contents [ 92.276083][ T1058] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #2: comm syz.3.197: mark_inode_dirty error [ 92.441424][ T1095] loop0: detected capacity change from 0 to 256 [ 92.517983][ T1095] FAT-fs (loop0): error, corrupted file size (i_pos 196, 2097152) [ 92.525829][ T1095] FAT-fs (loop0): Filesystem has been set read-only [ 92.532962][ T1095] FAT-fs (loop0): error, corrupted file size (i_pos 196, 2097152) [ 92.552796][ T1106] process '+}[@' launched '/dev/fd/3' with NULL argv: empty string added [ 92.723157][ T1121] loop3: detected capacity change from 0 to 128 [ 92.831017][ T1135] loop4: detected capacity change from 0 to 512 [ 92.875178][ T1135] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.233: casefold flag without casefold feature [ 92.896743][ T1138] loop3: detected capacity change from 0 to 512 [ 92.898361][ T1135] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.233: couldn't read orphan inode 15 (err -117) [ 92.915485][ T1135] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 92.949065][ T1138] EXT4-fs (loop3): Ignoring removed nobh option [ 92.955959][ T60] kernel write not supported for file /stat (pid: 60 comm: kworker/0:2) [ 93.026454][ T1143] loop0: detected capacity change from 0 to 512 [ 93.046627][ T1138] EXT4-fs error (device loop3): ext4_do_update_inode:5235: inode #3: comm syz.3.234: corrupted inode contents [ 93.095382][ T1138] EXT4-fs error (device loop3): ext4_dirty_inode:6071: inode #3: comm syz.3.234: mark_inode_dirty error [ 93.109988][ T1138] EXT4-fs error (device loop3): ext4_do_update_inode:5235: inode #3: comm syz.3.234: corrupted inode contents [ 93.113043][ T1149] loop4: detected capacity change from 0 to 512 [ 93.132164][ T1138] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #3: comm syz.3.234: mark_inode_dirty error [ 93.145019][ T1143] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 93.156469][ T1143] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.167835][ T1138] EXT4-fs error (device loop3): ext4_acquire_dquot:6200: comm syz.3.234: Failed to acquire dquot type 0 [ 93.205069][ T1138] EXT4-fs error (device loop3): ext4_do_update_inode:5235: inode #16: comm syz.3.234: corrupted inode contents [ 93.219313][ T1138] EXT4-fs error (device loop3): ext4_dirty_inode:6071: inode #16: comm syz.3.234: mark_inode_dirty error [ 93.236034][ T1154] loop2: detected capacity change from 0 to 512 [ 93.238872][ T1138] EXT4-fs error (device loop3): ext4_do_update_inode:5235: inode #16: comm syz.3.234: corrupted inode contents [ 93.255569][ T1138] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #16: comm syz.3.234: mark_inode_dirty error [ 93.269284][ T1149] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.238: casefold flag without casefold feature [ 93.274214][ T1138] EXT4-fs error (device loop3): ext4_do_update_inode:5235: inode #16: comm syz.3.234: corrupted inode contents [ 93.294154][ T1138] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 93.294941][ T1149] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.238: couldn't read orphan inode 15 (err -117) [ 93.303532][ T1138] EXT4-fs error (device loop3): ext4_do_update_inode:5235: inode #16: comm syz.3.234: corrupted inode contents [ 93.315098][ T1149] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 93.328489][ T1138] EXT4-fs error (device loop3): ext4_truncate:4304: inode #16: comm syz.3.234: mark_inode_dirty error [ 93.354571][ T1138] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 93.365511][ T1138] EXT4-fs (loop3): 1 truncate cleaned up [ 93.365634][ T1154] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.240: bg 0: block 393: padding at end of block bitmap is not set [ 93.377518][ T1138] EXT4-fs (loop3): mounted filesystem without journal. Opts: resuid=0x0000000000000000,nobh,,errors=continue. Quota mode: writeback. [ 93.399296][ T1138] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.426619][ T30] kauditd_printk_skb: 165 callbacks suppressed [ 93.426635][ T30] audit: type=1400 audit(1757453971.538:368): avc: denied { mounton } for pid=1137 comm="syz.3.234" path="/50/file0/file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 93.456956][ T1154] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 93.467496][ T1154] EXT4-fs (loop2): 2 truncates cleaned up [ 93.475448][ T1154] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 93.554482][ T30] audit: type=1400 audit(1757453971.668:369): avc: denied { create } for pid=1163 comm="syz.2.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 93.611771][ T1173] loop2: detected capacity change from 0 to 512 [ 93.627656][ T30] audit: type=1400 audit(1757453971.668:370): avc: denied { ioctl } for pid=1163 comm="syz.2.244" path="socket:[18133]" dev="sockfs" ino=18133 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 93.661290][ T1173] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.248: casefold flag without casefold feature [ 93.684717][ T1173] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.248: couldn't read orphan inode 15 (err -117) [ 93.703305][ T1176] SELinux: failed to load policy [ 93.708644][ T1173] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 93.726716][ T632] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 93.744883][ T632] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 93.752794][ T632] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 93.760614][ T632] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 93.768807][ T632] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 93.769604][ T1186] hub 9-0:1.0: USB hub found [ 93.776495][ T632] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 93.789253][ T632] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 93.796940][ T30] audit: type=1400 audit(1757453971.688:371): avc: denied { mount } for pid=1161 comm="syz.3.242" name="/" dev="configfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 93.797122][ T632] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 93.821678][ T30] audit: type=1400 audit(1757453971.688:372): avc: denied { search } for pid=1161 comm="syz.3.242" name="/" dev="configfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 93.832705][ T1186] hub 9-0:1.0: 1 port detected [ 93.854867][ T632] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 93.862357][ T632] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 93.869966][ T632] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 93.877380][ T632] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 93.884888][ T632] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 93.892713][ T632] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 93.916798][ T632] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 93.924739][ T30] audit: type=1400 audit(1757453971.688:373): avc: denied { read } for pid=1161 comm="syz.3.242" name="/" dev="configfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 93.946704][ T632] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 93.960527][ T632] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 93.969108][ T632] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 93.976749][ T30] audit: type=1400 audit(1757453971.688:374): avc: denied { open } for pid=1161 comm="syz.3.242" path="/" dev="configfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 93.999964][ T30] audit: type=1400 audit(1757453971.718:375): avc: denied { append } for pid=1170 comm="syz.3.247" name="001" dev="devtmpfs" ino=178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 94.000027][ T1193] 9p: Unknown access argument kæ¹ [ 94.023252][ T30] audit: type=1400 audit(1757453971.818:376): avc: denied { load_policy } for pid=1175 comm="syz.3.250" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 94.048241][ T632] hid-generic 0003:0004:0000.0001: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 94.082350][ T30] audit: type=1400 audit(1757453971.838:377): avc: denied { read write } for pid=1181 comm="syz.3.252" name="uhid" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 94.136328][ T1205] netlink: 76 bytes leftover after parsing attributes in process `syz.2.262'. [ 94.200755][ T1212] pim6reg: tun_chr_ioctl cmd 1074025680 [ 94.221083][ T1208] fido_id[1208]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 94.371957][ T1226] loop1: detected capacity change from 0 to 512 [ 94.375184][ T1225] syz.3.273[1225] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 94.381646][ T1225] syz.3.273[1225] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 94.403147][ T1225] loop3: detected capacity change from 0 to 512 [ 94.418577][ T1228] tipc: Enabled bearer , priority 10 [ 94.450101][ T1226] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 94.463121][ T1225] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.273: error while reading EA inode 32 err=-116 [ 94.464340][ T1226] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.528323][ T1225] EXT4-fs (loop3): Remounting filesystem read-only [ 94.537971][ T1225] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2825: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 94.577851][ T1225] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.273: error while reading EA inode 32 err=-116 [ 94.608248][ T1225] EXT4-fs (loop3): Remounting filesystem read-only [ 94.621926][ T1225] EXT4-fs (loop3): 1 orphan inode deleted [ 94.635825][ T1225] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,discard,debug_want_extra_isize=0x000000000000005e,noauto_da_alloc,bsdgroups,jqfmt=vfsv1,abort,data_err=ignore,. Quota mode: none. [ 94.720421][ T1248] device veth0_to_team entered promiscuous mode [ 94.991486][ T1294] netlink: 172 bytes leftover after parsing attributes in process `syz.0.302'. [ 95.466991][ T1311] loop1: detected capacity change from 0 to 512 [ 95.507165][ T1289] loop4: detected capacity change from 0 to 1024 [ 95.549800][ T1314] loop0: detected capacity change from 0 to 512 [ 95.602814][ T1311] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.309: bg 0: block 248: padding at end of block bitmap is not set [ 95.619430][ T1311] EXT4-fs error (device loop1): ext4_acquire_dquot:6200: comm syz.1.309: Failed to acquire dquot type 1 [ 95.637711][ T1311] EXT4-fs (loop1): 1 truncate cleaned up [ 95.644107][ T1311] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 95.655891][ T1311] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.657979][ T1314] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 95.683102][ T1314] ext4 filesystem being mounted at /62/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 95.700810][ T1311] EXT4-fs error (device loop1): ext4_lookup:1862: inode #2: comm syz.1.309: deleted inode referenced: 12 [ 95.722989][ T1289] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 95.747981][ T1289] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 95.805734][ T1289] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 95.835036][ T1289] EXT4-fs error (device loop4): ext4_get_journal_inode:5151: inode #17: comm syz.4.300: iget: bad i_size value: 4398046511204 [ 95.890646][ T1289] EXT4-fs (loop4): no journal found [ 95.923348][ T1326] netlink: 12 bytes leftover after parsing attributes in process `syz.2.314'. [ 96.032048][ T1335] tipc: Enabled bearer , priority 0 [ 96.043202][ T1334] tipc: Resetting bearer [ 96.057173][ T1343] loop2: detected capacity change from 0 to 512 [ 96.057348][ T1334] tipc: Disabling bearer [ 96.075376][ T1345] SELinux: policydb version 0 does not match my version range 15-33 [ 96.083905][ T1345] SELinux: failed to load policy [ 96.107807][ T60] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 96.117007][ T1343] EXT4-fs (loop2): orphan cleanup on readonly fs [ 96.124369][ T60] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 96.142634][ T1343] EXT4-fs warning (device loop2): ext4_xattr_inode_get:509: inode #11: comm syz.2.320: EA inode hash validation failed [ 96.151918][ T60] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 96.170947][ T60] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 96.183088][ T60] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 96.192142][ T1343] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2825: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 96.198347][ T60] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 96.212862][ T60] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 96.220707][ T60] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 96.221343][ T307] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=307 comm=kworker/1:2 [ 96.228111][ T60] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 96.228153][ T60] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 96.248530][ T1358] loop3: detected capacity change from 0 to 512 [ 96.257219][ T60] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 96.269405][ T60] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 96.276811][ T60] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 96.278285][ T1343] EXT4-fs error (device loop2): ext4_do_update_inode:5235: inode #15: comm syz.2.320: corrupted inode contents [ 96.284254][ T60] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 96.284279][ T60] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 96.284303][ T60] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 96.284324][ T60] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 96.284343][ T60] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 96.285690][ T60] hid-generic 0003:0004:0000.0002: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 96.344410][ T1343] EXT4-fs error (device loop2): ext4_dirty_inode:6071: inode #15: comm syz.2.320: mark_inode_dirty error [ 96.363654][ T1343] EXT4-fs error (device loop2): ext4_do_update_inode:5235: inode #15: comm syz.2.320: corrupted inode contents [ 96.376253][ T1343] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2970: inode #15: comm syz.2.320: mark_inode_dirty error [ 96.389055][ T1343] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2973: inode #15: comm syz.2.320: mark inode dirty (error -117) [ 96.403394][ T1343] EXT4-fs warning (device loop2): ext4_evict_inode:303: xattr delete (err -117) [ 96.413805][ T1343] EXT4-fs (loop2): 1 orphan inode deleted [ 96.420120][ T1343] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodioread_nolock,journal_dev=0x00000000000000ff,debug_want_extra_isize=0x000000000000005c,nouid32,resgid=0x0000000000000000,acl,init_itable=0x0000000000008d55,,errors=continue. Quota mode: none. [ 96.458071][ T1358] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 96.458183][ T1358] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.510144][ T1373] fido_id[1373]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 96.678231][ T1378] SELinux: failed to load policy [ 96.719370][ T1397] loop3: detected capacity change from 0 to 2048 [ 96.818262][ T1413] tipc: Started in network mode [ 96.826083][ T1397] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 96.855160][ T1413] tipc: Node identity de4cc2790b81, cluster identity 4711 [ 96.862473][ T1413] tipc: Enabled bearer , priority 0 [ 96.875953][ T1413] device syzkaller0 entered promiscuous mode [ 96.887826][ T1425] tmpfs: Unsupported parameter 'mpol' [ 96.889130][ T1413] tipc: Resetting bearer [ 96.905593][ T1421] loop2: detected capacity change from 0 to 1024 [ 96.920958][ T1412] tipc: Resetting bearer [ 96.941577][ T1431] loop4: detected capacity change from 0 to 512 [ 96.941960][ T1412] tipc: Disabling bearer [ 96.964372][ T1421] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,,errors=continue. Quota mode: none. [ 96.983329][ T1421] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 97.011158][ T1421] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 97.019906][ T1431] ------------[ cut here ]------------ [ 97.023883][ T1421] EXT4-fs (loop2): This should not happen!! Data will be lost [ 97.023883][ T1421] [ 97.039812][ T1421] EXT4-fs (loop2): Total free blocks count 0 [ 97.043435][ T1431] EA inode 11 i_nlink=2 [ 97.049867][ T1431] WARNING: CPU: 0 PID: 1431 at fs/ext4/xattr.c:1021 ext4_xattr_inode_update_ref+0x512/0x570 [ 97.056634][ T1421] EXT4-fs (loop2): Free/Dirty block details [ 97.070650][ T1431] Modules linked in: [ 97.073118][ T1421] EXT4-fs (loop2): free_blocks=68451041280 [ 97.078903][ T1431] CPU: 0 PID: 1431 Comm: syz.4.360 Tainted: G W syzkaller #0 [ 97.091029][ T1431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 97.101418][ T1431] RIP: 0010:ext4_xattr_inode_update_ref+0x512/0x570 [ 97.104237][ T1421] EXT4-fs (loop2): dirty_blocks=80 [ 97.108229][ T1431] Code: 7b 40 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff e8 20 a4 be ff 49 8b 37 48 c7 c7 20 21 4f 85 44 89 f2 e8 fe fb b6 02 <0f> 0b 48 8b 5c 24 10 4c 8b 7c 24 18 4c 8d 6c 24 60 e9 00 fe ff ff [ 97.133303][ T1431] RSP: 0018:ffffc90000b86ee0 EFLAGS: 00010246 [ 97.134991][ T1421] EXT4-fs (loop2): Block reservation details [ 97.139453][ T1431] RAX: 80f41fba74006200 RBX: ffff888119975900 RCX: 0000000000080000 [ 97.139473][ T1431] RDX: ffffc90003363000 RSI: 0000000000019050 RDI: 0000000000019051 [ 97.139489][ T1431] RBP: ffffc90000b86fd0 R08: dffffc0000000000 R09: ffffed103ee04e93 [ 97.139518][ T1431] R10: ffffed103ee04e93 R11: 1ffff1103ee04e92 R12: dffffc0000000000 [ 97.139534][ T1431] R13: ffffc90000b86f40 R14: 0000000000000002 R15: ffff888119975940 [ 97.162136][ T1421] EXT4-fs (loop2): i_reserved_data_blocks=5 [ 97.169820][ T1431] FS: 00007fb1f07566c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 97.192324][ T1438] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 40 with error 28 [ 97.216339][ T1431] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 97.223062][ T1431] CR2: 0000000000000000 CR3: 0000000139398000 CR4: 00000000003506b0 [ 97.231218][ T1431] Call Trace: [ 97.234616][ T1431] [ 97.244039][ T1438] EXT4-fs (loop2): This should not happen!! Data will be lost [ 97.244039][ T1438] [ 97.255513][ T1431] ? ext4_xattr_block_csum+0x530/0x530 [ 97.266406][ T1431] ? __kasan_check_write+0x14/0x20 [ 97.282137][ T1431] ? ext4_xattr_inode_iget+0x266/0x350 [ 97.291743][ T1431] ext4_xattr_set_entry+0xee1/0x37d0 [ 97.297172][ T1431] ? mb_cache_entry_create+0x6bf/0x8a0 [ 97.302983][ T1431] ? ext4_xattr_ibody_set+0x360/0x360 [ 97.309894][ T1431] ? ext4_xattr_block_set+0x1d82/0x2cb0 [ 97.315605][ T1431] ? __kasan_check_write+0x14/0x20 [ 97.321237][ T1431] ? __ext4_xattr_check_block+0x7ea/0x8e0 [ 97.330104][ T1458] loop3: detected capacity change from 0 to 512 [ 97.330686][ T1431] ? ext4_xattr_block_find+0x4f0/0x4f0 [ 97.342580][ T1431] ext4_xattr_ibody_set+0x122/0x360 [ 97.348552][ T1431] ext4_expand_extra_isize_ea+0x1169/0x1a10 [ 97.355702][ T1431] __ext4_expand_extra_isize+0x2fe/0x3e0 [ 97.361528][ T1458] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 97.363233][ T1431] __ext4_mark_inode_dirty+0x3d4/0x610 [ 97.375445][ T1458] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2825: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 97.390272][ T1431] ext4_evict_inode+0xc01/0x1450 [ 97.396322][ T1458] EXT4-fs (loop3): 1 truncate cleaned up [ 97.396364][ T1431] ? _raw_spin_unlock+0x4d/0x70 [ 97.401985][ T1458] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,quota,. Quota mode: writeback. [ 97.447658][ T1431] ? ext4_inode_is_fast_symlink+0x3a0/0x3a0 [ 97.454694][ T1431] ? unlock_new_inode+0x97/0xc0 [ 97.459944][ T1431] ? ext4_inode_is_fast_symlink+0x3a0/0x3a0 [ 97.465986][ T1431] evict+0x485/0x870 [ 97.470377][ T1431] ? proc_nr_inodes+0x310/0x310 [ 97.475324][ T1431] ? _raw_spin_lock+0x8e/0xe0 [ 97.481163][ T1431] ? _raw_spin_trylock_bh+0x130/0x130 [ 97.486897][ T1431] ? __kasan_check_write+0x14/0x20 [ 97.492451][ T1431] iput+0x635/0x7c0 [ 97.496384][ T1431] ext4_process_orphan+0x2b1/0x320 [ 97.502013][ T1431] ext4_orphan_cleanup+0x9d1/0x10c0 [ 97.507546][ T1431] ? ext4_orphan_del+0xb90/0xb90 [ 97.512689][ T1431] ? ext4_register_sysfs+0x285/0x2c0 [ 97.518354][ T1431] ? errseq_check_and_advance+0x66/0x130 [ 97.524209][ T1431] ext4_fill_super+0x8974/0x9090 [ 97.529653][ T1431] ? ext4_mount+0x40/0x40 [ 97.534174][ T1431] ? set_blocksize+0x1fc/0x380 [ 97.539377][ T1431] ? sb_set_blocksize+0xaa/0xf0 [ 97.544644][ T1431] ? ext4_mount+0x40/0x40 [ 97.549053][ T1431] mount_bdev+0x2ae/0x3e0 [ 97.553436][ T1431] ? ext4_mount+0x40/0x40 [ 97.558268][ T1431] ext4_mount+0x34/0x40 [ 97.567689][ T1431] legacy_get_tree+0xed/0x190 [ 97.573146][ T1431] ? ext4_errno_to_code+0x160/0x160 [ 97.578966][ T1431] vfs_get_tree+0x89/0x260 [ 97.590548][ T1431] do_new_mount+0x25a/0xa20 [ 97.595516][ T1431] path_mount+0x675/0x1020 [ 97.600235][ T1431] ? user_path_at_empty+0x161/0x1c0 [ 97.607222][ T1431] __se_sys_mount+0x318/0x380 [ 97.614067][ T1431] ? __x64_sys_mount+0xd0/0xd0 [ 97.619074][ T1431] __x64_sys_mount+0xbf/0xd0 [ 97.625765][ T1431] x64_sys_call+0x6bf/0x9a0 [ 97.638134][ T1431] do_syscall_64+0x4c/0xa0 [ 97.645585][ T1431] ? clear_bhb_loop+0x50/0xa0 [ 97.658669][ T1431] ? clear_bhb_loop+0x50/0xa0 [ 97.667358][ T1431] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 97.679904][ T1481] loop1: detected capacity change from 0 to 1024 [ 97.686764][ T1431] RIP: 0033:0x7fb1f1cef38a [ 97.691289][ T1431] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.707379][ T1485] netlink: 4 bytes leftover after parsing attributes in process `syz.3.381'. [ 97.720668][ T1431] RSP: 002b:00007fb1f0755e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 97.730878][ T1431] RAX: ffffffffffffffda RBX: 00007fb1f0755ef0 RCX: 00007fb1f1cef38a [ 97.739644][ T1431] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007fb1f0755eb0 [ 97.766393][ T1431] RBP: 0000200000000180 R08: 00007fb1f0755ef0 R09: 0000000000800700 [ 97.784982][ T1481] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 97.796356][ T1431] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 97.806541][ T1431] R13: 00007fb1f0755eb0 R14: 0000000000000473 R15: 0000200000000680 [ 97.814592][ T1481] ext4 filesystem being mounted at /88/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.892438][ T1431] [ 97.895668][ T1431] ---[ end trace cd00a8ba217b05c6 ]--- [ 97.901466][ T1431] EXT4-fs (loop4): 1 orphan inode deleted [ 97.907569][ T1431] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodioread_nolock,journal_dev=0x00000000000000ff,debug_want_extra_isize=0x000000000000005c,nouid32,resgid=0x0000000000000000,acl,init_itable=0x0000000000008d55,,errors=continue. Quota mode: none. [ 97.961115][ T1481] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.379: bg 0: block 393: padding at end of block bitmap is not set [ 97.988630][ T1481] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2032 with error 117 [ 98.006355][ T1481] EXT4-fs (loop1): This should not happen!! Data will be lost [ 98.006355][ T1481] [ 98.063107][ T1513] loop4: detected capacity change from 0 to 256 [ 98.120052][ T1513] FAT-fs (loop4): Directory bread(block 64) failed [ 98.120089][ T1518] loop0: detected capacity change from 0 to 4096 [ 98.138915][ T1513] FAT-fs (loop4): Directory bread(block 65) failed [ 98.146009][ T1513] FAT-fs (loop4): Directory bread(block 66) failed [ 98.160393][ T1513] FAT-fs (loop4): Directory bread(block 67) failed [ 98.166980][ T1513] FAT-fs (loop4): Directory bread(block 68) failed [ 98.174111][ T1513] FAT-fs (loop4): Directory bread(block 69) failed [ 98.175955][ T1518] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 98.181085][ T1513] FAT-fs (loop4): Directory bread(block 70) failed [ 98.198718][ T1513] FAT-fs (loop4): Directory bread(block 71) failed [ 98.205291][ T1513] FAT-fs (loop4): Directory bread(block 72) failed [ 98.212221][ T1513] FAT-fs (loop4): Directory bread(block 73) failed [ 98.240902][ T30] kauditd_printk_skb: 153 callbacks suppressed [ 98.240920][ T30] audit: type=1400 audit(1757454744.546:529): avc: denied { unmount } for pid=285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 98.277723][ T1513] attempt to access beyond end of device [ 98.277723][ T1513] loop4: rw=0, want=1196, limit=256 [ 98.319235][ T1529] 9p: Unknown access argument O [ 98.320264][ T30] audit: type=1400 audit(1757454744.620:530): avc: denied { unmount } for pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 98.372499][ T30] audit: type=1400 audit(1757454744.684:531): avc: denied { create } for pid=1533 comm="syz.2.403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 98.402292][ T30] audit: type=1400 audit(1757454744.715:532): avc: denied { bind } for pid=1533 comm="syz.2.403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 98.422686][ T30] audit: type=1326 audit(1757454744.715:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1532 comm="syz.0.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b53f1ebe9 code=0x7ffc0000 [ 98.446966][ T30] audit: type=1326 audit(1757454744.715:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1532 comm="syz.0.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b53f1ebe9 code=0x7ffc0000 [ 98.480216][ T30] audit: type=1326 audit(1757454744.737:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1532 comm="syz.0.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7f5b53f1ebe9 code=0x7ffc0000 [ 98.504693][ T30] audit: type=1326 audit(1757454744.737:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1532 comm="syz.0.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b53f1ebe9 code=0x7ffc0000 [ 98.537276][ T30] audit: type=1326 audit(1757454744.737:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1532 comm="syz.0.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b53f1ebe9 code=0x7ffc0000 [ 98.554441][ T1548] loop2: detected capacity change from 0 to 512 [ 98.588947][ T1551] SELinux: policydb version 1386292521 does not match my version range 15-33 [ 98.598702][ T1551] SELinux: failed to load policy [ 98.614474][ T1548] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 98.631069][ T1548] ext4 filesystem being mounted at /81/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 98.652641][ T30] audit: type=1400 audit(1757454744.980:538): avc: denied { setattr } for pid=1546 comm="syz.2.408" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 98.658445][ T1560] loop0: detected capacity change from 0 to 1024 [ 98.689526][ T1548] EXT4-fs error (device loop2): ext4_do_update_inode:5235: inode #2: comm syz.2.408: corrupted inode contents [ 98.703035][ T1560] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 98.716607][ T1560] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 98.726743][ T1548] EXT4-fs error (device loop2): ext4_dirty_inode:6071: inode #2: comm syz.2.408: mark_inode_dirty error [ 98.745839][ T1560] EXT4-fs error (device loop0): ext4_get_journal_inode:5151: inode #5: comm syz.0.413: unexpected bad inode w/o EXT4_IGET_BAD [ 98.759464][ T1548] EXT4-fs error (device loop2): ext4_do_update_inode:5235: inode #2: comm syz.2.408: corrupted inode contents [ 98.777480][ T1560] EXT4-fs (loop0): no journal found [ 98.790596][ T1560] EXT4-fs (loop0): can't get journal size [ 98.808936][ T1560] EXT4-fs (loop0): too many log groups per flexible block group [ 98.817717][ T1560] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 98.825188][ T1560] EXT4-fs (loop0): mount failed [ 98.981293][ T1584] loop0: detected capacity change from 0 to 512 [ 98.984136][ T1577] SELinux: ebitmap: truncated map [ 98.997017][ T1577] SELinux: failed to load policy [ 99.044941][ T1584] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 99.065796][ T1584] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 99.111699][ T1584] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002] [ 99.121723][ T1599] syz.1.429 uses obsolete (PF_INET,SOCK_PACKET) [ 99.132025][ T1584] System zones: 1-12 [ 99.154908][ T1584] EXT4-fs (loop0): 1 truncate cleaned up [ 99.174065][ T1584] EXT4-fs (loop0): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,nombcache,debug_want_extra_isize=0x0000000000000004,mblk_io_submit,debug,norecovery,,errors=continue. Quota mode: none. [ 99.461210][ T1619] loop3: detected capacity change from 0 to 2048 [ 99.493130][ T1619] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 99.533851][ T1619] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,grpquota,nomblk_io_submit,stripe=0x000000000004ffff,norecovery,errors=remount-ro,max_batch_time=0x0000000000000814,. Quota mode: writeback. [ 99.560447][ T1623] loop4: detected capacity change from 0 to 512 [ 99.594601][ T1619] EXT4-fs error (device loop3): ext4_find_dest_de:2115: inode #12: block 5: comm syz.3.438: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=7952, size=56 fake=0 [ 99.614136][ T1619] EXT4-fs (loop3): Remounting filesystem read-only [ 99.622452][ T1619] EXT4-fs error (device loop3): ext4_find_dest_de:2115: inode #12: block 5: comm syz.3.438: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=7952, size=56 fake=0 [ 99.623584][ T1623] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 99.642801][ T1619] EXT4-fs (loop3): Remounting filesystem read-only [ 99.652972][ T1623] ext4 filesystem being mounted at /66/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 99.705575][ T1630] netlink: 4 bytes leftover after parsing attributes in process `syz.2.442'. [ 99.798643][ T1644] loop2: detected capacity change from 0 to 1024 [ 99.867692][ T1654] loop1: detected capacity change from 0 to 256 [ 99.879656][ T1644] EXT4-fs (loop2): Ignoring removed nobh option [ 99.901084][ T1644] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 99.918834][ T1654] FAT-fs (loop1): Directory bread(block 64) failed [ 99.935349][ T1654] FAT-fs (loop1): Directory bread(block 65) failed [ 99.952147][ T1644] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=continue,data_err=abort,init_itable,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b0,noblock_validity,grpquota,nobh,user_xattr,inode_readahead_blks=0x0000000000000004,dioread_nolock,,errors=continue. Quota mode: writeback. [ 99.953667][ T1654] FAT-fs (loop1): Directory bread(block 66) failed [ 99.988302][ T1654] FAT-fs (loop1): Directory bread(block 67) failed [ 99.998964][ T1654] FAT-fs (loop1): Directory bread(block 68) failed [ 100.003660][ T1660] loop0: detected capacity change from 0 to 256 [ 100.008323][ T1662] loop3: detected capacity change from 0 to 512 [ 100.013207][ T1654] FAT-fs (loop1): Directory bread(block 69) failed [ 100.028074][ T1654] FAT-fs (loop1): Directory bread(block 70) failed [ 100.036221][ T1654] FAT-fs (loop1): Directory bread(block 71) failed [ 100.041969][ T1662] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 100.043132][ T1654] FAT-fs (loop1): Directory bread(block 72) failed [ 100.056867][ T1654] FAT-fs (loop1): Directory bread(block 73) failed [ 100.058096][ T1662] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 100.075174][ T1662] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002] [ 100.083318][ T1662] System zones: 1-12 [ 100.088212][ T1660] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 100.097138][ T1662] EXT4-fs (loop3): 1 truncate cleaned up [ 100.103442][ T1662] EXT4-fs (loop3): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,nombcache,debug_want_extra_isize=0x0000000000000004,mblk_io_submit,debug,norecovery,,errors=continue. Quota mode: none. [ 100.114942][ T1660] FAT-fs (loop0): Filesystem has been set read-only [ 100.146092][ T1654] attempt to access beyond end of device [ 100.146092][ T1654] loop1: rw=0, want=1196, limit=256 [ 100.218824][ T1674] netlink: 8 bytes leftover after parsing attributes in process `syz.0.461'. [ 100.233730][ T1674] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 100.253035][ T1674] netlink: 4 bytes leftover after parsing attributes in process `syz.0.461'. [ 101.454932][ T1697] netlink: 16 bytes leftover after parsing attributes in process `syz.2.469'. [ 101.506326][ T1699] loop4: detected capacity change from 0 to 512 [ 101.541102][ T1703] loop1: detected capacity change from 0 to 128 [ 101.588887][ T1699] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2775: inode #11: comm syz.4.472: corrupted xattr block 95 [ 101.629633][ T481] attempt to access beyond end of device [ 101.629633][ T481] loop1: rw=1, want=1041, limit=128 [ 101.637159][ T1699] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.472: bg 0: block 7: invalid block bitmap [ 101.671022][ T1723] loop2: detected capacity change from 0 to 128 [ 101.671179][ T1699] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 101.712489][ T1727] loop1: detected capacity change from 0 to 1024 [ 101.744074][ T1699] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2941: inode #11: comm syz.4.472: corrupted xattr block 95 [ 101.744686][ T1730] loop3: detected capacity change from 0 to 1024 [ 101.756827][ T1699] EXT4-fs warning (device loop4): ext4_evict_inode:303: xattr delete (err -117) [ 101.772579][ T1699] EXT4-fs (loop4): 1 orphan inode deleted [ 101.778447][ T1699] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 101.796078][ T1732] netlink: 4 bytes leftover after parsing attributes in process `syz.0.485'. [ 101.815274][ T1730] EXT4-fs (loop3): Ignoring removed orlov option [ 101.822800][ T1730] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 101.838749][ T1727] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodelalloc,nobarrier,sysvgroups,,errors=continue. Quota mode: none. [ 101.854806][ T1740] loop0: detected capacity change from 0 to 1024 [ 101.861030][ T1736] loop4: detected capacity change from 0 to 512 [ 101.878303][ T1730] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 101.892514][ T1746] netlink: 40 bytes leftover after parsing attributes in process `syz.2.491'. [ 101.925156][ T1748] loop2: detected capacity change from 0 to 128 [ 101.947186][ T1736] EXT4-fs (loop4): Ignoring removed oldalloc option [ 101.974348][ T1736] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 101.989088][ T1748] FAT-fs (loop2): error, clusters badly computed (0 != 1) [ 102.025281][ T1748] FAT-fs (loop2): Filesystem has been set read-only [ 102.032255][ T1748] FAT-fs (loop2): error, clusters badly computed (1 != 2) [ 102.039735][ T1748] FAT-fs (loop2): error, clusters badly computed (2 != 3) [ 102.046978][ T1748] FAT-fs (loop2): error, clusters badly computed (3 != 4) [ 102.054904][ T1748] FAT-fs (loop2): error, clusters badly computed (4 != 5) [ 102.062223][ T1748] FAT-fs (loop2): error, clusters badly computed (5 != 6) [ 102.069559][ T1748] FAT-fs (loop2): error, clusters badly computed (6 != 7) [ 102.076841][ T1748] FAT-fs (loop2): error, clusters badly computed (7 != 8) [ 102.084144][ T1748] FAT-fs (loop2): error, clusters badly computed (8 != 9) [ 102.091580][ T1748] FAT-fs (loop2): error, clusters badly computed (9 != 10) [ 102.099363][ T1748] FAT-fs (loop2): error, clusters badly computed (10 != 11) [ 102.114637][ T1748] FAT-fs (loop2): error, clusters badly computed (11 != 12) [ 102.122455][ T1748] FAT-fs (loop2): error, clusters badly computed (12 != 13) [ 102.126341][ T1740] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsdgroups,,errors=continue. Quota mode: none. [ 102.131659][ T1748] FAT-fs (loop2): error, clusters badly computed (13 != 14) [ 102.142287][ T1736] EXT4-fs (loop4): 1 truncate cleaned up [ 102.162346][ T1748] FAT-fs (loop2): error, clusters badly computed (14 != 15) [ 102.169931][ T1748] FAT-fs (loop2): error, clusters badly computed (15 != 16) [ 102.173782][ T1736] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsddf,oldalloc,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 102.182771][ T1765] loop3: detected capacity change from 0 to 128 [ 102.207213][ T1748] FAT-fs (loop2): error, clusters badly computed (16 != 17) [ 102.217343][ T1748] FAT-fs (loop2): error, clusters badly computed (17 != 18) [ 102.269534][ T1748] FAT-fs (loop2): error, clusters badly computed (18 != 19) [ 102.301769][ T1748] FAT-fs (loop2): error, clusters badly computed (19 != 20) [ 102.426115][ T1748] FAT-fs (loop2): error, clusters badly computed (20 != 21) [ 102.433651][ T1748] FAT-fs (loop2): error, clusters badly computed (21 != 22) [ 102.441491][ T1748] FAT-fs (loop2): error, clusters badly computed (22 != 23) [ 102.442859][ T1765] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrquota,nodelalloc,,errors=continue. Quota mode: writeback. [ 102.449023][ T1748] FAT-fs (loop2): error, clusters badly computed (23 != 24) [ 102.473451][ T1748] FAT-fs (loop2): error, clusters badly computed (24 != 25) [ 102.476902][ T1765] ext4 filesystem being mounted at /122/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.481239][ T1748] FAT-fs (loop2): error, clusters badly computed (25 != 26) [ 102.498825][ T1748] FAT-fs (loop2): error, clusters badly computed (26 != 27) [ 102.506547][ T1748] FAT-fs (loop2): error, clusters badly computed (27 != 28) [ 102.513933][ T1748] FAT-fs (loop2): error, clusters badly computed (28 != 29) [ 102.521367][ T1748] FAT-fs (loop2): error, clusters badly computed (29 != 30) [ 102.528722][ T1748] FAT-fs (loop2): error, clusters badly computed (30 != 31) [ 102.536100][ T1748] FAT-fs (loop2): error, clusters badly computed (31 != 32) [ 102.604146][ T1775] loop3: detected capacity change from 0 to 1024 [ 102.664633][ T1775] EXT4-fs (loop3): Unrecognized mount option "hash" or missing value [ 102.720120][ T1792] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.720360][ T1792] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.724873][ T1793] loop3: detected capacity change from 0 to 1024 [ 102.801455][ T1802] mmap: syz.4.513 (1802) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 102.889331][ T1793] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsdgroups,,errors=continue. Quota mode: none. [ 102.893489][ T1793] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 102.894098][ T1793] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 102.894131][ T1793] EXT4-fs (loop3): This should not happen!! Data will be lost [ 102.894131][ T1793] [ 102.894145][ T1793] EXT4-fs (loop3): Total free blocks count 0 [ 102.894160][ T1793] EXT4-fs (loop3): Free/Dirty block details [ 102.894173][ T1793] EXT4-fs (loop3): free_blocks=68451041280 [ 102.894186][ T1793] EXT4-fs (loop3): dirty_blocks=80 [ 102.894200][ T1793] EXT4-fs (loop3): Block reservation details [ 102.894211][ T1793] EXT4-fs (loop3): i_reserved_data_blocks=5 [ 102.894877][ T1793] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 40 with error 28 [ 102.894906][ T1793] EXT4-fs (loop3): This should not happen!! Data will be lost [ 102.894906][ T1793] [ 102.931084][ T1810] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.516' sets config #0 [ 103.000061][ T1817] loop4: detected capacity change from 0 to 128 [ 103.002654][ T30] kauditd_printk_skb: 107 callbacks suppressed [ 103.002669][ T30] audit: type=1400 audit(1757454749.577:646): avc: denied { mount } for pid=1819 comm="+}[@" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 103.003551][ T30] audit: type=1400 audit(1757454749.577:647): avc: denied { unmount } for pid=1819 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 103.026040][ T1815] loop3: detected capacity change from 0 to 4096 [ 103.054554][ T1815] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 103.088817][ T1829] SELinux: policydb version 133 does not match my version range 15-33 [ 103.088865][ T1829] SELinux: failed to load policy [ 103.098991][ T30] audit: type=1400 audit(1757454749.683:648): avc: denied { map } for pid=1814 comm="syz.3.515" path="/125/file1/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 103.105765][ T1827] netlink: 96 bytes leftover after parsing attributes in process `syz.1.524'. [ 103.199195][ T1837] netlink: 8 bytes leftover after parsing attributes in process `syz.1.528'. [ 103.400552][ T1853] loop3: detected capacity change from 0 to 512 [ 103.408161][ T30] audit: type=1326 audit(1757454750.000:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1851 comm="syz.1.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9163faebe9 code=0x7ffc0000 [ 103.408258][ T30] audit: type=1326 audit(1757454750.000:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1851 comm="syz.1.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9163faebe9 code=0x7ffc0000 [ 103.408608][ T30] audit: type=1326 audit(1757454750.000:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1851 comm="syz.1.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f9163faebe9 code=0x7ffc0000 [ 103.408709][ T30] audit: type=1326 audit(1757454750.000:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1851 comm="syz.1.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9163faec23 code=0x7ffc0000 [ 103.427823][ T1856] netlink: 4 bytes leftover after parsing attributes in process `syz.2.536'. [ 103.466391][ T30] audit: type=1326 audit(1757454750.064:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1851 comm="syz.1.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9163fad69f code=0x7ffc0000 [ 103.483024][ T30] audit: type=1326 audit(1757454750.085:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1851 comm="syz.1.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f9163faec77 code=0x7ffc0000 [ 103.483477][ T30] audit: type=1326 audit(1757454750.085:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1851 comm="syz.1.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9163fad550 code=0x7ffc0000 [ 103.483960][ T1854] loop1: detected capacity change from 0 to 8192 [ 103.572132][ T1854] loop1: p1 p2[DM] p4 [ 103.572334][ T1854] loop1: p1 size 196608 extends beyond EOD, truncated [ 103.574211][ T1854] loop1: p2 start 4292936063 is beyond EOD, truncated [ 103.574233][ T1854] loop1: p4 size 50331648 extends beyond EOD, truncated [ 103.743286][ T392] udevd[392]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 103.744939][ T649] udevd[649]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 103.771491][ T1869] tipc: Bearer : already 2 bearers with priority 10 [ 103.771512][ T1869] tipc: Bearer : trying with adjusted priority [ 103.771592][ T1869] tipc: New replicast peer: 255.255.255.83 [ 103.771676][ T1869] tipc: Enabled bearer , priority 9 [ 103.782694][ T1868] device syzkaller0 entered promiscuous mode [ 103.851644][ T1868] device syzkaller0 left promiscuous mode [ 103.875353][ T1875] syz.2.542 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 104.088189][ T1897] loop3: detected capacity change from 0 to 512 [ 104.128935][ T1902] loop4: detected capacity change from 0 to 512 [ 104.137596][ T1897] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrquota,errors=remount-ro,. Quota mode: writeback. [ 104.149899][ T1897] ext4 filesystem being mounted at /133/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.318085][ T1902] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 104.411864][ T1897] EXT4-fs error (device loop3): ext4_xattr_block_get:546: inode #12: comm syz.3.553: corrupted xattr block 6 [ 104.423151][ T1902] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 104.424183][ T1897] EXT4-fs (loop3): Remounting filesystem read-only [ 104.432652][ T1902] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2228: inode #15: comm syz.4.555: corrupted in-inode xattr [ 104.438170][ T1897] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=12 [ 104.450822][ T1902] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.555: couldn't read orphan inode 15 (err -117) [ 104.458878][ T1897] EXT4-fs error (device loop3): ext4_xattr_block_get:546: inode #12: comm syz.3.553: corrupted xattr block 6 [ 104.471545][ T1902] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,max_batch_time=0x0000000000000001,debug,noload,nombcache,noblock_validity,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000000008000,,errors=continue. Quota mode: none. [ 104.483485][ T1897] EXT4-fs (loop3): Remounting filesystem read-only [ 104.517597][ T1897] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=12 [ 104.527114][ T1897] EXT4-fs error (device loop3): ext4_xattr_block_get:546: inode #12: comm syz.3.553: corrupted xattr block 6 [ 104.539235][ T1897] EXT4-fs (loop3): Remounting filesystem read-only [ 104.546130][ T1897] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=12 [ 104.555411][ T1897] EXT4-fs error (device loop3): ext4_xattr_block_get:546: inode #12: comm syz.3.553: corrupted xattr block 6 [ 104.567621][ T1897] EXT4-fs (loop3): Remounting filesystem read-only [ 104.574272][ T1897] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=12 [ 104.596193][ T1897] EXT4-fs error (device loop3): ext4_xattr_block_get:546: inode #12: comm syz.3.553: corrupted xattr block 6 [ 104.608623][ T1897] EXT4-fs (loop3): Remounting filesystem read-only [ 104.615696][ T1897] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=12 [ 104.800333][ T1937] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 104.811930][ T1937] pim6reg0: linktype set to 823 [ 104.825391][ T1945] loop0: detected capacity change from 0 to 512 [ 104.893788][ T1953] loop1: detected capacity change from 0 to 512 [ 104.945517][ T1953] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 104.981974][ T1945] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 105.008317][ T1970] loop2: detected capacity change from 0 to 512 [ 105.015032][ T1945] ext4 filesystem being mounted at /111/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.029358][ T1953] EXT4-fs (loop1): mounted filesystem without journal. Opts: noquota,nombcache,jqfmt=vfsv0,noauto_da_alloc,noinit_itable,,errors=continue. Quota mode: writeback. [ 105.093696][ T1953] ext4 filesystem being mounted at /116/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.303384][ T1970] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 105.320050][ T1970] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.584: invalid indirect mapped block 8 (level 2) [ 105.338242][ T1976] loop4: detected capacity change from 0 to 512 [ 105.346608][ T1970] EXT4-fs (loop2): Remounting filesystem read-only [ 105.357920][ T1970] EXT4-fs (loop2): 1 truncate cleaned up [ 105.364333][ T1970] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_batch_time=0x0000000000008001,journal_dev=0x0000000000009676,errors=remount-ro,minixdf,jqfmt=vfsv0,usrjquota=.smackfsfloor=ext4. Quota mode: writeback. [ 105.390854][ T1970] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2228: inode #15: comm syz.2.584: corrupted in-inode xattr [ 105.392617][ T1976] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 105.413895][ T1970] EXT4-fs (loop2): Remounting filesystem read-only [ 105.427504][ T1976] ext4 filesystem being mounted at /93/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.552830][ T1994] loop1: detected capacity change from 0 to 512 [ 105.567925][ T1994] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 105.600211][ T1997] loop2: detected capacity change from 0 to 1024 [ 105.608280][ T1994] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2802e12c, mo2=0002] [ 105.616480][ T1994] System zones: 1-12 [ 105.620881][ T1994] EXT4-fs (loop1): orphan cleanup on readonly fs [ 105.627603][ T1994] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.593: invalid indirect mapped block 12 (level 1) [ 105.641587][ T1994] EXT4-fs (loop1): Remounting filesystem read-only [ 105.648303][ T1994] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.593: invalid indirect mapped block 2 (level 2) [ 105.663968][ T1994] EXT4-fs (loop1): Remounting filesystem read-only [ 105.669722][ T1997] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,,errors=continue. Quota mode: none. [ 106.464282][ T1997] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 106.487796][ T1994] EXT4-fs (loop1): 1 truncate cleaned up [ 106.498745][ T2004] IPv4: Oversized IP packet from 127.202.26.0 [ 106.512775][ T1994] EXT4-fs (loop1): mounted filesystem without journal. Opts: noinit_itable,jqfmt=vfsv1,noload,errors=remount-ro,i_version. Quota mode: none. [ 106.537128][ T1997] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 44 with error 28 [ 106.586847][ T1997] EXT4-fs (loop2): This should not happen!! Data will be lost [ 106.586847][ T1997] [ 106.596658][ T1997] EXT4-fs (loop2): Total free blocks count 0 [ 106.603889][ T1997] EXT4-fs (loop2): Free/Dirty block details [ 106.611129][ T1994] EXT4-fs error (device loop1): ext4_map_blocks:630: inode #2: block 5: comm syz.1.593: lblock 0 mapped to illegal pblock 5 (length 1) [ 106.611358][ T1997] EXT4-fs (loop2): free_blocks=68451041280 [ 106.631337][ T1997] EXT4-fs (loop2): dirty_blocks=48 [ 106.636484][ T1997] EXT4-fs (loop2): Block reservation details [ 106.642492][ T1997] EXT4-fs (loop2): i_reserved_data_blocks=3 [ 106.648846][ T1994] EXT4-fs warning (device loop1): dx_probe:823: inode #2: lblock 0: comm syz.1.593: error -117 reading directory block [ 106.668700][ T1994] EXT4-fs error (device loop1): ext4_map_blocks:630: inode #2: block 5: comm syz.1.593: lblock 0 mapped to illegal pblock 5 (length 1) [ 106.712729][ T1994] EXT4-fs warning (device loop1): dx_probe:823: inode #2: lblock 0: comm syz.1.593: error -117 reading directory block [ 106.762974][ T2021] loop2: detected capacity change from 0 to 1024 [ 106.764112][ T2017] netlink: 28 bytes leftover after parsing attributes in process `syz.0.604'. [ 106.797161][ T2021] EXT4-fs (loop2): blocks per group (0) and clusters per group (32) inconsistent [ 106.824514][ T2023] loop1: detected capacity change from 0 to 4096 [ 106.866734][ T2023] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 106.902186][ T2028] netlink: 16 bytes leftover after parsing attributes in process `syz.4.599'. [ 106.942990][ T2032] netlink: 292 bytes leftover after parsing attributes in process `syz.2.606'. [ 107.062010][ T2042] loop1: detected capacity change from 0 to 1024 [ 107.084890][ T2043] loop3: detected capacity change from 0 to 2048 [ 107.126749][ T2042] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsdgroups,,errors=continue. Quota mode: none. [ 107.171075][ T2042] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 107.186794][ T2042] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 44 with error 28 [ 107.198455][ T2043] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier=0x0000000000000000,resuid=0x0000000000000000,block_validity,errors=remount-ro,. Quota mode: none. [ 107.199632][ T2042] EXT4-fs (loop1): This should not happen!! Data will be lost [ 107.199632][ T2042] [ 107.225767][ T2042] EXT4-fs (loop1): Total free blocks count 0 [ 107.231894][ T2042] EXT4-fs (loop1): Free/Dirty block details [ 107.238053][ T2042] EXT4-fs (loop1): free_blocks=68451041280 [ 107.244002][ T2042] EXT4-fs (loop1): dirty_blocks=48 [ 107.249301][ T2042] EXT4-fs (loop1): Block reservation details [ 107.259777][ T2042] EXT4-fs (loop1): i_reserved_data_blocks=3 [ 107.261050][ T2043] EXT4-fs error (device loop3): ext4_find_extent:929: inode #2: comm syz.3.612: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 107.298993][ T2057] loop2: detected capacity change from 0 to 8192 [ 107.306346][ T2043] EXT4-fs (loop3): Remounting filesystem read-only [ 107.337399][ T2061] capability: warning: `syz.1.618' uses 32-bit capabilities (legacy support in use) [ 107.382778][ T2064] netlink: 104 bytes leftover after parsing attributes in process `syz.1.622'. [ 107.412972][ T2064] loop1: detected capacity change from 0 to 1024 [ 107.458709][ T2064] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 107.469967][ T2064] ext4 filesystem being mounted at /125/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.611083][ T2088] SELinux: ebitmap: truncated map [ 107.651797][ T2088] SELinux: failed to load policy [ 107.673524][ T2102] IPv6: NLM_F_CREATE should be specified when creating new route [ 107.921907][ T30] kauditd_printk_skb: 78 callbacks suppressed [ 107.921998][ T30] audit: type=1400 audit(1757454754.638:734): avc: denied { read } for pid=2081 comm="syz.4.629" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 107.929793][ T2103] binder: 2081:2103 ioctl c0306201 0 returned -14 [ 107.973651][ T30] audit: type=1400 audit(1757454754.638:735): avc: denied { open } for pid=2081 comm="syz.4.629" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 107.997762][ T30] audit: type=1400 audit(1757454754.680:736): avc: denied { ioctl } for pid=2081 comm="syz.4.629" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 108.082251][ T30] audit: type=1400 audit(1757454754.680:737): avc: denied { set_context_mgr } for pid=2081 comm="syz.4.629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 108.137382][ T30] audit: type=1400 audit(1757454754.891:738): avc: denied { bind } for pid=2105 comm="syz.1.641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 108.159183][ T30] audit: type=1326 audit(1757454754.912:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2113 comm="syz.3.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe64401abe9 code=0x7ffc0000 [ 108.184255][ T30] audit: type=1326 audit(1757454754.912:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2113 comm="syz.3.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7fe64401abe9 code=0x7ffc0000 [ 108.212020][ T2131] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 108.231140][ T2131] SELinux: failed to load policy [ 108.236245][ T30] audit: type=1326 audit(1757454754.912:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2113 comm="syz.3.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe64401abe9 code=0x7ffc0000 [ 108.248716][ T2134] loop1: detected capacity change from 0 to 512 [ 108.291364][ T2132] loop3: detected capacity change from 0 to 8192 [ 108.294851][ T2127] loop2: detected capacity change from 0 to 2048 [ 108.315926][ T2134] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 108.333829][ T2134] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 108.405008][ T2127] EXT4-fs (loop2): mounted filesystem without journal. Opts: inlinecrypt,,errors=continue. Quota mode: none. [ 108.417586][ T2143] netlink: 'syz.4.654': attribute type 4 has an invalid length. [ 108.435661][ T2143] netlink: 'syz.4.654': attribute type 4 has an invalid length. [ 108.454238][ T2134] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002] [ 108.489461][ T2134] System zones: 1-12 [ 108.504695][ T2134] EXT4-fs (loop1): 1 truncate cleaned up [ 108.554680][ T2134] EXT4-fs (loop1): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,nombcache,debug_want_extra_isize=0x0000000000000004,mblk_io_submit,debug,norecovery,,errors=continue. Quota mode: none. [ 108.772091][ T30] audit: type=1326 audit(1757454755.673:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2164 comm="syz.3.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe64401abe9 code=0x7ffc0000 [ 108.803185][ T2167] loop1: detected capacity change from 0 to 1024 [ 108.829748][ T30] audit: type=1326 audit(1757454755.673:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2164 comm="syz.3.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe64401abe9 code=0x7ffc0000 [ 108.886731][ T2167] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsdgroups,,errors=continue. Quota mode: none. [ 108.947123][ T2167] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 109.052195][ T2188] loop2: detected capacity change from 0 to 1024 [ 109.074141][ T2194] loop3: detected capacity change from 0 to 256 [ 109.092397][ T2196] loop4: detected capacity change from 0 to 256 [ 109.131830][ T2188] EXT4-fs (loop2): mounted filesystem without journal. Opts: user_xattr,nodioread_nolock,,errors=continue. Quota mode: none. [ 109.168013][ T2188] ext4 filesystem being mounted at /141/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.180000][ T2188] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 109.223033][ T2196] attempt to access beyond end of device [ 109.223033][ T2196] loop4: rw=2049, want=324, limit=256 [ 109.281133][ T2196] attempt to access beyond end of device [ 109.281133][ T2196] loop4: rw=34817, want=293, limit=256 [ 109.336967][ T2215] loop2: detected capacity change from 0 to 512 [ 109.342945][ T2221] loop1: detected capacity change from 0 to 512 [ 109.379870][ T2215] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 109.391897][ T2215] ext4 filesystem being mounted at /142/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.424629][ T2215] EXT4-fs error (device loop2): ext4_do_update_inode:5235: inode #4: comm syz.2.682: corrupted inode contents [ 109.446431][ T2215] EXT4-fs error (device loop2): ext4_dirty_inode:6071: inode #4: comm syz.2.682: mark_inode_dirty error [ 109.447470][ T2221] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,lazytime,minixdf,,errors=continue. Quota mode: writeback. [ 109.476054][ T2221] ext4 filesystem being mounted at /137/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 109.489854][ T2215] EXT4-fs error (device loop2): ext4_do_update_inode:5235: inode #4: comm syz.2.682: corrupted inode contents [ 109.535404][ T2215] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #4: comm syz.2.682: mark_inode_dirty error [ 109.562343][ T2215] EXT4-fs error (device loop2): ext4_acquire_dquot:6200: comm syz.2.682: Failed to acquire dquot type 1 [ 111.778314][ T2306] loop4: detected capacity change from 0 to 512 [ 111.916574][ T2306] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 111.973599][ T2306] ext4 filesystem being mounted at /114/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.033714][ T2331] 9pnet: Insufficient options for proto=fd [ 113.051485][ T30] kauditd_printk_skb: 110 callbacks suppressed [ 113.051500][ T30] audit: type=1400 audit(1757454760.171:852): avc: denied { create } for pid=2329 comm="syz.0.727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 113.051531][ T30] audit: type=1400 audit(1757454760.171:853): avc: denied { read write } for pid=2329 comm="syz.0.727" dev="sockfs" ino=22083 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 113.051555][ T30] audit: type=1400 audit(1757454760.171:854): avc: denied { create } for pid=2329 comm="syz.0.727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 113.051578][ T30] audit: type=1400 audit(1757454760.171:855): avc: denied { setopt } for pid=2329 comm="syz.0.727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 113.051602][ T30] audit: type=1400 audit(1757454760.171:856): avc: denied { write } for pid=2329 comm="syz.0.727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 113.051624][ T30] audit: type=1326 audit(1757454760.192:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2330 comm="syz.3.728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe64401abe9 code=0x7ffc0000 [ 113.051649][ T30] audit: type=1326 audit(1757454760.192:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2330 comm="syz.3.728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe64401abe9 code=0x7ffc0000 [ 113.051673][ T30] audit: type=1326 audit(1757454760.192:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2330 comm="syz.3.728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe64401abe9 code=0x7ffc0000 [ 113.051698][ T30] audit: type=1326 audit(1757454760.192:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2330 comm="syz.3.728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe64401abe9 code=0x7ffc0000 [ 113.051722][ T30] audit: type=1326 audit(1757454760.192:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2330 comm="syz.3.728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe64401abe9 code=0x7ffc0000 [ 113.071414][ T2332] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 113.083815][ T2335] loop0: detected capacity change from 0 to 512 [ 113.197114][ T2340] SELinux: Context Ü is not valid (left unmapped). [ 113.199469][ T2335] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.729: bg 0: block 127: padding at end of block bitmap is not set [ 113.199956][ T2335] EXT4-fs (loop0): 1 orphan inode deleted [ 113.199978][ T2335] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodioread_nolock,journal_dev=0x00000000000000ff,debug_want_extra_isize=0x000000000000005c,nouid32,resgid=0x0000000000000000,acl,init_itable=0x0000000000008d55,,errors=continue. Quota mode: none. [ 113.241292][ T2343] loop8: detected capacity change from 0 to 16384 [ 113.306071][ T2348] loop3: detected capacity change from 0 to 512 [ 113.327037][ T2353] loop1: detected capacity change from 0 to 512 [ 113.442961][ T2348] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a802c098, mo2=0002] [ 113.547516][ T2348] System zones: 0-2, 18-18, 34-34 [ 113.594238][ T2348] EXT4-fs (loop3): mounted filesystem without journal. Opts: noquota,barrier=0x0000000000001003,minixdf,debug,dioread_lock,,errors=continue. Quota mode: writeback. [ 113.613293][ T2348] ext4 filesystem being mounted at /172/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.618091][ T2352] loop_set_status: loop8 () has still dirty pages (nrpages=485) [ 113.637697][ T2353] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 113.656526][ T2353] ext4 filesystem being mounted at /143/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.718866][ T2348] EXT4-fs error (device loop3): ext4_xattr_block_get:546: inode #15: comm syz.3.735: corrupted xattr block 19 [ 113.732052][ T2366] loop0: detected capacity change from 0 to 128 [ 113.740882][ T2348] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 113.758869][ T2348] EXT4-fs error (device loop3): ext4_xattr_block_get:546: inode #15: comm syz.3.735: corrupted xattr block 19 [ 113.773669][ T2348] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 113.784028][ T2348] EXT4-fs error (device loop3): ext4_xattr_block_list:719: inode #15: comm syz.3.735: corrupted xattr block 19 [ 113.796902][ T2366] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 113.808027][ T2366] ext4 filesystem being mounted at /152/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 113.861401][ T2369] loop4: detected capacity change from 0 to 1024 [ 113.874658][ T2369] EXT4-fs (loop4): Ignoring removed bh option [ 113.893305][ T2369] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000] [ 113.941195][ T2388] syz.2.747[2388] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 113.941270][ T2388] syz.2.747[2388] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 113.945130][ T2387] loop1: detected capacity change from 0 to 1024 [ 113.974391][ T2369] EXT4-fs error (device loop4): ext4_map_blocks:630: inode #3: block 2: comm syz.4.741: lblock 2 mapped to illegal pblock 2 (length 1) [ 113.990308][ T2387] EXT4-fs (loop1): Ignoring removed orlov option [ 114.002078][ T2369] EXT4-fs error (device loop4): ext4_map_blocks:630: inode #3: block 48: comm syz.4.741: lblock 0 mapped to illegal pblock 48 (length 1) [ 114.035895][ T2387] EXT4-fs (loop1): mounted filesystem without journal. Opts: orlov,norecovery,,errors=continue. Quota mode: writeback. [ 114.057197][ T2396] loop0: detected capacity change from 0 to 128 [ 114.066271][ T2397] loop3: detected capacity change from 0 to 128 [ 114.075422][ T2369] EXT4-fs error (device loop4): ext4_acquire_dquot:6200: comm syz.4.741: Failed to acquire dquot type 0 [ 114.087099][ T2369] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5867: Corrupt filesystem [ 114.098196][ T2369] EXT4-fs error (device loop4): ext4_evict_inode:283: inode #11: comm syz.4.741: mark_inode_dirty error [ 114.101829][ T2397] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 114.121015][ T2397] ext4 filesystem being mounted at /175/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 114.126693][ T2396] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 114.142609][ T2369] EXT4-fs warning (device loop4): ext4_evict_inode:286: couldn't mark inode dirty (err -117) [ 114.153336][ T2369] EXT4-fs (loop4): 1 orphan inode deleted [ 114.159522][ T2369] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrquota,noblock_validity,bh,max_batch_time=0x00000000000008c9,debug,inlinecrypt,,errors=continue. Quota mode: writeback. [ 114.177089][ T2396] ext4 filesystem being mounted at /154/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 114.193210][ T10] EXT4-fs error (device loop4): ext4_map_blocks:630: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 114.223881][ T10] EXT4-fs error (device loop4): ext4_release_dquot:6236: comm kworker/u4:1: Failed to release dquot type 0 [ 114.241094][ T2369] EXT4-fs error (device loop4): ext4_map_blocks:630: inode #3: block 48: comm syz.4.741: lblock 0 mapped to illegal pblock 48 (length 1) [ 114.266417][ T2401] loop1: detected capacity change from 0 to 8192 [ 114.297999][ T2401] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 114.367707][ T2401] FAT-fs (loop1): error, clusters badly computed (1 != 0) [ 114.374982][ T2401] FAT-fs (loop1): Filesystem has been set read-only [ 114.382062][ T2401] FAT-fs (loop1): error, clusters badly computed (2 != 1) [ 114.389633][ T2401] FAT-fs (loop1): error, clusters badly computed (3 != 2) [ 114.397887][ T2401] FAT-fs (loop1): error, clusters badly computed (4 != 3) [ 114.441107][ T2414] loop0: detected capacity change from 0 to 2048 [ 114.468100][ T649] loop0: p1 < > p4 [ 114.472920][ T649] loop0: p4 size 8388608 extends beyond EOD, truncated [ 114.736621][ T2414] loop0: p1 < > p4 [ 114.741508][ T2414] loop0: p4 size 8388608 extends beyond EOD, truncated [ 114.803322][ T392] udevd[392]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 114.814497][ T649] udevd[649]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 114.852580][ T392] udevd[392]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 114.864789][ T2430] loop4: detected capacity change from 0 to 1024 [ 114.875915][ T649] udevd[649]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 114.897344][ T2430] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 114.917922][ T2430] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 114.928659][ T2430] JBD2: no valid journal superblock found [ 114.934490][ T2430] EXT4-fs (loop4): error loading journal [ 114.980652][ T2440] loop2: detected capacity change from 0 to 1024 [ 115.002160][ T2444] syz.4.773[2444] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 115.002243][ T2444] syz.4.773[2444] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 115.028478][ T2446] loop4: detected capacity change from 0 to 512 [ 115.049952][ T2440] EXT4-fs (loop2): Ignoring removed bh option [ 115.059090][ T2440] EXT4-fs error (device loop2): ext4_map_blocks:630: inode #3: block 2: comm syz.2.769: lblock 2 mapped to illegal pblock 2 (length 1) [ 115.079604][ T2440] EXT4-fs error (device loop2): ext4_map_blocks:630: inode #3: block 48: comm syz.2.769: lblock 0 mapped to illegal pblock 48 (length 1) [ 115.079716][ T2446] EXT4-fs (loop4): ea_inode feature is not supported for Hurd [ 115.101642][ T2440] EXT4-fs error (device loop2): ext4_acquire_dquot:6200: comm syz.2.769: Failed to acquire dquot type 0 [ 115.113235][ T2440] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5867: Corrupt filesystem [ 115.123207][ T2440] EXT4-fs error (device loop2): ext4_evict_inode:283: inode #11: comm syz.2.769: mark_inode_dirty error [ 115.134715][ T2440] EXT4-fs warning (device loop2): ext4_evict_inode:286: couldn't mark inode dirty (err -117) [ 115.150813][ T2440] EXT4-fs (loop2): 1 orphan inode deleted [ 115.156638][ T2440] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,noblock_validity,bh,max_batch_time=0x0000000000000001,nodelalloc,inlinecrypt,,errors=continue. Quota mode: writeback. [ 115.204630][ T45] EXT4-fs error (device loop2): ext4_map_blocks:630: inode #3: block 1: comm kworker/u4:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 115.241633][ T45] EXT4-fs error (device loop2): ext4_release_dquot:6236: comm kworker/u4:2: Failed to release dquot type 0 [ 115.293371][ T285] EXT4-fs error (device loop2): __ext4_get_inode_loc:4352: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 115.306997][ T285] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5867: Corrupt filesystem [ 115.323246][ T285] EXT4-fs error (device loop2): ext4_quota_off:6506: inode #3: comm syz-executor: mark_inode_dirty error [ 115.398627][ T2475] loop3: detected capacity change from 0 to 1024 [ 115.404128][ T2477] loop2: detected capacity change from 0 to 1024 [ 115.421029][ T2475] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,,errors=continue. Quota mode: none. [ 115.425163][ T2477] EXT4-fs error (device loop2): ext4_acquire_dquot:6200: comm syz.2.788: Failed to acquire dquot type 0 [ 115.440844][ T2475] EXT4-fs error (device loop3): empty_inline_dir:1877: inode #12: block 7: comm syz.3.787: bad entry in directory: inode out of bounds - offset=4, inode=150994957, rec_len=16, size=60 fake=0 [ 115.457197][ T2477] EXT4-fs error (device loop2): mb_free_blocks:1860: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 115.463450][ T2475] EXT4-fs warning (device loop3): empty_inline_dir:1884: bad inline directory (dir #12) - inode 150994957, rec_len 16, name_len 5inline size 60 [ 115.478008][ T2477] EXT4-fs error (device loop2): ext4_do_update_inode:5235: inode #13: comm syz.2.788: corrupted inode contents [ 115.505248][ T2477] EXT4-fs error (device loop2): ext4_dirty_inode:6071: inode #13: comm syz.2.788: mark_inode_dirty error [ 115.517467][ T2477] EXT4-fs error (device loop2): ext4_do_update_inode:5235: inode #13: comm syz.2.788: corrupted inode contents [ 115.529786][ T2477] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #13: comm syz.2.788: mark_inode_dirty error [ 115.541415][ T2477] EXT4-fs error (device loop2): ext4_do_update_inode:5235: inode #13: comm syz.2.788: corrupted inode contents [ 115.553536][ T2477] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 115.563740][ T2477] EXT4-fs error (device loop2): ext4_do_update_inode:5235: inode #13: comm syz.2.788: corrupted inode contents [ 115.576020][ T2477] EXT4-fs error (device loop2): ext4_truncate:4304: inode #13: comm syz.2.788: mark_inode_dirty error [ 115.587639][ T2477] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 115.597641][ T2477] EXT4-fs (loop2): 1 truncate cleaned up [ 115.603523][ T2477] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 115.965235][ T2495] loop0: detected capacity change from 0 to 1024 [ 115.979849][ T2498] loop3: detected capacity change from 0 to 1024 [ 116.010379][ T2505] loop2: detected capacity change from 0 to 512 [ 116.029460][ T2498] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 116.043223][ T2495] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsdgroups,,errors=continue. Quota mode: none. [ 116.055548][ T2505] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 116.070177][ T2495] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 116.087746][ T2495] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 44 with error 28 [ 116.088243][ T2505] EXT4-fs (loop2): 1 truncate cleaned up [ 116.106022][ T2505] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,quota,. Quota mode: writeback. [ 116.128463][ T2495] EXT4-fs (loop0): This should not happen!! Data will be lost [ 116.128463][ T2495] [ 116.138632][ T2495] EXT4-fs (loop0): Total free blocks count 0 [ 116.144726][ T2495] EXT4-fs (loop0): Free/Dirty block details [ 116.151565][ T2495] EXT4-fs (loop0): free_blocks=68451041280 [ 116.157710][ T2495] EXT4-fs (loop0): dirty_blocks=48 [ 116.162946][ T2495] EXT4-fs (loop0): Block reservation details [ 116.169280][ T2495] EXT4-fs (loop0): i_reserved_data_blocks=3 [ 116.198943][ T2513] loop1: detected capacity change from 0 to 512 [ 116.218850][ T2516] loop4: detected capacity change from 0 to 2048 [ 116.221857][ T2514] loop3: detected capacity change from 0 to 1024 [ 116.253537][ T2514] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 116.265476][ T2514] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 116.276889][ T2514] JBD2: no valid journal superblock found [ 116.279157][ T2516] loop4: p2 p3 p7 [ 116.294221][ T2513] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 116.297596][ T2514] EXT4-fs (loop3): error loading journal [ 116.319840][ T2513] ext4 filesystem being mounted at /151/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.336637][ T2513] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 116.434071][ T2536] loop3: detected capacity change from 0 to 512 [ 116.461387][ T383] udevd[383]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 116.461881][ T392] udevd[392]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 116.478392][ T649] udevd[649]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 116.494956][ T2542] loop4: detected capacity change from 0 to 512 [ 116.521767][ T2546] tipc: New replicast peer: 255.255.255.83 [ 116.521834][ T2546] tipc: Enabled bearer , priority 10 [ 116.533169][ T2542] EXT4-fs (loop4): Ignoring removed oldalloc option [ 116.533235][ T2542] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 116.541081][ T649] udevd[649]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 116.541141][ T333] udevd[333]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 116.542567][ T383] udevd[383]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 116.550099][ T2542] EXT4-fs (loop4): 1 truncate cleaned up [ 116.550123][ T2542] EXT4-fs (loop4): mounted filesystem without journal. Opts: minixdf,oldalloc,stripe=0x0000000000000001,noblock_validity,debug_want_extra_isize=0x0000000000000006,,errors=continue. Quota mode: none. [ 116.557192][ T2536] EXT4-fs (loop3): too many log groups per flexible block group [ 116.635120][ T2536] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 116.642436][ T2536] EXT4-fs (loop3): mount failed [ 118.187868][ T2567] loop4: detected capacity change from 0 to 1024 [ 118.265245][ T307] tipc: Node number set to 1864620898 [ 118.310319][ T2567] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 118.453378][ T2567] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3871: comm syz.4.821: Allocating blocks 385-513 which overlap fs metadata [ 118.501097][ T2582] tipc: New replicast peer: 255.255.255.83 [ 118.540298][ T2582] tipc: Enabled bearer , priority 10 [ 118.548150][ T2567] EXT4-fs (loop4): pa ffff88812a1c2000: logic 16, phys. 129, len 24 [ 118.556428][ T2567] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 8 [ 118.675393][ T30] kauditd_printk_skb: 149 callbacks suppressed [ 118.675409][ T30] audit: type=1400 audit(1757454766.123:1002): avc: denied { sys_admin } for pid=2591 comm="syz.3.831" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 118.816371][ T30] audit: type=1400 audit(1757454766.207:1003): avc: denied { create } for pid=2594 comm="syz.2.833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 118.943986][ T30] audit: type=1400 audit(1757454766.218:1004): avc: denied { setopt } for pid=2594 comm="syz.2.833" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 118.983837][ T2603] loop0: detected capacity change from 0 to 8192 [ 118.990390][ T30] audit: type=1400 audit(1757454766.218:1005): avc: denied { bind } for pid=2594 comm="syz.2.833" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 119.011043][ T30] audit: type=1400 audit(1757454766.218:1006): avc: denied { node_bind } for pid=2594 comm="syz.2.833" saddr=fec0:ffff::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 119.034215][ T30] audit: type=1400 audit(1757454766.292:1007): avc: denied { execute } for pid=2596 comm="syz.0.835" name="file0" dev="tmpfs" ino=970 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 119.057019][ T30] audit: type=1400 audit(1757454766.292:1008): avc: denied { execute_no_trans } for pid=2596 comm="syz.0.835" path="/179/file0" dev="tmpfs" ino=970 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 119.141759][ T30] audit: type=1400 audit(1757454766.619:1009): avc: denied { wake_alarm } for pid=2611 comm="syz.4.834" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 119.170805][ T30] audit: type=1400 audit(1757454766.650:1010): avc: denied { write } for pid=2622 comm="syz.2.846" name="ip6_flowlabel" dev="proc" ino=4026532679 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 119.228634][ T30] audit: type=1326 audit(1757454766.714:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2624 comm="syz.1.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9163faebe9 code=0x7ffc0000 [ 119.305854][ T2635] netlink: 8 bytes leftover after parsing attributes in process `syz.2.852'. [ 119.329596][ T2635] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 119.339571][ T2635] netlink: 4 bytes leftover after parsing attributes in process `syz.2.852'. [ 119.369063][ T2642] loop1: detected capacity change from 0 to 128 [ 119.491984][ T2656] syz.2.862[2656] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 119.492068][ T2656] syz.2.862[2656] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 119.506641][ T2658] loop1: detected capacity change from 0 to 128 [ 119.530624][ T60] tipc: Node number set to 3744275110 [ 119.532180][ T2658] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 119.642506][ T45] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 119.873629][ T2702] netlink: 96 bytes leftover after parsing attributes in process `syz.2.882'. [ 119.973709][ T2715] tmpfs: Unsupported parameter 'mpol' [ 119.992539][ T2717] loop0: detected capacity change from 0 to 128 [ 120.052786][ T2717] EXT4-fs (loop0): Ignoring removed nobh option [ 120.078529][ T2717] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobh,max_dir_size_kb=0x0000000000000004,,errors=continue. Quota mode: none. [ 120.097061][ T2717] ext4 filesystem being mounted at /192/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 120.187220][ T2727] loop3: detected capacity change from 0 to 256 [ 120.210649][ T2729] tipc: New replicast peer: 255.255.255.83 [ 120.223247][ T2729] tipc: Enabled bearer , priority 10 [ 121.416251][ T2751] loop1: detected capacity change from 0 to 1024 [ 121.425201][ T2749] loop4: detected capacity change from 0 to 512 [ 121.480004][ T2751] EXT4-fs (loop1): Unrecognized mount option "smackfsroot=/" or missing value [ 121.490092][ T2749] EXT4-fs (loop4): Ignoring removed bh option [ 121.512291][ T2749] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 121.549972][ T2766] device pim6reg1 entered promiscuous mode [ 121.577558][ T2749] EXT4-fs (loop4): 1 truncate cleaned up [ 121.590199][ T2749] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 121.635558][ T2749] EXT4-fs warning (device loop4): verify_group_input:147: Cannot add at group 1073741827 (only 1 groups) [ 121.679342][ T2774] device pim6reg1 entered promiscuous mode [ 121.725971][ T2788] tipc: New replicast peer: 255.255.255.83 [ 121.747466][ T2788] tipc: Enabled bearer , priority 10 [ 121.760310][ T2794] serio: Serial port ptm0 [ 122.044875][ T2823] tipc: Enabling of bearer rejected, already enabled [ 122.764498][ T2843] ================================================================== [ 122.772614][ T2843] BUG: KASAN: slab-out-of-bounds in xfrm_policy_inexact_list_reinsert+0x620/0x6d0 [ 122.781831][ T2843] Read of size 1 at addr ffff88810bbfbbf8 by task syz.3.942/2843 [ 122.789564][ T2843] [ 122.791907][ T2843] CPU: 0 PID: 2843 Comm: syz.3.942 Tainted: G W syzkaller #0 [ 122.800594][ T2843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 122.810671][ T2843] Call Trace: [ 122.813960][ T2843] [ 122.816984][ T2843] __dump_stack+0x21/0x30 [ 122.821334][ T2843] dump_stack_lvl+0xee/0x150 [ 122.825955][ T2843] ? show_regs_print_info+0x20/0x20 [ 122.831164][ T2843] ? load_image+0x3a0/0x3a0 [ 122.835678][ T2843] ? unwind_get_return_address+0x4d/0x90 [ 122.841391][ T2843] print_address_description+0x7f/0x2c0 [ 122.846949][ T2843] ? xfrm_policy_inexact_list_reinsert+0x620/0x6d0 [ 122.853725][ T2843] kasan_report+0xf1/0x140 [ 122.858153][ T2843] ? xfrm_policy_inexact_list_reinsert+0x620/0x6d0 [ 122.864663][ T2843] __asan_report_load1_noabort+0x14/0x20 [ 122.870305][ T2843] xfrm_policy_inexact_list_reinsert+0x620/0x6d0 [ 122.876659][ T2843] xfrm_policy_inexact_insert_node+0x5a7/0xb50 [ 122.878137][ T437] tipc: Node number set to 3587031673 [ 122.882829][ T2843] xfrm_policy_inexact_alloc_chain+0x53a/0xb30 [ 122.894362][ T2843] xfrm_policy_inexact_insert+0x70/0x1130 [ 122.900147][ T2843] ? __get_hash_thresh+0x10c/0x420 [ 122.905269][ T2843] ? policy_hash_bysel+0x110/0x4f0 [ 122.910397][ T2843] xfrm_policy_insert+0x126/0x9a0 [ 122.915434][ T2843] ? xfrm_policy_construct+0x54f/0x1f00 [ 122.920989][ T2843] xfrm_add_policy+0x4d1/0x830 [ 122.925764][ T2843] ? xfrm_dump_sa_done+0xc0/0xc0 [ 122.930714][ T2843] xfrm_user_rcv_msg+0x45c/0x6e0 [ 122.935655][ T2843] ? xfrm_netlink_rcv+0x90/0x90 [ 122.940510][ T2843] ? avc_has_perm_noaudit+0x460/0x460 [ 122.945881][ T2843] ? x64_sys_call+0x4b/0x9a0 [ 122.950474][ T2843] ? selinux_nlmsg_lookup+0x237/0x4c0 [ 122.955850][ T2843] netlink_rcv_skb+0x1e0/0x430 [ 122.960614][ T2843] ? xfrm_netlink_rcv+0x90/0x90 [ 122.965466][ T2843] ? netlink_ack+0xb60/0xb60 [ 122.970074][ T2843] ? wait_for_completion_killable_timeout+0x10/0x10 [ 122.976681][ T2843] ? __netlink_lookup+0x387/0x3b0 [ 122.981715][ T2843] xfrm_netlink_rcv+0x72/0x90 [ 122.986390][ T2843] netlink_unicast+0x876/0xa40 [ 122.991156][ T2843] netlink_sendmsg+0x86a/0xb70 [ 122.995918][ T2843] ? netlink_getsockopt+0x530/0x530 [ 123.001116][ T2843] ? security_socket_sendmsg+0x82/0xa0 [ 123.006668][ T2843] ? netlink_getsockopt+0x530/0x530 [ 123.011864][ T2843] ____sys_sendmsg+0x5a2/0x8c0 [ 123.016628][ T2843] ? __sys_sendmsg_sock+0x40/0x40 [ 123.021669][ T2843] ? import_iovec+0x7c/0xb0 [ 123.026174][ T2843] ___sys_sendmsg+0x1f0/0x260 [ 123.030856][ T2843] ? __sys_sendmsg+0x250/0x250 [ 123.035626][ T2843] ? __fdget+0x1a1/0x230 [ 123.039898][ T2843] __x64_sys_sendmsg+0x1e2/0x2a0 [ 123.044836][ T2843] ? ___sys_sendmsg+0x260/0x260 [ 123.049688][ T2843] ? __kasan_check_write+0x14/0x20 [ 123.054802][ T2843] ? switch_fpu_return+0x15d/0x2c0 [ 123.059911][ T2843] x64_sys_call+0x4b/0x9a0 [ 123.064330][ T2843] do_syscall_64+0x4c/0xa0 [ 123.068748][ T2843] ? clear_bhb_loop+0x50/0xa0 [ 123.073425][ T2843] ? clear_bhb_loop+0x50/0xa0 [ 123.078202][ T2843] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 123.084209][ T2843] RIP: 0033:0x7fe64401abe9 [ 123.088626][ T2843] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.108237][ T2843] RSP: 002b:00007fe642a83038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 123.116664][ T2843] RAX: ffffffffffffffda RBX: 00007fe644251fa0 RCX: 00007fe64401abe9 [ 123.124728][ T2843] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000005 [ 123.132716][ T2843] RBP: 00007fe64409de19 R08: 0000000000000000 R09: 0000000000000000 [ 123.140694][ T2843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 123.148667][ T2843] R13: 00007fe644252038 R14: 00007fe644251fa0 R15: 00007ffdaa3e1668 [ 123.156646][ T2843] [ 123.159664][ T2843] [ 123.161983][ T2843] Allocated by task 2843: [ 123.166316][ T2843] __kasan_kmalloc+0xda/0x110 [ 123.170998][ T2843] __kmalloc+0x13d/0x2c0 [ 123.175241][ T2843] sk_prot_alloc+0xed/0x320 [ 123.179756][ T2843] sk_alloc+0x38/0x430 [ 123.183822][ T2843] pfkey_create+0x12a/0x660 [ 123.188328][ T2843] __sock_create+0x38d/0x7a0 [ 123.192925][ T2843] __sys_socket+0xec/0x190 [ 123.197340][ T2843] __x64_sys_socket+0x7a/0x90 [ 123.202014][ T2843] x64_sys_call+0x8c5/0x9a0 [ 123.206513][ T2843] do_syscall_64+0x4c/0xa0 [ 123.210930][ T2843] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 123.216828][ T2843] [ 123.219147][ T2843] The buggy address belongs to the object at ffff88810bbfb800 [ 123.219147][ T2843] which belongs to the cache kmalloc-1k of size 1024 [ 123.233196][ T2843] The buggy address is located 1016 bytes inside of [ 123.233196][ T2843] 1024-byte region [ffff88810bbfb800, ffff88810bbfbc00) [ 123.246639][ T2843] The buggy address belongs to the page: [ 123.252268][ T2843] page:ffffea00042efe00 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88810bbf9800 pfn:0x10bbf8 [ 123.263805][ T2843] head:ffffea00042efe00 order:3 compound_mapcount:0 compound_pincount:0 [ 123.272123][ T2843] flags: 0x4000000000010200(slab|head|zone=1) [ 123.278209][ T2843] raw: 4000000000010200 ffffea00043bd200 0000000300000003 ffff888100043080 [ 123.286789][ T2843] raw: ffff88810bbf9800 000000008010000f 00000001ffffffff 0000000000000000 [ 123.295522][ T2843] page dumped because: kasan: bad access detected [ 123.301938][ T2843] page_owner tracks the page as allocated [ 123.307650][ T2843] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 281, ts 23309157167, free_ts 23305613662 [ 123.326675][ T2843] post_alloc_hook+0x192/0x1b0 [ 123.331454][ T2843] prep_new_page+0x1c/0x110 [ 123.335957][ T2843] get_page_from_freelist+0x2cc5/0x2d50 [ 123.341598][ T2843] __alloc_pages+0x18f/0x440 [ 123.346189][ T2843] new_slab+0xa1/0x4d0 [ 123.350261][ T2843] ___slab_alloc+0x381/0x810 [ 123.354852][ T2843] __slab_alloc+0x49/0x90 [ 123.359180][ T2843] __kmalloc_track_caller+0x169/0x2c0 [ 123.364553][ T2843] __alloc_skb+0x21a/0x740 [ 123.368974][ T2843] rtmsg_fib+0x60a/0xe20 [ 123.373215][ T2843] fib_table_insert+0xb95/0x1d10 [ 123.378149][ T2843] fib_add_ifaddr+0x7f8/0xd20 [ 123.382913][ T2843] fib_netdev_event+0x231/0x5d0 [ 123.387774][ T2843] raw_notifier_call_chain+0x90/0x100 [ 123.393145][ T2843] __dev_notify_flags+0x28f/0x500 [ 123.398185][ T2843] dev_change_flags+0xe8/0x1a0 [ 123.402959][ T2843] page last free stack trace: [ 123.407624][ T2843] free_unref_page_prepare+0x542/0x550 [ 123.413085][ T2843] free_unref_page+0xa2/0x550 [ 123.417766][ T2843] __free_pages+0x6c/0x100 [ 123.422282][ T2843] __free_slab+0xe8/0x1e0 [ 123.426617][ T2843] __unfreeze_partials+0x160/0x190 [ 123.431727][ T2843] put_cpu_partial+0xc6/0x120 [ 123.436406][ T2843] __slab_free+0x1d4/0x290 [ 123.440822][ T2843] ___cache_free+0x104/0x120 [ 123.445411][ T2843] qlink_free+0x4d/0x90 [ 123.449561][ T2843] qlist_free_all+0x5f/0xb0 [ 123.454064][ T2843] kasan_quarantine_reduce+0x14a/0x170 [ 123.459523][ T2843] __kasan_slab_alloc+0x2f/0xf0 [ 123.464371][ T2843] slab_post_alloc_hook+0x4f/0x2b0 [ 123.469485][ T2843] kmem_cache_alloc_trace+0xfb/0x270 [ 123.474770][ T2843] ____ip_mc_inc_group+0x1ab/0x860 [ 123.479893][ T2843] ip_mc_up+0x112/0x1f0 [ 123.484044][ T2843] [ 123.486359][ T2843] Memory state around the buggy address: [ 123.491981][ T2843] ffff88810bbfba80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 123.500036][ T2843] ffff88810bbfbb00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 123.508101][ T2843] >ffff88810bbfbb80: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc [ 123.516155][ T2843] ^ [ 123.524121][ T2843] ffff88810bbfbc00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 123.532177][ T2843] ffff88810bbfbc80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 123.540230][ T2843] ================================================================== [ 123.548281][ T2843] Disabling lock debugging due to kernel taint [ 123.561496][ T30] kauditd_printk_skb: 86 callbacks suppressed [ 123.561509][ T30] audit: type=1400 audit(1757454771.281:1098): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 123.600184][ T30] audit: type=1400 audit(1757454771.313:1099): avc: denied { search } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 123.628703][ T30] audit: type=1400 audit(1757454771.313:1100): avc: denied { write } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 123.657193][ T30] audit: type=1400 audit(1757454771.313:1101): avc: denied { add_name } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 123.683301][ T30] audit: type=1400 audit(1757454771.313:1102): avc: denied { create } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 123.705387][ T30] audit: type=1400 audit(1757454771.313:1103): avc: denied { append open } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 123.729079][ T30] audit: type=1400 audit(1757454771.313:1104): avc: denied { getattr } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1