last executing test programs: 2m0.719320584s ago: executing program 0 (id=294): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=@newqdisc={0x468, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x4, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x43c, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x4, 0xffffffff, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x25cf, 0x800000, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x400002, 0x0, 0x0, 0x0, 0x6, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000, 0x401, 0xfffffffe, 0x0, 0x0, 0xffffffff, 0x47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffff, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffd, 0x5, 0x0, 0x8001, 0x0, 0xfffffff7, 0x1ff, 0x81, 0x0, 0x0, 0x80000000, 0xfffffffa, 0x7, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xfffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0x40000000, 0x0, 0x1, 0x0, 0x0, 0xfffe, 0x0, 0xd5a9, 0x0, 0x0, 0x0, 0x1000, 0xfb8d, 0x7b2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x9, 0xfffffeff, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x8, 0x4, 0x0, 0x0, 0x100000, 0x1000, 0x40593e3a, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x7, 0xd4, 0x8000c, 0x6, 0x0, 0x0, 0xffffffff, 0x400, 0x0, 0x1, 0x0, 0x6, 0x8, 0x3, 0x1, 0x0, 0xfffffffc, 0x1, 0x0, 0x8, 0x0, 0x1, 0x20000000, 0x4, 0x0, 0xe9, 0x3, 0xfffffffe, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x1, 0x2, 0x3ff, 0xfffffffc, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x2, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0xff, 0x9, 0x0, 0x0, 0x40000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x10000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x8, 0x0, 0x0, 0x2, 0x2, 0x1fd, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x7, 0x0, 0x0, 0x2e3, 0x0, 0x9]}, @TCA_TBF_RATE64={0xc, 0x4, 0xec73e2f8611702aa}, @TCA_TBF_PARMS={0x28, 0x1, {{0xff, 0x0, 0x0, 0x9, 0xfffc}, {0x2, 0x0, 0x5, 0x3, 0x0, 0x40}}}]}}]}, 0x468}}, 0x0) 2m0.539866121s ago: executing program 0 (id=300): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) setxattr$trusted_overlay_upper(0x0, &(0x7f00000001c0), 0x0, 0x835, 0x0) 2m0.091519855s ago: executing program 0 (id=310): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8f70000000000ff000044850000000e000000650000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x8, 0x94200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='cpu&\t\t') 1m59.920685332s ago: executing program 0 (id=314): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x4) 1m59.874486686s ago: executing program 0 (id=317): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8983, &(0x7f0000000180)={0x9, 'vlan1\x00', {0x6719}, 0x5}) 1m59.596666973s ago: executing program 0 (id=324): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x34}, 0x94) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_gfeatures={0x3d}}) 1m59.596533783s ago: executing program 32 (id=324): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x34}, 0x94) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_gfeatures={0x3d}}) 1m49.456772393s ago: executing program 5 (id=772): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) chmod(0x0, 0x48) 1m49.385486581s ago: executing program 5 (id=775): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0) recvfrom(r0, 0x0, 0x0, 0x40, 0x0, 0x0) 1m49.340303245s ago: executing program 5 (id=776): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x80000}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x101}]}}}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf8}}, 0x0) 1m49.266472272s ago: executing program 5 (id=782): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x4) 1m49.19093942s ago: executing program 5 (id=787): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000e00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4a, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0, 0x0, 0x9}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="300000001e0001002abd7000fcffffff07000000", @ANYRES32=0x0, @ANYBLOB="000000000a0002000000000000000000080009"], 0x30}}, 0x4100) 1m48.993495028s ago: executing program 5 (id=793): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 1m48.952874723s ago: executing program 33 (id=793): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 1m3.140407485s ago: executing program 6 (id=2592): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000340)=[@in6={0xa, 0x4e23, 0x8, @loopback, 0x7}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x74, &(0x7f0000000080)={r1, 0x0, 0x10, 0xaf7}, &(0x7f00000010c0)=0x18) 1m3.079738701s ago: executing program 6 (id=2587): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r0, 0x0, 0x3}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000680003806400dec6080003400000000258000b80200001800a000100"], 0x118}, 0x1, 0x0, 0x0, 0x81}, 0x40080) 1m2.977581111s ago: executing program 6 (id=2593): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffff000000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x101}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000007000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x94) 1m2.878713131s ago: executing program 6 (id=2598): r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) setreuid(0x0, 0xee00) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000780)="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", 0x1a0}], 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r0]) 1m2.761432752s ago: executing program 6 (id=2601): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x140070, 0x0) 1m2.591606649s ago: executing program 4 (id=2609): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x18) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_read_part_table(0x59a, &(0x7f0000000b80)="$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") 1m2.445914643s ago: executing program 6 (id=2614): prctl$PR_SET_NAME(0xf, &(0x7f0000000700)=',&#^%\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000e40)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) 1m2.245253343s ago: executing program 4 (id=2618): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = openat$selinux_create(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) write$selinux_create(r1, &(0x7f0000000300)=@access={'system_u:object_r:hald_sonypic_exec_t:s0', 0x20, 'system_u:system_r:kernel_t:s0', 0x20, 0x6}, 0x5c) 1m2.143979033s ago: executing program 4 (id=2621): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x10) fallocate(r0, 0x0, 0x20000, 0x8000c62) 1m2.105117126s ago: executing program 4 (id=2622): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r1) sendmsg$NFC_CMD_VENDOR(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)={0x14, r2, 0x1, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4084}, 0x4000) 1m1.545480071s ago: executing program 4 (id=2625): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x140070, 0x0) 1m1.505149255s ago: executing program 4 (id=2626): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) munlock(&(0x7f0000f4f000/0x2000)=nil, 0x2000) 47.059478215s ago: executing program 34 (id=2614): prctl$PR_SET_NAME(0xf, &(0x7f0000000700)=',&#^%\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000e40)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) 46.392370991s ago: executing program 35 (id=2626): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) munlock(&(0x7f0000f4f000/0x2000)=nil, 0x2000) 1.158760397s ago: executing program 3 (id=4709): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000001f40)=ANY=[@ANYBLOB="000000004c900200290000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000020000000000000ffffffffffd9ffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"]) 1.032332189s ago: executing program 3 (id=4713): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a9a4850000000400000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) clock_gettime(0x0, &(0x7f0000000240)) 867.419435ms ago: executing program 3 (id=4717): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12000000040100000800000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1, 0xffffffffffffffff}, &(0x7f0000001d80), &(0x7f0000001d40)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r2, &(0x7f0000000340)="545249cee262adcd9b79b50ff983281d78622b8a36004c85c70861a8c8fb6dfb", &(0x7f0000000280)=""/32}, 0x20) 803.585712ms ago: executing program 3 (id=4721): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000600000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000400)='sys_enter\x00', r1}, 0x18) msgget$private(0x0, 0x0) 748.786737ms ago: executing program 3 (id=4722): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$selinux_load(r1, &(0x7f0000000000)={0xf97cff8c, 0x8}, 0x10) 709.024241ms ago: executing program 3 (id=4723): futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, &(0x7f0000000000)={0x77359400}, 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 582.730083ms ago: executing program 1 (id=4735): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@user_xattr}, {@delalloc}, {@dioread_nolock}, {@jqfmt_vfsv1}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x70}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7ad}}, {@stripe={'stripe', 0x3d, 0x24}}, {@noblock_validity}, {@max_batch_time={'max_batch_time', 0x3d, 0x3fe}}, {@bh}, {@noinit_itable}]}, 0x3, 0x583, &(0x7f0000000800)="$eJzs3c9rHGUfAPDvbHb7+32bQilvX15eCj1Yqd00iT8qeKhH0WJBPdclmYaSTbdkN6WJBduDvXiRIohYEO969+ChePHoX1HQQpES9OBlZTazybbZJJt0Y2L384Fpn2dmNs8888z34Zl9dpgABtaJ7J9CxPGI+CyJONyxrRj5xhNL+y0+vjmRLUk0m+/9lkSSr2vvn+T/H8wz/4mIHz+JOF1YXW59fmG6Uq2ms3l+pDFzbaQ+v3DmykxlKp1Kr46Nj597ZXzs9dde7VtdX7z4x5fv3n/r3KcnF7/47uGRu0mcj0P5ts56PINbnZkTzWZ+Tkpx/qkdR/tQ2G6S7PQBsCVDeZyXIuJ46XCpHfXA8+/jiGgCAyrZZPzv1V/Ac6I9Dmjf2/fpPvgf49GbSzdAq+tfXPpuJPa17o0OLCZP3Bll97vDfSg/K+P7X+/dzZbo3/cQABu6dTsizhaLq/u/JO//tu5sD/s8XYb+D/4+97Pxz0vdxj+F5fFPdBn/HOwSu1uxcfwXHvahmDVl4783uo5/lyethofy3L9aY75ScvlKNc36tn9HxKko7c3y683nnFt80FxrW+f4L1uy8ttjwfw4Hhb3PvmZyUqj8ix17vTodsR/u45/k+X2T7q0f3Y+PuixjGPpvf+vtW3j+m+v5jcRL3Rt/5UZrWT9+cmR1vUw0r4qVvv9zrGf1yq/e/1/+mEbqtpV1v4H1q//cNI5X1vffBlf7/szXWvbVq//Pcn7rfSefN2NSqMxOxqxJ3ln9fqxlc+28+39s/qfOrl+/9ft+t8fER/2WP87R7/939brv72y+k9uqv03n3jw9kdfrVV+b+3/cit1Kl/TS//X6wE+y7kDAAAAAACA3aYQEYciKZRjX54uFMrlpd93HI0DhWqt3jh9uTZ3dTJaz8oOR6nQnuk+3PF7iNH897Dt/NhT+fGIOBIRnw/tb+XLE7Xq5E5XHgAAAAAAAAAAAAAAAAAAAHaJg8vP/8cTz/9nfhna6aMDtl1x6f3fwADa8JX//XjTE7ArbRj/wHNL/MPgEv8wuMQ/DKTWFJ/4h8El/mFwiX8YXOIfAAAAAAAAAAAAAAAAAAAAAAAAAAAA+urihQvZ0lx8fHMiy09en5+brl0/M5nWp8szcxPlidrstfJUrTZVTcsTtZmN/l61Vrs2OhZzN0Yaab0xUp9fuDRTm7vauHRlpjKVXkq9ZxwAAAAAAAAAAAAAAAAAAABWq88vTFeq1XS2D4lStZoWIqKXnSP6VOgAJrJ2u1Xs7TxvTyKJlTXF3XJaJPqa2OmeCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABW/BUAAP//2SsyHQ==") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x13, &(0x7f0000000700)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32=0x0, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) 575.968224ms ago: executing program 8 (id=4738): writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fe", 0xb}], 0x1) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) 534.266618ms ago: executing program 7 (id=4739): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x18, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10) msync(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) 514.51012ms ago: executing program 8 (id=4740): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d, 0x0, 0xd6f}}) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x300, 0x23, 0x501}}) 448.692916ms ago: executing program 8 (id=4742): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet6_udp_encap(r0, 0x11, 0x68, &(0x7f0000000000)=0x5, 0x4) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f00000001c0)=0x2, 0x4) 448.432566ms ago: executing program 8 (id=4743): perf_event_open(&(0x7f0000000140)={0x2, 0x49, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000020303000000008c00000021000000000800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000f46b10040000000000100800010001"], 0x1c}}, 0x0) 446.824936ms ago: executing program 2 (id=4752): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000118110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014002000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10) setgid(0x0) 441.700417ms ago: executing program 7 (id=4744): r0 = socket$key(0xf, 0x3, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x13, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="0213f803030000002cbd7000fddbdf25010018"], 0x18}}, 0x4000010) 398.430881ms ago: executing program 8 (id=4745): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) ppoll(&(0x7f0000000300)=[{r0, 0x106}], 0x1, 0x0, 0x0, 0x0) 371.177914ms ago: executing program 7 (id=4746): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) sendmmsg$unix(r0, &(0x7f0000008380)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000080)=@abs={0x1, 0x30, 0x4e30}, 0x6e, 0x0}}], 0x2, 0x40008004) 371.050354ms ago: executing program 1 (id=4747): r0 = io_uring_setup(0x354a, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x32b}) clock_nanosleep(0xfffffff2, 0xca9a3b, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 325.594018ms ago: executing program 2 (id=4748): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x24, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) 282.161122ms ago: executing program 2 (id=4749): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000600000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000400)='sys_enter\x00', r1}, 0x18) msgget$private(0x0, 0x0) 281.615232ms ago: executing program 7 (id=4760): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000118110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014002000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10) setgid(0x0) 260.312485ms ago: executing program 2 (id=4750): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$eJzs3T9oJFUcB/DvzO565m6RUxtB/AMiooFwdoJNbBQCEoKIoEJExEZJhJhgl1jZWGitksomiJ3RUtIEG0WwipoiNoIGC4OFFiu7k0hMVqNu3Dkynw9MZibz3vzesPN9u83sBmisq0mmk7SSTCbpJCmON7i7Wq4e7q5PbM8nvd4TPxWDdtV+5ajflSRrSR5KslUWeamdrGw+s/fLzmP3vbncuff9zacnxnqRh/b3dh8/eG/2jY9mHlz54qsfZotMp/un6zp/xZD/tYvklv+j2HWiaNc9Av6Judc+/Lqf+1uT3DPIfydlqhfvraUbtjp54N2/6vv2j1/ePs6xAuev1+v03wPXekDjlEm6KcqpJNV2WU5NVZ/hv2ldLl9eXHp18sXF5YUX6p6pgPPSTXYf/eTSx1dO5P/7VpV/4OLq5//JuY1v+9sHrbpHA4zFHdWqn//J51bvj/xD48g/NJf8Q3PJPzSX/ENzyT80l/zDBdb5+8PyD80l/9Bc8g/NdTz/AECz9C7V/QQyUJe65x8AAAAAAAAAAAAAAAAAAOC09Ynt+aNlXDU/eyfZfyRJe1j91uD3iJMbB38v/1z0m/2hqLqN5Nm7RjzBiD6o+enrm76rt/7nd9Zbf3UhWXs9ybV2+/T9Vxzef//dzWcc7zw/YoF/qTix//BT461/0m8b9daf2Uk+7c8/14bNP2VuG6yHzz/ds79i+Uyv/DriCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABib3wMAAP//+kBtTA==") mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000001f40)=ANY=[@ANYBLOB="000000004c900200290000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000020000000000000ffffffffffd9ffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"]) 187.889972ms ago: executing program 1 (id=4751): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ec0)={&(0x7f0000000bc0)='kfree\x00', r1, 0x0, 0xfffffffffffffff4}, 0x18) lsetxattr$security_selinux(&(0x7f0000000900)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000940), &(0x7f0000000980)='system_u:object_r:netutils_exec_t:s0\x00', 0xf, 0x0) 187.425022ms ago: executing program 7 (id=4753): syz_emit_ethernet(0x2a, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000080)='./file0\x00', 0x204888, &(0x7f0000000200)=ANY=[@ANYBLOB="756e695f786c6174653d312c696f636861727365743d757466382c0097b75cbdde02821d0f899c2377ee9577397fc18b433d0c59e692b381740ca495e1c145c5922679338b5ff21c0653a98440a5725268a242c0263564f988d3c178704feaf8a412df818275708882ea9a4048c6e458a1f05b83f2e69b965b1df203b21de2b0ee375647f886a5310889982079aa7b1fb42e2382d40feefe7f768eec58b19cf50faaf129503175f4262df740183df51d3641ff78b86127c1db8ef165bfa3bd20797fde6ff91a0e45d3d7c1c6d1ce0a72be8c1fdb00000000", @ANYRES32, @ANYRESDEC, @ANYRES8], 0x1, 0x336, &(0x7f0000000880)="$eJzs3cFrI1UcB/DfxrXdXe2mBxEUxIde9DK09R8wyC6IBaVuZfUgzNqphswmJRNWsoi7N/Hm37F49CaI4LkX79689eJxD4uRJm23ienBhTSWfD4Q3i/z8mXeJEz4XZJ3cPuHu63dKtvNe1F7N8XViKg9jliNWhy7dDTWhvVSnPYw3q7f/uO1jz/97IPG5uaNrZRuNm69s5FSuv76L19/8+Mbv/Ze+OSn6z8vx/7q5wd/bfy5//L+Kwd/3/qqWaVmldqdXsrTnU6nl98pi7TTrFpZSh+VRV4Vqdmuiu7Y/G7Z2dvrp7y9s3Jtr1tUVcrb/dQq+qnXSb1uP+Vf5s12yrIsrVyLxfIs17v9aGsrb8xgMZyj7ycPXB1/2u028sN7ePlfye1HM10YAPC/NNn/1+LK8Pic+v/jFuW/9/+XFr3/fxb6/0Vw2P8vHd2/4/T/AAAAAAAAAAAAAABwETweDOqDwaB+PE4+5r0+Zsvnv9hO/XDvSkT53b3te9ujcTTf2I1mlFHEWtTjScTgxKi++f7mjbU0tBordx+M8ofjc+P59ajH6vT8ekpp8CCl8fzzw3+0OMlvRD1emp7fGJ1/Ir8Ub715Kp9FPX7/IjpRxk4cZp/mv11P6b0PNyfyy8PXAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALAYsnRi6v79WXbW/Ch/sr/+WtTjyfT9+dem7s9/OV69PN9rBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBjVf9+Ky/Lonv+xcM4Y2pwZF4LO/8iYman+O3FOOt9VijOLub9zQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADn7+mm3/NeCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPNU9e+38rIsujMs5n2NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF8k/AQAA//8A7ioD") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) 153.624165ms ago: executing program 2 (id=4754): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r0, 0xfffffff8) close_range(r0, 0xffffffffffffffff, 0x0) 153.287915ms ago: executing program 1 (id=4755): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014800000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='kfree\x00', r1, 0x0, 0x2}, 0x18) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380), 0x4001, 0x0) 44.522426ms ago: executing program 1 (id=4756): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f00000002c0)={0xa, 0x4e21, 0x80000, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c, 0x0, 0x0, &(0x7f0000000e40)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffff7}}], 0x18}, 0x20008040) 1.62995ms ago: executing program 8 (id=4757): r0 = socket$key(0xf, 0x3, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x13, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="0213f803030000002cbd7000fddbdf25010018"], 0x18}}, 0x4000010) 1.03168ms ago: executing program 7 (id=4768): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) time(0x0) 550.09µs ago: executing program 1 (id=4769): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) ppoll(&(0x7f0000000300)=[{r0, 0x106}], 0x1, 0x0, 0x0, 0x0) 0s ago: executing program 2 (id=4770): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x18, 0x0, 0x1, 0x0, 0x30000, {0x1a}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000140005000c000100000008001300ffff000005000b00010000000800090057240b2b080002000101000008000e"], 0x5c}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) kernel console output (not intermixed with test programs): _r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 112.552521][ T29] audit: type=1400 audit(1760892386.712:2639): avc: denied { mount } for pid=9965 comm="syz.2.2780" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 112.574518][ T29] audit: type=1400 audit(1760892386.722:2640): avc: denied { ioctl } for pid=9966 comm="syz.3.2781" path="/dev/usbmon1" dev="devtmpfs" ino=143 ioctlcmd=0x9204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 112.625302][ T29] audit: type=1400 audit(1760892386.872:2641): avc: denied { read } for pid=9970 comm="syz.3.2782" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 112.648519][ T29] audit: type=1400 audit(1760892386.872:2642): avc: denied { open } for pid=9970 comm="syz.3.2782" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 112.672271][ T29] audit: type=1400 audit(1760892386.872:2643): avc: denied { create } for pid=9970 comm="syz.3.2782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 112.698278][ T29] audit: type=1400 audit(1760892386.902:2644): avc: denied { mounton } for pid=9977 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 112.728759][ T9983] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2786'. [ 112.747780][ T53] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.801038][ T53] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.806781][ T9972] Process accounting resumed [ 112.875055][ T53] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.898175][T10000] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 112.909920][T10000] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 112.930059][ T53] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.941005][T10003] netlink: 'syz.1.2793': attribute type 9 has an invalid length. [ 112.948852][T10003] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2793'. [ 112.963443][T10003] team_slave_0: entered promiscuous mode [ 112.969278][T10003] team_slave_1: entered promiscuous mode [ 112.982444][T10003] macvlan2: entered promiscuous mode [ 112.987937][T10003] team0: entered promiscuous mode [ 112.993215][T10003] macvlan2: entered allmulticast mode [ 112.998711][T10003] team0: entered allmulticast mode [ 113.003846][T10003] team_slave_0: entered allmulticast mode [ 113.009643][T10003] team_slave_1: entered allmulticast mode [ 113.017582][T10003] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 113.046579][T10008] loop3: detected capacity change from 0 to 128 [ 113.095723][T10013] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2798'. [ 113.161009][ T53] bridge_slave_1: left allmulticast mode [ 113.166850][ T53] bridge_slave_1: left promiscuous mode [ 113.172603][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.188448][T10022] loop3: detected capacity change from 0 to 512 [ 113.195037][ T53] bridge_slave_0: left allmulticast mode [ 113.200866][ T53] bridge_slave_0: left promiscuous mode [ 113.206697][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.228956][T10022] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.2799: couldn't read orphan inode 26 (err -116) [ 113.241565][T10022] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.254578][T10022] ext4 filesystem being mounted at /649/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.292983][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.326798][T10034] loop1: detected capacity change from 0 to 1024 [ 113.337825][T10034] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.353041][T10034] EXT4-fs (loop1): shut down requested (2) [ 113.359621][T10034] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 113.368529][T10034] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 113.380351][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 113.390572][ T8647] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.390815][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 113.409948][ T53] bond0 (unregistering): Released all slaves [ 113.428062][T10032] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 113.471242][ T53] hsr_slave_0: left promiscuous mode [ 113.481583][ T53] hsr_slave_1: left promiscuous mode [ 113.489780][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.497336][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.504843][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.512289][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.524539][T10054] SELinux: failed to load policy [ 113.529705][ T53] veth1_macvtap: left promiscuous mode [ 113.535254][ T53] veth0_macvtap: left promiscuous mode [ 113.543318][ T53] veth1_vlan: left promiscuous mode [ 113.549171][ T53] veth0_vlan: left promiscuous mode [ 113.647093][ T53] team0 (unregistering): Port device team_slave_1 removed [ 113.657833][ T53] team0 (unregistering): Port device team_slave_0 removed [ 113.704693][ T9977] chnl_net:caif_netlink_parms(): no params data found [ 113.797208][ T9977] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.804362][ T9977] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.811923][ T9977] bridge_slave_0: entered allmulticast mode [ 113.820872][ T9977] bridge_slave_0: entered promiscuous mode [ 113.836438][ T9977] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.843514][ T9977] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.851628][ T9977] bridge_slave_1: entered allmulticast mode [ 113.860150][ T9977] bridge_slave_1: entered promiscuous mode [ 113.911658][ T9977] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.926076][ T9977] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.950928][ T9977] team0: Port device team_slave_0 added [ 113.962137][ T9977] team0: Port device team_slave_1 added [ 113.975872][T10017] chnl_net:caif_netlink_parms(): no params data found [ 114.006102][ T9977] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.013145][ T9977] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 114.039277][ T9977] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.067820][T10112] blkio.reset_stats is deprecated [ 114.069021][ T9977] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.079881][ T9977] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 114.105921][ T9977] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.123097][T10115] loop1: detected capacity change from 0 to 512 [ 114.148988][T10115] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.162298][T10115] ext4 filesystem being mounted at /150/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.189030][ T9977] hsr_slave_0: entered promiscuous mode [ 114.195103][ T9977] hsr_slave_1: entered promiscuous mode [ 114.202599][ T9977] debugfs: 'hsr0' already exists in 'hsr' [ 114.208384][ T9977] Cannot create hsr debugfs directory [ 114.214124][T10017] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.221247][T10017] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.231886][T10017] bridge_slave_0: entered allmulticast mode [ 114.239047][T10017] bridge_slave_0: entered promiscuous mode [ 114.239536][ T8647] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.246036][T10017] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.261167][T10017] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.268451][T10017] bridge_slave_1: entered allmulticast mode [ 114.275143][T10017] bridge_slave_1: entered promiscuous mode [ 114.288273][ T53] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.321639][T10017] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.332455][T10017] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.354395][ T53] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.376983][T10017] team0: Port device team_slave_0 added [ 114.383879][T10017] team0: Port device team_slave_1 added [ 114.407338][T10017] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.414311][T10017] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 114.440296][T10017] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.453340][ T53] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.467227][T10017] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.474356][T10017] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 114.500475][T10017] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.533232][ T53] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.569472][T10141] loop1: detected capacity change from 0 to 128 [ 114.577170][T10140] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2845'. [ 114.587622][T10141] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 114.595312][T10017] hsr_slave_0: entered promiscuous mode [ 114.605926][T10017] hsr_slave_1: entered promiscuous mode [ 114.611648][T10141] ext4 filesystem being mounted at /154/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 114.612071][T10017] debugfs: 'hsr0' already exists in 'hsr' [ 114.649367][T10017] Cannot create hsr debugfs directory [ 114.667691][ T8647] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 114.701050][ T9977] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 114.736871][ T9977] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 114.787713][ T9977] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 114.802735][ T9977] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 114.810735][T10163] siw: device registration error -23 [ 114.818318][ T53] bridge_slave_1: left allmulticast mode [ 114.823968][ T53] bridge_slave_1: left promiscuous mode [ 114.829856][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.847100][ T53] bridge_slave_0: left allmulticast mode [ 114.852783][ T53] bridge_slave_0: left promiscuous mode [ 114.858527][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.994697][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 115.005298][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 115.012328][T10189] loop2: detected capacity change from 0 to 128 [ 115.020719][T10189] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 115.021515][ T53] bond0 (unregistering): Released all slaves [ 115.097205][ T53] hsr_slave_0: left promiscuous mode [ 115.103350][ T53] hsr_slave_1: left promiscuous mode [ 115.109194][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.117291][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.150206][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.157656][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.171221][ T53] veth1_to_batadv: left promiscuous mode [ 115.182020][T10209] netlink: 'syz.3.2874': attribute type 10 has an invalid length. [ 115.186637][ T53] veth1_macvtap: left promiscuous mode [ 115.198341][ T53] veth0_macvtap: left promiscuous mode [ 115.203891][ T53] veth1_vlan: left promiscuous mode [ 115.215280][ T53] veth0_vlan: left promiscuous mode [ 115.280795][T10217] loop2: detected capacity change from 0 to 512 [ 115.291137][T10217] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.303923][T10217] ext4 filesystem being mounted at /588/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.304133][ T53] team0 (unregistering): Port device team_slave_1 removed [ 115.325543][ T53] team0 (unregistering): Port device team_slave_0 removed [ 115.348775][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.364660][T10209] team0: Device ipvlan0 failed to register rx_handler [ 115.422862][T10017] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 115.457563][T10232] loop3: detected capacity change from 0 to 512 [ 115.464012][T10017] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 115.464063][T10229] loop1: detected capacity change from 0 to 1024 [ 115.479342][T10017] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 115.489280][T10017] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 115.504918][ T9977] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.516991][T10232] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 115.525148][T10232] EXT4-fs (loop3): orphan cleanup on readonly fs [ 115.527637][T10229] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 115.545023][T10229] ext4 filesystem being mounted at /162/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.559423][T10232] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #16: comm syz.3.2884: corrupted inode contents [ 115.575287][T10229] EXT4-fs error (device loop1): ext4_lookup:1787: inode #15: comm syz.1.2883: inode has both inline data and extents flags [ 115.581606][T10232] EXT4-fs (loop3): Remounting filesystem read-only [ 115.591058][T10229] EXT4-fs (loop1): Remounting filesystem read-only [ 115.601527][T10232] EXT4-fs (loop3): 1 truncate cleaned up [ 115.609102][ T9977] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.617129][ T52] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 115.627789][ T52] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 115.639793][ T1384] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.646883][ T1384] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.655704][ T1384] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.662854][ T1384] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.670734][ T52] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 115.682442][T10232] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 115.682637][ T8647] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 115.719552][T10017] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.749254][T10017] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.760026][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.767165][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.783006][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.790255][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.818259][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.831391][T10258] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2898'. [ 115.846258][T10257] loop2: detected capacity change from 0 to 128 [ 115.860631][T10257] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 115.878395][T10257] ext4 filesystem being mounted at /594/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 115.914763][ T9977] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.979287][T10017] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.000374][ T3317] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 116.098267][T10293] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2896'. [ 116.171973][ T9977] veth0_vlan: entered promiscuous mode [ 116.190630][T10017] veth0_vlan: entered promiscuous mode [ 116.197971][ T9977] veth1_vlan: entered promiscuous mode [ 116.206415][T10017] veth1_vlan: entered promiscuous mode [ 116.223897][ T9977] veth0_macvtap: entered promiscuous mode [ 116.232024][ T9977] veth1_macvtap: entered promiscuous mode [ 116.244811][T10017] veth0_macvtap: entered promiscuous mode [ 116.255243][ T9977] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.264801][ T9977] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.275391][T10017] veth1_macvtap: entered promiscuous mode [ 116.285238][ T52] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.297168][ T52] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.308376][ T52] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.317873][ T52] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.338132][T10017] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.350158][T10017] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.369364][ T52] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.384863][ T52] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.397181][ T1384] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.406188][ T1384] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.499209][T10334] loop8: detected capacity change from 0 to 512 [ 116.510484][T10334] EXT4-fs (loop8): orphan cleanup on readonly fs [ 116.518127][T10334] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.2904: bg 0: block 248: padding at end of block bitmap is not set [ 116.533091][T10334] EXT4-fs error (device loop8): ext4_acquire_dquot:6945: comm syz.8.2904: Failed to acquire dquot type 1 [ 116.545056][T10334] EXT4-fs (loop8): 1 truncate cleaned up [ 116.551584][T10334] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 116.576910][T10017] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.800437][T10366] loop1: detected capacity change from 0 to 512 [ 116.878688][T10373] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2923'. [ 117.167966][T10423] loop2: detected capacity change from 0 to 2048 [ 117.207646][T10423] loop2: p1 p2 p3 [ 117.285495][T10434] loop1: detected capacity change from 0 to 512 [ 117.296657][T10434] EXT4-fs (loop1): orphan cleanup on readonly fs [ 117.311746][T10434] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2961: bg 0: block 248: padding at end of block bitmap is not set [ 117.331387][T10434] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.2961: Failed to acquire dquot type 1 [ 117.367484][T10434] EXT4-fs (loop1): 1 truncate cleaned up [ 117.397785][T10434] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 117.433635][T10447] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 117.441694][ T8647] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.681245][ T29] kauditd_printk_skb: 132 callbacks suppressed [ 117.681264][ T29] audit: type=1400 audit(1760892391.932:2767): avc: denied { write } for pid=10461 comm="syz.7.2963" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 117.794429][T10468] loop7: detected capacity change from 0 to 512 [ 117.828602][ T29] audit: type=1107 audit(1760892392.082:2768): pid=10471 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 117.848427][T10468] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #16: comm syz.7.2977: corrupted inode contents [ 117.886778][T10468] EXT4-fs error (device loop7): ext4_dirty_inode:6517: inode #16: comm syz.7.2977: mark_inode_dirty error [ 117.916588][T10468] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #16: comm syz.7.2977: corrupted inode contents [ 117.924119][T10481] loop3: detected capacity change from 0 to 512 [ 117.935645][T10481] ext4: Unknown parameter 'noacl' [ 117.936754][T10468] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #16: comm syz.7.2977: mark_inode_dirty error [ 117.944118][T10481] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2970'. [ 117.960998][T10481] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2970'. [ 117.977568][T10468] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #16: comm syz.7.2977: corrupted inode contents [ 117.999002][T10468] EXT4-fs error (device loop7) in ext4_orphan_del:301: Corrupt filesystem [ 118.007812][T10468] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #16: comm syz.7.2977: corrupted inode contents [ 118.027233][T10468] EXT4-fs error (device loop7): ext4_truncate:4637: inode #16: comm syz.7.2977: mark_inode_dirty error [ 118.043122][T10468] EXT4-fs error (device loop7) in ext4_process_orphan:343: Corrupt filesystem [ 118.053147][T10468] EXT4-fs (loop7): 1 truncate cleaned up [ 118.061224][T10468] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.074592][ T52] Quota error (device loop7): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 118.084423][ T52] EXT4-fs error (device loop7): ext4_release_dquot:6981: comm kworker/u8:3: Failed to release dquot type 1 [ 118.084595][T10468] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.147816][ T9977] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.251132][T10496] loop7: detected capacity change from 0 to 512 [ 118.261047][T10496] EXT4-fs: Ignoring removed i_version option [ 118.292512][T10498] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 118.292482][T10496] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.383185][ T9977] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.393896][ T29] audit: type=1400 audit(1760892392.652:2769): avc: denied { mount } for pid=10506 comm="syz.3.2983" name="/" dev="configfs" ino=2065 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 118.416927][ T29] audit: type=1400 audit(1760892392.652:2770): avc: denied { setattr } for pid=10506 comm="syz.3.2983" name="/" dev="configfs" ino=2065 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 118.457335][ T29] audit: type=1400 audit(1760892392.712:2771): avc: denied { unmount } for pid=3319 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 118.506127][T10510] macvtap0: refused to change device tx_queue_len [ 118.798072][T10532] dvmrp1: tun_chr_ioctl cmd 1074812118 [ 118.846455][ T29] audit: type=1400 audit(1760892393.102:2772): avc: denied { connect } for pid=10537 comm="syz.3.2997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 118.868528][T10540] random: crng reseeded on system resumption [ 118.897863][ T29] audit: type=1400 audit(1760892393.122:2773): avc: denied { write } for pid=10537 comm="syz.3.2997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 118.917366][ T29] audit: type=1400 audit(1760892393.122:2774): avc: denied { read append } for pid=10539 comm="syz.7.2998" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 118.941239][ T29] audit: type=1400 audit(1760892393.122:2775): avc: denied { ioctl open } for pid=10539 comm="syz.7.2998" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 119.105237][T10551] netlink: 'syz.3.3003': attribute type 4 has an invalid length. [ 119.113042][T10551] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.3003'. [ 119.297066][T10567] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3009'. [ 119.497693][T10571] loop3: detected capacity change from 0 to 128 [ 119.510805][T10571] bio_check_eod: 325 callbacks suppressed [ 119.510823][T10571] syz.3.3021: attempt to access beyond end of device [ 119.510823][T10571] loop3: rw=2049, sector=154, nr_sectors = 8 limit=128 [ 119.530635][T10571] syz.3.3021: attempt to access beyond end of device [ 119.530635][T10571] loop3: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 119.544203][T10571] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 119.553213][T10571] syz.3.3021: attempt to access beyond end of device [ 119.553213][T10571] loop3: rw=2049, sector=162, nr_sectors = 8 limit=128 [ 119.567639][T10571] syz.3.3021: attempt to access beyond end of device [ 119.567639][T10571] loop3: rw=2049, sector=168, nr_sectors = 2 limit=128 [ 119.581093][T10571] Buffer I/O error on dev loop3, logical block 84, lost async page write [ 119.593039][T10571] syz.3.3021: attempt to access beyond end of device [ 119.593039][T10571] loop3: rw=2049, sector=186, nr_sectors = 8 limit=128 [ 119.606838][T10571] syz.3.3021: attempt to access beyond end of device [ 119.606838][T10571] loop3: rw=2049, sector=192, nr_sectors = 2 limit=128 [ 119.620290][T10571] Buffer I/O error on dev loop3, logical block 96, lost async page write [ 119.629221][T10571] syz.3.3021: attempt to access beyond end of device [ 119.629221][T10571] loop3: rw=2049, sector=194, nr_sectors = 8 limit=128 [ 119.643077][T10571] syz.3.3021: attempt to access beyond end of device [ 119.643077][T10571] loop3: rw=2049, sector=200, nr_sectors = 2 limit=128 [ 119.656543][T10571] Buffer I/O error on dev loop3, logical block 100, lost async page write [ 119.665754][T10571] syz.3.3021: attempt to access beyond end of device [ 119.665754][T10571] loop3: rw=2049, sector=218, nr_sectors = 8 limit=128 [ 119.679557][T10571] syz.3.3021: attempt to access beyond end of device [ 119.679557][T10571] loop3: rw=2049, sector=224, nr_sectors = 2 limit=128 [ 119.693010][T10571] Buffer I/O error on dev loop3, logical block 112, lost async page write [ 119.702403][T10571] Buffer I/O error on dev loop3, logical block 116, lost async page write [ 119.713417][T10571] Buffer I/O error on dev loop3, logical block 88, lost async page write [ 119.722703][T10571] Buffer I/O error on dev loop3, logical block 92, lost async page write [ 119.731889][T10571] Buffer I/O error on dev loop3, logical block 120, lost async page write [ 119.741129][T10571] Buffer I/O error on dev loop3, logical block 124, lost async page write [ 119.983603][T10597] loop2: detected capacity change from 0 to 128 [ 119.990486][T10597] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 120.008238][T10597] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 120.067267][ T293] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 120.100621][T10609] loop7: detected capacity change from 0 to 128 [ 120.148020][T10603] loop1: detected capacity change from 0 to 8192 [ 120.190859][T10616] loop8: detected capacity change from 0 to 512 [ 120.198522][T10616] EXT4-fs error (device loop8): ext4_orphan_get:1392: inode #15: comm syz.8.3032: inode has both inline data and extents flags [ 120.212196][T10616] EXT4-fs error (device loop8): ext4_orphan_get:1397: comm syz.8.3032: couldn't read orphan inode 15 (err -117) [ 120.224730][T10616] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.341292][T10631] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 120.353486][T10631] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 120.407391][T10635] loop7: detected capacity change from 0 to 128 [ 120.414199][T10635] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 120.436914][T10635] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 120.465813][ T293] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 120.478320][T10017] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.532922][T10642] loop7: detected capacity change from 0 to 8192 [ 120.606910][T10649] loop8: detected capacity change from 0 to 128 [ 120.616075][T10650] loop7: detected capacity change from 0 to 512 [ 120.648020][T10650] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.660839][T10650] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.689752][ T9977] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.717573][T10655] loop7: detected capacity change from 0 to 256 [ 120.816640][T10664] program syz.3.3051 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 120.848380][T10668] random: crng reseeded on system resumption [ 120.885548][T10672] xt_CT: You must specify a L4 protocol and not use inversions on it [ 120.900400][T10674] 9pnet_fd: Insufficient options for proto=fd [ 121.067207][T10689] netlink: 'syz.8.3061': attribute type 4 has an invalid length. [ 121.075038][T10689] netlink: 3657 bytes leftover after parsing attributes in process `syz.8.3061'. [ 121.545447][T10731] loop1: detected capacity change from 0 to 512 [ 121.552543][T10726] netdevsim netdevsim2: Direct firmware load for þ failed with error -2 [ 121.564876][T10731] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.3081: inode has both inline data and extents flags [ 121.611961][T10731] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.3081: couldn't read orphan inode 15 (err -117) [ 121.655270][T10739] loop2: detected capacity change from 0 to 2048 [ 121.662300][T10731] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.736853][T10739] loop2: p1 < > p3 [ 121.741589][T10739] loop2: p3 size 54016 extends beyond EOD, truncated [ 121.788646][ C1] operation not supported error, dev loop2, sector 160 op 0x9:(WRITE_ZEROES) flags 0x20000800 phys_seg 0 prio class 2 [ 121.961259][ T8647] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.986425][T10757] 9pnet_fd: Insufficient options for proto=fd [ 122.019990][T10760] loop2: detected capacity change from 0 to 256 [ 122.046438][T10763] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3094'. [ 122.161179][T10777] netlink: 5420 bytes leftover after parsing attributes in process `syz.1.3101'. [ 122.339889][T10795] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3110'. [ 122.589241][T10825] netlink: 'syz.2.3133': attribute type 10 has an invalid length. [ 122.598199][T10823] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3123'. [ 122.617806][T10825] ipvlan0: entered allmulticast mode [ 122.623138][T10825] veth0_vlan: entered allmulticast mode [ 122.653397][T10825] team0: Device ipvlan0 failed to register rx_handler [ 122.738815][T10840] random: crng reseeded on system resumption [ 122.974949][T10855] loop2: detected capacity change from 0 to 512 [ 123.246878][ T29] kauditd_printk_skb: 92 callbacks suppressed [ 123.246896][ T29] audit: type=1326 audit(1760892397.502:2868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10879 comm="syz.2.3149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feffa43efc9 code=0x7ffc0000 [ 123.315280][ T29] audit: type=1326 audit(1760892397.532:2869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10879 comm="syz.2.3149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feffa43efc9 code=0x7ffc0000 [ 123.338886][ T29] audit: type=1326 audit(1760892397.532:2870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10879 comm="syz.2.3149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feffa43efc9 code=0x7ffc0000 [ 123.362409][ T29] audit: type=1326 audit(1760892397.542:2871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10879 comm="syz.2.3149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feffa43efc9 code=0x7ffc0000 [ 123.386079][ T29] audit: type=1326 audit(1760892397.542:2872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10879 comm="syz.2.3149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feffa43efc9 code=0x7ffc0000 [ 123.409734][ T29] audit: type=1326 audit(1760892397.542:2873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10879 comm="syz.2.3149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=86 compat=0 ip=0x7feffa43efc9 code=0x7ffc0000 [ 123.433224][ T29] audit: type=1326 audit(1760892397.542:2874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10879 comm="syz.2.3149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feffa43efc9 code=0x7ffc0000 [ 123.456857][ T29] audit: type=1326 audit(1760892397.542:2875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10879 comm="syz.2.3149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feffa43efc9 code=0x7ffc0000 [ 123.497858][T10892] loop1: detected capacity change from 0 to 1024 [ 123.504643][T10892] EXT4-fs: Ignoring removed nobh option [ 123.510717][T10892] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 123.521926][T10892] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #11: comm syz.1.3154: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 123.539597][T10890] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 123.539597][T10890] program syz.2.3153 not setting count and/or reply_len properly [ 123.556459][T10892] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.3154: couldn't read orphan inode 11 (err -117) [ 123.571400][T10892] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.590303][ T29] audit: type=1400 audit(1760892397.842:2876): avc: denied { create } for pid=10891 comm="syz.1.3154" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 123.601206][T10892] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.3154: Invalid block bitmap block 0 in block_group 0 [ 123.644250][T10892] Quota error (device loop1): write_blk: dquota write failed [ 123.656378][T10892] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.3154: Failed to acquire dquot type 0 [ 123.676060][T10895] netlink: 'syz.2.3155': attribute type 21 has an invalid length. [ 123.719563][T10895] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3155'. [ 123.728679][T10895] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3155'. [ 123.747226][ T8647] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.013343][T10909] loop2: detected capacity change from 0 to 512 [ 124.163212][T10927] loop1: detected capacity change from 0 to 128 [ 124.198740][T10927] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 124.220267][T10927] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 124.237448][T10935] xt_hashlimit: max too large, truncated to 1048576 [ 124.388981][T10960] loop1: detected capacity change from 0 to 1024 [ 124.401493][T10960] ext4: Unknown parameter 'euid<00000000000000000000' [ 124.494752][T10978] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 124.501308][T10978] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 124.508976][T10978] vhci_hcd vhci_hcd.0: Device attached [ 124.517515][T10982] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3197'. [ 124.556164][T10988] loop8: detected capacity change from 0 to 128 [ 124.565857][T10981] vhci_hcd: connection closed [ 124.574858][ T293] vhci_hcd: stop threads [ 124.583893][ T293] vhci_hcd: release socket [ 124.588369][ T293] vhci_hcd: disconnect device [ 124.603651][T10988] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 124.621704][T10988] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 124.648725][T10979] loop1: detected capacity change from 0 to 8192 [ 124.725388][T11003] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3207'. [ 124.751643][T11003] hsr_slave_1 (unregistering): left promiscuous mode [ 124.781109][T11007] loop8: detected capacity change from 0 to 512 [ 124.823793][T11007] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.838624][T11007] EXT4-fs (loop8): Online resizing not supported with sparse_super2 [ 124.867049][T10017] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.925316][T11017] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3212'. [ 124.989177][T11023] loop8: detected capacity change from 0 to 512 [ 125.007578][T11032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.007928][T11029] xt_hashlimit: max too large, truncated to 1048576 [ 125.016206][T11023] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 125.023351][T11032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.047528][T11023] EXT4-fs (loop8): 1 truncate cleaned up [ 125.060798][T11023] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.080094][T11036] loop1: detected capacity change from 0 to 512 [ 125.105638][T11036] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.117188][T10017] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.120575][T11036] EXT4-fs (loop1): Online resizing not supported with sparse_super2 [ 125.177747][ T8647] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.307649][T11065] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 125.360829][T11072] loop8: detected capacity change from 0 to 512 [ 125.391762][T11072] EXT4-fs warning (device loop8): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 125.415017][T11072] EXT4-fs (loop8): mount failed [ 125.627502][T11102] netlink: 27 bytes leftover after parsing attributes in process `syz.8.3250'. [ 125.746206][T11115] netlink: 96 bytes leftover after parsing attributes in process `syz.7.3257'. [ 125.804963][T11123] loop3: detected capacity change from 0 to 512 [ 125.828075][T11128] netlink: 27 bytes leftover after parsing attributes in process `syz.7.3263'. [ 125.838407][T11123] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.884740][T11123] EXT4-fs warning (device loop3): __ext4_ioctl:1551: Setting inode version is not supported with metadata_csum enabled. [ 125.909369][T11140] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3266'. [ 125.970594][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.982683][T11140] hsr_slave_1 (unregistering): left promiscuous mode [ 126.014796][T11147] loop1: detected capacity change from 0 to 1024 [ 126.037337][T11147] EXT4-fs: Ignoring removed nobh option [ 126.070030][T11147] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.176907][ T8647] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.381737][T11177] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3285'. [ 126.518221][T11188] bond1: entered promiscuous mode [ 126.523340][T11188] bond1: entered allmulticast mode [ 126.538127][T11188] 8021q: adding VLAN 0 to HW filter on device bond1 [ 126.557455][T11188] bond1 (unregistering): Released all slaves [ 126.739128][T11200] loop1: detected capacity change from 0 to 512 [ 126.767853][T11200] EXT4-fs warning (device loop1): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 126.790171][T11200] EXT4-fs (loop1): mount failed [ 126.990465][T11222] delete_channel: no stack [ 127.355295][T11257] macvtap0: refused to change device tx_queue_len [ 127.905742][T11280] loop3: detected capacity change from 0 to 256 [ 128.020697][T11286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.052781][T11286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.279644][ T29] kauditd_printk_skb: 126 callbacks suppressed [ 128.279662][ T29] audit: type=1400 audit(1760892402.532:3000): avc: denied { read write } for pid=9977 comm="syz-executor" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 128.318992][ T29] audit: type=1400 audit(1760892402.532:3001): avc: denied { open } for pid=9977 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 128.343216][ T29] audit: type=1400 audit(1760892402.532:3002): avc: denied { ioctl } for pid=9977 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=107 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 128.368916][ T29] audit: type=1400 audit(1760892402.572:3003): avc: denied { open } for pid=11297 comm="syz.8.3338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 128.388711][ T29] audit: type=1400 audit(1760892402.572:3004): avc: denied { perfmon } for pid=11297 comm="syz.8.3338" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 128.409782][ T29] audit: type=1400 audit(1760892402.572:3005): avc: denied { kernel } for pid=11297 comm="syz.8.3338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 128.410253][T11300] loop8: detected capacity change from 0 to 512 [ 128.429386][ T29] audit: type=1400 audit(1760892402.572:3006): avc: denied { prog_load } for pid=11296 comm="syz.7.3339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 128.454758][ T29] audit: type=1400 audit(1760892402.572:3007): avc: denied { bpf } for pid=11296 comm="syz.7.3339" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 128.475392][ T29] audit: type=1400 audit(1760892402.572:3008): avc: denied { prog_run } for pid=11296 comm="syz.7.3339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 128.496375][T11300] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 128.505475][T11300] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 128.512096][ T29] audit: type=1400 audit(1760892402.722:3009): avc: denied { mounton } for pid=11297 comm="syz.8.3338" path="/100/file0" dev="tmpfs" ino=528 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 128.542638][T11300] EXT4-fs (loop8): warning: mounting unchecked fs, running e2fsck is recommended [ 128.552031][T11300] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 128.560123][T11300] System zones: 0-2, 18-18, 34-35 [ 128.565703][T11300] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.598708][T11299] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.3338: bg 0: block 353: padding at end of block bitmap is not set [ 128.614092][T11310] netlink: 'syz.2.3343': attribute type 10 has an invalid length. [ 128.623695][T11310] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 128.633875][T11310] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 128.646260][T11310] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 128.712132][T11320] loop3: detected capacity change from 0 to 1024 [ 128.721432][T11320] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.734895][T10017] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.754662][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.799620][T11331] loop1: detected capacity change from 0 to 1024 [ 128.808585][T11331] EXT4-fs: Mount option(s) incompatible with ext2 [ 128.890744][T11342] netlink: 'syz.8.3358': attribute type 10 has an invalid length. [ 128.900582][T11342] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 128.911938][T11342] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 128.924362][T11342] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 128.941258][T11349] loop2: detected capacity change from 0 to 1024 [ 128.949320][T11347] loop3: detected capacity change from 0 to 512 [ 128.957898][T11347] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 128.967231][T11347] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 128.976695][T11349] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.977662][T11347] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 129.011623][T11347] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 129.020130][T11347] System zones: 0-2, 18-18, 34-35 [ 129.026389][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.057135][T11347] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3361: bg 0: block 353: padding at end of block bitmap is not set [ 129.133798][T11370] sctp: [Deprecated]: syz.2.3371 (pid 11370) Use of struct sctp_assoc_value in delayed_ack socket option. [ 129.133798][T11370] Use struct sctp_sack_info instead [ 129.293957][T11394] __nla_validate_parse: 4 callbacks suppressed [ 129.293971][T11394] netlink: 264 bytes leftover after parsing attributes in process `syz.1.3392'. [ 129.333227][T11401] loop3: detected capacity change from 0 to 128 [ 129.340509][T11401] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 129.352941][T11401] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 129.397632][ T31] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 129.408814][T11407] sctp: [Deprecated]: syz.1.3386 (pid 11407) Use of struct sctp_assoc_value in delayed_ack socket option. [ 129.408814][T11407] Use struct sctp_sack_info instead [ 129.543384][T11432] loop3: detected capacity change from 0 to 512 [ 129.550829][T11432] EXT4-fs: Ignoring removed orlov option [ 129.557724][T11424] loop8: detected capacity change from 0 to 8192 [ 129.557787][T11434] loop1: detected capacity change from 0 to 128 [ 129.570896][T11432] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 129.578541][T11434] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 129.580086][T11424] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 129.591577][T11434] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 129.616954][T11432] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 129.631802][T11432] EXT4-fs error (device loop3): ext4_iget_extra_inode:5075: inode #15: comm syz.3.3403: corrupted in-inode xattr: e_value size too large [ 129.647537][T11432] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.3403: couldn't read orphan inode 15 (err -117) [ 129.660003][T11432] EXT4-fs mount: 2 callbacks suppressed [ 129.660021][T11432] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.687234][T11424] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 129.696086][T11424] FAT-fs (loop8): Filesystem has been set read-only [ 129.703253][T11424] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 129.703250][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.715186][T11424] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 129.747042][ T293] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 129.769504][T11446] loop1: detected capacity change from 0 to 1024 [ 129.783169][T10017] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 129.795210][T11446] EXT4-fs: Ignoring removed nobh option [ 129.800882][T11446] EXT4-fs: Ignoring removed bh option [ 129.822007][T11446] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.879191][ T8647] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.918975][T11467] loop1: detected capacity change from 0 to 512 [ 129.928171][T11472] @ÿ: renamed from veth0_vlan (while UP) [ 129.954758][T11467] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.968275][T11467] ext4 filesystem being mounted at /271/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.978253][T11480] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3421'. [ 130.007325][T11467] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.3414: bg 0: block 64: padding at end of block bitmap is not set [ 130.054346][ T8647] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.080293][T11489] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3425'. [ 130.089897][T11487] netlink: 264 bytes leftover after parsing attributes in process `syz.3.3424'. [ 130.188798][T11497] loop3: detected capacity change from 0 to 512 [ 130.203588][T11497] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 130.219318][T11497] EXT4-fs (loop3): 1 truncate cleaned up [ 130.226194][T11497] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.275200][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.517752][T11528] loop2: detected capacity change from 0 to 512 [ 130.537397][T11528] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 130.571548][T11528] EXT4-fs (loop2): 1 truncate cleaned up [ 130.582683][T11528] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.670312][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.010519][T11558] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3456'. [ 131.019931][T11556] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3455'. [ 131.094225][T11568] loop3: detected capacity change from 0 to 764 [ 131.102793][T11568] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 131.173645][T11573] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3463'. [ 131.217665][T11580] netlink: 5452 bytes leftover after parsing attributes in process `syz.3.3466'. [ 131.259816][T11581] loop7: detected capacity change from 0 to 764 [ 131.288299][T11581] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 131.324840][T11597] loop3: detected capacity change from 0 to 128 [ 131.333881][T11597] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 131.346237][T11597] ext4 filesystem being mounted at /818/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 131.350129][T11605] loop7: detected capacity change from 0 to 128 [ 131.385790][T11605] EXT4-fs: Ignoring removed nobh option [ 131.392986][T11605] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 131.413085][ T3319] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 131.425090][T11608] loop8: detected capacity change from 0 to 512 [ 131.426541][T11605] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.444700][T11605] EXT4-fs (loop7): shut down requested (1) [ 131.451788][T11608] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.507313][T10017] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.517725][T11605] EXT4-fs (loop7): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 131.575939][ T9977] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 131.610151][T11631] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3490'. [ 131.907871][T11672] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=11672 comm=syz.1.3508 [ 131.962346][T11679] loop8: detected capacity change from 0 to 512 [ 131.980182][T11679] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 132.161329][T11711] loop8: detected capacity change from 0 to 512 [ 132.168306][T11711] EXT4-fs: Ignoring removed oldalloc option [ 132.176149][T11714] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3524'. [ 132.187945][T11711] EXT4-fs (loop8): 1 truncate cleaned up [ 132.206800][T11711] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.233344][T11711] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.3523: invalid indirect mapped block 234881024 (level 0) [ 132.244092][T11722] loop2: detected capacity change from 0 to 512 [ 132.254116][T11722] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 132.267557][T11711] EXT4-fs (loop8): Remounting filesystem read-only [ 132.297312][T10017] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.325964][T11728] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.333284][T11728] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.471681][T11751] SELinux: failed to load policy [ 132.537592][T11759] loop8: detected capacity change from 0 to 512 [ 132.569912][T11759] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 132.715838][T11777] loop8: detected capacity change from 0 to 1024 [ 132.724012][T11777] EXT4-fs: Ignoring removed nobh option [ 132.732612][T11777] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 132.763598][T11777] EXT4-fs error (device loop8): ext4_ext_check_inode:523: inode #11: comm syz.8.3554: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 132.792823][T11777] EXT4-fs error (device loop8): ext4_orphan_get:1397: comm syz.8.3554: couldn't read orphan inode 11 (err -117) [ 132.822432][T11777] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.840393][T11777] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:483: comm syz.8.3554: Invalid block bitmap block 0 in block_group 0 [ 132.860797][T11777] EXT4-fs error (device loop8): ext4_acquire_dquot:6945: comm syz.8.3554: Failed to acquire dquot type 0 [ 132.880249][T11777] EXT4-fs error (device loop8): __ext4_get_inode_loc:4832: comm syz.8.3554: Invalid inode table block 21474836481 in block_group 0 [ 132.913771][T11802] delete_channel: no stack [ 132.937336][ T293] EXT4-fs error (device loop8): __ext4_get_inode_loc:4832: comm kworker/u8:5: Invalid inode table block 21474836481 in block_group 0 [ 132.962546][T10017] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.213600][T11841] loop2: detected capacity change from 0 to 256 [ 133.280266][T11851] loop7: detected capacity change from 0 to 512 [ 133.290225][T11851] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 133.302907][T11851] EXT4-fs (loop7): orphan cleanup on readonly fs [ 133.308643][ T29] kauditd_printk_skb: 194 callbacks suppressed [ 133.308664][ T29] audit: type=1400 audit(1760892407.552:3202): avc: denied { read } for pid=11855 comm="syz.8.3592" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 133.310040][T11851] Quota error (device loop7): v2_read_file_info: Block with free entry 4294967071 out of range (1, 6). [ 133.315530][ T29] audit: type=1400 audit(1760892407.552:3203): avc: denied { open } for pid=11855 comm="syz.8.3592" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 133.338801][T11851] EXT4-fs warning (device loop7): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 133.389751][T11851] EXT4-fs (loop7): Cannot turn on quotas: error -117 [ 133.403404][T11851] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.3590: bg 0: block 40: padding at end of block bitmap is not set [ 133.436343][ T29] audit: type=1400 audit(1760892407.672:3204): avc: denied { execmem } for pid=11858 comm="syz.2.3593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 133.456992][T11851] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 133.466740][T11851] EXT4-fs (loop7): 1 truncate cleaned up [ 133.483110][T11851] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 133.513441][T11868] loop8: detected capacity change from 0 to 128 [ 133.579442][ T9977] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.618729][T11880] bio_check_eod: 74 callbacks suppressed [ 133.618746][T11880] syz.8.3597: attempt to access beyond end of device [ 133.618746][T11880] loop8: rw=1, sector=145, nr_sectors = 16 limit=128 [ 133.647933][T11880] syz.8.3597: attempt to access beyond end of device [ 133.647933][T11880] loop8: rw=1, sector=169, nr_sectors = 8 limit=128 [ 133.659942][T11878] 8021q: adding VLAN 0 to HW filter on device bond1 [ 133.668680][T11880] syz.8.3597: attempt to access beyond end of device [ 133.668680][T11880] loop8: rw=1, sector=185, nr_sectors = 8 limit=128 [ 133.710240][T11880] syz.8.3597: attempt to access beyond end of device [ 133.710240][T11880] loop8: rw=1, sector=201, nr_sectors = 8 limit=128 [ 133.723833][T11880] syz.8.3597: attempt to access beyond end of device [ 133.723833][T11880] loop8: rw=1, sector=217, nr_sectors = 8 limit=128 [ 133.737100][T11880] syz.8.3597: attempt to access beyond end of device [ 133.737100][T11880] loop8: rw=1, sector=233, nr_sectors = 8 limit=128 [ 133.755076][T11880] syz.8.3597: attempt to access beyond end of device [ 133.755076][T11880] loop8: rw=1, sector=249, nr_sectors = 8 limit=128 [ 133.769893][T11880] syz.8.3597: attempt to access beyond end of device [ 133.769893][T11880] loop8: rw=1, sector=265, nr_sectors = 8 limit=128 [ 133.780294][ T29] audit: type=1400 audit(1760892408.022:3205): avc: denied { create } for pid=11884 comm="syz.3.3603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 133.783259][T11880] syz.8.3597: attempt to access beyond end of device [ 133.783259][T11880] loop8: rw=1, sector=281, nr_sectors = 8 limit=128 [ 133.802545][ T29] audit: type=1400 audit(1760892408.022:3206): avc: denied { write } for pid=11884 comm="syz.3.3603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 133.802607][ T29] audit: type=1400 audit(1760892408.022:3207): avc: denied { write } for pid=11884 comm="syz.3.3603" name="kcm" dev="proc" ino=4026533001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 133.878345][ T29] audit: type=1400 audit(1760892408.132:3208): avc: denied { read } for pid=11886 comm="syz.3.3605" dev="nsfs" ino=4026532891 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 133.899676][ T29] audit: type=1400 audit(1760892408.132:3209): avc: denied { open } for pid=11886 comm="syz.3.3605" path="net:[4026532891]" dev="nsfs" ino=4026532891 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 133.908967][T11880] syz.8.3597: attempt to access beyond end of device [ 133.908967][T11880] loop8: rw=1, sector=297, nr_sectors = 8 limit=128 [ 133.976525][ T29] audit: type=1400 audit(1760892408.222:3210): avc: denied { ioctl } for pid=11892 comm="syz.2.3608" path="socket:[33516]" dev="sockfs" ino=33516 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 134.020403][T11897] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 134.020403][T11897] program syz.3.3610 not setting count and/or reply_len properly [ 134.098572][T11899] loop2: detected capacity change from 0 to 2048 [ 134.105220][T11899] EXT4-fs: Ignoring removed oldalloc option [ 134.111222][T11899] ext4: Unknown parameter 'noacl' [ 134.290647][T11941] loop7: detected capacity change from 0 to 2048 [ 134.330737][T11951] __nla_validate_parse: 10 callbacks suppressed [ 134.330756][T11951] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3637'. [ 134.346123][T11951] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3637'. [ 134.355157][T11951] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3637'. [ 134.369967][T11951] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3637'. [ 134.379139][T11951] netlink: 'syz.2.3637': attribute type 6 has an invalid length. [ 134.391802][T11957] loop8: detected capacity change from 0 to 1024 [ 134.407863][T11941] loop7: p1 p2 p3 [ 134.442206][T11957] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.455569][T11966] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3643'. [ 134.493090][T11957] EXT4-fs error (device loop8): ext4_iget_extra_inode:5075: inode #12: comm syz.8.3639: corrupted in-inode xattr: invalid ea_ino [ 134.520727][T11975] loop1: detected capacity change from 0 to 128 [ 134.560478][T11957] EXT4-fs (loop8): Remounting filesystem read-only [ 134.566275][T11975] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 134.611427][T11992] loop1: detected capacity change from 0 to 256 [ 134.646074][T10017] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.716233][T12004] loop7: detected capacity change from 0 to 512 [ 134.758947][T12011] loop8: detected capacity change from 0 to 128 [ 134.774299][T12004] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 134.795527][T12011] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 134.808158][T12011] ext4 filesystem being mounted at /163/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 134.815350][T12015] loop2: detected capacity change from 0 to 2048 [ 134.846065][T10017] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 134.857166][T12004] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 134.865124][T12004] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 134.874340][T12004] System zones: 0-1, 15-15, 18-18, 34-34 [ 134.880916][T12004] EXT4-fs (loop7): orphan cleanup on readonly fs [ 134.887481][T12004] EXT4-fs warning (device loop7): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 134.902040][T12004] EXT4-fs (loop7): Cannot turn on quotas: error -22 [ 134.910050][T12004] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.3660: bg 0: block 40: padding at end of block bitmap is not set [ 134.913348][T12015] Alternate GPT is invalid, using primary GPT. [ 134.930717][T12015] loop2: p1 p2 p3 [ 134.931264][T12023] netlink: 'syz.1.3669': attribute type 21 has an invalid length. [ 134.934449][T12015] loop2: partition table partially beyond EOD, truncated [ 134.951218][T12004] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 134.980560][T12004] EXT4-fs (loop7): 1 truncate cleaned up [ 135.001370][T12004] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 135.001891][T12029] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3671'. [ 135.039000][T12035] loop1: detected capacity change from 0 to 128 [ 135.053123][T12004] EXT4-fs error (device loop7): ext4_encrypted_get_link:46: inode #16: comm syz.7.3660: bad symlink. [ 135.073789][T12035] FAT-fs (loop1): Directory bread(block 414) failed [ 135.082534][T12037] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3675'. [ 135.092032][T12037] unsupported nlmsg_type 40 [ 135.098753][T12042] EXT4-fs error (device loop7): ext4_encrypted_get_link:46: inode #16: comm syz.7.3660: bad symlink. [ 135.099489][T12041] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3677'. [ 135.111494][T12004] EXT4-fs error (device loop7): ext4_encrypted_get_link:46: inode #16: comm syz.7.3660: bad symlink. [ 135.129764][T12035] FAT-fs (loop1): Directory bread(block 415) failed [ 135.129790][T12035] FAT-fs (loop1): Directory bread(block 416) failed [ 135.129808][T12035] FAT-fs (loop1): Directory bread(block 417) failed [ 135.129825][T12035] FAT-fs (loop1): Directory bread(block 418) failed [ 135.129886][T12035] FAT-fs (loop1): Directory bread(block 419) failed [ 135.129904][T12035] FAT-fs (loop1): Directory bread(block 420) failed [ 135.173381][ T9977] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.179789][T12035] FAT-fs (loop1): Directory bread(block 421) failed [ 135.198714][T12035] FAT-fs (loop1): Directory bread(block 414) failed [ 135.210176][T12035] FAT-fs (loop1): Directory bread(block 415) failed [ 135.229405][T12048] raw_sendmsg: syz.7.3678 forgot to set AF_INET. Fix it! [ 135.691458][T12114] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3709'. [ 135.843046][T12131] loop8: detected capacity change from 0 to 512 [ 135.857453][T12131] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.913063][T10017] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.020863][T12147] loop7: detected capacity change from 0 to 512 [ 136.022795][T12147] EXT4-fs error (device loop7): ext4_iget_extra_inode:5075: inode #15: comm syz.7.3724: corrupted in-inode xattr: invalid ea_ino [ 136.041312][T12147] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.3724: couldn't read orphan inode 15 (err -117) [ 136.041842][T12147] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.071568][T12147] EXT4-fs error (device loop7): __ext4_expand_extra_isize:6333: inode #18: comm syz.7.3724: bad extra_isize 6 (inode size 256) [ 136.111574][ T9977] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.161727][T12154] netlink: 'syz.7.3725': attribute type 8 has an invalid length. [ 136.169527][T12154] netem: change failed [ 136.307944][T12175] loop2: detected capacity change from 0 to 164 [ 136.315005][T12175] ISOFS: unable to read i-node block [ 136.320439][T12175] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 136.369990][T12181] loop7: detected capacity change from 0 to 512 [ 136.378013][T12181] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.410581][ T9977] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.783050][T12213] loop7: detected capacity change from 0 to 2048 [ 136.824571][T12198] loop1: detected capacity change from 0 to 32768 [ 136.861038][T12213] EXT4-fs (loop7): failed to initialize system zone (-117) [ 136.868629][T12198] loop1: p3 p4 < > [ 136.872536][T12198] loop1: p3 size 44183552 extends beyond EOD, truncated [ 136.879654][T12213] EXT4-fs (loop7): mount failed [ 137.015884][T12239] program syz.8.3765 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 137.029873][T12238] bridge0: port 3(gretap0) entered blocking state [ 137.036383][T12238] bridge0: port 3(gretap0) entered disabled state [ 137.043044][T12238] gretap0: entered allmulticast mode [ 137.050574][T12238] gretap0: entered promiscuous mode [ 137.103429][T12249] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3770'. [ 137.152814][T12259] loop2: detected capacity change from 0 to 512 [ 137.159901][T12259] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 137.166593][T12258] loop1: detected capacity change from 0 to 512 [ 137.191803][T12259] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fffff00) [ 137.196716][T12258] EXT4-fs: Ignoring removed nobh option [ 137.224103][T12267] loop3: detected capacity change from 0 to 256 [ 137.232312][T12258] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #3: comm syz.1.3773: corrupted inode contents [ 137.250616][T12258] EXT4-fs (loop1): Remounting filesystem read-only [ 137.259275][T12267] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 137.274963][T12258] EXT4-fs (loop1): 1 truncate cleaned up [ 137.281415][T12258] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.300097][T12258] ext4 filesystem being mounted at /338/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.353488][T12280] tap0: tun_chr_ioctl cmd 1074025677 [ 137.363764][T12280] tap0: linktype set to 270 [ 137.370290][T12282] loop2: detected capacity change from 0 to 128 [ 137.384614][ T8647] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.420956][T12285] loop1: detected capacity change from 0 to 512 [ 137.446124][T12285] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 137.464234][T12285] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.3785: inode has both inline data and extents flags [ 137.517514][T12285] EXT4-fs (loop1): Remounting filesystem read-only [ 137.548380][T12285] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.638015][ T8647] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.665076][T12305] loop7: detected capacity change from 0 to 128 [ 137.677639][T12305] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 137.690075][T12305] ext4 filesystem being mounted at /163/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 137.720444][ T9977] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 137.913143][T12349] loop1: detected capacity change from 0 to 1764 [ 138.025009][T12353] SELinux: Context Ü is not valid (left unmapped). [ 138.056072][T12347] loop3: detected capacity change from 0 to 512 [ 138.067240][T12347] EXT4-fs (loop3): too many log groups per flexible block group [ 138.075512][T12347] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 138.082767][T12347] EXT4-fs (loop3): mount failed [ 138.114228][ T1042] kernel write not supported for file /360/clear_refs (pid: 1042 comm: kworker/0:2) [ 138.341815][ T29] kauditd_printk_skb: 183 callbacks suppressed [ 138.341832][ T29] audit: type=1326 audit(1760892412.592:3391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12413 comm="syz.7.3848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe04d54efc9 code=0x7ffc0000 [ 138.383082][ T29] audit: type=1326 audit(1760892412.632:3392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12413 comm="syz.7.3848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7fe04d54efc9 code=0x7ffc0000 [ 138.406744][ T29] audit: type=1326 audit(1760892412.632:3393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12413 comm="syz.7.3848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe04d54efc9 code=0x7ffc0000 [ 138.501274][ T29] audit: type=1326 audit(1760892412.752:3394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12424 comm="syz.7.3853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe04d54efc9 code=0x7ffc0000 [ 138.526445][ T29] audit: type=1326 audit(1760892412.752:3395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12424 comm="syz.7.3853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe04d54efc9 code=0x7ffc0000 [ 138.549996][ T29] audit: type=1326 audit(1760892412.772:3396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12424 comm="syz.7.3853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe04d54efc9 code=0x7ffc0000 [ 138.573559][ T29] audit: type=1326 audit(1760892412.772:3397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12424 comm="syz.7.3853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe04d54efc9 code=0x7ffc0000 [ 138.597314][ T29] audit: type=1326 audit(1760892412.772:3398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12424 comm="syz.7.3853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=150 compat=0 ip=0x7fe04d54efc9 code=0x7ffc0000 [ 138.620896][ T29] audit: type=1326 audit(1760892412.772:3399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12424 comm="syz.7.3853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe04d54efc9 code=0x7ffc0000 [ 138.644404][ T29] audit: type=1326 audit(1760892412.772:3400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12424 comm="syz.7.3853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe04d54efc9 code=0x7ffc0000 [ 138.926145][T12431] loop8: detected capacity change from 0 to 32768 [ 138.956498][T12451] loop1: detected capacity change from 0 to 1024 [ 138.964063][T12451] EXT4-fs: Ignoring removed orlov option [ 138.979597][T12451] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.068391][ T8647] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.092207][T12463] loop2: detected capacity change from 0 to 128 [ 139.319252][T12500] loop8: detected capacity change from 0 to 512 [ 139.345934][T12500] journal_path: Non-blockdev passed as './bus' [ 139.352297][T12500] EXT4-fs: error: could not find journal device path [ 139.459906][T12526] C: renamed from team_slave_0 (while UP) [ 139.468035][T12526] netlink: 'syz.3.3900': attribute type 3 has an invalid length. [ 139.475778][T12526] __nla_validate_parse: 4 callbacks suppressed [ 139.475794][T12526] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3900'. [ 139.491138][T12526] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 139.574301][T12541] loop3: detected capacity change from 0 to 512 [ 139.581265][T12540] loop8: detected capacity change from 0 to 764 [ 139.589998][T12540] rock: directory entry would overflow storage [ 139.596337][T12540] rock: sig=0x4f50, size=4, remaining=3 [ 139.601980][T12540] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 139.660991][T12549] serio: Serial port ptm0 [ 139.664861][T12553] loop8: detected capacity change from 0 to 512 [ 139.673805][T12553] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.686445][T12553] ext4 filesystem being mounted at /200/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 139.699811][T12553] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 139.765834][T10017] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.784601][T12565] loop7: detected capacity change from 0 to 256 [ 139.797142][T12565] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 139.812587][T12571] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 139.819922][T12571] IPv6: NLM_F_CREATE should be set when creating new route [ 139.827154][T12571] IPv6: NLM_F_CREATE should be set when creating new route [ 139.834398][T12571] IPv6: NLM_F_CREATE should be set when creating new route [ 139.842169][T12571] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 139.939046][T12587] loop8: detected capacity change from 0 to 128 [ 139.946952][T12583] netlink: 'syz.3.3927': attribute type 6 has an invalid length. [ 139.955886][T12589] netlink: 5452 bytes leftover after parsing attributes in process `syz.7.3930'. [ 139.984335][T12591] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 139.996353][T12591] bond0: (slave lo): Error: Device can not be enslaved while up [ 140.053373][T12602] xt_connbytes: Forcing CT accounting to be enabled [ 140.061634][T12602] Cannot find set identified by id 0 to match [ 140.177987][T12626] loop8: detected capacity change from 0 to 512 [ 140.198949][T12626] EXT4-fs error (device loop8): ext4_orphan_get:1397: comm syz.8.3948: couldn't read orphan inode 26 (err -116) [ 140.212765][T12626] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.227107][T12626] ext4 filesystem being mounted at /212/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.266005][T10017] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.314990][T12639] xt_connbytes: Forcing CT accounting to be enabled [ 140.335756][T12639] set match dimension is over the limit! [ 140.396266][T12648] loop2: detected capacity change from 0 to 8192 [ 140.403930][T12648] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 140.485496][T12660] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3964'. [ 140.505124][T12664] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3966'. [ 140.670253][T12689] netlink: 830 bytes leftover after parsing attributes in process `syz.8.3978'. [ 141.376555][T12716] loop8: detected capacity change from 0 to 8192 [ 141.389636][T12716] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 141.627297][T12762] loop3: detected capacity change from 0 to 128 [ 141.634441][T12762] EXT4-fs: Ignoring removed nobh option [ 141.656087][T12762] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 141.684568][T12762] ext4 filesystem being mounted at /921/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.702716][T12762] EXT4-fs (loop3): shut down requested (1) [ 141.724927][T12762] EXT4-fs (loop3): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 141.755528][ T3319] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 141.887032][T12792] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4023'. [ 141.957854][T12802] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=12802 comm=syz.8.4028 [ 142.342690][T12841] netlink: 5452 bytes leftover after parsing attributes in process `syz.8.4043'. [ 142.372682][T12847] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4055'. [ 142.428099][T12853] netlink: 64 bytes leftover after parsing attributes in process `syz.8.4045'. [ 142.494906][T12860] loop3: detected capacity change from 0 to 512 [ 142.508493][T12863] loop2: detected capacity change from 0 to 128 [ 142.515004][T12863] EXT4-fs: Ignoring removed nobh option [ 142.527883][T12860] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 142.541861][T12863] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 142.572070][T12863] ext4 filesystem being mounted at /821/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.630870][T12863] EXT4-fs (loop2): shut down requested (1) [ 142.652008][T12863] EXT4-fs (loop2): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 142.703968][ T3317] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 142.768072][T12895] loop7: detected capacity change from 0 to 512 [ 142.778728][T12895] EXT4-fs: Ignoring removed oldalloc option [ 142.818773][T12895] EXT4-fs (loop7): 1 truncate cleaned up [ 142.828460][T12895] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.886704][T12895] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.4064: invalid indirect mapped block 234881024 (level 0) [ 142.901172][T12895] EXT4-fs (loop7): Remounting filesystem read-only [ 142.944929][ T9977] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.957810][T12916] loop1: detected capacity change from 0 to 512 [ 142.969199][T12916] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 143.166056][T12937] loop3: detected capacity change from 0 to 512 [ 143.179934][T12937] EXT4-fs: Ignoring removed oldalloc option [ 143.196689][T12937] EXT4-fs (loop3): 1 truncate cleaned up [ 143.202753][T12937] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.237014][T12952] loop7: detected capacity change from 0 to 256 [ 143.245036][T12953] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4092'. [ 143.263583][T12937] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.4083: invalid indirect mapped block 234881024 (level 0) [ 143.292843][T12937] EXT4-fs (loop3): Remounting filesystem read-only [ 143.342601][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.362985][ T29] kauditd_printk_skb: 125 callbacks suppressed [ 143.363003][ T29] audit: type=1400 audit(1760892417.612:3526): avc: denied { setopt } for pid=12967 comm="syz.2.4099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 143.388879][ T29] audit: type=1400 audit(1760892417.612:3527): avc: denied { open } for pid=12967 comm="syz.2.4099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 143.408279][ T29] audit: type=1400 audit(1760892417.612:3528): avc: denied { perfmon } for pid=12967 comm="syz.2.4099" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 143.429263][ T29] audit: type=1400 audit(1760892417.612:3529): avc: denied { kernel } for pid=12967 comm="syz.2.4099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 143.448965][ T29] audit: type=1400 audit(1760892417.612:3530): avc: denied { tracepoint } for pid=12967 comm="syz.2.4099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 143.468892][ T29] audit: type=1400 audit(1760892417.622:3531): avc: denied { read append } for pid=12970 comm="syz.7.4101" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 143.493106][ T29] audit: type=1400 audit(1760892417.622:3532): avc: denied { open } for pid=12970 comm="syz.7.4101" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 143.517149][ T29] audit: type=1400 audit(1760892417.622:3533): avc: denied { write } for pid=12970 comm="syz.7.4101" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 143.540905][ T29] audit: type=1400 audit(1760892417.622:3534): avc: denied { read write } for pid=10017 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 143.565309][ T29] audit: type=1400 audit(1760892417.622:3535): avc: denied { open } for pid=10017 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 143.707306][T12998] loop1: detected capacity change from 0 to 512 [ 143.714127][T12998] EXT4-fs: Ignoring removed oldalloc option [ 143.725215][T12998] EXT4-fs (loop1): 1 truncate cleaned up [ 143.731565][T12998] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.750978][T12998] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.4111: invalid indirect mapped block 234881024 (level 0) [ 143.790711][T12998] EXT4-fs (loop1): Remounting filesystem read-only [ 143.811004][ T8647] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.183204][T13037] loop2: detected capacity change from 0 to 512 [ 144.199379][T13037] EXT4-fs: Ignoring removed oldalloc option [ 144.208770][T13037] EXT4-fs (loop2): 1 truncate cleaned up [ 144.214972][T13037] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.231144][T13037] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.4126: invalid indirect mapped block 234881024 (level 0) [ 144.245486][T13037] EXT4-fs (loop2): Remounting filesystem read-only [ 144.261958][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.786871][T13098] 8021q: adding VLAN 0 to HW filter on device bond3 [ 144.884402][T13108] loop3: detected capacity change from 0 to 256 [ 145.018507][T13122] __nla_validate_parse: 2 callbacks suppressed [ 145.018533][T13122] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4167'. [ 145.033856][T13122] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4167'. [ 145.042873][T13122] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4167'. [ 145.154743][T13137] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4175'. [ 145.163833][T13137] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4175'. [ 145.172860][T13137] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4175'. [ 145.181993][T13137] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4175'. [ 145.190985][T13137] netlink: 'syz.3.4175': attribute type 6 has an invalid length. [ 145.219950][T13139] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4186'. [ 146.203220][T13165] netlink: 'syz.2.4187': attribute type 21 has an invalid length. [ 146.231470][T13171] loop1: detected capacity change from 0 to 2048 [ 146.241078][T13171] EXT4-fs: Ignoring removed oldalloc option [ 146.247099][T13171] ext4: Unknown parameter 'noacl' [ 146.257641][T13174] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4193'. [ 146.266694][T13174] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4193'. [ 146.358504][T13190] loop7: detected capacity change from 0 to 128 [ 146.431091][T13198] loop1: detected capacity change from 0 to 1024 [ 146.468128][T13198] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.480466][T13205] bio_check_eod: 101 callbacks suppressed [ 146.480484][T13205] syz.7.4201: attempt to access beyond end of device [ 146.480484][T13205] loop7: rw=1, sector=145, nr_sectors = 16 limit=128 [ 146.513416][T13205] syz.7.4201: attempt to access beyond end of device [ 146.513416][T13205] loop7: rw=1, sector=169, nr_sectors = 8 limit=128 [ 146.527078][T13205] syz.7.4201: attempt to access beyond end of device [ 146.527078][T13205] loop7: rw=1, sector=185, nr_sectors = 8 limit=128 [ 146.529350][T13198] EXT4-fs error (device loop1): ext4_iget_extra_inode:5075: inode #12: comm syz.1.4214: corrupted in-inode xattr: invalid ea_ino [ 146.540454][T13205] syz.7.4201: attempt to access beyond end of device [ 146.540454][T13205] loop7: rw=1, sector=201, nr_sectors = 8 limit=128 [ 146.566942][T13205] syz.7.4201: attempt to access beyond end of device [ 146.566942][T13205] loop7: rw=1, sector=217, nr_sectors = 8 limit=128 [ 146.580154][T13205] syz.7.4201: attempt to access beyond end of device [ 146.580154][T13205] loop7: rw=1, sector=233, nr_sectors = 8 limit=128 [ 146.580779][T13206] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 494: padding at end of block bitmap is not set [ 146.593442][T13205] syz.7.4201: attempt to access beyond end of device [ 146.593442][T13205] loop7: rw=1, sector=249, nr_sectors = 8 limit=128 [ 146.617073][T13198] EXT4-fs (loop1): Remounting filesystem read-only [ 146.621428][T13205] syz.7.4201: attempt to access beyond end of device [ 146.621428][T13205] loop7: rw=1, sector=265, nr_sectors = 8 limit=128 [ 146.641166][T13205] syz.7.4201: attempt to access beyond end of device [ 146.641166][T13205] loop7: rw=1, sector=281, nr_sectors = 8 limit=128 [ 146.654591][T13205] syz.7.4201: attempt to access beyond end of device [ 146.654591][T13205] loop7: rw=1, sector=297, nr_sectors = 8 limit=128 [ 146.692772][ T8647] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.859602][T13239] loop3: detected capacity change from 0 to 128 [ 146.868581][T13241] loop1: detected capacity change from 0 to 512 [ 146.875734][T13241] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 146.897177][T13241] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 146.905211][T13241] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 146.913710][T13241] System zones: 0-1, 15-15, 18-18, 34-34 [ 146.919857][T13241] EXT4-fs (loop1): orphan cleanup on readonly fs [ 146.930850][T13241] EXT4-fs warning (device loop1): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 146.945506][T13241] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 146.952490][T13241] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.4223: bg 0: block 40: padding at end of block bitmap is not set [ 146.968026][T13241] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 146.976979][T13241] EXT4-fs (loop1): 1 truncate cleaned up [ 146.983237][T13241] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 147.000195][T13241] EXT4-fs error (device loop1): ext4_encrypted_get_link:46: inode #16: comm syz.1.4223: bad symlink. [ 147.011946][T13241] EXT4-fs error (device loop1): ext4_encrypted_get_link:46: inode #16: comm syz.1.4223: bad symlink. [ 147.023748][T13241] EXT4-fs error (device loop1): ext4_encrypted_get_link:46: inode #16: comm syz.1.4223: bad symlink. [ 147.051738][ T8647] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.060962][T13248] loop3: detected capacity change from 0 to 512 [ 147.071133][T13248] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.090373][T13254] netlink: 'syz.1.4225': attribute type 8 has an invalid length. [ 147.098277][T13254] netem: change failed [ 147.114852][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.228925][T13272] loop2: detected capacity change from 0 to 512 [ 147.238243][T13272] EXT4-fs error (device loop2): ext4_iget_extra_inode:5075: inode #15: comm syz.2.4233: corrupted in-inode xattr: invalid ea_ino [ 147.254313][T13272] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.4233: couldn't read orphan inode 15 (err -117) [ 147.271856][T13277] loop3: detected capacity change from 0 to 164 [ 147.279738][T13272] EXT4-fs error (device loop2): __ext4_expand_extra_isize:6333: inode #18: comm syz.2.4233: bad extra_isize 6 (inode size 256) [ 147.306727][T13277] ISOFS: unable to read i-node block [ 147.312134][T13277] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 147.360953][T13286] loop8: detected capacity change from 0 to 512 [ 147.368122][T13286] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 147.388290][T13286] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 147.396220][T13286] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 147.405694][T13286] System zones: 0-1, 15-15, 18-18, 34-34 [ 147.411720][T13286] EXT4-fs (loop8): orphan cleanup on readonly fs [ 147.418613][T13286] EXT4-fs warning (device loop8): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 147.433280][T13286] EXT4-fs (loop8): Cannot turn on quotas: error -22 [ 147.440986][T13286] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.4240: bg 0: block 40: padding at end of block bitmap is not set [ 147.465583][T13292] loop3: detected capacity change from 0 to 2048 [ 147.476911][T13286] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 147.494864][T13286] EXT4-fs (loop8): 1 truncate cleaned up [ 147.505089][T13286] EXT4-fs error (device loop8): ext4_encrypted_get_link:46: inode #16: comm syz.8.4240: bad symlink. [ 147.517123][T13292] EXT4-fs (loop3): failed to initialize system zone (-117) [ 147.524407][T13292] EXT4-fs (loop3): mount failed [ 147.529619][T13286] EXT4-fs error (device loop8): ext4_encrypted_get_link:46: inode #16: comm syz.8.4240: bad symlink. [ 147.544251][T13286] EXT4-fs error (device loop8): ext4_encrypted_get_link:46: inode #16: comm syz.8.4240: bad symlink. [ 147.598077][T13282] loop7: detected capacity change from 0 to 32768 [ 147.647012][T13282] loop7: p3 p4 < > [ 147.651252][T13307] loop2: detected capacity change from 0 to 512 [ 147.657648][T13282] loop7: p3 size 44183552 extends beyond EOD, truncated [ 147.669116][T13309] loop3: detected capacity change from 0 to 128 [ 147.672501][T13307] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 147.698722][T13309] ext4 filesystem being mounted at /974/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 147.709568][T13307] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 147.717524][T13307] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 147.735982][T13307] System zones: 0-1, 15-15, 18-18, 34-34 [ 147.741933][T13307] EXT4-fs (loop2): orphan cleanup on readonly fs [ 147.748387][T13307] EXT4-fs warning (device loop2): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 147.763026][T13307] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 147.792751][T13307] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4261: bg 0: block 40: padding at end of block bitmap is not set [ 147.817870][T13324] program syz.3.4255 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 147.838036][T13307] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 147.862856][T13307] EXT4-fs (loop2): 1 truncate cleaned up [ 147.889602][T13307] EXT4-fs error (device loop2): ext4_encrypted_get_link:46: inode #16: comm syz.2.4261: bad symlink. [ 147.913249][T13307] EXT4-fs error (device loop2): ext4_encrypted_get_link:46: inode #16: comm syz.2.4261: bad symlink. [ 147.931788][T13307] EXT4-fs error (device loop2): ext4_encrypted_get_link:46: inode #16: comm syz.2.4261: bad symlink. [ 148.275983][T13355] loop2: detected capacity change from 0 to 128 [ 148.285940][T13355] ext4 filesystem being mounted at /860/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 148.355869][T13362] tap0: tun_chr_ioctl cmd 1074025677 [ 148.374621][T13362] tap0: linktype set to 270 [ 148.401839][ T29] kauditd_printk_skb: 191 callbacks suppressed [ 148.401856][ T29] audit: type=1326 audit(1760892422.652:3724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13365 comm="syz.8.4277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f387695efc9 code=0x7ffc0000 [ 148.431698][ T29] audit: type=1326 audit(1760892422.652:3725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13365 comm="syz.8.4277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f387695efc9 code=0x7ffc0000 [ 148.457534][ T29] audit: type=1326 audit(1760892422.712:3726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13365 comm="syz.8.4277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f387695efc9 code=0x7ffc0000 [ 148.481114][ T29] audit: type=1326 audit(1760892422.712:3727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13365 comm="syz.8.4277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f387695efc9 code=0x7ffc0000 [ 148.504734][ T29] audit: type=1326 audit(1760892422.712:3728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13365 comm="syz.8.4277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f387695efc9 code=0x7ffc0000 [ 148.528682][ T29] audit: type=1326 audit(1760892422.712:3729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13365 comm="syz.8.4277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f387695efc9 code=0x7ffc0000 [ 148.552301][ T29] audit: type=1326 audit(1760892422.712:3730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13365 comm="syz.8.4277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f387695efc9 code=0x7ffc0000 [ 148.606343][ T29] audit: type=1326 audit(1760892422.782:3731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13365 comm="syz.8.4277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f387695efc9 code=0x7ffc0000 [ 148.629957][ T29] audit: type=1326 audit(1760892422.782:3732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13365 comm="syz.8.4277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f387695efc9 code=0x7ffc0000 [ 148.653519][ T29] audit: type=1326 audit(1760892422.782:3733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13365 comm="syz.8.4277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f387695efc9 code=0x7ffc0000 [ 148.742808][T13382] loop1: detected capacity change from 0 to 128 [ 148.752118][T13382] ext4 filesystem being mounted at /442/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 148.799471][T13389] loop1: detected capacity change from 0 to 128 [ 148.812824][T13389] ext4 filesystem being mounted at /443/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 148.975173][T13422] loop1: detected capacity change from 0 to 512 [ 148.987677][T13422] EXT4-fs (loop1): too many log groups per flexible block group [ 148.995561][T13422] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 149.000583][T13429] loop7: detected capacity change from 0 to 128 [ 149.002914][T13422] EXT4-fs (loop1): mount failed [ 149.015901][T13429] ext4 filesystem being mounted at /263/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 149.101915][T13444] loop2: detected capacity change from 0 to 128 [ 149.114551][T13444] ext4 filesystem being mounted at /871/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 149.233110][T13468] loop1: detected capacity change from 0 to 512 [ 149.237394][T13469] loop7: detected capacity change from 0 to 1764 [ 149.252388][T13468] EXT4-fs error (device loop1): ext4_iget_extra_inode:5075: inode #15: comm syz.1.4319: corrupted in-inode xattr: invalid ea_ino [ 149.266113][T13468] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.4319: couldn't read orphan inode 15 (err -117) [ 149.310012][T13468] EXT4-fs error (device loop1): __ext4_expand_extra_isize:6333: inode #18: comm syz.1.4319: bad extra_isize 6 (inode size 256) [ 149.357552][T13486] loop8: detected capacity change from 0 to 128 [ 149.377529][T13486] ext4 filesystem being mounted at /297/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 149.634639][T13491] netlink: 'syz.8.4332': attribute type 8 has an invalid length. [ 149.642572][T13491] netem: change failed [ 149.848922][T13534] loop1: detected capacity change from 0 to 512 [ 150.077704][T13577] program syz.7.4377 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 150.106231][T13581] loop2: detected capacity change from 0 to 512 [ 150.117611][T13583] bridge0: port 3(gretap0) entered blocking state [ 150.124115][T13583] bridge0: port 3(gretap0) entered disabled state [ 150.131073][T13583] gretap0: entered allmulticast mode [ 150.137128][T13583] gretap0: entered promiscuous mode [ 150.150866][T13589] loop7: detected capacity change from 0 to 512 [ 150.179661][T13589] EXT4-fs: Ignoring removed nobh option [ 150.187891][T13589] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #3: comm syz.7.4382: corrupted inode contents [ 150.200211][T13589] EXT4-fs (loop7): Remounting filesystem read-only [ 150.207383][T13589] EXT4-fs (loop7): 1 truncate cleaned up [ 150.213467][T13589] ext4 filesystem being mounted at /277/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.292522][T13602] loop1: detected capacity change from 0 to 128 [ 150.352128][T13588] loop3: detected capacity change from 0 to 32768 [ 150.362966][T13611] program syz.1.4381 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 150.416975][T13588] loop3: p3 p4 < > [ 150.426583][T13588] loop3: p3 size 44183552 extends beyond EOD, truncated [ 150.502393][T13631] loop7: detected capacity change from 0 to 512 [ 150.515769][T13631] journal_path: Non-blockdev passed as './bus' [ 150.521998][T13631] EXT4-fs: error: could not find journal device path [ 150.801588][T13653] __nla_validate_parse: 8 callbacks suppressed [ 150.801605][T13653] netlink: 277 bytes leftover after parsing attributes in process `syz.7.4412'. [ 150.819715][T13652] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4414'. [ 150.906173][T13664] program syz.2.4403 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 150.922446][T13665] loop7: detected capacity change from 0 to 512 [ 150.947521][T13665] ext4 filesystem being mounted at /289/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 150.967098][T13665] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 150.991533][T13656] loop8: detected capacity change from 0 to 32768 [ 151.014147][T13674] bridge0: port 3(gretap0) entered blocking state [ 151.020852][T13674] bridge0: port 3(gretap0) entered disabled state [ 151.027577][T13674] gretap0: entered allmulticast mode [ 151.034246][T13674] gretap0: entered promiscuous mode [ 151.057028][T13656] loop8: p3 p4 < > [ 151.060885][T13656] loop8: p3 size 44183552 extends beyond EOD, truncated [ 151.107235][T13677] bridge0: port 3(syz_tun) entered blocking state [ 151.113756][T13677] bridge0: port 3(syz_tun) entered disabled state [ 151.124249][T13677] syz_tun: entered allmulticast mode [ 151.132260][T13677] syz_tun: entered promiscuous mode [ 151.137844][T13677] bridge0: port 3(syz_tun) entered blocking state [ 151.144280][T13677] bridge0: port 3(syz_tun) entered forwarding state [ 151.228450][T13696] bridge0: port 4(syz_tun) entered blocking state [ 151.234962][T13696] bridge0: port 4(syz_tun) entered disabled state [ 151.241755][T13696] syz_tun: entered allmulticast mode [ 151.247859][T13696] syz_tun: entered promiscuous mode [ 151.271445][T13700] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4419'. [ 151.280453][T13700] netlink: 348 bytes leftover after parsing attributes in process `syz.2.4419'. [ 151.289668][T13700] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4419'. [ 151.298593][T13700] netlink: 348 bytes leftover after parsing attributes in process `syz.2.4419'. [ 151.320756][T13700] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4419'. [ 151.337780][T13704] loop3: detected capacity change from 0 to 1024 [ 151.340462][T13700] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4419'. [ 151.353048][T13700] netlink: 348 bytes leftover after parsing attributes in process `syz.2.4419'. [ 151.362124][T13700] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4419'. [ 151.397522][T13704] EXT4-fs: Ignoring removed nobh option [ 151.403158][T13704] EXT4-fs: Ignoring removed bh option [ 151.491654][T13720] loop1: detected capacity change from 0 to 256 [ 151.515077][T13720] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 151.525157][T13726] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 151.534046][T13726] IPv6: NLM_F_CREATE should be set when creating new route [ 151.541272][T13726] IPv6: NLM_F_CREATE should be set when creating new route [ 151.548491][T13726] IPv6: NLM_F_CREATE should be set when creating new route [ 151.613511][T13734] bridge0: port 4(syz_tun) entered blocking state [ 151.620127][T13734] bridge0: port 4(syz_tun) entered disabled state [ 151.626971][T13734] syz_tun: entered allmulticast mode [ 151.628443][T13726] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 151.643653][T13734] syz_tun: entered promiscuous mode [ 151.709476][T13738] bridge0: port 4(gretap0) entered blocking state [ 151.716086][T13738] bridge0: port 4(gretap0) entered disabled state [ 151.756598][T13738] gretap0: entered allmulticast mode [ 151.762688][T13738] gretap0: entered promiscuous mode [ 151.792959][T13738] bridge0: port 4(gretap0) entered blocking state [ 151.799912][T13738] bridge0: port 4(gretap0) entered forwarding state [ 151.806872][T13730] loop2: detected capacity change from 0 to 32768 [ 151.856851][T13730] loop2: p3 p4 < > [ 151.860741][T13730] loop2: p3 size 44183552 extends beyond EOD, truncated [ 151.878969][T13749] loop7: detected capacity change from 0 to 1024 [ 151.885685][T13749] EXT4-fs: Ignoring removed nobh option [ 151.891299][T13749] EXT4-fs: Ignoring removed bh option [ 152.028190][T13757] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 152.034951][T13757] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 152.041740][T13757] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 152.048487][T13757] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 152.055203][T13757] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 152.061948][T13757] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 152.068663][T13757] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 152.075362][T13757] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 152.082112][T13757] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 152.088856][T13757] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 152.095719][T13760] loop7: detected capacity change from 0 to 512 [ 152.116829][T13760] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 152.145838][T13760] FAT-fs (loop7): error, invalid access to FAT (entry 0x0fffff00) [ 152.293717][T13780] bridge0: port 3(gretap0) entered blocking state [ 152.300315][T13780] bridge0: port 3(gretap0) entered disabled state [ 152.318778][T13780] gretap0: entered allmulticast mode [ 152.324768][T13780] gretap0: entered promiscuous mode [ 152.370215][T13788] loop2: detected capacity change from 0 to 1024 [ 152.381643][T13788] EXT4-fs: Ignoring removed nobh option [ 152.387341][T13788] EXT4-fs: Ignoring removed bh option [ 152.516259][T13802] loop8: detected capacity change from 0 to 512 [ 152.548486][T13802] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 152.577823][T13802] FAT-fs (loop8): error, invalid access to FAT (entry 0x0fffff00) [ 152.621012][T13784] loop1: detected capacity change from 0 to 32768 [ 152.647155][T13784] loop1: p3 p4 < > [ 152.651251][T13784] loop1: p3 size 44183552 extends beyond EOD, truncated [ 152.822725][T13825] loop3: detected capacity change from 0 to 512 [ 152.836843][T13825] EXT4-fs: Ignoring removed nobh option [ 152.859973][T13825] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #3: comm syz.3.4477: corrupted inode contents [ 152.886051][T13838] loop8: detected capacity change from 0 to 256 [ 152.890975][T13836] tap0: tun_chr_ioctl cmd 1074025677 [ 152.894265][T13825] EXT4-fs (loop3): Remounting filesystem read-only [ 152.902660][T13836] tap0: linktype set to 270 [ 152.911150][T13838] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 152.912131][ T23] kernel write not supported for file /1035/clear_refs (pid: 23 comm: kworker/1:0) [ 152.931423][T13825] EXT4-fs (loop3): 1 truncate cleaned up [ 152.937570][T13825] ext4 filesystem being mounted at /1012/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.126842][T13855] loop2: detected capacity change from 0 to 1764 [ 153.177563][ T3404] kernel write not supported for file /676/clear_refs (pid: 3404 comm: kworker/0:4) [ 153.225775][T13873] tap0: tun_chr_ioctl cmd 1074025677 [ 153.232087][T13873] tap0: linktype set to 270 [ 153.280275][T13881] loop2: detected capacity change from 0 to 256 [ 153.291920][T13881] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 153.413555][ T29] kauditd_printk_skb: 139 callbacks suppressed [ 153.413571][ T29] audit: type=1326 audit(1760892427.662:3869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13888 comm="syz.7.4507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe04d54efc9 code=0x7ffc0000 [ 153.444863][ T29] audit: type=1326 audit(1760892427.662:3870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13888 comm="syz.7.4507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe04d54efc9 code=0x7ffc0000 [ 153.468493][ T29] audit: type=1326 audit(1760892427.662:3871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13888 comm="syz.7.4507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe04d54efc9 code=0x7ffc0000 [ 153.492155][ T29] audit: type=1326 audit(1760892427.662:3872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13888 comm="syz.7.4507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe04d54efc9 code=0x7ffc0000 [ 153.515795][ T29] audit: type=1326 audit(1760892427.662:3873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13888 comm="syz.7.4507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7fe04d54efc9 code=0x7ffc0000 [ 153.539362][ T29] audit: type=1326 audit(1760892427.662:3874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13888 comm="syz.7.4507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe04d54efc9 code=0x7ffc0000 [ 153.563048][ T29] audit: type=1326 audit(1760892427.662:3875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13888 comm="syz.7.4507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe04d54efc9 code=0x7ffc0000 [ 153.586568][ T29] audit: type=1326 audit(1760892427.672:3876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13888 comm="syz.7.4507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe04d54efc9 code=0x7ffc0000 [ 153.610513][ T29] audit: type=1400 audit(1760892427.702:3877): avc: denied { read } for pid=13884 comm="syz.3.4519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 153.629892][ T29] audit: type=1326 audit(1760892427.722:3878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13888 comm="syz.7.4507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fe04d54efc9 code=0x7ffc0000 [ 153.708426][T13899] loop2: detected capacity change from 0 to 128 [ 153.716282][T13899] ext4 filesystem being mounted at /910/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 154.221276][T13916] loop7: detected capacity change from 0 to 256 [ 154.250435][T13916] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 154.311447][T13932] loop8: detected capacity change from 0 to 128 [ 154.416109][T13953] loop2: detected capacity change from 0 to 512 [ 154.425327][T13953] EXT4-fs: Ignoring removed nobh option [ 154.432416][T13957] loop7: detected capacity change from 0 to 512 [ 154.449466][T13953] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #3: comm syz.2.4541: corrupted inode contents [ 154.467179][T13953] EXT4-fs (loop2): Remounting filesystem read-only [ 154.470177][T13964] serio: Serial port ptm0 [ 154.479001][T13953] EXT4-fs (loop2): 1 truncate cleaned up [ 154.485310][T13953] ext4 filesystem being mounted at /915/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.572095][T13975] loop2: detected capacity change from 0 to 512 [ 154.580802][T13975] ext4 filesystem being mounted at /917/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 154.596237][T13975] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 154.646426][T13985] loop2: detected capacity change from 0 to 512 [ 154.653008][T13985] journal_path: Non-blockdev passed as './bus' [ 154.659238][T13985] EXT4-fs: error: could not find journal device path [ 154.684478][T13988] C: renamed from team_slave_0 (while UP) [ 154.694143][T13988] netlink: 'syz.7.4566': attribute type 3 has an invalid length. [ 154.717146][T13993] loop2: detected capacity change from 0 to 512 [ 155.232328][T14009] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 155.234146][T14005] serio: Serial port ptm0 [ 155.239607][T14009] IPv6: NLM_F_CREATE should be set when creating new route [ 155.239626][T14009] IPv6: NLM_F_CREATE should be set when creating new route [ 155.239638][T14009] IPv6: NLM_F_CREATE should be set when creating new route [ 155.276467][T14009] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 155.313902][T14017] loop1: detected capacity change from 0 to 764 [ 155.338429][T14017] rock: directory entry would overflow storage [ 155.344688][T14017] rock: sig=0x4f50, size=4, remaining=3 [ 155.350354][T14017] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 155.435936][T14035] loop7: detected capacity change from 0 to 512 [ 155.464472][T14035] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.4589: couldn't read orphan inode 26 (err -116) [ 155.478533][T14035] ext4 filesystem being mounted at /320/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.505201][T14049] serio: Serial port ptm0 [ 155.514616][T14053] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 155.521965][T14053] IPv6: NLM_F_CREATE should be set when creating new route [ 155.529374][T14053] IPv6: NLM_F_CREATE should be set when creating new route [ 155.536608][T14053] IPv6: NLM_F_CREATE should be set when creating new route [ 155.539468][T14055] loop1: detected capacity change from 0 to 128 [ 155.545249][T14053] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 155.618328][T14062] netlink: 'syz.7.4587': attribute type 6 has an invalid length. [ 155.671919][T14067] loop3: detected capacity change from 0 to 8192 [ 155.681679][T14067] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 155.813422][T14089] loop3: detected capacity change from 0 to 256 [ 155.820139][T14089] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 155.832705][T14089] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 155.870407][T14091] __nla_validate_parse: 18 callbacks suppressed [ 155.870425][T14091] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4604'. [ 155.885749][T14091] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4604'. [ 155.895814][T14091] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4604'. [ 155.904872][T14091] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4604'. [ 155.962512][T14095] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4606'. [ 156.028616][T14103] loop3: detected capacity change from 0 to 512 [ 156.067236][T14103] EXT4-fs (loop3): shut down requested (2) [ 156.073211][T14103] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 156.082043][T14103] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 156.090972][T14103] SELinux: Context is not valid (left unmapped). [ 156.303637][T14119] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4616'. [ 156.312778][T14119] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4616'. [ 156.322444][T14119] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4616'. [ 156.331446][T14119] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4616'. [ 156.373264][T14124] loop2: detected capacity change from 0 to 256 [ 156.380112][T14124] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 156.392503][T14124] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 156.462869][T14128] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4618'. [ 156.701785][T14169] loop1: detected capacity change from 0 to 256 [ 156.708699][T14169] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 156.721112][T14169] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 156.951066][T14196] 9pnet: Could not find request transport: r [ 157.513554][T14244] 9pnet: Could not find request transport: r [ 157.772741][T14271] loop3: detected capacity change from 0 to 2048 [ 157.792243][T14271] ext4 filesystem being mounted at /1052/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.926698][T14290] loop3: detected capacity change from 0 to 1024 [ 158.251027][T14323] SELinux: failed to load policy [ 158.260210][T14324] random: crng reseeded on system resumption [ 158.304953][T14328] loop3: detected capacity change from 0 to 128 [ 158.338940][T14328] ext4 filesystem being mounted at /1060/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 158.397120][T14333] loop1: detected capacity change from 0 to 1024 [ 158.440234][ T29] kauditd_printk_skb: 82 callbacks suppressed [ 158.440248][ T29] audit: type=1326 audit(1760892432.692:3959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14339 comm="syz.3.4713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b5366efc9 code=0x7ffc0000 [ 158.491800][ T29] audit: type=1326 audit(1760892432.732:3960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14339 comm="syz.3.4713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b5366efc9 code=0x7ffc0000 [ 158.515444][ T29] audit: type=1326 audit(1760892432.732:3961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14339 comm="syz.3.4713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f8b5366efc9 code=0x7ffc0000 [ 158.538960][ T29] audit: type=1326 audit(1760892432.732:3962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14339 comm="syz.3.4713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b5366efc9 code=0x7ffc0000 [ 158.573541][T14345] loop2: detected capacity change from 0 to 1024 [ 158.584978][T14345] EXT4-fs: Ignoring removed bh option [ 158.593746][T14345] EXT4-fs (loop2): stripe (36) is not aligned with cluster size (16), stripe is disabled [ 158.603785][T14348] loop7: detected capacity change from 0 to 2048 [ 158.619890][T14348] ext4 filesystem being mounted at /344/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.655221][ T29] audit: type=1400 audit(1760892432.902:3963): avc: denied { setattr } for pid=14343 comm="syz.2.4716" name="file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 158.686397][T14345] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 158.704292][T14360] SELinux: failed to load policy [ 158.714963][T14358] random: crng reseeded on system resumption [ 158.753543][T14364] random: crng reseeded on system resumption [ 158.891574][T14391] loop1: detected capacity change from 0 to 1024 [ 158.901842][T14394] SELinux: failed to load policy [ 158.906929][T14391] EXT4-fs: Ignoring removed bh option [ 158.925222][T14391] EXT4-fs (loop1): stripe (36) is not aligned with cluster size (16), stripe is disabled [ 159.009879][T14391] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 159.195165][T14423] loop2: detected capacity change from 0 to 128 [ 159.204102][T14423] ext4 filesystem being mounted at /958/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 159.304625][ T29] audit: type=1400 audit(1760892433.552:3964): avc: denied { write } for pid=14431 comm="syz.1.4755" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 159.327959][T14432] random: crng reseeded on system resumption [ 159.350476][T14429] loop7: detected capacity change from 0 to 512 [ 159.369640][T14429] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 159.382786][ T29] audit: type=1400 audit(1760892433.622:3965): avc: denied { name_bind } for pid=14433 comm="syz.2.4754" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 159.457485][T14440] ================================================================== [ 159.465599][T14440] BUG: KCSAN: data-race in hrtimer_interrupt / print_cpu [ 159.472654][T14440] [ 159.474979][T14440] read-write to 0xffff888237c1b294 of 4 bytes by interrupt on cpu 0: [ 159.483043][T14440] hrtimer_interrupt+0x70/0x460 [ 159.487907][T14440] __sysvec_apic_timer_interrupt+0x5f/0x1d0 [ 159.493809][T14440] sysvec_apic_timer_interrupt+0x6f/0x80 [ 159.499455][T14440] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 159.505448][T14440] _raw_spin_unlock_irq+0x2f/0x50 [ 159.510497][T14440] get_signal+0xc21/0xf70 [ 159.514849][T14440] arch_do_signal_or_restart+0x96/0x440 [ 159.520398][T14440] exit_to_user_mode_loop+0x77/0x110 [ 159.525700][T14440] do_syscall_64+0x1d6/0x200 [ 159.530302][T14440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.536214][T14440] [ 159.538549][T14440] read to 0xffff888237c1b294 of 4 bytes by task 14440 on cpu 1: [ 159.546182][T14440] print_cpu+0x338/0x660 [ 159.550434][T14440] timer_list_show+0x107/0x170 [ 159.555211][T14440] seq_read_iter+0x636/0x950 [ 159.559819][T14440] proc_reg_read_iter+0x110/0x180 [ 159.564874][T14440] copy_splice_read+0x442/0x660 [ 159.569738][T14440] splice_direct_to_actor+0x26f/0x680 [ 159.575137][T14440] do_splice_direct+0xda/0x150 [ 159.579913][T14440] do_sendfile+0x380/0x650 [ 159.584350][T14440] __x64_sys_sendfile64+0x105/0x150 [ 159.589565][T14440] x64_sys_call+0x2bb4/0x3000 [ 159.594275][T14440] do_syscall_64+0xd2/0x200 [ 159.598788][T14440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.604691][T14440] [ 159.607016][T14440] value changed: 0x0003469a -> 0x0003469c [ 159.612737][T14440] [ 159.615063][T14440] Reported by Kernel Concurrency Sanitizer on: [ 159.621233][T14440] CPU: 1 UID: 0 PID: 14440 Comm: syz.1.4769 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 159.632614][T14440] Tainted: [W]=WARN [ 159.636419][T14440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 159.646478][T14440] ==================================================================