last executing test programs: 712.217402ms ago: executing program 0 (id=1939): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x37e2f4aba9289b81, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 625.31316ms ago: executing program 0 (id=1944): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r1 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) 570.260134ms ago: executing program 0 (id=1948): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x5000) unshare(0x2c020400) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) lsm_get_self_attr(0x66, &(0x7f0000000080)={0x0, 0x0, 0xd2, 0xb2, ""/178}, &(0x7f0000000180)=0xd2, 0x0) 533.600407ms ago: executing program 0 (id=1952): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r1, 0x0, 0x8}, 0x18) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) 518.291588ms ago: executing program 2 (id=1953): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r1, 0x1) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)={0x4c, 0x14, 0x101, 0x70bda4, 0x25dfdbfd, {0x1, 0x1f, 0x88, 0x10, {0x4e24, 0x4e22, [0x3, 0xffffffff, 0xf, 0xc3], [0x6, 0x0, 0x5, 0x7], 0x0, [0x1, 0x7fffffff]}, 0x2, 0xc7}}, 0x4c}, 0x1, 0x0, 0x0, 0x40480cc}, 0x40000) 473.960782ms ago: executing program 0 (id=1956): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0xe8034000, 0x0, 0x87, 0x0, &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837", 0x5dc}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='c *:23'], 0xa) 473.270282ms ago: executing program 2 (id=1957): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty=0xe0, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0) 450.877534ms ago: executing program 4 (id=1959): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x4, 0xf1, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 448.606264ms ago: executing program 3 (id=1960): r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0)={[0xffffffffffffffff]}, 0x8) close(r0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$setstatus(r0, 0x4, 0x2c00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380), 0x84d03, 0x0) 447.017964ms ago: executing program 0 (id=1961): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f0000000740)="cc", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7fffeffd) 383.933589ms ago: executing program 2 (id=1962): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000000540), 0x1, 0x4a3, &(0x7f0000000580)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000a40)='sched_switch\x00', r0, 0x0, 0x4}, 0x18) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x8004587d, &(0x7f0000000080)={0x0, r1, 0x9, 0x7fff, 0x0, 0x6}) 383.485989ms ago: executing program 1 (id=1963): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000005b80)={{{@in6=@remote, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x9}}, {{@in=@dev={0xac, 0x14, 0x14, 0x1d}, 0x0, 0x6c}, 0x0, @in=@broadcast}}, 0xe8) syz_emit_ethernet(0x3e, &(0x7f0000000500)={@local, @random="f368656e065b", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev}}}}}}, 0x0) 376.26307ms ago: executing program 1 (id=1964): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/97, 0x61}, {0x0}], 0x2}, 0x32}], 0x4000000000000be, 0x122, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) 368.401481ms ago: executing program 3 (id=1965): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) fsetxattr$security_selinux(r1, &(0x7f0000000040), &(0x7f0000000000)='system_u:object_r:dhcp_etc_t:s0\x00', 0x5b, 0x3) 350.990712ms ago: executing program 4 (id=1966): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001340)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa, 0x0, 0x0, 0x1, 0x0, 0xffff, 0x0, 0xd350, 0x10000, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffc, 0x80, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xc74, 0x0, 0xffffffff, 0x10, 0x81, 0x0, 0x400000, 0x0, 0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x1, 0xffffffb3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1000, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa9b, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54c, 0x0, 0xfff, 0x0, 0x9, 0x0, 0x0, 0x2, 0x20000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x6, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x200, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xa]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x10, {0x7, 0x0, 0xba6d, 0x0, 0x0, 0x7}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x488}}, 0x0) 295.437556ms ago: executing program 2 (id=1967): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) 255.584139ms ago: executing program 3 (id=1968): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="8b3320000000fddbdf2515"], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) 255.093719ms ago: executing program 4 (id=1969): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000780)='mm_page_free\x00', r0}, 0x18) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) 215.599243ms ago: executing program 1 (id=1970): sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5e, 0x0, 0x0, 0x8, 0xffffffffffffff75, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0b00000000010000000100000900000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r0}, 0x38) 214.974103ms ago: executing program 2 (id=1971): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x800}, 0x18) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x0, 0x4000000}, 0x1c) syz_clone(0x40200080, 0x0, 0x0, 0x0, 0x0, 0x0) 198.933024ms ago: executing program 3 (id=1972): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000110000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sys_enter\x00', r0}, 0x10) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) pidfd_getfd(r2, r2, 0x0) 183.453245ms ago: executing program 1 (id=1973): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e0000000400000008", @ANYBLOB="00000013"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) syslog(0x2, &(0x7f0000000200)=""/4096, 0x1000) 133.405299ms ago: executing program 1 (id=1974): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) pivot_root(&(0x7f0000000240)='./control\x00', 0x0) 133.090959ms ago: executing program 4 (id=1975): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000005b80)={{{@in6=@remote, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x9}}, {{@in=@dev={0xac, 0x14, 0x14, 0x1d}, 0x0, 0x6c}, 0x0, @in=@broadcast}}, 0xe8) syz_emit_ethernet(0x3e, &(0x7f0000000500)={@local, @random="f368656e065b", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev}}}}}}, 0x0) 132.758899ms ago: executing program 3 (id=1976): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x10003, 0x0) readv(r2, &(0x7f0000000280)=[{&(0x7f0000000200)=""/69, 0xec0}], 0x1) write$binfmt_elf64(r1, &(0x7f00000001c0)=ANY=[], 0x10034) 105.771122ms ago: executing program 1 (id=1977): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 105.288962ms ago: executing program 4 (id=1978): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000140)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{}, {0x0, 0x0, 0x1, 0x1}}], 0x10) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x0) 68.990254ms ago: executing program 4 (id=1979): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f0000000700)="f2d110189debfbdd569205a10647ea9ff8888e5ba02bf48a5cec6f8af5daffc0f6e7af834257f9bbacbca8e2287f6edf00329c6446baae12e8d15c5f4fa9d3b0af069d7994f94d35778e51434d5f8cfcf8b20fa6c5ceefc57a1cabeae6d871fda3e5b287bf1520ee98596a020f43848c60d9d98cee056411133a511e78657ba4", 0x80}, {&(0x7f0000000440)="75186aa679614da75bf310521b73b12410847770c17729733c960fcbfca7d1ffa26d4c862887dbe11f671b4f173fa60fe0da36e84f735f4846f5a8b4a0a3819334a3a73baad8e6c463a9b4a64e1ba7f1249049c66b9b3a63f8abb08d93a29b04d12cb90ba135bdcce320b35e8d2a7aa8ce40eac7df0da56a", 0x78}, {0x0}, {&(0x7f0000000880)="116ff2a4f9431373d20a0eb9c7b2c11237b17e801986b8f00353332b44d77dcd309ce2b75421012f5a5a104e72ab51c4b06c89637705350e149b897c1f35ed646f2cd878fa138b7f50f39fadaef36db01a46ff2f2454c5ca7d6eb8d754dad57e898b8eb2945c00e2e9f00b1843f84c0042dc2c5b8d1fc3798760649fe58a1751602c7d2b8b1f96ea7b08f48c312e641e24dd6790c0987d146ca0e9f57774345c396bfb47558bb6f4dc4f545d81162b9e9f275ee0149cfff0175e8beef0e7f15dee215f23c012b0f17a7189710ab23b920d3729c71a3ebf500284b127ffafdd827dc77a2f673a9481c40758", 0xeb}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001ac0)="443b92cf6e77eee47ec472995a1330e6a9a169766af37ad963e922e0701efbddfefd62604126", 0x26}, {&(0x7f0000001b80)="d5f888ac34ddab6a7640f2e8db4976ecac7b19ecf0546954e04c700dbc8dce024fddf16ac3771c2d782d599dd9b63ec638067d1fc6595f6239a2280c486d6d81edf70f3c8a1fc78a7678cc5b394c3e19220e5223fa0ac7f7ddc10013e437fc33467a23852020a5f9f8cba9bf4c3ff0a8423f284b7253c813848dd80be6fbc8713e2db2961f6c80d3a7aaca28e189", 0x8e}], 0x9, &(0x7f0000001d00)=[{0x68, 0x102, 0x0, "0458ef058116f19a7e322a384c6fd9c988113c44fb1a8d786b053609f8564019e0b62c951d4b5be9959bd0bf53f7502beba35bfc7b41ff8eb335c45f930a585e2ffb9451d1406da608d5ac183fef4c6f7358f96c76"}, {0x18, 0x29, 0x93, "952eac"}], 0x80}, 0x4) 41.639167ms ago: executing program 2 (id=1980): r0 = socket(0x22, 0x2, 0x1) r1 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) recvmsg$kcm(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 3 (id=1981): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a0003", 0x1b}], 0x1}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r2, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c"], 0x7c}}, 0x0) kernel console output (not intermixed with test programs): 29.607075][ T41] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.619198][ T3309] veth0_macvtap: entered promiscuous mode [ 29.626487][ T3309] veth1_macvtap: entered promiscuous mode [ 29.642118][ T57] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.663267][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.666442][ T3483] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10'. [ 29.686712][ T3310] veth0_macvtap: entered promiscuous mode [ 29.708273][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.715778][ T57] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.742363][ T3310] veth1_macvtap: entered promiscuous mode [ 29.757155][ T57] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.765901][ T57] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.780259][ T57] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.803404][ T57] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.816433][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.835346][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.853051][ T57] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.894547][ T57] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.917162][ T57] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.917217][ T29] kauditd_printk_skb: 43 callbacks suppressed [ 29.917228][ T29] audit: type=1400 audit(1754566583.698:115): avc: denied { read } for pid=3504 comm="syz.2.16" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 29.955159][ T29] audit: type=1400 audit(1754566583.698:116): avc: denied { open } for pid=3504 comm="syz.2.16" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 29.981712][ T57] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.991283][ T57] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.995480][ T29] audit: type=1400 audit(1754566583.718:117): avc: denied { ioctl } for pid=3504 comm="syz.2.16" path="/dev/usbmon0" dev="devtmpfs" ino=141 ioctlcmd=0x9206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 30.075307][ T29] audit: type=1326 audit(1754566583.838:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3506 comm="syz.4.17" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8b4d9ebe9 code=0x7ffc0000 [ 30.099005][ T29] audit: type=1326 audit(1754566583.838:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3506 comm="syz.4.17" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8b4d9ebe9 code=0x7ffc0000 [ 30.122827][ T29] audit: type=1326 audit(1754566583.838:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3506 comm="syz.4.17" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc8b4d9ebe9 code=0x7ffc0000 [ 30.146818][ T29] audit: type=1326 audit(1754566583.838:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3506 comm="syz.4.17" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8b4d9ebe9 code=0x7ffc0000 [ 30.170322][ T29] audit: type=1326 audit(1754566583.838:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3506 comm="syz.4.17" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8b4d9ebe9 code=0x7ffc0000 [ 30.194099][ T29] audit: type=1326 audit(1754566583.838:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3506 comm="syz.4.17" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc8b4d9ebe9 code=0x7ffc0000 [ 30.217583][ T29] audit: type=1326 audit(1754566583.848:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3506 comm="syz.4.17" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8b4d9ebe9 code=0x7ffc0000 [ 30.319901][ T3526] netlink: 'syz.3.25': attribute type 4 has an invalid length. [ 30.336723][ T3528] syz.4.26 uses obsolete (PF_INET,SOCK_PACKET) [ 30.640927][ T3561] 9pnet: p9_errstr2errno: server reported unknown error [ 30.653595][ T3553] Illegal XDP return value 4294967274 on prog (id 18) dev N/A, expect packet loss! [ 30.733561][ T3569] bond1: entered promiscuous mode [ 30.738783][ T3569] bond1: entered allmulticast mode [ 30.746520][ T3569] 8021q: adding VLAN 0 to HW filter on device bond1 [ 30.764434][ T3569] bond1 (unregistering): Released all slaves [ 30.956526][ T3598] process 'syz.4.54' launched './file0' with NULL argv: empty string added [ 31.010086][ T3604] netlink: 'syz.4.58': attribute type 3 has an invalid length. [ 31.085864][ T3613] 9p: Unknown uid 00000000004294967295 [ 31.289355][ T3625] netlink: 116 bytes leftover after parsing attributes in process `syz.4.65'. [ 31.303062][ T3625] Zero length message leads to an empty skb [ 31.360505][ T3633] loop2: detected capacity change from 0 to 512 [ 31.375382][ T3633] EXT4-fs (loop2): orphan cleanup on readonly fs [ 31.384113][ T3633] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.69: Failed to acquire dquot type 1 [ 31.410791][ T3633] EXT4-fs (loop2): 1 truncate cleaned up [ 31.417569][ T3633] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 31.453455][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.497385][ T3645] loop1: detected capacity change from 0 to 512 [ 31.522764][ T3649] loop2: detected capacity change from 0 to 1024 [ 31.534964][ T3645] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 31.535330][ T3649] EXT4-fs: Ignoring removed orlov option [ 31.548908][ T3649] EXT4-fs: Ignoring removed mblk_io_submit option [ 31.557046][ T3645] System zones: 0-2, 18-18, 34-35 [ 31.567923][ T3649] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 31.587565][ T3645] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.600775][ T3645] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 31.623464][ T3649] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.642574][ T3404] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 31.650218][ T3404] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 31.657952][ T3404] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 31.665808][ T3404] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 31.673377][ T3404] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 31.680807][ T3404] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 31.688291][ T3404] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 31.695732][ T3404] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 31.703328][ T3404] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 31.711073][ T3404] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 31.721971][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.731897][ T3404] hid-generic 0000:0000:0008.0001: hidraw0: HID vc.87 Device [syz0] on syz1 [ 31.819707][ T3665] fido_id[3665]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 31.932802][ T3679] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 31.950378][ T3679] SELinux: failed to load policy [ 32.002247][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.079581][ T3696] usb usb1: usbfs: process 3696 (syz.2.93) did not claim interface 0 before use [ 32.209373][ T3712] loop1: detected capacity change from 0 to 512 [ 32.235819][ T3712] ======================================================= [ 32.235819][ T3712] WARNING: The mand mount option has been deprecated and [ 32.235819][ T3712] and is ignored by this kernel. Remove the mand [ 32.235819][ T3712] option from the mount to silence this warning. [ 32.235819][ T3712] ======================================================= [ 32.245996][ T3718] loop0: detected capacity change from 0 to 1024 [ 32.307156][ T3718] EXT4-fs: Ignoring removed nomblk_io_submit option [ 32.315544][ T3712] EXT4-fs (loop1): orphan cleanup on readonly fs [ 32.348681][ T3718] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.362588][ T3712] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.101: bg 0: block 248: padding at end of block bitmap is not set [ 32.381707][ T3712] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.101: Failed to acquire dquot type 1 [ 32.398823][ T3712] EXT4-fs (loop1): 1 truncate cleaned up [ 32.406140][ T3712] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 32.423549][ T3724] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.430897][ T3724] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.440776][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.452869][ T3712] syz.1.101 (3712) used greatest stack depth: 9280 bytes left [ 32.500596][ T3736] loop0: detected capacity change from 0 to 1024 [ 32.509337][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.523462][ T3736] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 32.542902][ T3724] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 32.558293][ T3736] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.110: Invalid block bitmap block 0 in block_group 0 [ 32.569123][ T3724] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 32.598108][ T3736] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.110: Failed to acquire dquot type 0 [ 32.610117][ T3740] loop1: detected capacity change from 0 to 2048 [ 32.617814][ T3736] EXT4-fs error (device loop0): ext4_free_blocks:6696: comm syz.0.110: Freeing blocks not in datazone - block = 0, count = 4096 [ 32.633990][ T3736] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.110: Invalid inode bitmap blk 0 in block_group 0 [ 32.648941][ T57] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:4: Failed to release dquot type 0 [ 32.662104][ T3736] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 32.671187][ T3736] EXT4-fs (loop0): 1 orphan inode deleted [ 32.673549][ T3740] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.678474][ T3736] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.705029][ T12] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.717540][ T12] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.727250][ T12] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.736587][ T12] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.775292][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.788223][ T3744] macvtap0: refused to change device tx_queue_len [ 33.000869][ T3760] netlink: 24 bytes leftover after parsing attributes in process `syz.4.120'. [ 33.018625][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.091796][ T3772] loop0: detected capacity change from 0 to 1024 [ 33.099029][ T3772] EXT4-fs: Ignoring removed oldalloc option [ 33.105273][ T3772] EXT4-fs: Ignoring removed bh option [ 33.119062][ T3772] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.205504][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.475847][ T3801] loop0: detected capacity change from 0 to 2048 [ 33.543215][ T3801] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 33.615858][ T3801] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 33.639181][ T3801] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28 [ 33.651845][ T3801] EXT4-fs (loop0): This should not happen!! Data will be lost [ 33.651845][ T3801] [ 33.661806][ T3801] EXT4-fs (loop0): Total free blocks count 0 [ 33.667817][ T3801] EXT4-fs (loop0): Free/Dirty block details [ 33.673831][ T3801] EXT4-fs (loop0): free_blocks=2415919104 [ 33.680373][ T3801] EXT4-fs (loop0): dirty_blocks=32 [ 33.685655][ T3801] EXT4-fs (loop0): Block reservation details [ 33.691789][ T3801] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 33.736117][ T3832] 9pnet_fd: Insufficient options for proto=fd [ 33.799041][ T3838] netlink: 76 bytes leftover after parsing attributes in process `syz.4.153'. [ 33.962089][ T3853] batadv_slave_1: entered promiscuous mode [ 33.989527][ T3852] batadv_slave_1: left promiscuous mode [ 34.014524][ T3857] sd 0:0:1:0: device reset [ 34.321485][ T3830] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 34.340257][ T3881] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 34.347583][ T3389] IPVS: starting estimator thread 0... [ 34.446880][ T3887] IPVS: using max 2592 ests per chain, 129600 per kthread [ 34.513201][ T3899] loop1: detected capacity change from 0 to 128 [ 34.531039][ T3899] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 34.558216][ T3899] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 34.598245][ T12] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 34.620779][ T3903] SELinux: failed to load policy [ 34.799596][ T3920] loop4: detected capacity change from 0 to 2048 [ 34.828462][ T3920] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 34.868907][ T3920] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 34.889393][ T3920] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28 [ 34.902653][ T3920] EXT4-fs (loop4): This should not happen!! Data will be lost [ 34.902653][ T3920] [ 34.913054][ T3920] EXT4-fs (loop4): Total free blocks count 0 [ 34.919421][ T3920] EXT4-fs (loop4): Free/Dirty block details [ 34.925412][ T3920] EXT4-fs (loop4): free_blocks=2415919104 [ 34.931430][ T3920] EXT4-fs (loop4): dirty_blocks=32 [ 34.936661][ T3920] EXT4-fs (loop4): Block reservation details [ 34.942997][ T3920] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 35.146590][ T3935] netlink: 'syz.1.194': attribute type 21 has an invalid length. [ 35.154718][ T3935] netlink: 156 bytes leftover after parsing attributes in process `syz.1.194'. [ 35.276031][ T29] kauditd_printk_skb: 178 callbacks suppressed [ 35.276074][ T29] audit: type=1326 audit(1754566589.058:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3944 comm="syz.1.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fec0cebe9 code=0x7ffc0000 [ 35.359108][ T29] audit: type=1326 audit(1754566589.098:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3944 comm="syz.1.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7f8fec0cebe9 code=0x7ffc0000 [ 35.359807][ T3947] netlink: 24 bytes leftover after parsing attributes in process `syz.1.200'. [ 35.383255][ T29] audit: type=1326 audit(1754566589.098:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3944 comm="syz.1.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fec0cebe9 code=0x7ffc0000 [ 35.392225][ T3947] netlink: 68 bytes leftover after parsing attributes in process `syz.1.200'. [ 35.468991][ T3947] netlink: 24 bytes leftover after parsing attributes in process `syz.1.200'. [ 35.506780][ T29] audit: type=1400 audit(1754566589.148:299): avc: denied { ioctl } for pid=3946 comm="syz.1.200" path="socket:[5635]" dev="sockfs" ino=5635 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.532320][ T29] audit: type=1326 audit(1754566589.238:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3948 comm="syz.2.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19a65bebe9 code=0x7ffc0000 [ 35.555852][ T29] audit: type=1326 audit(1754566589.238:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3948 comm="syz.2.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19a65bebe9 code=0x7ffc0000 [ 35.579298][ T29] audit: type=1326 audit(1754566589.238:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3948 comm="syz.2.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f19a65bebe9 code=0x7ffc0000 [ 35.602923][ T29] audit: type=1326 audit(1754566589.238:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3948 comm="syz.2.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19a65bebe9 code=0x7ffc0000 [ 35.626707][ T29] audit: type=1326 audit(1754566589.248:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3948 comm="syz.2.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19a65bebe9 code=0x7ffc0000 [ 35.647413][ T3954] netlink: 72 bytes leftover after parsing attributes in process `syz.2.205'. [ 35.650592][ T29] audit: type=1326 audit(1754566589.258:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3950 comm="syz.3.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44c159ebe9 code=0x7ffc0000 [ 35.705121][ T3929] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 36.542471][ T4002] mmap: ,&#^% (4002) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 36.621216][ T4004] loop1: detected capacity change from 0 to 512 [ 36.668687][ T4004] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.225: invalid indirect mapped block 4294967295 (level 1) [ 36.744597][ T4004] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.225: invalid indirect mapped block 4294967295 (level 1) [ 37.118001][ T4004] EXT4-fs (loop1): 2 truncates cleaned up [ 37.147095][ T4004] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.202983][ T4033] netlink: 60 bytes leftover after parsing attributes in process `syz.4.238'. [ 37.212194][ T4033] netlink: 60 bytes leftover after parsing attributes in process `syz.4.238'. [ 37.243613][ T4039] 9pnet: p9_errstr2errno: server reported unknown error @0x0000000000000003 [ 37.264179][ T4033] netlink: 60 bytes leftover after parsing attributes in process `syz.4.238'. [ 37.273794][ T4033] netlink: 60 bytes leftover after parsing attributes in process `syz.4.238'. [ 37.332046][ T4033] netlink: 60 bytes leftover after parsing attributes in process `syz.4.238'. [ 37.348513][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.687034][ T4077] loop3: detected capacity change from 0 to 512 [ 37.711295][ T4079] loop1: detected capacity change from 0 to 1024 [ 37.719041][ T4077] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.257: casefold flag without casefold feature [ 37.731249][ T4079] EXT4-fs: Ignoring removed oldalloc option [ 37.737831][ T4079] EXT4-fs: Ignoring removed bh option [ 37.757885][ T4077] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.257: couldn't read orphan inode 15 (err -117) [ 37.771994][ T4077] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.803543][ T4079] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.857929][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.881029][ T4079] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt. [ 37.905356][ T4093] loop0: detected capacity change from 0 to 512 [ 37.927245][ T4093] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 37.945753][ T4095] netlink: 'syz.3.263': attribute type 3 has an invalid length. [ 37.992705][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.008269][ T4093] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 38.033830][ T4093] EXT4-fs (loop0): orphan cleanup on readonly fs [ 38.086012][ T4093] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.264: corrupted inode contents [ 38.100073][ T4093] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #16: comm syz.0.264: mark_inode_dirty error [ 38.113331][ T4093] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.264: corrupted inode contents [ 38.127761][ T4093] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.264: mark_inode_dirty error [ 38.139800][ T4093] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.264: corrupted inode contents [ 38.155004][ T4093] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 38.166994][ T4093] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.264: corrupted inode contents [ 38.188642][ T4093] EXT4-fs error (device loop0): ext4_truncate:4666: inode #16: comm syz.0.264: mark_inode_dirty error [ 38.206853][ T4093] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 38.216566][ T4093] EXT4-fs (loop0): 1 truncate cleaned up [ 38.222806][ T41] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 1 [ 38.267265][ T4093] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 38.373314][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.625077][ T4156] sctp: [Deprecated]: syz.4.288 (pid 4156) Use of int in max_burst socket option deprecated. [ 38.625077][ T4156] Use struct sctp_assoc_value instead [ 39.073672][ T4197] sd 0:0:1:0: device reset [ 39.137297][ T4206] netlink: 'syz.0.309': attribute type 21 has an invalid length. [ 39.145213][ T4206] netlink: 'syz.0.309': attribute type 4 has an invalid length. [ 39.153085][ T4206] netlink: 'syz.0.309': attribute type 5 has an invalid length. [ 39.297843][ T4218] loop0: detected capacity change from 0 to 8192 [ 39.549469][ T4238] geneve2: entered promiscuous mode [ 39.554839][ T4238] geneve2: entered allmulticast mode [ 39.678988][ T4246] loop4: detected capacity change from 0 to 128 [ 39.683085][ T4248] 9pnet: p9_errstr2errno: server reported unknown error 0xffffffffffffffff [ 39.779596][ T4255] syz.4.329: attempt to access beyond end of device [ 39.779596][ T4255] loop4: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 39.874763][ T4255] syz.4.329: attempt to access beyond end of device [ 39.874763][ T4255] loop4: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 39.892271][ T4267] syz.1.338 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 39.927610][ T4255] syz.4.329: attempt to access beyond end of device [ 39.927610][ T4255] loop4: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 39.942354][ T4255] syz.4.329: attempt to access beyond end of device [ 39.942354][ T4255] loop4: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 39.964920][ T4271] pim6reg1: entered promiscuous mode [ 39.970618][ T4271] pim6reg1: entered allmulticast mode [ 39.981221][ T4255] syz.4.329: attempt to access beyond end of device [ 39.981221][ T4255] loop4: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 39.996130][ T4255] syz.4.329: attempt to access beyond end of device [ 39.996130][ T4255] loop4: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 40.011240][ T4255] syz.4.329: attempt to access beyond end of device [ 40.011240][ T4255] loop4: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 40.026300][ T4255] syz.4.329: attempt to access beyond end of device [ 40.026300][ T4255] loop4: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 40.063068][ T4255] syz.4.329: attempt to access beyond end of device [ 40.063068][ T4255] loop4: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 40.069222][ T4273] loop2: detected capacity change from 0 to 8192 [ 40.079749][ T4255] syz.4.329: attempt to access beyond end of device [ 40.079749][ T4255] loop4: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 40.167283][ T4281] __nla_validate_parse: 11 callbacks suppressed [ 40.167298][ T4281] netlink: 28 bytes leftover after parsing attributes in process `syz.1.345'. [ 40.182548][ T4281] netlink: 'syz.1.345': attribute type 7 has an invalid length. [ 40.190354][ T4281] netlink: 'syz.1.345': attribute type 8 has an invalid length. [ 40.198387][ T4281] netlink: 4 bytes leftover after parsing attributes in process `syz.1.345'. [ 40.220813][ T4281] gretap0: entered promiscuous mode [ 40.228560][ T4281] batadv_slave_1: entered promiscuous mode [ 40.247176][ T4281] erspan0: entered promiscuous mode [ 40.269065][ T4287] netlink: 76 bytes leftover after parsing attributes in process `syz.0.348'. [ 40.307696][ T4289] netlink: '+}[@': attribute type 21 has an invalid length. [ 40.315273][ T4289] netlink: 156 bytes leftover after parsing attributes in process `+}[@'. [ 40.341200][ T4292] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 40.348016][ T4292] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 40.355935][ T4292] vhci_hcd vhci_hcd.0: Device attached [ 40.365353][ T4294] vhci_hcd: connection closed [ 40.365791][ T12] vhci_hcd: stop threads [ 40.375088][ T12] vhci_hcd: release socket [ 40.379554][ T12] vhci_hcd: disconnect device [ 40.848703][ T4320] loop1: detected capacity change from 0 to 8192 [ 40.866430][ T4320] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 40.897280][ T29] kauditd_printk_skb: 148 callbacks suppressed [ 40.897357][ T29] audit: type=1400 audit(1754566594.688:453): avc: denied { read } for pid=4321 comm="syz.3.361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 41.010953][ T4329] loop1: detected capacity change from 0 to 512 [ 41.030119][ T29] audit: type=1326 audit(1754566594.818:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4330 comm="syz.0.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c968ebe9 code=0x7ffc0000 [ 41.083418][ T29] audit: type=1326 audit(1754566594.818:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4330 comm="syz.0.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7fc4c968ebe9 code=0x7ffc0000 [ 41.107121][ T29] audit: type=1326 audit(1754566594.818:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4330 comm="syz.0.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c968ebe9 code=0x7ffc0000 [ 41.140994][ T4329] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 41.171187][ T4329] EXT4-fs (loop1): orphan cleanup on readonly fs [ 41.178398][ T29] audit: type=1326 audit(1754566594.918:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4330 comm="syz.0.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c968ebe9 code=0x7ffc0000 [ 41.209775][ T4329] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.364: corrupted inode contents [ 41.239422][ T4329] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #16: comm syz.1.364: mark_inode_dirty error [ 41.290061][ T4342] netlink: 8 bytes leftover after parsing attributes in process `syz.4.369'. [ 41.307138][ T4329] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.364: corrupted inode contents [ 41.336958][ T4329] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.364: mark_inode_dirty error [ 41.456816][ T29] audit: type=1326 audit(1754566595.228:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4346 comm="syz.4.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8b4d9ebe9 code=0x7ffc0000 [ 41.468370][ T4329] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.364: corrupted inode contents [ 41.480601][ T29] audit: type=1326 audit(1754566595.228:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4346 comm="syz.4.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7fc8b4d9ebe9 code=0x7ffc0000 [ 41.516791][ T29] audit: type=1326 audit(1754566595.228:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4346 comm="syz.4.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8b4d9ebe9 code=0x7ffc0000 [ 41.529193][ T4329] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 41.579303][ T4329] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.364: corrupted inode contents [ 41.592216][ T4345] loop0: detected capacity change from 0 to 32768 [ 41.599143][ T4329] EXT4-fs error (device loop1): ext4_truncate:4666: inode #16: comm syz.1.364: mark_inode_dirty error [ 41.612262][ T4329] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 41.622361][ T4329] EXT4-fs (loop1): 1 truncate cleaned up [ 41.628435][ T297] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 41.638456][ T297] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:5: Failed to release dquot type 1 [ 41.650694][ T4329] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 41.699720][ T29] audit: type=1326 audit(1754566595.488:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4355 comm="syz.0.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c968ebe9 code=0x7ffc0000 [ 41.803192][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.924689][ T4368] loop0: detected capacity change from 0 to 128 [ 41.988686][ T4375] loop4: detected capacity change from 0 to 512 [ 41.995427][ T4375] EXT4-fs: Ignoring removed oldalloc option [ 42.059065][ T4375] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.097415][ T4375] ext4 filesystem being mounted at /71/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 42.164001][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.251353][ T4395] unsupported nla_type 52263 [ 42.288464][ T4398] netlink: 4 bytes leftover after parsing attributes in process `syz.3.391'. [ 42.330148][ T4398] team_slave_0: entered promiscuous mode [ 42.336153][ T4398] team_slave_1: entered promiscuous mode [ 42.352379][ T4398] macsec1: entered promiscuous mode [ 42.358006][ T4398] team0: entered promiscuous mode [ 42.363291][ T4398] macsec1: entered allmulticast mode [ 42.368877][ T4398] team0: entered allmulticast mode [ 42.374001][ T4398] team_slave_0: entered allmulticast mode [ 42.379814][ T4398] team_slave_1: entered allmulticast mode [ 42.387018][ T2992] udevd[2992]: worker [3726] terminated by signal 33 (Unknown signal 33) [ 42.395583][ T2992] udevd[2992]: worker [3726] failed while handling '/devices/virtual/block/loop4' [ 42.408952][ T4398] team0: Device macsec1 is already an upper device of the team interface [ 42.433441][ T4398] team0: left allmulticast mode [ 42.438785][ T4398] team_slave_0: left allmulticast mode [ 42.444381][ T4398] team_slave_1: left allmulticast mode [ 42.449961][ T4398] team0: left promiscuous mode [ 42.455097][ T4398] team_slave_0: left promiscuous mode [ 42.460709][ T4398] team_slave_1: left promiscuous mode [ 42.557773][ T4378] geneve0: entered promiscuous mode [ 42.563272][ T4378] geneve0: entered allmulticast mode [ 42.899297][ T4429] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 42.908023][ T1035] IPVS: starting estimator thread 0... [ 42.956134][ T4435] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 42.996780][ T4433] IPVS: using max 2640 ests per chain, 132000 per kthread [ 43.152694][ T4450] netlink: 36 bytes leftover after parsing attributes in process `syz.3.414'. [ 43.233440][ T4456] loop0: detected capacity change from 0 to 1024 [ 43.304835][ T4456] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 43.337860][ T4456] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.442275][ T4456] EXT4-fs error (device loop0): ext4_free_blocks:6696: comm syz.0.417: Freeing blocks not in datazone - block = 0, count = 16 [ 43.460992][ T4456] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 43.478761][ T4456] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 43.491375][ T4456] EXT4-fs (loop0): This should not happen!! Data will be lost [ 43.491375][ T4456] [ 43.501357][ T4456] EXT4-fs (loop0): Total free blocks count 0 [ 43.507462][ T4456] EXT4-fs (loop0): Free/Dirty block details [ 43.513548][ T4456] EXT4-fs (loop0): free_blocks=4293918720 [ 43.519444][ T4456] EXT4-fs (loop0): dirty_blocks=16 [ 43.524648][ T4456] EXT4-fs (loop0): Block reservation details [ 43.531024][ T4456] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 43.548386][ T4483] SELinux: Context @ is not valid (left unmapped). [ 43.663719][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 43.908799][ T4529] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.446'. [ 43.918583][ T4524] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.446'. [ 44.152920][ T4547] loop3: detected capacity change from 0 to 1024 [ 44.177418][ T4547] EXT4-fs: inline encryption not supported [ 44.230671][ T4547] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.235447][ T4557] loop4: detected capacity change from 0 to 1024 [ 44.260799][ T4557] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.333130][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.342455][ T4557] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 44.379796][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.979366][ T4626] netlink: 'syz.2.481': attribute type 1 has an invalid length. [ 45.085966][ T4637] netlink: 'syz.3.486': attribute type 1 has an invalid length. [ 45.255985][ T4647] netlink: 4 bytes leftover after parsing attributes in process `syz.1.491'. [ 45.357885][ T4663] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4663 comm=syz.4.498 [ 45.504201][ T4672] wireguard0: entered promiscuous mode [ 45.509826][ T4672] wireguard0: entered allmulticast mode [ 45.708341][ T4694] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 45.732988][ T4694] vhci_hcd: invalid port number 118 [ 45.738374][ T4694] vhci_hcd: default hub control req: 2317 v0008 i0076 l0 [ 45.894837][ T4716] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4716 comm=+}[@ [ 46.120666][ T29] kauditd_printk_skb: 112 callbacks suppressed [ 46.120745][ T29] audit: type=1326 audit(1754566599.908:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4722 comm="syz.4.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8b4d9ebe9 code=0x7ffc0000 [ 46.195797][ T29] audit: type=1326 audit(1754566599.948:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4722 comm="syz.4.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=460 compat=0 ip=0x7fc8b4d9ebe9 code=0x7ffc0000 [ 46.220411][ T29] audit: type=1326 audit(1754566599.948:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4722 comm="syz.4.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8b4d9ebe9 code=0x7ffc0000 [ 46.265997][ T4729] program syz.4.529 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 46.570176][ T29] audit: type=1326 audit(1754566600.358:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4737 comm="syz.4.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8b4d9ebe9 code=0x7ffc0000 [ 46.655251][ T29] audit: type=1326 audit(1754566600.358:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4737 comm="syz.4.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8b4d9ebe9 code=0x7ffc0000 [ 46.678771][ T29] audit: type=1326 audit(1754566600.358:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4737 comm="syz.4.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fc8b4d9ebe9 code=0x7ffc0000 [ 46.701958][ T29] audit: type=1326 audit(1754566600.358:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4737 comm="syz.4.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8b4d9ebe9 code=0x7ffc0000 [ 46.725997][ T29] audit: type=1326 audit(1754566600.358:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4737 comm="syz.4.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8b4d9ebe9 code=0x7ffc0000 [ 46.750055][ T29] audit: type=1326 audit(1754566600.358:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4737 comm="syz.4.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=193 compat=0 ip=0x7fc8b4d9ebe9 code=0x7ffc0000 [ 46.773948][ T29] audit: type=1326 audit(1754566600.358:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4737 comm="syz.4.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8b4d9ebe9 code=0x7ffc0000 [ 46.808030][ T4745] netlink: 28 bytes leftover after parsing attributes in process `syz.4.537'. [ 47.026865][ T3389] IPVS: starting estimator thread 0... [ 47.106535][ T4775] netlink: 104 bytes leftover after parsing attributes in process `syz.4.549'. [ 47.116895][ T4769] IPVS: using max 2496 ests per chain, 124800 per kthread [ 47.217207][ T4789] netlink: 92 bytes leftover after parsing attributes in process `syz.0.556'. [ 47.263297][ C1] hrtimer: interrupt took 61065 ns [ 47.301057][ T4799] loop4: detected capacity change from 0 to 128 [ 48.167262][ T4876] SELinux: failed to load policy [ 48.409996][ T4905] netlink: 24 bytes leftover after parsing attributes in process `syz.4.609'. [ 48.419126][ T4905] netlink: 212 bytes leftover after parsing attributes in process `syz.4.609'. [ 48.569478][ T4921] loop2: detected capacity change from 0 to 512 [ 48.586854][ T4921] EXT4-fs: test_dummy_encryption option not supported [ 48.606229][ T4923] netlink: 27 bytes leftover after parsing attributes in process `syz.4.618'. [ 48.829645][ T4947] SELinux: Context is not valid (left unmapped). [ 49.323560][ T5014] netlink: 7 bytes leftover after parsing attributes in process `syz.2.661'. [ 49.335120][ T5014] netlink: 7 bytes leftover after parsing attributes in process `syz.2.661'. [ 49.389005][ T5018] netlink: 4 bytes leftover after parsing attributes in process `syz.2.663'. [ 49.427010][ T5008] loop3: detected capacity change from 0 to 32768 [ 49.480750][ T5008] loop3: p1 p2 p3 < p5 p6 p7 > [ 49.489823][ T5008] loop3: p2 size 16775168 extends beyond EOD, truncated [ 49.498020][ T5008] loop3: p5 start 4294970168 is beyond EOD, truncated [ 49.894969][ T5060] loop0: detected capacity change from 0 to 32768 [ 49.937347][ T5091] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5091 comm=syz.4.698 [ 49.947471][ T5060] loop0: p1 p2 p3 < p5 p6 p7 > [ 49.949906][ T5091] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=5091 comm=syz.4.698 [ 50.004311][ T5060] loop0: p2 size 16775168 extends beyond EOD, truncated [ 50.016977][ T5060] loop0: p5 start 4294970168 is beyond EOD, truncated [ 50.068837][ T5106] loop2: detected capacity change from 0 to 1024 [ 50.080093][ T5102] geneve2: entered promiscuous mode [ 50.085411][ T5102] geneve2: entered allmulticast mode [ 50.104654][ T5106] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 50.117703][ T5106] ext4 filesystem being mounted at /149/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.148564][ T5106] EXT4-fs error (device loop2): ext4_free_blocks:6696: comm syz.2.705: Freeing blocks not in datazone - block = 0, count = 16 [ 50.217614][ T12] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 50.244239][ T12] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 28 [ 50.256657][ T12] EXT4-fs (loop2): This should not happen!! Data will be lost [ 50.256657][ T12] [ 50.266512][ T12] EXT4-fs (loop2): Total free blocks count 0 [ 50.272748][ T12] EXT4-fs (loop2): Free/Dirty block details [ 50.278742][ T12] EXT4-fs (loop2): free_blocks=4293918736 [ 50.284460][ T12] EXT4-fs (loop2): dirty_blocks=16 [ 50.289614][ T12] EXT4-fs (loop2): Block reservation details [ 50.295578][ T12] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 50.302794][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 50.784880][ T5124] Set syz1 is full, maxelem 65536 reached [ 50.890035][ T5166] loop3: detected capacity change from 0 to 1024 [ 50.901186][ T5168] __nla_validate_parse: 1 callbacks suppressed [ 50.901201][ T5168] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.728'. [ 50.918536][ T5158] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.728'. [ 50.943722][ T5166] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.966439][ T5171] 9pnet: Could not find request transport: f [ 50.989760][ T5182] netlink: 'syz.1.735': attribute type 3 has an invalid length. [ 50.995198][ T5178] netlink: 'syz.2.737': attribute type 1 has an invalid length. [ 51.044400][ T5166] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.732: Allocating blocks 449-513 which overlap fs metadata [ 51.062829][ T5190] netlink: 8 bytes leftover after parsing attributes in process `syz.0.742'. [ 51.149674][ T5165] EXT4-fs (loop3): pa ffff888106f030e0: logic 48, phys. 177, len 21 [ 51.157799][ T5165] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 51.206963][ T29] kauditd_printk_skb: 181 callbacks suppressed [ 51.206978][ T29] audit: type=1326 audit(1754566604.998:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5211 comm="syz.1.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8fec0c5ba7 code=0x7ffc0000 [ 51.245976][ T29] audit: type=1326 audit(1754566605.028:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5211 comm="syz.1.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8fec06add9 code=0x7ffc0000 [ 51.269499][ T29] audit: type=1326 audit(1754566605.028:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5211 comm="syz.1.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8fec0c5ba7 code=0x7ffc0000 [ 51.278624][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.293102][ T29] audit: type=1326 audit(1754566605.028:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5211 comm="syz.1.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8fec06add9 code=0x7ffc0000 [ 51.325489][ T29] audit: type=1326 audit(1754566605.028:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5211 comm="syz.1.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8fec0c5ba7 code=0x7ffc0000 [ 51.350264][ T29] audit: type=1326 audit(1754566605.028:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5211 comm="syz.1.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8fec06add9 code=0x7ffc0000 [ 51.374011][ T29] audit: type=1326 audit(1754566605.028:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5211 comm="syz.1.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8fec0c5ba7 code=0x7ffc0000 [ 51.397984][ T29] audit: type=1326 audit(1754566605.028:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5211 comm="syz.1.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8fec06add9 code=0x7ffc0000 [ 51.421674][ T29] audit: type=1326 audit(1754566605.028:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5211 comm="syz.1.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8fec0c5ba7 code=0x7ffc0000 [ 51.445146][ T29] audit: type=1326 audit(1754566605.028:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5211 comm="syz.1.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8fec06add9 code=0x7ffc0000 [ 51.889399][ T5248] netlink: 36 bytes leftover after parsing attributes in process `syz.0.767'. [ 51.988603][ T5260] netlink: 96 bytes leftover after parsing attributes in process `syz.4.774'. [ 52.095783][ T5275] loop3: detected capacity change from 0 to 512 [ 52.121594][ T5275] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 52.141299][ T5275] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 52.221964][ T5289] loop4: detected capacity change from 0 to 512 [ 52.232250][ T5275] EXT4-fs (loop3): 1 truncate cleaned up [ 52.239285][ T5291] netlink: 4 bytes leftover after parsing attributes in process `syz.2.787'. [ 52.253269][ T5289] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 52.266121][ T5289] EXT4-fs (loop4): orphan cleanup on readonly fs [ 52.274476][ T5275] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.286832][ T5291] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 52.295640][ T5291] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (133) [ 52.306499][ T5289] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.786: Failed to acquire dquot type 1 [ 52.323912][ T5289] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.786: bg 0: block 40: padding at end of block bitmap is not set [ 52.366801][ T5289] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 52.376141][ T5289] EXT4-fs (loop4): 1 truncate cleaned up [ 52.383848][ T5289] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 52.385114][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.432971][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.508511][ T5300] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 52.516855][ T5300] vhci_hcd: invalid port number 118 [ 52.523044][ T5300] vhci_hcd: default hub control req: 2317 v0008 i0076 l0 [ 52.595152][ T5314] loop3: detected capacity change from 0 to 1024 [ 52.618471][ T5314] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 52.632437][ T5314] ext4 filesystem being mounted at /142/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.649036][ T5314] EXT4-fs error (device loop3): ext4_free_blocks:6696: comm syz.3.798: Freeing blocks not in datazone - block = 0, count = 16 [ 52.707970][ T1477] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 52.743152][ T1477] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 28 [ 52.756467][ T1477] EXT4-fs (loop3): This should not happen!! Data will be lost [ 52.756467][ T1477] [ 52.766292][ T1477] EXT4-fs (loop3): Total free blocks count 0 [ 52.772394][ T1477] EXT4-fs (loop3): Free/Dirty block details [ 52.778393][ T1477] EXT4-fs (loop3): free_blocks=4293918736 [ 52.784154][ T1477] EXT4-fs (loop3): dirty_blocks=16 [ 52.789430][ T1477] EXT4-fs (loop3): Block reservation details [ 52.795497][ T1477] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 52.812333][ T5323] loop0: detected capacity change from 0 to 512 [ 52.819340][ T5323] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 52.831423][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 52.848538][ T5323] EXT4-fs (loop0): 1 truncate cleaned up [ 52.851712][ T5330] sd 0:0:1:0: device reset [ 52.854672][ T5323] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.904304][ T5332] netlink: 'syz.3.802': attribute type 10 has an invalid length. [ 52.919480][ T5332] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.929567][ T5332] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 52.942381][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.944874][ T5332] bond0: entered promiscuous mode [ 52.956837][ T5332] bond_slave_0: entered promiscuous mode [ 52.962704][ T5332] bond_slave_1: entered promiscuous mode [ 52.968492][ T5332] batadv0: entered promiscuous mode [ 52.987379][ T5340] loop0: detected capacity change from 0 to 764 [ 52.994917][ T5340] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 53.089215][ T5359] netlink: 'syz.2.818': attribute type 21 has an invalid length. [ 53.097266][ T5359] netlink: 132 bytes leftover after parsing attributes in process `syz.2.818'. [ 53.127418][ T5365] vhci_hcd: invalid port number 23 [ 53.194605][ T5375] loop2: detected capacity change from 0 to 512 [ 53.201670][ T5375] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 53.241892][ T5377] wireguard0: entered promiscuous mode [ 53.247718][ T5377] wireguard0: entered allmulticast mode [ 53.324716][ T5384] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 53.331381][ T5384] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 53.339846][ T5384] vhci_hcd vhci_hcd.0: Device attached [ 53.372034][ T5384] vhci_hcd vhci_hcd.0: port 0 already used [ 53.387643][ T5385] vhci_hcd: connection closed [ 53.387810][ T1477] vhci_hcd: stop threads [ 53.397023][ T1477] vhci_hcd: release socket [ 53.401436][ T1477] vhci_hcd: disconnect device [ 53.416154][ T5393] capability: warning: `syz.3.830' uses 32-bit capabilities (legacy support in use) [ 53.631717][ T5420] syzkaller1: entered promiscuous mode [ 53.637345][ T5420] syzkaller1: entered allmulticast mode [ 53.743474][ T5425] loop3: detected capacity change from 0 to 764 [ 53.751190][ T5425] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 53.802221][ T5431] SELinux: failed to load policy [ 53.826214][ T5437] netlink: 'syz.4.853': attribute type 21 has an invalid length. [ 53.834732][ T5437] netlink: 132 bytes leftover after parsing attributes in process `syz.4.853'. [ 54.109516][ T5480] autofs4:pid:5480:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(0.0), cmd(0xc0189375) [ 54.123105][ T5480] autofs4:pid:5480:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189375) [ 54.126334][ T5484] netlink: 4 bytes leftover after parsing attributes in process `syz.3.876'. [ 54.254191][ T5499] netlink: 'syz.3.883': attribute type 2 has an invalid length. [ 54.623961][ T5528] syzkaller1: entered promiscuous mode [ 54.629748][ T5528] syzkaller1: entered allmulticast mode [ 54.731732][ T5536] wireguard0: entered promiscuous mode [ 54.737414][ T5536] wireguard0: entered allmulticast mode [ 54.805182][ T5541] netlink: 4 bytes leftover after parsing attributes in process `syz.2.903'. [ 54.962955][ T5560] syzkaller1: entered promiscuous mode [ 54.969122][ T5560] syzkaller1: entered allmulticast mode [ 55.252622][ T5593] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 55.430544][ T5620] autofs4:pid:5620:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(0.0), cmd(0xc0189375) [ 55.430899][ T5615] loop1: detected capacity change from 0 to 512 [ 55.444192][ T5620] autofs4:pid:5620:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189375) [ 55.481551][ T5615] EXT4-fs: test_dummy_encryption option not supported [ 55.634198][ T5637] loop0: detected capacity change from 0 to 2048 [ 55.686900][ T5637] loop0: p1 < > p2 p3 < p5 p6 > p4 [ 55.692241][ T5637] loop0: partition table partially beyond EOD, truncated [ 55.699678][ T5637] loop0: p1 start 4278190080 is beyond EOD, truncated [ 55.706617][ T5637] loop0: p2 start 16908800 is beyond EOD, truncated [ 55.723490][ T5637] loop0: p5 start 16908800 is beyond EOD, truncated [ 55.874058][ T5660] 8021q: adding VLAN 0 to HW filter on device bond2 [ 55.882186][ T5660] bond0: (slave bond2): Enslaving as an active interface with an up link [ 55.902605][ T5664] loop0: detected capacity change from 0 to 1024 [ 55.909956][ T5664] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 55.921015][ T5664] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 55.943237][ T5664] JBD2: no valid journal superblock found [ 55.949258][ T5664] EXT4-fs (loop0): Could not load journal inode [ 55.959435][ T5664] __nla_validate_parse: 3 callbacks suppressed [ 55.959450][ T5664] netlink: 8 bytes leftover after parsing attributes in process `syz.0.960'. [ 56.035296][ T5684] netlink: 8 bytes leftover after parsing attributes in process `syz.0.969'. [ 56.046315][ T5684] gtp0: entered promiscuous mode [ 56.051513][ T5684] gtp0: entered allmulticast mode [ 56.117491][ T5691] netlink: 8 bytes leftover after parsing attributes in process `syz.0.972'. [ 56.128116][ T5691] netlink: 8 bytes leftover after parsing attributes in process `syz.0.972'. [ 56.137272][ T5691] netlink: 8 bytes leftover after parsing attributes in process `syz.0.972'. [ 56.147371][ T5691] netlink: 8 bytes leftover after parsing attributes in process `syz.0.972'. [ 56.216943][ T5697] loop0: detected capacity change from 0 to 2048 [ 56.248665][ T29] kauditd_printk_skb: 368 callbacks suppressed [ 56.248681][ T29] audit: type=1400 audit(1754569188.042:1141): avc: denied { module_request } for pid=5700 comm="syz.2.978" kmod="crypto-ecb(cipher_null)" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 56.265062][ T5697] loop0: p1 < > p4 [ 56.283778][ T5697] loop0: p4 size 8388608 extends beyond EOD, truncated [ 56.300678][ T29] audit: type=1400 audit(1754569188.092:1142): avc: denied { read write } for pid=5696 comm="syz.0.976" name="loop0p4" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 56.324086][ T29] audit: type=1400 audit(1754569188.092:1143): avc: denied { open } for pid=5696 comm="syz.0.976" path="/dev/loop0p4" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 56.426798][ T29] audit: type=1400 audit(1754569188.222:1144): avc: denied { read } for pid=5709 comm="syz.1.979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 56.497419][ T5721] SELinux: security_context_str_to_sid ( ) failed with errno=-22 [ 56.793711][ T29] audit: type=1400 audit(1754569188.582:1145): avc: denied { create } for pid=5737 comm="syz.1.992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 56.821213][ T29] audit: type=1400 audit(1754569188.612:1146): avc: denied { setopt } for pid=5737 comm="syz.1.992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 56.823249][ T5738] tipc: Started in network mode [ 56.840839][ T5740] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 56.845709][ T5738] tipc: Node identity ac1414aa, cluster identity 4711 [ 56.852148][ T5740] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 56.852284][ T5740] vhci_hcd vhci_hcd.0: Device attached [ 56.874876][ T5738] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 56.882168][ T5738] tipc: Enabled bearer , priority 10 [ 56.962226][ T5741] vhci_hcd: connection closed [ 56.962492][ T1477] vhci_hcd: stop threads [ 56.971491][ T1477] vhci_hcd: release socket [ 56.976142][ T1477] vhci_hcd: disconnect device [ 57.006457][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 57.146424][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 57.265226][ T5752] 8021q: adding VLAN 0 to HW filter on device bond1 [ 57.273823][ T5752] bond0: (slave bond1): Enslaving as an active interface with an up link [ 57.286400][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 57.301201][ T5755] netlink: 178504 bytes leftover after parsing attributes in process `syz.2.999'. [ 57.313495][ T29] audit: type=1400 audit(1754569189.102:1147): avc: denied { sqpoll } for pid=5758 comm="syz.0.1001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 57.349684][ T29] audit: type=1400 audit(1754569189.142:1148): avc: denied { setopt } for pid=5763 comm="syz.0.1003" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 57.370388][ T29] audit: type=1400 audit(1754569189.142:1149): avc: denied { read } for pid=5756 comm="syz.4.1000" laddr=172.20.20.170 lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 57.417477][ T29] audit: type=1326 audit(1754569189.202:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5767 comm="syz.2.1005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19a65bebe9 code=0x7ffc0000 [ 57.426414][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 57.566360][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 57.625666][ T5789] atomic_op ffff8881036e8928 conn xmit_atomic 0000000000000000 [ 57.700859][ T5802] capability: warning: `syz.3.1019' uses deprecated v2 capabilities in a way that may be insecure [ 57.706384][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 57.846342][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 57.941058][ T5843] netlink: 'syz.3.1040': attribute type 1 has an invalid length. [ 57.949150][ T5843] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.1040'. [ 57.986333][ T23] tipc: Node number set to 2886997162 [ 58.126299][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 58.151321][ T5868] sd 0:0:1:0: device reset [ 58.396273][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 58.968468][ T5911] netlink: 178504 bytes leftover after parsing attributes in process `syz.0.1070'. [ 59.167237][ T5917] loop0: detected capacity change from 0 to 1024 [ 59.189711][ T5917] EXT4-fs: inline encryption not supported [ 59.198448][ T5917] EXT4-fs: Ignoring removed bh option [ 59.222083][ T5917] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.281515][ T3397] Process accounting resumed [ 59.288479][ T5917] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 59.361183][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.442787][ T5942] sctp: [Deprecated]: syz.3.1085 (pid 5942) Use of int in maxseg socket option. [ 59.442787][ T5942] Use struct sctp_assoc_value instead [ 59.459808][ T5945] loop2: detected capacity change from 0 to 256 [ 59.565968][ T5964] 9pnet_fd: Insufficient options for proto=fd [ 59.701671][ T5990] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 59.726599][ T5995] loop1: detected capacity change from 0 to 1024 [ 59.733976][ T5995] EXT4-fs: inline encryption not supported [ 59.740415][ T5995] EXT4-fs: Ignoring removed bh option [ 59.765085][ T5995] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.782681][ T23] Process accounting resumed [ 59.790181][ T5995] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 59.835724][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.884713][ T6023] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 59.930113][ T6032] loop2: detected capacity change from 0 to 1024 [ 59.943891][ T6030] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 59.944847][ T6032] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0003] [ 59.950621][ T6030] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 59.950704][ T6030] vhci_hcd vhci_hcd.0: Device attached [ 59.959660][ T6032] System zones: 0-1, 3-36 [ 59.977390][ T6036] loop3: detected capacity change from 0 to 1024 [ 59.986895][ T6032] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.987739][ T6037] vhci_hcd: connection closed [ 60.004724][ T6036] EXT4-fs: inline encryption not supported [ 60.015780][ T41] vhci_hcd: stop threads [ 60.020290][ T41] vhci_hcd: release socket [ 60.020440][ T6036] EXT4-fs: Ignoring removed bh option [ 60.024780][ T41] vhci_hcd: disconnect device [ 60.045917][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.059166][ T6036] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.079959][ T10] Process accounting resumed [ 60.086277][ T6036] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 60.106188][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.239068][ T6074] loop2: detected capacity change from 0 to 1024 [ 60.249241][ T6074] EXT4-fs: inline encryption not supported [ 60.256281][ T6074] EXT4-fs: Ignoring removed bh option [ 60.267679][ T6074] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.283107][ T23] Process accounting resumed [ 60.288964][ T6074] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 60.310490][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.383423][ T6097] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1152'. [ 60.460613][ T3397] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=3397 comm=kworker/0:5 [ 60.473850][ T6111] 9pnet: p9_errstr2errno: server reported unknown error 184467 [ 60.566529][ T6118] usb usb8: usbfs: process 6118 (syz.2.1162) did not claim interface 0 before use [ 60.611370][ T6127] Q6\bY4: renamed from lo (while UP) [ 61.287681][ T6175] loop1: detected capacity change from 0 to 1024 [ 61.298391][ T6175] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 61.310731][ T6175] ext4 filesystem being mounted at /231/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.327453][ T29] kauditd_printk_skb: 179 callbacks suppressed [ 61.327468][ T29] audit: type=1400 audit(1754569193.122:1330): avc: denied { read } for pid=6173 comm="syz.1.1196" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 61.359127][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 61.837717][ T6190] loop2: detected capacity change from 0 to 128 [ 61.850653][ T6190] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 61.865412][ T6190] ext4 filesystem being mounted at /272/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 61.906994][ T29] audit: type=1400 audit(1754569193.702:1331): avc: denied { create } for pid=6189 comm="syz.2.1190" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 61.940920][ T3305] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 61.951215][ T29] audit: type=1400 audit(1754569193.722:1332): avc: denied { read open } for pid=6189 comm="syz.2.1190" path="/272/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 61.996218][ T29] audit: type=1400 audit(1754569193.722:1333): avc: denied { setattr } for pid=6189 comm="syz.2.1190" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 62.022801][ T6195] netlink: 340 bytes leftover after parsing attributes in process `syz.1.1197'. [ 62.025823][ C1] net_ratelimit: 3 callbacks suppressed [ 62.025837][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 62.048530][ T6195] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1197'. [ 62.117895][ T6201] netlink: 'syz.1.1199': attribute type 3 has an invalid length. [ 62.151712][ T29] audit: type=1326 audit(1754569193.943:1334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6203 comm="syz.4.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8b4d9ebe9 code=0x7ffc0000 [ 62.175511][ T29] audit: type=1326 audit(1754569193.943:1335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6203 comm="syz.4.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8b4d9ebe9 code=0x7ffc0000 [ 62.259863][ T6219] loop3: detected capacity change from 0 to 512 [ 62.266954][ T29] audit: type=1326 audit(1754569193.943:1336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6203 comm="syz.4.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc8b4d9ebe9 code=0x7ffc0000 [ 62.290715][ T29] audit: type=1326 audit(1754569193.943:1337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6203 comm="syz.4.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8b4d9ebe9 code=0x7ffc0000 [ 62.298328][ T6219] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.1207: corrupted in-inode xattr: invalid ea_ino [ 62.314398][ T29] audit: type=1326 audit(1754569193.943:1338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6203 comm="syz.4.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc8b4d9ebe9 code=0x7ffc0000 [ 62.330027][ T6219] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.1207: couldn't read orphan inode 15 (err -117) [ 62.351530][ T29] audit: type=1326 audit(1754569193.943:1339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6203 comm="syz.4.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8b4d9ebe9 code=0x7ffc0000 [ 62.391102][ T6219] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.404900][ T6219] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.463396][ T6229] pimreg: entered allmulticast mode [ 62.598072][ T6254] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 62.609559][ T6261] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1228'. [ 62.618580][ T6254] SELinux: failed to load policy [ 62.658786][ T6263] netlink: 4436 bytes leftover after parsing attributes in process `syz.4.1229'. [ 62.688216][ T6268] bond2 (unregistering): Released all slaves [ 62.702701][ T6263] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 62.723354][ T6261] bond2: entered promiscuous mode [ 62.732410][ T6261] 8021q: adding VLAN 0 to HW filter on device bond2 [ 62.802728][ T6284] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1238'. [ 62.899401][ T6302] pimreg: entered allmulticast mode [ 63.065718][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 63.224122][ T6340] loop3: detected capacity change from 0 to 1024 [ 63.280339][ T6340] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 63.306024][ T6340] ext4 filesystem being mounted at /253/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.389006][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 63.426063][ T6363] ip6tnl1: entered promiscuous mode [ 63.431309][ T6363] ip6tnl1: entered allmulticast mode [ 63.508505][ T6373] loop3: detected capacity change from 0 to 1024 [ 63.516635][ T6373] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 63.526451][ T6373] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 63.536649][ T6373] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 63.548183][ T6373] EXT4-fs error (device loop3): ext4_get_journal_inode:5796: inode #5: comm syz.3.1281: unexpected bad inode w/o EXT4_IGET_BAD [ 63.562963][ T6373] EXT4-fs (loop3): no journal found [ 63.568569][ T6373] EXT4-fs (loop3): can't get journal size [ 63.577738][ T6373] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 63.611469][ T6373] EXT4-fs error (device loop3): ext4_inlinedir_to_tree:1314: inode #12: block 16: comm syz.3.1281: path /256/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=20, inode=13, rec_len=16, size=60 fake=0 [ 63.664212][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.770675][ T6403] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 63.779274][ T6403] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 64.028217][ T6419] loop1: detected capacity change from 0 to 512 [ 64.095650][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 64.209743][ T6434] loop0: detected capacity change from 0 to 128 [ 64.218801][ T6434] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 64.232846][ T6434] ext4 filesystem being mounted at /239/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.256317][ T3314] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 64.272310][ T6439] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1311'. [ 64.284738][ T6439] IPVS: Error joining to the multicast group [ 64.327481][ T6441] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 64.336940][ T6448] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1314'. [ 64.357432][ T6448] macsec1: entered promiscuous mode [ 64.362818][ T6448] team0: entered promiscuous mode [ 64.368081][ T6448] team_slave_0: entered promiscuous mode [ 64.373828][ T6448] team_slave_1: entered promiscuous mode [ 64.379665][ T6448] macsec1: entered allmulticast mode [ 64.384985][ T6448] team0: entered allmulticast mode [ 64.390313][ T6448] team_slave_0: entered allmulticast mode [ 64.396155][ T6448] team_slave_1: entered allmulticast mode [ 64.402846][ T6448] team0: Device macsec1 is already an upper device of the team interface [ 64.416635][ T6448] team0: left allmulticast mode [ 64.421569][ T6448] team_slave_0: left allmulticast mode [ 64.427446][ T6448] team_slave_1: left allmulticast mode [ 64.433042][ T6448] team0: left promiscuous mode [ 64.438007][ T6448] team_slave_0: left promiscuous mode [ 64.443542][ T6448] team_slave_1: left promiscuous mode [ 64.509304][ T6463] loop4: detected capacity change from 0 to 512 [ 64.516181][ T6465] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1329'. [ 64.527773][ T6463] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.1320: corrupted in-inode xattr: invalid ea_ino [ 64.546502][ T6463] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.1320: couldn't read orphan inode 15 (err -117) [ 64.559438][ T6463] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.572906][ T6463] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.777112][ T6494] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1332'. [ 64.791126][ T6493] netlink: 'syz.3.1333': attribute type 1 has an invalid length. [ 64.791234][ T6494] team_slave_0: entered promiscuous mode [ 64.804860][ T6494] team_slave_1: entered promiscuous mode [ 64.812077][ T6494] macsec1: entered promiscuous mode [ 64.817510][ T6494] team0: entered promiscuous mode [ 64.822910][ T6494] macsec1: entered allmulticast mode [ 64.828565][ T6494] team0: entered allmulticast mode [ 64.833705][ T6494] team_slave_0: entered allmulticast mode [ 64.839476][ T6494] team_slave_1: entered allmulticast mode [ 64.847169][ T6494] team0: Device macsec1 is already an upper device of the team interface [ 64.867013][ T6494] team0: left allmulticast mode [ 64.871902][ T6494] team_slave_0: left allmulticast mode [ 64.877415][ T6494] team_slave_1: left allmulticast mode [ 64.883088][ T6494] team0: left promiscuous mode [ 64.888113][ T6494] team_slave_0: left promiscuous mode [ 64.893517][ T6494] team_slave_1: left promiscuous mode [ 64.963922][ T6503] 9pnet_fd: Insufficient options for proto=fd [ 64.975971][ T6504] loop2: detected capacity change from 0 to 512 [ 64.984427][ T6504] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.1338: corrupted in-inode xattr: invalid ea_ino [ 64.999235][ T6504] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.1338: couldn't read orphan inode 15 (err -117) [ 65.013457][ T6504] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.028054][ T6504] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.038081][ T6509] openvswitch: netlink: Message has 6 unknown bytes. [ 65.123510][ T6523] netlink: 'syz.3.1348': attribute type 1 has an invalid length. [ 65.145599][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 65.350517][ T6529] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1350'. [ 65.363913][ T6529] team_slave_0: entered promiscuous mode [ 65.369794][ T6529] team_slave_1: entered promiscuous mode [ 65.377996][ T6529] macsec1: entered promiscuous mode [ 65.383503][ T6529] team0: entered promiscuous mode [ 65.389240][ T6529] macsec1: entered allmulticast mode [ 65.394734][ T6529] team0: entered allmulticast mode [ 65.400353][ T6529] team_slave_0: entered allmulticast mode [ 65.406586][ T6529] team_slave_1: entered allmulticast mode [ 65.414535][ T6529] team0: Device macsec1 is already an upper device of the team interface [ 65.424462][ T6529] team0: left allmulticast mode [ 65.429994][ T6529] team_slave_0: left allmulticast mode [ 65.436074][ T6529] team_slave_1: left allmulticast mode [ 65.441729][ T6529] team0: left promiscuous mode [ 65.446823][ T6529] team_slave_0: left promiscuous mode [ 65.452356][ T6529] team_slave_1: left promiscuous mode [ 65.499211][ T6543] loop1: detected capacity change from 0 to 512 [ 65.508918][ T6543] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.1354: corrupted in-inode xattr: invalid ea_ino [ 65.523173][ T6543] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.1354: couldn't read orphan inode 15 (err -117) [ 65.538169][ T6543] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.561019][ T6543] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.744773][ T6572] loop4: detected capacity change from 0 to 512 [ 65.755154][ T6572] journal_path: Non-blockdev passed as './bus' [ 65.761482][ T6572] EXT4-fs: error: could not find journal device path [ 66.062860][ T6609] loop0: detected capacity change from 0 to 512 [ 66.175341][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 66.187128][ T6609] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #15: comm syz.0.1387: corrupted in-inode xattr: invalid ea_ino [ 66.200903][ T6609] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.1387: couldn't read orphan inode 15 (err -117) [ 66.214693][ T6609] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.228550][ T6609] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.634583][ T29] kauditd_printk_skb: 131 callbacks suppressed [ 66.634599][ T29] audit: type=1400 audit(1754569198.413:1471): avc: denied { write } for pid=6626 comm="syz.4.1396" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 66.746335][ T29] audit: type=1400 audit(1754569198.513:1472): avc: denied { read } for pid=6634 comm="syz.4.1400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 66.773897][ T6638] loop4: detected capacity change from 0 to 512 [ 66.808972][ T29] audit: type=1326 audit(1754569198.583:1473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6643 comm="syz.2.1404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19a65bebe9 code=0x7ffc0000 [ 66.832952][ T29] audit: type=1326 audit(1754569198.583:1474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6643 comm="syz.2.1404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19a65bebe9 code=0x7ffc0000 [ 66.856548][ T29] audit: type=1326 audit(1754569198.583:1475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6643 comm="syz.2.1404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=191 compat=0 ip=0x7f19a65bebe9 code=0x7ffc0000 [ 66.879950][ T29] audit: type=1326 audit(1754569198.583:1476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6643 comm="syz.2.1404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19a65bebe9 code=0x7ffc0000 [ 66.941165][ T6638] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.956625][ T29] audit: type=1326 audit(1754569198.713:1477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6653 comm="syz.1.1407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fec0cebe9 code=0x7ffc0000 [ 66.980477][ T29] audit: type=1326 audit(1754569198.713:1478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6653 comm="syz.1.1407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fec0cebe9 code=0x7ffc0000 [ 66.995455][ T6638] ext4 filesystem being mounted at /266/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.004250][ T29] audit: type=1326 audit(1754569198.723:1479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6653 comm="syz.1.1407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8fec0cebe9 code=0x7ffc0000 [ 67.039321][ T29] audit: type=1326 audit(1754569198.723:1480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6653 comm="syz.1.1407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fec0cebe9 code=0x7ffc0000 [ 67.078672][ T6638] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1402: bg 0: block 328: padding at end of block bitmap is not set [ 67.113691][ T10] kernel write not supported for file bpf-prog (pid: 10 comm: kworker/0:1) [ 67.147476][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.199223][ T6668] sctp: [Deprecated]: syz.4.1413 (pid 6668) Use of struct sctp_assoc_value in delayed_ack socket option. [ 67.199223][ T6668] Use struct sctp_sack_info instead [ 67.225226][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 67.288785][ T6681] bond2: entered promiscuous mode [ 67.293955][ T6681] bond2: entered allmulticast mode [ 67.305544][ T6681] 8021q: adding VLAN 0 to HW filter on device bond2 [ 67.316047][ T6681] bond2 (unregistering): Released all slaves [ 67.386435][ T6701] random: crng reseeded on system resumption [ 67.397712][ T6701] Restarting kernel threads ... [ 67.411159][ T6701] Done restarting kernel threads. [ 67.521176][ T6724] pimreg: entered allmulticast mode [ 67.530390][ T6724] pimreg: left allmulticast mode [ 67.559163][ T6726] vhci_hcd: invalid port number 96 [ 67.564575][ T6726] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 67.729155][ T6764] pimreg: entered allmulticast mode [ 67.739696][ T6764] pimreg: left allmulticast mode [ 67.767779][ T1477] tipc: Subscription rejected, illegal request [ 67.780205][ T6774] __nla_validate_parse: 2 callbacks suppressed [ 67.780229][ T6774] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1464'. [ 67.829626][ T6782] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1468'. [ 67.838808][ T6782] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1468'. [ 67.852883][ T1477] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.864218][ T1477] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.873448][ T1477] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.882751][ T1477] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.950780][ T6795] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 773 [ 68.150459][ T6807] loop2: detected capacity change from 0 to 7 [ 68.171430][ T6808] bond3: entered promiscuous mode [ 68.176658][ T6808] bond3: entered allmulticast mode [ 68.186118][ T6808] 8021q: adding VLAN 0 to HW filter on device bond3 [ 68.196935][ T6808] bond3 (unregistering): Released all slaves [ 68.255066][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 68.297919][ T6817] loop1: detected capacity change from 0 to 512 [ 68.320384][ T6821] sd 0:0:1:0: device reset [ 68.344242][ T6819] loop2: detected capacity change from 0 to 8192 [ 68.459093][ T6835] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 68.467026][ T6835] FAT-fs (loop2): Filesystem has been set read-only [ 68.480332][ T6819] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 2075) [ 68.490896][ T6819] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 2075) [ 68.501531][ T6819] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 2075) [ 68.576727][ T6853] ALSA: seq fatal error: cannot create timer (-22) [ 68.718079][ T6871] netlink: 'syz.0.1509': attribute type 13 has an invalid length. [ 68.735896][ T6871] Q6\bY4: entered promiscuous mode [ 68.742177][ T6871] Q6\bY4: entered allmulticast mode [ 68.750285][ T6871] tunl0: entered promiscuous mode [ 68.755492][ T6871] tunl0: entered allmulticast mode [ 68.762135][ T6871] gre0: entered promiscuous mode [ 68.767450][ T6871] gre0: entered allmulticast mode [ 68.787402][ T6871] gretap0: entered promiscuous mode [ 68.793010][ T6871] gretap0: entered allmulticast mode [ 68.801361][ T6871] gretap0: refused to change device tx_queue_len [ 68.810534][ T6883] loop1: detected capacity change from 0 to 128 [ 68.811196][ T6871] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 68.819906][ T6883] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 68.847707][ T6883] ext4 filesystem being mounted at /293/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.865673][ T6888] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1516'. [ 68.874895][ T6888] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1516'. [ 68.906092][ T6892] loop2: detected capacity change from 0 to 512 [ 68.914828][ T6892] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -13 [ 68.926736][ T6892] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #13: comm syz.2.1518: iget: bad i_size value: 12154757448730 [ 68.940456][ T6892] EXT4-fs (loop2): Remounting filesystem read-only [ 68.941121][ T3301] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 68.947719][ T6892] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.994272][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.997681][ T6897] bond1: entered promiscuous mode [ 69.008648][ T6897] bond1: entered allmulticast mode [ 69.014400][ T6897] 8021q: adding VLAN 0 to HW filter on device bond1 [ 69.027555][ T6897] bond1 (unregistering): Released all slaves [ 69.223979][ T6915] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=256 sclass=netlink_audit_socket pid=6915 comm=syz.0.1529 [ 69.253012][ T6917] openvswitch: netlink: Message has 6 unknown bytes. [ 69.294977][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 69.324668][ T6929] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1535'. [ 69.333843][ T6929] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1535'. [ 69.398624][ T6940] SELinux: Context system_u:object_r:syslogd_var_run_t:s0 is not valid (left unmapped). [ 69.543080][ T6963] loop0: detected capacity change from 0 to 128 [ 69.561526][ T6963] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 69.582249][ T6963] ext4 filesystem being mounted at /317/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.633311][ T6978] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1558'. [ 69.636246][ T6980] loop4: detected capacity change from 0 to 256 [ 69.649799][ T6980] FAT-fs (loop4): Directory bread(block 1285) failed [ 69.657567][ T6980] FAT-fs (loop4): Directory bread(block 1285) failed [ 69.664706][ T6980] FAT-fs (loop4): Directory bread(block 1285) failed [ 69.671956][ T6980] FAT-fs (loop4): Directory bread(block 1285) failed [ 69.672613][ T3314] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 69.758825][ T6988] loop0: detected capacity change from 0 to 512 [ 69.794676][ T6990] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1563'. [ 69.831378][ T6988] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -13 [ 69.853904][ T6995] loop3: detected capacity change from 0 to 1024 [ 69.872267][ T6988] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #13: comm syz.0.1560: iget: bad i_size value: 12154757448730 [ 69.872692][ T6995] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.916050][ T6988] EXT4-fs (loop0): Remounting filesystem read-only [ 69.923137][ T6988] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.968844][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.008004][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.106671][ T7014] loop0: detected capacity change from 0 to 2048 [ 70.136107][ T7014] loop0: p1 < > p4 [ 70.140622][ T7014] loop0: p4 size 8388608 extends beyond EOD, truncated [ 70.219125][ T7024] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1577'. [ 70.300455][ T7034] netlink: 'syz.3.1583': attribute type 1 has an invalid length. [ 70.334824][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 70.423369][ T7057] loop4: detected capacity change from 0 to 512 [ 70.430198][ T7057] EXT4-fs: Ignoring removed nobh option [ 70.437648][ T7057] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.1593: iget: bad i_size value: 38620345925642 [ 70.451091][ T7057] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.1593: couldn't read orphan inode 15 (err -117) [ 70.463872][ T7057] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.489634][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.590364][ T7070] netlink: 'syz.3.1598': attribute type 13 has an invalid length. [ 70.598235][ T7070] netlink: 'syz.3.1598': attribute type 17 has an invalid length. [ 70.610857][ T7070] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 70.644641][ T7074] loop4: detected capacity change from 0 to 128 [ 70.655398][ T7074] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 70.670123][ T7074] ext4 filesystem being mounted at /297/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.731027][ T3309] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 70.921793][ T7093] loop2: detected capacity change from 0 to 8192 [ 71.238198][ T7099] loop1: detected capacity change from 0 to 512 [ 71.246902][ T7099] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -13 [ 71.256214][ T7099] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #13: comm syz.1.1609: iget: bad i_size value: 12154757448730 [ 71.269482][ T7099] EXT4-fs (loop1): Remounting filesystem read-only [ 71.276588][ T7099] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.303562][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.353484][ T7117] loop2: detected capacity change from 0 to 128 [ 71.366648][ T7117] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 71.379378][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 71.392590][ T7117] ext4 filesystem being mounted at /351/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.446198][ T3305] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 71.480115][ T7129] loop0: detected capacity change from 0 to 512 [ 71.500290][ T7129] EXT4-fs: Ignoring removed nobh option [ 71.536992][ T7129] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 71.548593][ T7129] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it [ 71.558921][ T7129] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.1622: Corrupt directory, running e2fsck is recommended [ 71.575786][ T7129] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 71.601854][ T7137] loop3: detected capacity change from 0 to 512 [ 71.608504][ T7129] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #15: comm syz.0.1622: corrupted in-inode xattr: invalid ea_ino [ 71.622822][ T7129] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.1622: couldn't read orphan inode 15 (err -117) [ 71.622880][ T7137] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -13 [ 71.644751][ T7129] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.684749][ T7137] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #13: comm syz.3.1624: iget: bad i_size value: 12154757448730 [ 71.706909][ T7145] loop2: detected capacity change from 0 to 512 [ 71.726451][ T29] kauditd_printk_skb: 190 callbacks suppressed [ 71.726466][ T29] audit: type=1326 audit(1754569203.484:1671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7140 comm="syz.1.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fec0cebe9 code=0x7ffc0000 [ 71.756461][ T29] audit: type=1326 audit(1754569203.484:1672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7140 comm="syz.1.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fec0cebe9 code=0x7ffc0000 [ 71.780678][ T29] audit: type=1326 audit(1754569203.514:1673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7140 comm="syz.1.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8fec0cebe9 code=0x7ffc0000 [ 71.804710][ T29] audit: type=1326 audit(1754569203.514:1674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7140 comm="syz.1.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fec0cebe9 code=0x7ffc0000 [ 71.824976][ T7137] EXT4-fs (loop3): Remounting filesystem read-only [ 71.828888][ T29] audit: type=1326 audit(1754569203.514:1675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7140 comm="syz.1.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fec0cebe9 code=0x7ffc0000 [ 71.859762][ T29] audit: type=1326 audit(1754569203.514:1676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7140 comm="syz.1.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8fec0cebe9 code=0x7ffc0000 [ 71.860857][ T7137] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.883686][ T29] audit: type=1326 audit(1754569203.514:1677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7140 comm="syz.1.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fec0cebe9 code=0x7ffc0000 [ 71.919548][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.920169][ T29] audit: type=1326 audit(1754569203.514:1678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7140 comm="syz.1.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fec0cebe9 code=0x7ffc0000 [ 71.952901][ T29] audit: type=1326 audit(1754569203.514:1679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7140 comm="syz.1.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8fec0cebe9 code=0x7ffc0000 [ 71.994527][ T7145] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.009093][ T7145] ext4 filesystem being mounted at /355/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 72.020708][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.043259][ T29] audit: type=1326 audit(1754569203.804:1680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7140 comm="syz.1.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fec0cebe9 code=0x7ffc0000 [ 72.108313][ T7157] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 72.108313][ T7157] program syz.4.1633 not setting count and/or reply_len properly [ 72.199764][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.252349][ T7169] loop1: detected capacity change from 0 to 1024 [ 72.317808][ T7169] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.414557][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 72.424090][ T7179] loop0: detected capacity change from 0 to 8192 [ 72.511925][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.557540][ T7205] loop2: detected capacity change from 0 to 512 [ 72.565500][ T7205] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 72.580864][ T7209] SELinux: Context system_u:object_r:hald_sonypic_exec_t:s0 is not valid (left unmapped). [ 72.597492][ T7205] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.630392][ T7205] ext4 filesystem being mounted at /362/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 72.701321][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.992286][ T7253] IPVS: sync thread started: state = BACKUP, mcast_ifn = sit0, syncid = 0, id = 0 [ 72.997513][ T7255] loop1: detected capacity change from 0 to 1024 [ 73.021490][ T7255] EXT4-fs: Ignoring removed nomblk_io_submit option [ 73.031338][ T7255] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 73.086886][ T7255] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.110040][ T7266] loop2: detected capacity change from 0 to 512 [ 73.125316][ T7266] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 73.136963][ T7266] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 73.147180][ T7266] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.1682: Corrupt directory, running e2fsck is recommended [ 73.198315][ T7271] __nla_validate_parse: 8 callbacks suppressed [ 73.198393][ T7271] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1684'. [ 73.229013][ T7266] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 73.239001][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.267005][ T7266] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.1682: corrupted in-inode xattr: invalid ea_ino [ 73.310468][ T7266] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.1682: couldn't read orphan inode 15 (err -117) [ 73.320426][ T7275] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1686'. [ 73.331974][ T7275] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1686'. [ 73.362604][ T7266] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.387126][ T7266] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 73.398875][ T7266] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 73.402147][ T7281] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1688'. [ 73.409509][ T7266] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.1682: Corrupt directory, running e2fsck is recommended [ 73.433412][ T7266] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 3: comm syz.2.1682: path /368/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 73.454448][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 73.484727][ T7266] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 64: comm syz.2.1682: path /368/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 73.516295][ T7288] loop0: detected capacity change from 0 to 512 [ 73.532110][ T7288] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.1691: iget: bad i_size value: 38620345925642 [ 73.556992][ T7288] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.1691: couldn't read orphan inode 15 (err -117) [ 73.559974][ T7290] loop4: detected capacity change from 0 to 1024 [ 73.575898][ T7290] EXT4-fs: inline encryption not supported [ 73.581908][ T7290] EXT4-fs: Ignoring removed i_version option [ 73.596728][ T7288] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.628574][ T7290] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.642877][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.659827][ T7292] loop1: detected capacity change from 0 to 2048 [ 73.668403][ T7295] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.1691: bg 0: block 5: invalid block bitmap [ 73.691995][ T7290] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 73.708162][ T7295] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 73.720839][ T7295] EXT4-fs (loop0): This should not happen!! Data will be lost [ 73.720839][ T7295] [ 73.730640][ T7295] EXT4-fs (loop0): Total free blocks count 0 [ 73.736794][ T7295] EXT4-fs (loop0): Free/Dirty block details [ 73.743187][ T7295] EXT4-fs (loop0): free_blocks=0 [ 73.748330][ T7295] EXT4-fs (loop0): dirty_blocks=2224 [ 73.753627][ T7295] EXT4-fs (loop0): Block reservation details [ 73.759617][ T7295] EXT4-fs (loop0): i_reserved_data_blocks=2224 [ 73.771810][ T7292] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.794033][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.818170][ T7307] loop2: detected capacity change from 0 to 512 [ 73.883070][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.914015][ T7307] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.979251][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.989412][ T12] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 172 with error 28 [ 74.224588][ T7347] loop3: detected capacity change from 0 to 1024 [ 74.262017][ T7347] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 74.332276][ T7347] ext4 filesystem being mounted at /331/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.421281][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 74.469710][ T7369] loop3: detected capacity change from 0 to 1024 [ 74.480245][ T7371] loop4: detected capacity change from 0 to 512 [ 74.488382][ T7369] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 74.499316][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 74.506311][ T7369] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 74.521903][ T7371] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.536853][ T7371] ext4 filesystem being mounted at /316/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 74.623902][ T7369] JBD2: no valid journal superblock found [ 74.629720][ T7369] EXT4-fs (loop3): Could not load journal inode [ 74.659075][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.679248][ T7369] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 74.846484][ T7399] IPVS: Error connecting to the multicast addr [ 75.046386][ T7431] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1753'. [ 75.140421][ T7349] syz.1.1717 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 75.154856][ T7349] CPU: 1 UID: 0 PID: 7349 Comm: syz.1.1717 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(voluntary) [ 75.154887][ T7349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 75.154899][ T7349] Call Trace: [ 75.154905][ T7349] [ 75.154915][ T7349] __dump_stack+0x1d/0x30 [ 75.154938][ T7349] dump_stack_lvl+0xe8/0x140 [ 75.155037][ T7349] dump_stack+0x15/0x1b [ 75.155053][ T7349] dump_header+0x81/0x220 [ 75.155098][ T7349] oom_kill_process+0x342/0x400 [ 75.155206][ T7349] out_of_memory+0x979/0xb80 [ 75.155268][ T7349] try_charge_memcg+0x5e6/0x9e0 [ 75.155338][ T7349] obj_cgroup_charge_pages+0xa6/0x150 [ 75.155370][ T7349] __memcg_kmem_charge_page+0x9f/0x170 [ 75.155441][ T7349] __alloc_frozen_pages_noprof+0x188/0x360 [ 75.155485][ T7349] alloc_pages_mpol+0x1e0/0x250 [ 75.155518][ T7349] alloc_pages_noprof+0x90/0x130 [ 75.155630][ T7349] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 75.155796][ T7349] __kvmalloc_node_noprof+0x30f/0x4e0 [ 75.155849][ T7349] ? ip_set_alloc+0x1f/0x30 [ 75.155879][ T7349] ? ip_set_alloc+0x1f/0x30 [ 75.155929][ T7349] ? __kmalloc_cache_noprof+0x189/0x320 [ 75.155959][ T7349] ip_set_alloc+0x1f/0x30 [ 75.155989][ T7349] hash_netiface_create+0x282/0x740 [ 75.156059][ T7349] ? __pfx_hash_netiface_create+0x10/0x10 [ 75.156091][ T7349] ip_set_create+0x3c9/0x960 [ 75.156181][ T7349] ? __nla_parse+0x40/0x60 [ 75.156204][ T7349] nfnetlink_rcv_msg+0x4c3/0x590 [ 75.156248][ T7349] netlink_rcv_skb+0x123/0x220 [ 75.156279][ T7349] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 75.156327][ T7349] nfnetlink_rcv+0x16b/0x1690 [ 75.156352][ T7349] ? nlmon_xmit+0x4f/0x60 [ 75.156461][ T7349] ? consume_skb+0x49/0x150 [ 75.156489][ T7349] ? nlmon_xmit+0x4f/0x60 [ 75.156508][ T7349] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 75.156566][ T7349] ? __dev_queue_xmit+0x1200/0x2000 [ 75.156601][ T7349] ? __dev_queue_xmit+0x182/0x2000 [ 75.156651][ T7349] ? ref_tracker_free+0x37d/0x3e0 [ 75.156734][ T7349] ? __netlink_deliver_tap+0x4dc/0x500 [ 75.156767][ T7349] netlink_unicast+0x5bd/0x690 [ 75.156818][ T7349] netlink_sendmsg+0x58b/0x6b0 [ 75.156848][ T7349] ? __pfx_netlink_sendmsg+0x10/0x10 [ 75.156877][ T7349] __sock_sendmsg+0x142/0x180 [ 75.156965][ T7349] ____sys_sendmsg+0x31e/0x4e0 [ 75.157003][ T7349] ___sys_sendmsg+0x17b/0x1d0 [ 75.157053][ T7349] __x64_sys_sendmsg+0xd4/0x160 [ 75.157239][ T7349] x64_sys_call+0x191e/0x2ff0 [ 75.157261][ T7349] do_syscall_64+0xd2/0x200 [ 75.157287][ T7349] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 75.157371][ T7349] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 75.157422][ T7349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.157496][ T7349] RIP: 0033:0x7f8fec0cebe9 [ 75.157529][ T7349] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.157546][ T7349] RSP: 002b:00007f8feab2f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 75.157565][ T7349] RAX: ffffffffffffffda RBX: 00007f8fec2f5fa0 RCX: 00007f8fec0cebe9 [ 75.157577][ T7349] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 75.157655][ T7349] RBP: 00007f8fec151e19 R08: 0000000000000000 R09: 0000000000000000 [ 75.157667][ T7349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.157679][ T7349] R13: 00007f8fec2f6038 R14: 00007f8fec2f5fa0 R15: 00007ffeb9355008 [ 75.157698][ T7349] [ 75.157706][ T7349] memory: usage 307200kB, limit 307200kB, failcnt 215 [ 75.504256][ T7349] memory+swap: usage 307552kB, limit 9007199254740988kB, failcnt 0 [ 75.512420][ T7349] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 75.519879][ T7349] Memory cgroup stats for /syz1: [ 75.520420][ T7349] cache 0 [ 75.528462][ T7349] rss 0 [ 75.531482][ T7349] shmem 0 [ 75.534645][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 75.541616][ T7349] mapped_file 0 [ 75.545190][ T7349] dirty 0 [ 75.548128][ T7349] writeback 0 [ 75.551513][ T7349] workingset_refault_anon 38 [ 75.556225][ T7349] workingset_refault_file 23 [ 75.560937][ T7349] swap 360448 [ 75.564314][ T7349] swapcached 0 [ 75.567929][ T7349] pgpgin 80064 [ 75.571568][ T7349] pgpgout 80064 [ 75.575026][ T7349] pgfault 69045 [ 75.578474][ T7349] pgmajfault 40 [ 75.581963][ T7349] inactive_anon 0 [ 75.585743][ T7349] active_anon 0 [ 75.589283][ T7349] inactive_file 0 [ 75.592952][ T7349] active_file 0 [ 75.596573][ T7349] unevictable 0 [ 75.600267][ T7349] hierarchical_memory_limit 314572800 [ 75.605990][ T7349] hierarchical_memsw_limit 9223372036854771712 [ 75.612432][ T7349] total_cache 0 [ 75.616090][ T7349] total_rss 0 [ 75.619387][ T7349] total_shmem 0 [ 75.622944][ T7349] total_mapped_file 0 [ 75.626941][ T7349] total_dirty 0 [ 75.630471][ T7349] total_writeback 0 [ 75.634332][ T7349] total_workingset_refault_anon 38 [ 75.639584][ T7349] total_workingset_refault_file 23 [ 75.644784][ T7349] total_swap 360448 [ 75.648568][ T7349] total_swapcached 0 [ 75.652560][ T7349] total_pgpgin 80064 [ 75.656594][ T7349] total_pgpgout 80064 [ 75.660577][ T7349] total_pgfault 69045 [ 75.664644][ T7349] total_pgmajfault 40 [ 75.668642][ T7349] total_inactive_anon 0 [ 75.672890][ T7349] total_active_anon 0 [ 75.676875][ T7349] total_inactive_file 0 [ 75.681009][ T7349] total_active_file 0 [ 75.684983][ T7349] total_unevictable 0 [ 75.688939][ T7349] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1717,pid=7348,uid=0 [ 75.703838][ T7349] Memory cgroup out of memory: Killed process 7348 (syz.1.1717) total-vm:95812kB, anon-rss:924kB, file-rss:22184kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 75.964117][ T7349] syz.1.1717 (7349) used greatest stack depth: 7528 bytes left [ 76.011078][ T7490] loop2: detected capacity change from 0 to 1024 [ 76.044770][ T7490] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 76.071342][ T7490] ext4 filesystem being mounted at /400/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.152836][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 76.168375][ T7515] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1791'. [ 76.447224][ T7544] sch_fq: defrate 4294967295 ignored. [ 76.513079][ T7555] pim6reg1: entered promiscuous mode [ 76.518493][ T7555] pim6reg1: entered allmulticast mode [ 76.574085][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 76.711666][ T7559] loop2: detected capacity change from 0 to 2048 [ 76.736424][ T29] kauditd_printk_skb: 178 callbacks suppressed [ 76.736439][ T29] audit: type=1400 audit(1754569208.524:1859): avc: denied { create } for pid=7564 comm="syz.1.1810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 76.752899][ T7567] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1811'. [ 76.778376][ T29] audit: type=1400 audit(1754569208.534:1860): avc: denied { read } for pid=7566 comm="syz.3.1811" dev="nsfs" ino=4026532712 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 76.800344][ T29] audit: type=1400 audit(1754569208.534:1861): avc: denied { open } for pid=7566 comm="syz.3.1811" path="net:[4026532712]" dev="nsfs" ino=4026532712 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 76.885954][ T7559] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.897911][ T29] audit: type=1400 audit(1754569208.564:1862): avc: denied { shutdown } for pid=7564 comm="syz.1.1810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 76.918234][ T29] audit: type=1400 audit(1754569208.624:1863): avc: denied { getopt } for pid=7564 comm="syz.1.1810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 76.937926][ T29] audit: type=1400 audit(1754569208.624:1864): avc: denied { connect } for pid=7564 comm="syz.1.1810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 76.957685][ T29] audit: type=1400 audit(1754569208.624:1865): avc: denied { name_connect } for pid=7564 comm="syz.1.1810" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 76.978246][ T29] audit: type=1400 audit(1754569208.664:1866): avc: denied { setopt } for pid=7573 comm="syz.3.1813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 76.998510][ T29] audit: type=1400 audit(1754569208.664:1867): avc: denied { map } for pid=7573 comm="syz.3.1813" path="socket:[18453]" dev="sockfs" ino=18453 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 77.022015][ T29] audit: type=1400 audit(1754569208.664:1868): avc: denied { read } for pid=7573 comm="syz.3.1813" path="socket:[18453]" dev="sockfs" ino=18453 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 77.181370][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.238947][ T7508] syz.0.1787 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 77.250421][ T7508] CPU: 0 UID: 0 PID: 7508 Comm: syz.0.1787 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(voluntary) [ 77.250449][ T7508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 77.250460][ T7508] Call Trace: [ 77.250467][ T7508] [ 77.250476][ T7508] __dump_stack+0x1d/0x30 [ 77.250496][ T7508] dump_stack_lvl+0xe8/0x140 [ 77.250518][ T7508] dump_stack+0x15/0x1b [ 77.250558][ T7508] dump_header+0x81/0x220 [ 77.250592][ T7508] oom_kill_process+0x342/0x400 [ 77.250681][ T7508] out_of_memory+0x979/0xb80 [ 77.250726][ T7508] try_charge_memcg+0x5e6/0x9e0 [ 77.250757][ T7508] charge_memcg+0x51/0xc0 [ 77.250776][ T7508] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 77.250801][ T7508] __read_swap_cache_async+0x1df/0x350 [ 77.250924][ T7508] swap_cluster_readahead+0x376/0x3e0 [ 77.250963][ T7508] swapin_readahead+0xde/0x6f0 [ 77.251058][ T7508] ? __filemap_get_folio+0x4f7/0x6b0 [ 77.251096][ T7508] ? __rcu_read_unlock+0x34/0x70 [ 77.251121][ T7508] ? swap_cache_get_folio+0x77/0x200 [ 77.251234][ T7508] do_swap_page+0x301/0x2430 [ 77.251261][ T7508] ? css_rstat_updated+0xb7/0x240 [ 77.251370][ T7508] ? __pfx_default_wake_function+0x10/0x10 [ 77.251470][ T7508] handle_mm_fault+0x9a5/0x2c20 [ 77.251504][ T7508] do_user_addr_fault+0x636/0x1090 [ 77.251572][ T7508] exc_page_fault+0x62/0xa0 [ 77.251597][ T7508] asm_exc_page_fault+0x26/0x30 [ 77.251619][ T7508] RIP: 0033:0x7fc4c954d9ef [ 77.251637][ T7508] Code: 1f 84 00 00 00 00 00 0f 1f 40 00 41 89 fb 44 8d 56 04 4c 8d 0d 22 46 35 00 89 f0 4c 8d 05 19 26 35 00 89 c2 81 e2 ff 1f 00 00 <49> 8b 0c d1 48 39 f1 74 28 48 85 c9 74 29 45 38 1c 10 75 23 83 c0 [ 77.251656][ T7508] RSP: 002b:00007ffd3c03b048 EFLAGS: 00010202 [ 77.251695][ T7508] RAX: 000000008564c9d3 RBX: 00007fc4ca3e5720 RCX: ffffffff818129d2 [ 77.251710][ T7508] RDX: 00000000000009d3 RSI: ffffffff8564c9d2 RDI: 0000000000000002 [ 77.251724][ T7508] RBP: ffffffff8564c9d2 R08: 00007fc4c98a0000 R09: 00007fc4c98a2000 [ 77.251739][ T7508] R10: 000000008564c9d6 R11: 0000000000000002 R12: 0000000000000002 [ 77.251819][ T7508] R13: 00000000000007f1 R14: ffffffff8564cc2f R15: 00000000000673c9 [ 77.251899][ T7508] ? plist_check_list+0x1cf/0x210 [ 77.251935][ T7508] ? plist_requeue+0x182/0x200 [ 77.252017][ T7508] ? workingset_update_node+0xe2/0x150 [ 77.252041][ T7508] ? plist_requeue+0x182/0x200 [ 77.252077][ T7508] [ 77.252083][ T7508] memory: usage 307200kB, limit 307200kB, failcnt 381 [ 77.492546][ T7508] memory+swap: usage 307472kB, limit 9007199254740988kB, failcnt 0 [ 77.500464][ T7508] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 77.507746][ T7508] Memory cgroup stats for /syz0: [ 77.508141][ T7508] cache 0 [ 77.516098][ T7508] rss 0 [ 77.519020][ T7508] shmem 0 [ 77.521951][ T7508] mapped_file 0 [ 77.525508][ T7508] dirty 0 [ 77.528454][ T7508] writeback 0 [ 77.531733][ T7508] workingset_refault_anon 41 [ 77.536344][ T7508] workingset_refault_file 207 [ 77.541081][ T7508] swap 278528 [ 77.544418][ T7508] swapcached 0 [ 77.547788][ T7508] pgpgin 85766 [ 77.551138][ T7508] pgpgout 85764 [ 77.554620][ T7508] pgfault 74094 [ 77.558071][ T7508] pgmajfault 33 [ 77.561504][ T7508] inactive_anon 0 [ 77.565369][ T7508] active_anon 0 [ 77.568802][ T7508] inactive_file 0 [ 77.572475][ T7508] active_file 8192 [ 77.576216][ T7508] unevictable 0 [ 77.580198][ T7508] hierarchical_memory_limit 314572800 [ 77.586044][ T7508] hierarchical_memsw_limit 9223372036854771712 [ 77.592356][ T7508] total_cache 0 [ 77.595846][ T7508] total_rss 0 [ 77.599128][ T7508] total_shmem 0 [ 77.602777][ T7508] total_mapped_file 0 [ 77.606881][ T7508] total_dirty 0 [ 77.610426][ T7508] total_writeback 0 [ 77.614466][ T7508] total_workingset_refault_anon 41 [ 77.619662][ T7508] total_workingset_refault_file 207 [ 77.623940][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 77.624917][ T7508] total_swap 278528 [ 77.635752][ T7508] total_swapcached 0 [ 77.639799][ T7508] total_pgpgin 85766 [ 77.643770][ T7508] total_pgpgout 85764 [ 77.647906][ T7508] total_pgfault 74094 [ 77.652131][ T7508] total_pgmajfault 33 [ 77.656197][ T7508] total_inactive_anon 0 [ 77.660429][ T7508] total_active_anon 0 [ 77.664525][ T7508] total_inactive_file 0 [ 77.668754][ T7508] total_active_file 8192 [ 77.673154][ T7508] total_unevictable 0 [ 77.677189][ T7508] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1787,pid=7508,uid=0 [ 77.692102][ T7508] Memory cgroup out of memory: Killed process 7508 (syz.0.1787) total-vm:95812kB, anon-rss:944kB, file-rss:22184kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 77.913279][ T7509] syz.0.1787 (7509) used greatest stack depth: 7312 bytes left [ 77.994403][ T7642] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1845'. [ 78.029071][ T7645] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1847'. [ 78.040280][ T7645] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1847'. [ 78.074995][ T7651] 9pnet_fd: Insufficient options for proto=fd [ 78.135036][ T1035] kernel read not supported for file /input/event1 (pid: 1035 comm: kworker/1:2) [ 78.157951][ T1035] kernel write not supported for file /781/sched (pid: 1035 comm: kworker/1:2) [ 78.201148][ T7670] batadv0: entered promiscuous mode [ 78.214158][ T7670] bond0: entered promiscuous mode [ 78.219553][ T7670] bond_slave_0: entered promiscuous mode [ 78.225616][ T7670] bond_slave_1: entered promiscuous mode [ 78.231595][ T7670] bond1: entered promiscuous mode [ 78.239557][ T7670] debugfs: 'hsr1' already exists in 'hsr' [ 78.245435][ T7670] Cannot create hsr debugfs directory [ 78.251404][ T7670] hsr1: entered allmulticast mode [ 78.256640][ T7670] batadv0: entered allmulticast mode [ 78.262110][ T7670] bond0: entered allmulticast mode [ 78.267432][ T7670] bond_slave_0: entered allmulticast mode [ 78.273358][ T7670] bond_slave_1: entered allmulticast mode [ 78.279356][ T7670] bond1: entered allmulticast mode [ 78.285542][ T7670] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 78.295802][ T7678] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1546 sclass=netlink_route_socket pid=7678 comm=syz.2.1861 [ 78.314267][ T7678] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1861'. [ 78.390852][ T7683] SELinux: failed to load policy [ 78.495905][ T7710] loop1: detected capacity change from 0 to 1024 [ 78.502821][ T7710] EXT4-fs: Ignoring removed oldalloc option [ 78.540709][ T7710] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 78.561354][ T7710] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.582879][ T3389] kernel read not supported for file /input/event1 (pid: 3389 comm: kworker/0:3) [ 78.653809][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 78.735766][ T7741] 9pnet: p9_errstr2errno: server reported unknown error @0x0000000000000004 [ 78.756085][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.822717][ T7759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.831207][ T7759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.858339][ T3389] kernel read not supported for file /input/event1 (pid: 3389 comm: kworker/0:3) [ 79.011501][ T7789] loop3: detected capacity change from 0 to 1024 [ 79.018569][ T7789] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 79.028630][ T7789] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 79.042495][ T7789] EXT4-fs error (device loop3): ext4_get_journal_inode:5796: inode #32: comm syz.3.1915: iget: special inode unallocated [ 79.058746][ T7789] EXT4-fs (loop3): Remounting filesystem read-only [ 79.065610][ T7789] EXT4-fs (loop3): no journal found [ 79.071040][ T7789] EXT4-fs (loop3): can't get journal size [ 79.090204][ T7789] EXT4-fs (loop3): failed to initialize system zone (-117) [ 79.098698][ T7789] EXT4-fs (loop3): mount failed [ 79.138333][ T1035] kernel read not supported for file /input/event1 (pid: 1035 comm: kworker/1:2) [ 79.159518][ T7810] netlink: 'syz.3.1922': attribute type 4 has an invalid length. [ 79.177255][ T3389] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=3389 comm=kworker/0:3 [ 79.209758][ T7817] batadv0: entered promiscuous mode [ 79.223365][ T7817] bond0: entered promiscuous mode [ 79.228482][ T7817] bond_slave_0: entered promiscuous mode [ 79.234449][ T7817] bond_slave_1: entered promiscuous mode [ 79.244473][ T7817] debugfs: 'hsr1' already exists in 'hsr' [ 79.250454][ T7817] Cannot create hsr debugfs directory [ 79.260537][ T7817] hsr1: entered allmulticast mode [ 79.265676][ T7817] batadv0: entered allmulticast mode [ 79.271086][ T7817] bond0: entered allmulticast mode [ 79.276313][ T7817] bond_slave_0: entered allmulticast mode [ 79.282109][ T7817] bond_slave_1: entered allmulticast mode [ 79.288241][ T7817] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 79.302918][ T7824] all (unregistering): Released all slaves [ 79.429102][ T7841] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1940'. [ 79.438268][ T7841] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1940'. [ 79.690355][ T7884] random: crng reseeded on system resumption [ 79.703692][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 79.716638][ T7888] loop2: detected capacity change from 0 to 512 [ 79.762006][ T7888] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.777989][ T7888] ext4 filesystem being mounted at /446/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 79.795824][ T7888] EXT4-fs (loop2): shut down requested (0) [ 79.819683][ T7897] SELinux: Context system_u:object_r:dhcp_etc_t:s0 is not valid (left unmapped). [ 79.838295][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.887118][ T7903] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1968'. [ 80.133443][ T7892] ================================================================== [ 80.141900][ T7892] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 80.150694][ T7892] [ 80.153103][ T7892] write to 0xffff88811a56fca8 of 8 bytes by task 7886 on cpu 1: [ 80.160952][ T7892] shmem_file_splice_read+0x470/0x600 [ 80.166392][ T7892] splice_direct_to_actor+0x26f/0x680 [ 80.171885][ T7892] do_splice_direct+0xda/0x150 [ 80.176749][ T7892] do_sendfile+0x380/0x650 [ 80.181269][ T7892] __x64_sys_sendfile64+0x105/0x150 [ 80.186594][ T7892] x64_sys_call+0x2bb0/0x2ff0 [ 80.191331][ T7892] do_syscall_64+0xd2/0x200 [ 80.195838][ T7892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.201899][ T7892] [ 80.204208][ T7892] write to 0xffff88811a56fca8 of 8 bytes by task 7892 on cpu 0: [ 80.211839][ T7892] shmem_file_splice_read+0x470/0x600 [ 80.217417][ T7892] splice_direct_to_actor+0x26f/0x680 [ 80.222987][ T7892] do_splice_direct+0xda/0x150 [ 80.227836][ T7892] do_sendfile+0x380/0x650 [ 80.232517][ T7892] __x64_sys_sendfile64+0x105/0x150 [ 80.237721][ T7892] x64_sys_call+0x2bb0/0x2ff0 [ 80.242402][ T7892] do_syscall_64+0xd2/0x200 [ 80.247007][ T7892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.252991][ T7892] [ 80.255300][ T7892] value changed: 0x0000000000004376 -> 0x0000000000004378 [ 80.262746][ T7892] [ 80.265141][ T7892] Reported by Kernel Concurrency Sanitizer on: [ 80.271320][ T7892] CPU: 0 UID: 0 PID: 7892 Comm: syz.0.1961 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(voluntary) [ 80.283567][ T7892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 80.293799][ T7892] ================================================================== [ 80.733562][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 81.783448][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 82.823365][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 83.853217][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 84.903239][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 85.942970][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 86.982849][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 88.012716][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 89.052635][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 90.092488][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available