last executing test programs: 9.891104397s ago: executing program 2 (id=1931): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x5, 0x4, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 9.783577603s ago: executing program 2 (id=1935): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r0, r0, 0x2f, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000140)=r1, 0x4) 9.683774439s ago: executing program 2 (id=1939): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000200)) 9.574468866s ago: executing program 2 (id=1942): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="4400000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="431f07000b02000008000a00", @ANYRES32=r2, @ANYBLOB="08000500", @ANYRES32=r2, @ANYBLOB="140012800b0001006d6163736563"], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 9.50059694s ago: executing program 2 (id=1944): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 9.424756534s ago: executing program 2 (id=1946): syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file0\x00', 0x800090, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x6, 0x2d1, &(0x7f0000000740)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r0, 0x0, 0x0, 0x9}]) 1.164230973s ago: executing program 1 (id=2102): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73772cc9f1ba1f848010000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x40588c0) 1.105368046s ago: executing program 1 (id=2105): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x100fb8, 0x6, 0x0, 0x0, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r0 = gettid() process_vm_writev(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.052771229s ago: executing program 0 (id=2106): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000180)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e22, @loopback}]}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xce024d}, 0x9c) 1.052268949s ago: executing program 0 (id=2107): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) syz_emit_ethernet(0x7a, &(0x7f0000000000)=ANY=[@ANYBLOB="856b934629faaaaaaaaaaaaa86dd60381f3400442f00fc000000000000000000000000000000ff0200000000000000000000000000010420"], 0x0) 736.545047ms ago: executing program 1 (id=2109): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fcntl$notify(r0, 0x402, 0x29) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='attr\x00') preadv(r1, 0x0, 0x0, 0x20, 0x2) 691.94629ms ago: executing program 0 (id=2111): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x5]}, 0x8, 0x800) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r1, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) signalfd4(r0, &(0x7f0000000140)={[0x72]}, 0x8, 0x0) 691.68416ms ago: executing program 1 (id=2112): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7ffb, 0x510, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x80, 0x2}, 0x0, 0x8, 0x40008, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x53b, &(0x7f0000000b80)="$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") write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) 629.609164ms ago: executing program 4 (id=2113): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x2002) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000001000)=""/4096, 0x1000}], 0x1) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) 603.565375ms ago: executing program 0 (id=2114): newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r0, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000b40)={0x2, 'vlan0\x00', {}, 0x6}) 556.523937ms ago: executing program 0 (id=2115): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2060, 0x0) r1 = perf_event_open(&(0x7f0000000fc0)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x3, 0x4, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu>=0||!') fcntl$setlease(r0, 0x400, 0x0) 523.979339ms ago: executing program 4 (id=2116): perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x14000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x6}, 0x8224, 0x2, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x239, &(0x7f0000000340)={0x0, 0x7b3c, 0x10100}, &(0x7f00000002c0)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) 464.049683ms ago: executing program 1 (id=2118): syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000300)='.\x02\x00', 0x1008008, &(0x7f0000000040)=ANY=[], 0x1, 0x2ee, &(0x7f0000000a80)="$eJzs3c1qE18UAPCTj6Zp+fNv1+Ii4EY3RV27CVJBDBQqWagbA60grQjTTRSEPIX4AK58JBc+RFcFF5HJjEmaDwplOmnt7wfTnrmn3LkzXHJncU/z9u6Ho4OPJ++GP79Fs9mKejQjziK2oxq1yFTSH82/cSOmDWrnTmM9AIDrbn+/116WG5Q7FApRn2tJknZvbeG7WfdHSYMCAAAAAAAAAACgYPP7/2OwcP9/RFTP7/8fBYOZegAA4Ppbtv9/fhc5N1WStHub2fvbTLWm/f8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA6tRjuDUcDh/8l52m8eRoxNaqxwcAFO9ser0fH7+HOes/APyDFq//k2PV4wMAije1/kdcsP7XVjdMAKBAL1+9ftHudHb3W61mxOmg3+13s99Z/tnzzu7D1sh2RFSz1tN+v1sb5x9l+dak1zS/Fpt5/vHCfCPu38vyae7pXmcmvx4H5TwCAAAAAAAAAAAAAAAAAAAAWLmdURl/JSKr789N6vt3dva+/no/rv+fymdR/v8BqjFT3//lez3u1LOz6tKrrxd8NwAAAAAAAAAAAAAAAAAAAHAznXz6fNQ7Pj5MygkqEVFsz7WIGAX1vKVW+CWmgqvrOQ2aMQoqMZdqRMSle04f+uJUmrnMUBv57DlMTiIuc6dP3kRc+MeVo42YS22UP2mvNtjIn2XZV18yJY7/j+Zosi37xGiU88EEAAAAAAAAAAAAAAAAAAC30FQ9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcWuPv/6/mDcm4pbBgxbcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3BJ/AgAA///w+mzI") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) fallocate(r0, 0x0, 0x0, 0x8ffff) 463.733623ms ago: executing program 4 (id=2119): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x5, 0x20005, 0xb, 0x0, 0x0, 0x0, 0xcd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0}}], 0x90}, 0x0) 414.161816ms ago: executing program 0 (id=2121): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e22, 0x8, @mcast1, 0x79}}, 0x0, 0x0, 0x14, 0x0, "aa1cda12482ce936fe2707b31f549402157745ea281f88ea79321f8931e69fff9996d6cc77adb40b96e90df08b90b2a7f62e807928e17a869290e49ecf42b43e5dfc7650c208e65bbb7e7dd058ed1d57"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e24, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x0, 0x0, 0x41, 0x0, "b208405cce4456e4fc8f2dabd194ff3763f799f91cf7e5e8260998f956ec57c24451db07550335ebf4a3d0168ccaa268e928f39cd7494c2b19ebef230a3373685fbacfcf3b6e9633bd997a9bfcf08f67"}, 0xd8) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback, 0xffff}, 0x1c) 371.925449ms ago: executing program 3 (id=2122): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) 371.608569ms ago: executing program 4 (id=2123): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf94b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={0x0}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x200003, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) flistxattr(r0, &(0x7f00000001c0)=""/17, 0x11) 297.456163ms ago: executing program 3 (id=2124): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xffff0001, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3}, 0x50) 297.092672ms ago: executing program 4 (id=2125): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000180)={0x1d, r1, 0x3, {0x0, 0x0, 0x1}, 0x2}, 0x18) sendmsg$can_j1939(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, 0x0, 0x15, {0x1, 0x1ee}, 0xfe}, 0x18, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x4000004}, 0x8004) 220.025557ms ago: executing program 4 (id=2126): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x41, 0x0, 0x2}, 0x10) 219.709297ms ago: executing program 3 (id=2127): r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000002100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x2060600) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r0) 125.833262ms ago: executing program 3 (id=2128): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0x6}, 0x0, 0x10000, 0x40000, 0x5, 0x3, 0x20005, 0x4, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = timerfd_create(0x0, 0x800) timerfd_settime(r0, 0x3, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 93.616395ms ago: executing program 3 (id=2129): set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x100) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x5, 0xa555, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x7fff, 0x2}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) 455.1µs ago: executing program 3 (id=2130): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7ffb, 0x510, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x80, 0x2}, 0x0, 0x8, 0x40008, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x53b, &(0x7f0000000b80)="$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") write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) 0s ago: executing program 1 (id=2131): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x1007, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xe}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): fs (loop1): 1 truncate cleaned up [ 41.573634][ T4437] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 41.587651][ T57] EXT4-fs error (device loop3): ext4_map_blocks:825: inode #15: comm kworker/u8:4: lblock 0 mapped to illegal pblock 0 (length 1) [ 41.601770][ T4437] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 41.611708][ T57] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 41.612869][ T4437] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 41.624032][ T57] EXT4-fs (loop3): This should not happen!! Data will be lost [ 41.624032][ T57] [ 41.642396][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 41.668259][ T4437] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 41.690179][ T4461] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 41.706571][ T4437] ext4 filesystem being remounted at /63/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.752988][ T4461] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 41.762055][ T4461] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 41.770596][ T4461] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 41.780018][ T4461] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 41.792551][ T4437] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 41.795502][ T4461] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 41.810734][ T4437] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 41.817016][ T4461] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 41.828880][ T4437] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 41.830438][ T4461] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 41.845656][ T4461] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 41.854104][ T4461] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 41.862725][ T4461] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 41.862804][ T4437] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 41.871361][ T4461] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 41.887838][ T4461] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 41.896625][ T4461] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 41.905233][ T4461] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 41.913715][ T4461] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 41.922894][ T4461] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 41.945144][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.049841][ T4489] set_capacity_and_notify: 12 callbacks suppressed [ 42.049913][ T4489] loop3: detected capacity change from 0 to 1024 [ 42.075208][ T4489] EXT4-fs: inline encryption not supported [ 42.081377][ T4489] EXT4-fs: Ignoring removed bh option [ 42.097655][ T4489] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 42.115673][ T4489] EXT4-fs (loop3): orphan cleanup on readonly fs [ 42.123562][ T4489] EXT4-fs error (device loop3): ext4_quota_enable:7177: comm syz.3.429: inode #2304: comm syz.3.429: iget: illegal inode # [ 42.140873][ T4489] EXT4-fs (loop3): Remounting filesystem read-only [ 42.147484][ T4489] EXT4-fs warning (device loop3): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-117, ino=2304). Please run e2fsck to fix. [ 42.150986][ T29] audit: type=1326 audit(1769598181.954:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4502 comm="syz.4.434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bf2d6aeb9 code=0x7ffc0000 [ 42.185774][ T29] audit: type=1326 audit(1769598181.954:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4502 comm="syz.4.434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bf2d6aeb9 code=0x7ffc0000 [ 42.199239][ T4489] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 42.217221][ T4489] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 42.241910][ T29] audit: type=1326 audit(1769598182.004:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4502 comm="syz.4.434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bf2d6aeb9 code=0x7ffc0000 [ 42.265276][ T29] audit: type=1326 audit(1769598182.004:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4502 comm="syz.4.434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bf2d6aeb9 code=0x7ffc0000 [ 42.288519][ T29] audit: type=1326 audit(1769598182.034:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4502 comm="syz.4.434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7bf2d6aeb9 code=0x7ffc0000 [ 42.311920][ T29] audit: type=1326 audit(1769598182.034:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4502 comm="syz.4.434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bf2d6aeb9 code=0x7ffc0000 [ 42.335224][ T29] audit: type=1326 audit(1769598182.034:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4502 comm="syz.4.434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bf2d6aeb9 code=0x7ffc0000 [ 42.358597][ T29] audit: type=1326 audit(1769598182.034:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4502 comm="syz.4.434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bf2d6aeb9 code=0x7ffc0000 [ 42.396398][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.457141][ T4516] pimreg0: tun_chr_ioctl cmd 1074025672 [ 42.462809][ T4516] pimreg0: ignored: set checksum disabled [ 42.591341][ T4536] netlink: 'syz.0.448': attribute type 8 has an invalid length. [ 42.599091][ T4536] sch_fq: defrate 0 ignored. [ 42.655261][ T4544] loop4: detected capacity change from 0 to 128 [ 42.671483][ T4544] EXT4-fs: Ignoring removed nobh option [ 42.692869][ T4544] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 42.728701][ T4554] loop2: detected capacity change from 0 to 128 [ 42.737354][ T4544] ext4 filesystem being mounted at /88/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 42.815284][ T3317] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 42.830999][ T4558] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 42.846653][ T4558] vhci_hcd vhci_hcd.2: invalid port number 96 [ 42.852788][ T4558] vhci_hcd vhci_hcd.2: default hub control req: 0311 v0005 i0060 l7 [ 42.904568][ T4566] loop2: detected capacity change from 0 to 2048 [ 42.943107][ T4566] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.971132][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.125366][ T4586] __nla_validate_parse: 6 callbacks suppressed [ 43.125385][ T4586] netlink: 96 bytes leftover after parsing attributes in process `syz.2.480'. [ 43.164141][ T4591] loop4: detected capacity change from 0 to 128 [ 43.285183][ T4601] loop4: detected capacity change from 0 to 2048 [ 43.322464][ T4601] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.350695][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.378183][ T4613] pim6reg: tun_chr_ioctl cmd 1074025680 [ 43.420201][ T4610] loop0: detected capacity change from 0 to 8192 [ 43.453824][ T4617] netlink: 260 bytes leftover after parsing attributes in process `syz.3.482'. [ 43.570430][ T4628] loop3: detected capacity change from 0 to 128 [ 43.754814][ T4652] loop3: detected capacity change from 0 to 1024 [ 43.761791][ T4652] EXT4-fs: Ignoring removed i_version option [ 43.768002][ T4652] EXT4-fs: Ignoring removed mblk_io_submit option [ 43.774545][ T4652] EXT4-fs: Ignoring removed bh option [ 43.780724][ T4652] EXT4-fs: Ignoring removed nobh option [ 43.792458][ T4652] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.810219][ T4652] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 1 with error 28 [ 43.823863][ T4652] EXT4-fs (loop3): This should not happen!! Data will be lost [ 43.823863][ T4652] [ 43.834051][ T4652] EXT4-fs (loop3): Total free blocks count 0 [ 43.840072][ T4652] EXT4-fs (loop3): Free/Dirty block details [ 43.846137][ T4652] EXT4-fs (loop3): free_blocks=0 [ 43.851107][ T4652] EXT4-fs (loop3): dirty_blocks=0 [ 43.856225][ T4652] EXT4-fs (loop3): Block reservation details [ 43.862224][ T4652] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 43.897680][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.172328][ T4698] netlink: 16 bytes leftover after parsing attributes in process `syz.3.519'. [ 44.192846][ T4701] loop2: detected capacity change from 0 to 128 [ 44.209228][ T4701] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 44.230271][ T4706] vfat: Unknown parameter 'uni_xlate?1' [ 44.259967][ T4706] tipc: Started in network mode [ 44.264971][ T4706] tipc: Node identity 5f3d302c73686f72, cluster identity 4711 [ 44.272501][ T4706] tipc: Enabling of bearer rejected, failed to enable media [ 44.283956][ T57] FAT-fs (loop2): error, invalid FAT chain (i_pos 550, last_block 8) [ 44.292390][ T57] FAT-fs (loop2): Filesystem has been set read-only [ 44.310737][ T57] FAT-fs (loop2): error, corrupted file size (i_pos 550, 522) [ 44.327988][ T4708] netlink: 16 bytes leftover after parsing attributes in process `syz.2.524'. [ 44.368113][ T4712] netlink: 20 bytes leftover after parsing attributes in process `syz.2.527'. [ 44.377165][ T4712] netlink: 24 bytes leftover after parsing attributes in process `syz.2.527'. [ 44.389862][ T4712] netlink: 20 bytes leftover after parsing attributes in process `syz.2.527'. [ 44.398788][ T4712] netlink: 24 bytes leftover after parsing attributes in process `syz.2.527'. [ 44.433655][ T4719] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.529'. [ 44.484784][ T4722] program syz.4.532 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 44.673148][ T4747] program syz.1.543 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 44.731959][ T4755] netlink: 8 bytes leftover after parsing attributes in process `syz.3.547'. [ 44.741099][ T4755] netlink: 'syz.3.547': attribute type 30 has an invalid length. [ 44.782001][ T4758] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.878742][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.194873][ T4787] netlink: 'syz.1.561': attribute type 30 has an invalid length. [ 45.334882][ T4799] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.361262][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.398872][ T4808] program syz.2.570 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 45.428793][ T4812] EXT4-fs: Ignoring removed nomblk_io_submit option [ 45.439610][ T4812] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 45.447834][ T4812] System zones: 0-2, 18-18, 34-34 [ 45.453212][ T4812] EXT4-fs (loop2): orphan cleanup on readonly fs [ 45.460140][ T4812] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.571: bg 0: block 248: padding at end of block bitmap is not set [ 45.475205][ T4812] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.571: Failed to acquire dquot type 1 [ 45.489908][ T4812] EXT4-fs (loop2): 1 truncate cleaned up [ 45.498933][ T4812] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 45.521102][ T4812] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 45.530718][ T4812] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 45.550395][ T4812] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 45.557449][ T4823] program syz.0.575 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 45.559270][ T4812] ext4 filesystem being remounted at /118/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.587823][ T4812] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 45.597403][ T4812] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 45.606970][ T4812] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 45.624454][ T4812] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 45.663982][ T4812] syz.2.571 (4812) used greatest stack depth: 8672 bytes left [ 45.674474][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.878364][ T4851] netlink: 'syz.1.587': attribute type 12 has an invalid length. [ 45.917403][ T4854] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 45.993345][ T4858] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.021204][ T4858] ext4 filesystem being mounted at /108/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 46.062620][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.144266][ T4879] netlink: 'syz.2.601': attribute type 12 has an invalid length. [ 46.186558][ T4884] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 46.261778][ T4891] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 46.515320][ T4928] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 46.730009][ T4960] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 46.744258][ T4960] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.757490][ T4960] ext4 filesystem being mounted at /121/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 46.791723][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.184348][ T29] kauditd_printk_skb: 61 callbacks suppressed [ 47.184363][ T29] audit: type=1400 audit(1769598186.994:393): avc: denied { sqpoll } for pid=4998 comm="syz.4.668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 47.253752][ T5006] set_capacity_and_notify: 9 callbacks suppressed [ 47.253768][ T5006] loop2: detected capacity change from 0 to 512 [ 47.275212][ T29] audit: type=1400 audit(1769598187.084:394): avc: denied { append } for pid=5009 comm="syz.4.660" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 47.305999][ T29] audit: type=1400 audit(1769598187.104:395): avc: denied { ioctl } for pid=5009 comm="syz.4.660" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 47.336384][ T5006] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 47.363425][ T5006] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.389403][ T5018] macvtap1: entered promiscuous mode [ 47.394844][ T5018] macvtap1: entered allmulticast mode [ 47.400750][ T5006] ext4 filesystem being mounted at /127/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 47.411925][ T5018] dummy0: entered promiscuous mode [ 47.421676][ T5018] dummy0: entered allmulticast mode [ 47.428316][ T5018] team0: Device macvtap1 failed to register rx_handler [ 47.438580][ T5018] dummy0: left allmulticast mode [ 47.443814][ T5018] dummy0: left promiscuous mode [ 47.449778][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.578319][ T5038] loop0: detected capacity change from 0 to 1024 [ 47.594271][ T5038] EXT4-fs: Ignoring removed orlov option [ 47.600124][ T5038] EXT4-fs: Ignoring removed nomblk_io_submit option [ 47.660276][ T5038] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.691811][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.746477][ T5059] loop0: detected capacity change from 0 to 1024 [ 47.752267][ T5061] macvtap1: entered promiscuous mode [ 47.758178][ T5061] macvtap1: entered allmulticast mode [ 47.764580][ T5061] dummy0: entered promiscuous mode [ 47.770044][ T5061] dummy0: entered allmulticast mode [ 47.775781][ T5059] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.776458][ T5061] team0: Device macvtap1 failed to register rx_handler [ 47.796574][ T5061] dummy0: left allmulticast mode [ 47.802002][ T5061] dummy0: left promiscuous mode [ 47.820246][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.937642][ T29] audit: type=1400 audit(1769598187.744:396): avc: denied { mount } for pid=5080 comm="syz.2.693" name="/" dev="ramfs" ino=10439 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 47.965611][ T5083] loop4: detected capacity change from 0 to 1024 [ 47.981202][ T5083] EXT4-fs: Ignoring removed orlov option [ 47.986937][ T5083] EXT4-fs: Ignoring removed nomblk_io_submit option [ 48.005067][ T29] audit: type=1400 audit(1769598187.784:397): avc: denied { unmount } for pid=3319 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 48.053153][ T5083] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.069307][ T29] audit: type=1400 audit(1769598187.874:398): avc: denied { setattr } for pid=5082 comm="syz.4.694" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 48.091651][ T29] audit: type=1400 audit(1769598187.904:399): avc: denied { remove_name } for pid=5082 comm="syz.4.694" name="file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 48.114186][ T29] audit: type=1400 audit(1769598187.904:400): avc: denied { add_name } for pid=5082 comm="syz.4.694" name="file7" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 48.164438][ T29] audit: type=1400 audit(1769598187.964:401): avc: denied { write } for pid=5093 comm="syz.2.698" name="event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 48.178077][ T5098] GUP no longer grows the stack in syz.0.699 (5098): 200000004000-200000005000 (200000001000) [ 48.193784][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.198515][ T5098] CPU: 0 UID: 0 PID: 5098 Comm: syz.0.699 Not tainted syzkaller #0 PREEMPT(voluntary) [ 48.198544][ T5098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 48.198562][ T5098] Call Trace: [ 48.198573][ T5098] [ 48.198582][ T5098] __dump_stack+0x1d/0x30 [ 48.198666][ T5098] dump_stack_lvl+0x95/0xd0 [ 48.198717][ T5098] dump_stack+0x15/0x1b [ 48.198740][ T5098] __get_user_pages+0x195b/0x1ea0 [ 48.198780][ T5098] ? __rcu_read_unlock+0x4e/0x70 [ 48.198843][ T5098] ? try_charge_memcg+0x215/0xa10 [ 48.198867][ T5098] __gup_longterm_locked+0x8d7/0xe30 [ 48.198891][ T5098] ? __rcu_read_unlock+0x33/0x70 [ 48.199002][ T5098] ? try_get_folio+0x369/0x3b0 [ 48.199028][ T5098] ? try_grab_folio_fast+0xdc/0x370 [ 48.199054][ T5098] gup_fast_fallback+0x1f3/0x13c0 [ 48.199127][ T5098] get_user_pages_fast+0x5f/0x90 [ 48.199215][ T5098] __iov_iter_get_pages_alloc+0x24e/0x6f0 [ 48.199242][ T5098] ? __rcu_read_unlock+0x4e/0x70 [ 48.199284][ T5098] iov_iter_get_pages2+0x5e/0xa0 [ 48.199387][ T5098] __se_sys_vmsplice+0x538/0xf90 [ 48.199425][ T5098] __x64_sys_vmsplice+0x55/0x70 [ 48.199454][ T5098] x64_sys_call+0x2344/0x3000 [ 48.199483][ T5098] do_syscall_64+0xc0/0x2a0 [ 48.199585][ T5098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.199610][ T5098] RIP: 0033:0x7f1162d7aeb9 [ 48.199633][ T5098] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 48.199653][ T5098] RSP: 002b:00007f11617d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 48.199749][ T5098] RAX: ffffffffffffffda RBX: 00007f1162ff5fa0 RCX: 00007f1162d7aeb9 [ 48.199829][ T5098] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000004 [ 48.199844][ T5098] RBP: 00007f1162de8c1f R08: 0000000000000000 R09: 0000000000000000 [ 48.199859][ T5098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 48.199873][ T5098] R13: 00007f1162ff6038 R14: 00007f1162ff5fa0 R15: 00007ffcefba6188 [ 48.199895][ T5098] [ 48.338319][ T29] audit: type=1400 audit(1769598188.114:402): avc: denied { ioctl } for pid=5093 comm="syz.2.698" path="/dev/input/event1" dev="devtmpfs" ino=243 ioctlcmd=0x4590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 48.478050][ T5107] macvtap1: entered promiscuous mode [ 48.483483][ T5107] macvtap1: entered allmulticast mode [ 48.489709][ T5107] dummy0: entered promiscuous mode [ 48.494896][ T5107] dummy0: entered allmulticast mode [ 48.500299][ T5107] team0: Device macvtap1 failed to register rx_handler [ 48.507411][ T5107] dummy0: left allmulticast mode [ 48.512542][ T5107] dummy0: left promiscuous mode [ 48.792713][ T5142] __nla_validate_parse: 9 callbacks suppressed [ 48.792728][ T5142] netlink: 4568 bytes leftover after parsing attributes in process `syz.1.719'. [ 48.808092][ T5142] netlink: 4568 bytes leftover after parsing attributes in process `syz.1.719'. [ 48.818914][ T5144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.827967][ T5144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.830316][ T5146] loop3: detected capacity change from 0 to 256 [ 48.880152][ T5150] netlink: 8 bytes leftover after parsing attributes in process `syz.1.723'. [ 49.015718][ T5154] loop1: detected capacity change from 0 to 512 [ 49.022535][ T5154] EXT4-fs: Ignoring removed oldalloc option [ 49.030501][ T5154] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: comm syz.1.725: Parent and EA inode have the same ino 15 [ 49.044300][ T5154] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 49.057491][ T5154] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: comm syz.1.725: Parent and EA inode have the same ino 15 [ 49.070228][ T5154] EXT4-fs (loop1): 1 orphan inode deleted [ 49.076386][ T5154] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.091655][ T5157] loop3: detected capacity change from 0 to 256 [ 49.125546][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.174721][ T5163] netlink: 'syz.1.729': attribute type 21 has an invalid length. [ 49.182785][ T5163] netlink: 4 bytes leftover after parsing attributes in process `syz.1.729'. [ 49.216568][ T5167] loop3: detected capacity change from 0 to 1024 [ 49.232253][ T5167] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.254642][ T5167] EXT4-fs error (device loop3): mb_free_blocks:2037: group 0, inode 18: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 49.303206][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.312353][ T5173] wireguard0: entered promiscuous mode [ 49.317848][ T5173] wireguard0: entered allmulticast mode [ 49.361967][ T5180] loop0: detected capacity change from 0 to 128 [ 49.408394][ T5184] macvtap1: entered promiscuous mode [ 49.413817][ T5184] macvtap1: entered allmulticast mode [ 49.419705][ T5184] dummy0: entered promiscuous mode [ 49.424949][ T5184] dummy0: entered allmulticast mode [ 49.431202][ T5184] team0: Device macvtap1 failed to register rx_handler [ 49.439310][ T5184] dummy0: left allmulticast mode [ 49.444778][ T5184] dummy0: left promiscuous mode [ 49.452708][ T5186] loop4: detected capacity change from 0 to 256 [ 49.583169][ T5200] netlink: 'syz.0.744': attribute type 21 has an invalid length. [ 49.591017][ T5200] netlink: 4 bytes leftover after parsing attributes in process `syz.0.744'. [ 49.627483][ T5202] EXT4-fs: Ignoring removed oldalloc option [ 49.647094][ T5199] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.670644][ T5202] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: comm syz.0.746: Parent and EA inode have the same ino 15 [ 49.683839][ T5199] EXT4-fs error (device loop1): mb_free_blocks:2037: group 0, inode 18: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 49.722526][ T5202] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: comm syz.0.746: Parent and EA inode have the same ino 15 [ 49.736728][ T5213] wireguard0: entered promiscuous mode [ 49.738601][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.742294][ T5213] wireguard0: entered allmulticast mode [ 49.757009][ T5202] EXT4-fs (loop0): 1 orphan inode deleted [ 49.763662][ T5202] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.781736][ T5218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.790189][ T5218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.842493][ T5220] netlink: 4568 bytes leftover after parsing attributes in process `syz.0.754'. [ 49.851797][ T5220] netlink: 4568 bytes leftover after parsing attributes in process `syz.0.754'. [ 49.932431][ T5226] ext4 filesystem being mounted at /145/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 50.237192][ C1] hrtimer: interrupt took 51270 ns [ 50.284447][ T5264] xt_l2tp: v2 tid > 0xffff: 37482740 [ 50.466038][ T5293] netlink: 'syz.2.787': attribute type 1 has an invalid length. [ 50.481989][ T5295] netlink: 12 bytes leftover after parsing attributes in process `syz.3.788'. [ 50.499889][ T5296] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 50.499889][ T5296] The task syz.4.780 (5296) triggered the difference, watch for misbehavior. [ 50.797490][ T5323] netlink: 12 bytes leftover after parsing attributes in process `syz.2.800'. [ 50.977571][ T5346] xt_l2tp: v2 tid > 0xffff: 37482740 [ 51.061014][ T5356] netlink: 52 bytes leftover after parsing attributes in process `syz.2.816'. [ 51.321390][ T5396] netlink: 'syz.1.835': attribute type 29 has an invalid length. [ 51.329193][ T5396] netlink: 'syz.1.835': attribute type 4 has an invalid length. [ 51.386839][ T5404] EXT4-fs: inline encryption not supported [ 51.393966][ T5405] ext4 filesystem being mounted at /175/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 51.501535][ T5416] EXT4-fs: Ignoring removed oldalloc option [ 51.544772][ T5416] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: comm syz.2.843: Parent and EA inode have the same ino 15 [ 51.603310][ T5416] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: comm syz.2.843: Parent and EA inode have the same ino 15 [ 51.642477][ T5416] EXT4-fs (loop2): 1 orphan inode deleted [ 51.674174][ T5416] EXT4-fs error (device loop2): ext4_lookup:1789: inode #2: comm syz.2.843: deleted inode referenced: 15 [ 51.707860][ T5427] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 51.905518][ T5456] EXT4-fs: Ignoring removed oldalloc option [ 51.966925][ T5456] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: comm syz.1.862: Parent and EA inode have the same ino 15 [ 51.999319][ T5456] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: comm syz.1.862: Parent and EA inode have the same ino 15 [ 52.017587][ T5456] EXT4-fs (loop1): 1 orphan inode deleted [ 52.020101][ T5469] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 52.027578][ T5456] EXT4-fs error (device loop1): ext4_lookup:1789: inode #2: comm syz.1.862: deleted inode referenced: 15 [ 52.096338][ T5473] EXT4-fs: inline encryption not supported [ 52.105676][ T5472] ext4 filesystem being mounted at /184/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 52.347295][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 52.347309][ T29] audit: type=1400 audit(1769598192.154:416): avc: denied { create } for pid=5503 comm="syz.2.883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 52.387037][ T29] audit: type=1400 audit(1769598192.154:417): avc: denied { setopt } for pid=5503 comm="syz.2.883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 52.407089][ T29] audit: type=1400 audit(1769598192.154:418): avc: denied { getopt } for pid=5503 comm="syz.2.883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 52.489741][ T5514] set_capacity_and_notify: 13 callbacks suppressed [ 52.489758][ T5514] loop1: detected capacity change from 0 to 512 [ 52.507789][ T5516] loop4: detected capacity change from 0 to 128 [ 52.520800][ T5514] EXT4-fs: mb_optimize_scan should be set to 0 or 1. [ 52.529545][ T29] audit: type=1400 audit(1769598192.344:419): avc: denied { create } for pid=5513 comm="syz.1.889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 52.633111][ T29] audit: type=1400 audit(1769598192.344:420): avc: denied { setopt } for pid=5513 comm="syz.1.889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 52.712218][ T5536] loop4: detected capacity change from 0 to 512 [ 52.749158][ T5536] ext4 filesystem being mounted at /162/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.788373][ T29] audit: type=1400 audit(1769598192.594:421): avc: denied { rename } for pid=5535 comm="syz.4.897" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 52.857076][ T29] audit: type=1400 audit(1769598192.644:422): avc: denied { rmdir } for pid=5535 comm="syz.4.897" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 52.880640][ T29] audit: type=1400 audit(1769598192.644:423): avc: denied { rename } for pid=5535 comm="syz.4.897" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 52.904581][ T29] audit: type=1400 audit(1769598192.644:424): avc: denied { unlink } for pid=5535 comm="syz.4.897" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 53.030201][ T5555] loop1: detected capacity change from 0 to 128 [ 53.135740][ T5567] loop3: detected capacity change from 0 to 512 [ 53.179863][ T5567] ext4 filesystem being mounted at /183/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.247318][ T5590] loop0: detected capacity change from 0 to 128 [ 53.425978][ T5611] loop2: detected capacity change from 0 to 1024 [ 53.438337][ T5611] EXT4-fs: Ignoring removed nobh option [ 53.444035][ T5611] EXT4-fs: Ignoring removed bh option [ 53.602381][ T5627] loop3: detected capacity change from 0 to 128 [ 53.619210][ T29] audit: type=1400 audit(1769598193.424:425): avc: denied { create } for pid=5628 comm="syz.1.945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 54.128001][ T5664] loop0: detected capacity change from 0 to 256 [ 54.154193][ T5664] FAT-fs (loop0): Directory bread(block 64) failed [ 54.160838][ T5664] FAT-fs (loop0): Directory bread(block 65) failed [ 54.170171][ T5664] FAT-fs (loop0): Directory bread(block 66) failed [ 54.176916][ T5664] FAT-fs (loop0): Directory bread(block 67) failed [ 54.184737][ T5664] FAT-fs (loop0): Directory bread(block 68) failed [ 54.191685][ T5664] FAT-fs (loop0): Directory bread(block 69) failed [ 54.198270][ T5664] FAT-fs (loop0): Directory bread(block 70) failed [ 54.217585][ T5664] FAT-fs (loop0): Directory bread(block 71) failed [ 54.228846][ T5664] FAT-fs (loop0): Directory bread(block 72) failed [ 54.241351][ T5664] FAT-fs (loop0): Directory bread(block 73) failed [ 54.470232][ T5691] loop0: detected capacity change from 0 to 512 [ 54.496198][ T5691] EXT4-fs: Ignoring removed mblk_io_submit option [ 54.534029][ T5691] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=885ec129, mo2=0006] [ 54.543211][ T5691] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.971: Invalid inode bitmap blk 4 in block_group 0 [ 54.556215][ T5691] EXT4-fs (loop0): Remounting filesystem read-only [ 54.646968][ T5706] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 54.687486][ T2155] FAT-fs (loop0): error, invalid FAT chain (i_pos 548, last_block 8) [ 54.700518][ T2155] FAT-fs (loop0): Filesystem has been set read-only [ 54.737274][ T2155] FAT-fs (loop0): error, corrupted file size (i_pos 548, 522) [ 54.808471][ T5715] FAT-fs (loop1): Directory bread(block 64) failed [ 54.820982][ T5715] FAT-fs (loop1): Directory bread(block 65) failed [ 54.838009][ T5715] FAT-fs (loop1): Directory bread(block 66) failed [ 54.845993][ T5715] FAT-fs (loop1): Directory bread(block 67) failed [ 54.865768][ T5715] FAT-fs (loop1): Directory bread(block 68) failed [ 54.882143][ T5715] FAT-fs (loop1): Directory bread(block 69) failed [ 54.899111][ T5715] FAT-fs (loop1): Directory bread(block 70) failed [ 54.918646][ T5715] FAT-fs (loop1): Directory bread(block 71) failed [ 54.935461][ T5715] FAT-fs (loop1): Directory bread(block 72) failed [ 54.950817][ T5715] FAT-fs (loop1): Directory bread(block 73) failed [ 55.066005][ T5741] __nla_validate_parse: 9 callbacks suppressed [ 55.066021][ T5741] netlink: 8 bytes leftover after parsing attributes in process `syz.1.983'. [ 55.082565][ T5741] netlink: 12 bytes leftover after parsing attributes in process `syz.1.983'. [ 55.112677][ T5745] EXT4-fs: Ignoring removed mblk_io_submit option [ 55.142531][ T5745] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=885ec129, mo2=0006] [ 55.151304][ T5745] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.984: Invalid inode bitmap blk 4 in block_group 0 [ 55.164592][ T5745] EXT4-fs (loop1): Remounting filesystem read-only [ 55.378477][ T5766] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.442360][ T5766] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.514726][ T5766] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.576051][ T5766] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.628564][ T2155] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.640209][ T2155] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.661925][ T2155] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.673122][ T3467] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.318986][ T5822] random: crng reseeded on system resumption [ 56.537529][ T5841] bridge0: entered promiscuous mode [ 56.543163][ T5841] macvlan2: entered promiscuous mode [ 56.661902][ T5858] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.714832][ T5858] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.779427][ T5874] program syz.0.1044 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 56.798408][ T5858] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.874279][ T5858] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.929498][ T1714] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.940845][ T1714] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.953212][ T1714] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.964369][ T1714] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.077888][ T5903] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.165697][ T5903] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.235434][ T5925] bridge0: entered promiscuous mode [ 57.241508][ T5925] macvlan2: entered promiscuous mode [ 57.256140][ T5903] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.325476][ T5903] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.378922][ T57] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.391762][ T57] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.408157][ T57] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.417359][ T57] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.520372][ T5952] macvlan3: entered promiscuous mode [ 57.618317][ T5963] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1085'. [ 57.654804][ T5971] set_capacity_and_notify: 9 callbacks suppressed [ 57.654823][ T5971] loop0: detected capacity change from 0 to 2048 [ 57.885889][ T5991] loop0: detected capacity change from 0 to 1024 [ 57.965261][ T6004] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1104'. [ 58.026235][ T6010] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6010 comm=syz.0.1107 [ 58.085645][ T6014] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1109'. [ 58.107325][ T2155] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.123210][ T2155] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.136566][ T2155] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.151501][ T2155] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.225365][ T6027] loop0: detected capacity change from 0 to 136 [ 58.264023][ T6032] loop4: detected capacity change from 0 to 1024 [ 58.306902][ T6032] ext4 filesystem being mounted at /214/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.340859][ T6038] loop1: detected capacity change from 0 to 8192 [ 58.354602][ T6032] EXT4-fs warning (device loop4): ext4_empty_dir:3097: inode #12: comm syz.4.1118: directory missing '..' [ 58.596504][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 58.596524][ T29] audit: type=1400 audit(1769598198.404:438): avc: denied { connect } for pid=6056 comm="syz.2.1129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 58.641420][ T29] audit: type=1400 audit(1769598198.434:439): avc: denied { listen } for pid=6056 comm="syz.2.1129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 58.662400][ T29] audit: type=1400 audit(1769598198.434:440): avc: denied { ioctl } for pid=6056 comm="syz.2.1129" path="socket:[13448]" dev="sockfs" ino=13448 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 58.908490][ T6083] team0: Device gtp0 is of different type [ 58.943712][ T29] audit: type=1326 audit(1769598198.754:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6090 comm="syz.2.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a0619aeb9 code=0x7ffc0000 [ 58.968610][ T29] audit: type=1326 audit(1769598198.754:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6090 comm="syz.2.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a0619aeb9 code=0x7ffc0000 [ 58.994934][ T29] audit: type=1400 audit(1769598198.784:443): avc: denied { connect } for pid=6092 comm="syz.4.1147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 59.036345][ T29] audit: type=1326 audit(1769598198.804:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6090 comm="syz.2.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3a0619aeb9 code=0x7ffc0000 [ 59.061180][ T29] audit: type=1326 audit(1769598198.804:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6090 comm="syz.2.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a0619aeb9 code=0x7ffc0000 [ 59.085566][ T29] audit: type=1326 audit(1769598198.804:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6090 comm="syz.2.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a0619aeb9 code=0x7ffc0000 [ 59.110141][ T29] audit: type=1326 audit(1769598198.834:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6090 comm="syz.2.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3a0619aeb9 code=0x7ffc0000 [ 59.188211][ T6112] sd 0:0:1:0: device reset [ 59.224913][ T6117] program syz.2.1158 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 59.271198][ T6121] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 59.291477][ T6125] loop0: detected capacity change from 0 to 1024 [ 59.367995][ T6138] netlink: 'syz.1.1165': attribute type 1 has an invalid length. [ 59.536180][ T6166] loop2: detected capacity change from 0 to 512 [ 59.543681][ T6166] EXT4-fs: Ignoring removed nobh option [ 59.553232][ T6166] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 59.603591][ T6166] EXT4-fs (loop2): 1 truncate cleaned up [ 59.647294][ T6166] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2808: inode #15: comm syz.2.1179: corrupted xattr block 33: invalid header [ 59.710683][ T6166] EXT4-fs (loop2): Remounting filesystem read-only [ 59.728771][ T6185] loop3: detected capacity change from 0 to 1764 [ 60.086819][ T6239] loop1: detected capacity change from 0 to 1024 [ 60.112443][ T6239] EXT4-fs: Ignoring removed nomblk_io_submit option [ 60.153716][ T6248] vcan0: tx address claim with different name [ 60.560142][ T6267] pim6reg: tun_chr_ioctl cmd 35111 [ 60.717476][ T6275] netlink: 774 bytes leftover after parsing attributes in process `syz.2.1226'. [ 60.764836][ T6279] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1230'. [ 61.033187][ T6309] loop2: detected capacity change from 0 to 256 [ 61.093993][ T6314] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1246'. [ 61.892642][ T6396] program syz.4.1282 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 62.013842][ T6404] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1285'. [ 62.186264][ T6423] can0: slcan on ttyS3. [ 62.253828][ T6423] can0 (unregistered): slcan off ttyS3. [ 62.329619][ T6450] netlink: 'syz.1.1301': attribute type 9 has an invalid length. [ 62.360611][ T6450] bond_slave_0: entered promiscuous mode [ 62.366328][ T6450] bond_slave_1: entered promiscuous mode [ 62.383961][ T6450] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 62.452416][ T6468] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1305'. [ 62.511316][ T6473] EXT4-fs (loop1): orphan cleanup on readonly fs [ 62.540410][ T6473] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1308: bg 0: block 248: padding at end of block bitmap is not set [ 62.565784][ T6473] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.1308: Failed to acquire dquot type 1 [ 62.590710][ T6473] EXT4-fs (loop1): 1 truncate cleaned up [ 62.598888][ T6473] EXT4-fs (loop1): shut down requested (0) [ 62.713123][ T6493] program syz.1.1313 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 62.921397][ T6511] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1320'. [ 63.390206][ T6548] netlink: 774 bytes leftover after parsing attributes in process `syz.0.1339'. [ 63.455776][ T6552] pim6reg: tun_chr_ioctl cmd 35111 [ 63.783107][ T6567] set_capacity_and_notify: 3 callbacks suppressed [ 63.783126][ T6567] loop1: detected capacity change from 0 to 512 [ 63.821219][ T6567] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 63.831310][ T6567] EXT4-fs (loop1): orphan cleanup on readonly fs [ 63.850536][ T6567] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.1348: corrupted inode contents [ 63.858242][ T29] kauditd_printk_skb: 59 callbacks suppressed [ 63.858258][ T29] audit: type=1400 audit(1769598203.654:505): avc: denied { listen } for pid=6573 comm="syz.0.1350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 63.898246][ T6567] EXT4-fs (loop1): Remounting filesystem read-only [ 63.920981][ T6567] EXT4-fs (loop1): 1 truncate cleaned up [ 63.926794][ T2155] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 63.937393][ T2155] Quota error (device loop1): write_blk: dquota write failed [ 63.944830][ T2155] Quota error (device loop1): remove_free_dqentry: Can't write block (5) with free entries [ 63.954904][ T2155] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 63.965434][ T2155] Quota error (device loop1): write_blk: dquota write failed [ 63.972872][ T2155] Quota error (device loop1): free_dqentry: Can't move quota data block (5) to free list [ 63.982829][ T2155] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 63.993020][ T2155] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 64.002099][ T2155] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 64.084154][ T29] audit: type=1326 audit(1769598203.894:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6586 comm="syz.2.1354" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3a0619aeb9 code=0x0 [ 64.155723][ T6597] netlink: 'syz.2.1359': attribute type 9 has an invalid length. [ 64.167712][ T6597] bond_slave_0: entered promiscuous mode [ 64.173426][ T6597] bond_slave_1: entered promiscuous mode [ 64.188717][ T6597] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 64.247523][ T6607] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 64.257873][ T6607] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.281111][ T6609] can0: slcan on ttyS3. [ 64.336127][ T6607] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 64.346556][ T6607] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.370554][ T6619] loop2: detected capacity change from 0 to 512 [ 64.379684][ T6619] EXT4-fs (loop2): orphan cleanup on readonly fs [ 64.389003][ T6619] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1367: bg 0: block 248: padding at end of block bitmap is not set [ 64.411064][ T6609] can0 (unregistered): slcan off ttyS3. [ 64.422687][ T6619] Quota error (device loop2): write_blk: dquota write failed [ 64.430202][ T6619] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 64.440331][ T6619] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.1367: Failed to acquire dquot type 1 [ 64.462394][ T6607] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 64.472776][ T6607] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.505815][ T6619] EXT4-fs (loop2): 1 truncate cleaned up [ 64.549126][ T6629] syz.1.1368 (6629) used greatest stack depth: 8296 bytes left [ 64.559837][ T6619] EXT4-fs (loop2): shut down requested (0) [ 64.580109][ T6607] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 64.590539][ T6607] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.658873][ T3467] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 64.667175][ T3467] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.701693][ T6654] loop2: detected capacity change from 0 to 1024 [ 64.714479][ T3467] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 64.722785][ T3467] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.749340][ T6654] EXT4-fs: Ignoring removed nomblk_io_submit option [ 64.766431][ T1714] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 64.774706][ T1714] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.797564][ T1714] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 64.805824][ T1714] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.814793][ T6663] pim6reg: tun_chr_ioctl cmd 35111 [ 64.986399][ T6686] loop0: detected capacity change from 0 to 512 [ 65.011532][ T6686] EXT4-fs: Ignoring removed nobh option [ 65.038294][ T6686] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 65.081892][ T6692] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.097666][ T6686] EXT4-fs (loop0): 1 truncate cleaned up [ 65.151572][ T6686] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2808: inode #15: comm syz.0.1386: corrupted xattr block 33: invalid header [ 65.172333][ T6686] EXT4-fs (loop0): Remounting filesystem read-only [ 65.182317][ T6692] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.293321][ T6692] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.321766][ T6716] loop3: detected capacity change from 0 to 128 [ 65.328455][ T6716] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 65.340901][ T6716] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 65.353102][ T6692] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.375516][ T6718] loop1: detected capacity change from 0 to 1024 [ 65.382657][ T3467] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 65.423404][ T57] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.438438][ T6723] program syz.0.1402 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 65.445304][ T57] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.463489][ T3467] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.481447][ T3467] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.502529][ T6729] tipc: Started in network mode [ 65.507399][ T6729] tipc: Node identity , cluster identity 4711 [ 65.513493][ T6729] tipc: Failed to set node id, please configure manually [ 65.520507][ T6729] tipc: Enabling of bearer rejected, failed to enable media [ 65.674717][ T6755] program syz.1.1417 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 65.715405][ T6760] loop2: detected capacity change from 0 to 164 [ 65.739149][ T6762] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.745999][ T6758] loop4: detected capacity change from 0 to 512 [ 65.773891][ T6760] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 65.795130][ T6758] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 65.810306][ T6758] EXT4-fs (loop4): orphan cleanup on readonly fs [ 65.817660][ T6762] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.832684][ T6766] sd 0:0:1:0: device reset [ 65.844872][ T6758] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #16: comm syz.4.1418: corrupted inode contents [ 65.869239][ T6758] EXT4-fs (loop4): Remounting filesystem read-only [ 65.879699][ T6758] EXT4-fs (loop4): 1 truncate cleaned up [ 65.885613][ T57] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 65.896358][ T57] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 65.913313][ T57] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 65.921038][ T6762] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.927303][ T6758] EXT4-fs mount: 51 callbacks suppressed [ 65.927318][ T6758] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 65.985005][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.025571][ T6762] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.149177][ T57] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.169404][ T1714] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.200123][ T1714] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.211091][ T1714] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.263874][ T6792] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1430'. [ 66.279316][ T6792] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1430'. [ 66.375574][ T6809] sd 0:0:1:0: device reset [ 66.435987][ T6817] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.485328][ T6817] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.543101][ T6817] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.621005][ T6817] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.667819][ T6819] loop3: detected capacity change from 0 to 1024 [ 66.683728][ T6819] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 66.696303][ T6819] ext4 filesystem being mounted at /272/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.709923][ T6819] EXT4-fs warning (device loop3): ext4_empty_dir:3097: inode #12: comm syz.3.1443: directory missing '..' [ 66.729846][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 66.885638][ T6831] team0: Device gtp0 is of different type [ 66.957145][ T6839] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1453'. [ 66.986985][ T6845] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6845 comm=syz.1.1463 [ 67.020179][ T6849] tipc: Started in network mode [ 67.025180][ T6849] tipc: Node identity , cluster identity 4711 [ 67.031318][ T6849] tipc: Failed to set node id, please configure manually [ 67.038339][ T6849] tipc: Enabling of bearer rejected, failed to enable media [ 67.056772][ T6853] team0: Device gtp0 is of different type [ 67.108055][ T6860] loop0: detected capacity change from 0 to 128 [ 67.114966][ T6860] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 67.141227][ T6860] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 67.179810][ T57] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 67.557337][ T6920] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1490'. [ 67.566864][ T6920] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1490'. [ 67.603878][ T6926] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 67.630601][ T6928] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.1494: bad orphan inode 15 [ 67.640852][ T6928] ext4_test_bit(bit=14, block=5) = 0 [ 67.646772][ T6928] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.663728][ T6928] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 67.682660][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.014103][ T6952] netlink: 'syz.3.1504': attribute type 2 has an invalid length. [ 68.039190][ T6954] EXT4-fs: Ignoring removed orlov option [ 68.044944][ T6954] EXT4-fs: inline encryption not supported [ 68.067244][ T6954] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.151439][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.336866][ T6983] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1517'. [ 68.362573][ T6986] netlink: 'syz.0.1518': attribute type 9 has an invalid length. [ 68.392981][ T6990] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1520'. [ 68.404446][ T6990] netlink: 'syz.0.1520': attribute type 2 has an invalid length. [ 68.547454][ T7008] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 68.555014][ T7008] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 68.818472][ T7035] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1550'. [ 68.820099][ T7036] set_capacity_and_notify: 5 callbacks suppressed [ 68.820115][ T7036] loop4: detected capacity change from 0 to 1764 [ 68.863787][ T7035] netlink: 'syz.3.1550': attribute type 2 has an invalid length. [ 68.966168][ T7052] loop1: detected capacity change from 0 to 512 [ 68.995502][ T7052] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.1547: bad orphan inode 15 [ 69.012055][ T7052] ext4_test_bit(bit=14, block=5) = 0 [ 69.017983][ T7052] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.035497][ T7052] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 69.058005][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.184804][ T7063] loop1: detected capacity change from 0 to 512 [ 69.205930][ T7063] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.223179][ T7063] ext4 filesystem being mounted at /298/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 69.241682][ T29] kauditd_printk_skb: 74 callbacks suppressed [ 69.241698][ T29] audit: type=1400 audit(1769598210.056:575): avc: denied { create } for pid=7062 comm="syz.1.1553" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 69.298009][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.335422][ T29] audit: type=1400 audit(1769598210.096:576): avc: denied { rename } for pid=7062 comm="syz.1.1553" name="bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 69.357112][ T29] audit: type=1400 audit(1769598210.096:577): avc: denied { rmdir } for pid=7062 comm="syz.1.1553" name="bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 69.366387][ T7071] loop4: detected capacity change from 0 to 1024 [ 69.385665][ T7072] netlink: 'syz.3.1555': attribute type 6 has an invalid length. [ 69.442621][ T7071] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 69.464125][ T7071] ext4 filesystem being mounted at /296/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.630995][ T29] audit: type=1400 audit(1769598210.436:578): avc: denied { ioctl } for pid=7089 comm="syz.1.1563" path="socket:[16127]" dev="sockfs" ino=16127 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 69.677073][ T57] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.710118][ T57] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.734096][ T57] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.760182][ T7097] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 69.772816][ T7097] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.780283][ T7097] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.822517][ T57] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.845437][ T7101] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1568'. [ 69.854524][ T7101] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1568'. [ 69.935874][ T29] audit: type=1400 audit(1769598210.746:579): avc: denied { bind } for pid=7108 comm="syz.3.1571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 69.980746][ T7114] netlink: 'syz.0.1572': attribute type 6 has an invalid length. [ 69.989802][ T29] audit: type=1400 audit(1769598210.776:580): avc: denied { connect } for pid=7108 comm="syz.3.1571" laddr=::ffff:127.0.0.1 lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 70.050728][ T7120] loop1: detected capacity change from 0 to 128 [ 70.055687][ T7122] loop3: detected capacity change from 0 to 512 [ 70.083548][ T7122] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 70.090999][ T29] audit: type=1400 audit(1769598210.836:581): avc: denied { write } for pid=7117 comm="syz.2.1575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 70.195234][ T7128] loop2: detected capacity change from 0 to 1024 [ 70.206165][ T7128] EXT4-fs: inline encryption not supported [ 70.237163][ T7128] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.253361][ T7071] EXT4-fs error (device loop4): ext4_map_blocks:825: inode #15: comm syz.4.1556: lblock 0 mapped to illegal pblock 0 (length 6) [ 70.286306][ T7136] netem: unknown loss type 0 [ 70.295750][ T7136] netem: change failed [ 70.310278][ T7071] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 70.322625][ T7071] EXT4-fs (loop4): This should not happen!! Data will be lost [ 70.322625][ T7071] [ 70.355811][ T29] audit: type=1400 audit(1769598211.166:582): avc: denied { read } for pid=7141 comm="syz.1.1586" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 70.384937][ T2155] EXT4-fs error (device loop4): ext4_map_blocks:825: inode #15: block 8: comm kworker/u8:6: lblock 8 mapped to illegal pblock 8 (length 8) [ 70.394084][ T29] audit: type=1400 audit(1769598211.166:583): avc: denied { open } for pid=7141 comm="syz.1.1586" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 70.423332][ T2155] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 70.423433][ T2155] EXT4-fs (loop4): This should not happen!! Data will be lost [ 70.423433][ T2155] [ 70.446510][ T29] audit: type=1400 audit(1769598211.166:584): avc: denied { ioctl } for pid=7141 comm="syz.1.1586" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 70.477425][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.491184][ T2155] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:6: bg 0: block 112: padding at end of block bitmap is not set [ 70.507454][ T2155] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 2060 with max blocks 2048 with error 117 [ 70.520333][ T2155] EXT4-fs (loop4): This should not happen!! Data will be lost [ 70.520333][ T2155] [ 70.545490][ T7153] loop0: detected capacity change from 0 to 128 [ 70.557373][ T7156] netem: incorrect ge model size [ 70.562357][ T7156] netem: change failed [ 70.593225][ T7158] loop1: detected capacity change from 0 to 128 [ 70.629969][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 70.746905][ T7177] loop4: detected capacity change from 0 to 2048 [ 70.776270][ T7187] netem: incorrect ge model size [ 70.778788][ T7177] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.781330][ T7187] netem: change failed [ 71.058249][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.081579][ T7211] netlink: 'syz.1.1614': attribute type 6 has an invalid length. [ 71.237906][ T7220] sctp: [Deprecated]: syz.2.1619 (pid 7220) Use of struct sctp_assoc_value in delayed_ack socket option. [ 71.237906][ T7220] Use struct sctp_sack_info instead [ 71.678808][ T7268] __nla_validate_parse: 3 callbacks suppressed [ 71.678823][ T7268] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1641'. [ 71.812007][ T7289] rock: directory entry would overflow storage [ 71.818202][ T7289] rock: sig=0x4654, size=5, remaining=4 [ 71.994405][ T7311] netlink: 199828 bytes leftover after parsing attributes in process `syz.0.1663'. [ 72.228202][ T7339] vcan0: tx address claim with dest, not broadcast [ 72.321193][ T7353] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.375362][ T7353] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.432685][ T7353] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.530914][ T7353] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.566048][ T7368] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.567179][ T7370] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1689'. [ 72.585752][ T7370] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 72.593406][ T7370] batadv_slave_0: entered promiscuous mode [ 72.601102][ T7370] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1689'. [ 72.622674][ T7368] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.702766][ T7368] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.753656][ T7368] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.819134][ T3467] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.838760][ T3467] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.847379][ T3467] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.860733][ T3467] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.906311][ T7384] rock: directory entry would overflow storage [ 72.912573][ T7384] rock: sig=0x4654, size=5, remaining=4 [ 73.167836][ T7422] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 73.198400][ T7422] ext4 filesystem being mounted at /350/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.210604][ T7430] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1714'. [ 73.219768][ T7421] EXT4-fs: Ignoring removed oldalloc option [ 73.225950][ T7421] EXT4-fs: Ignoring removed bh option [ 73.245508][ T7421] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.310081][ T7441] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 73.333384][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.343962][ T7441] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 73.369806][ T7441] ieee802154 phy0 wpan0: encryption failed: -22 [ 73.513063][ T7452] netlink: 199828 bytes leftover after parsing attributes in process `syz.4.1725'. [ 73.673461][ T7462] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1728'. [ 74.093730][ T7492] set_capacity_and_notify: 8 callbacks suppressed [ 74.093747][ T7492] loop4: detected capacity change from 0 to 256 [ 74.111598][ T7422] EXT4-fs error (device loop1): ext4_map_blocks:825: inode #15: comm syz.1.1711: lblock 0 mapped to illegal pblock 0 (length 6) [ 74.126862][ T7492] FAT-fs (loop4): error, clusters badly computed (0 != 128) [ 74.131680][ T7422] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 74.134345][ T7492] FAT-fs (loop4): Filesystem has been set read-only [ 74.147967][ T7422] EXT4-fs (loop1): This should not happen!! Data will be lost [ 74.147967][ T7422] [ 74.153349][ T7492] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 74.195312][ T2155] EXT4-fs error (device loop1): ext4_map_blocks:825: inode #15: block 8: comm kworker/u8:6: lblock 8 mapped to illegal pblock 8 (length 8) [ 74.215430][ T2155] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 74.227878][ T2155] EXT4-fs (loop1): This should not happen!! Data will be lost [ 74.227878][ T2155] [ 74.294588][ T7506] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1748'. [ 74.296910][ T2155] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm kworker/u8:6: bg 0: block 112: padding at end of block bitmap is not set [ 74.319417][ T2155] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 2060 with max blocks 2048 with error 28 [ 74.333817][ T2155] EXT4-fs (loop1): This should not happen!! Data will be lost [ 74.333817][ T2155] [ 74.343826][ T2155] EXT4-fs (loop1): Total free blocks count 0 [ 74.349931][ T2155] EXT4-fs (loop1): Free/Dirty block details [ 74.355965][ T2155] EXT4-fs (loop1): free_blocks=0 [ 74.382583][ T7512] loop0: detected capacity change from 0 to 128 [ 74.410481][ T7514] loop0: detected capacity change from 0 to 1024 [ 74.419959][ T29] kauditd_printk_skb: 39 callbacks suppressed [ 74.419973][ T29] audit: type=1326 audit(1769598215.236:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7515 comm="syz.4.1752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bf2d6aeb9 code=0x7ffc0000 [ 74.457933][ T7514] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 74.460368][ T29] audit: type=1326 audit(1769598215.236:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7515 comm="syz.4.1752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bf2d6aeb9 code=0x7ffc0000 [ 74.483626][ T7514] ext4 filesystem being mounted at /375/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.493357][ T29] audit: type=1326 audit(1769598215.236:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7515 comm="syz.4.1752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bf2d6aeb9 code=0x7ffc0000 [ 74.493384][ T29] audit: type=1326 audit(1769598215.236:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7515 comm="syz.4.1752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f7bf2d6aeb9 code=0x7ffc0000 [ 74.493407][ T29] audit: type=1326 audit(1769598215.256:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7515 comm="syz.4.1752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bf2d6aeb9 code=0x7ffc0000 [ 74.573642][ T29] audit: type=1326 audit(1769598215.256:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7517 comm="syz.4.1752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7bf2d2b78e code=0x7ffc0000 [ 74.596999][ T29] audit: type=1326 audit(1769598215.256:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7515 comm="syz.4.1752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bf2d6aeb9 code=0x7ffc0000 [ 74.621630][ T29] audit: type=1326 audit(1769598215.296:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7515 comm="syz.4.1752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bf2d6aeb9 code=0x7ffc0000 [ 74.645028][ T29] audit: type=1326 audit(1769598215.296:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7515 comm="syz.4.1752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7f7bf2d6aeb9 code=0x7ffc0000 [ 74.668279][ T29] audit: type=1326 audit(1769598215.296:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7515 comm="syz.4.1752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bf2d6aeb9 code=0x7ffc0000 [ 74.711406][ T2155] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.731601][ T2155] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.759791][ T41] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.784892][ T41] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.875213][ T7540] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1761'. [ 74.964310][ T7550] loop6: detected capacity change from 0 to 7 [ 74.977931][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 74.987576][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 75.002206][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 75.012003][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 75.019840][ T3598] loop6: unable to read partition table [ 75.043452][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 75.053064][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 75.063446][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 75.073044][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 75.080911][ T7550] loop6: unable to read partition table [ 75.088450][ T7550] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 75.101849][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 75.111484][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 75.119585][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 75.129190][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 75.142867][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 75.143997][ T7558] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.152462][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 75.170983][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 75.180566][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 75.188823][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 75.198452][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 75.212752][ T7562] loop4: detected capacity change from 0 to 128 [ 75.226563][ T7564] loop2: detected capacity change from 0 to 1024 [ 75.250502][ T7558] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.274796][ T7564] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.308276][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.319579][ T7558] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.368169][ T7558] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.380850][ T7522] EXT4-fs error (device loop0): ext4_map_blocks:825: inode #15: comm syz.0.1754: lblock 0 mapped to illegal pblock 0 (length 6) [ 75.395622][ T7522] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 75.407917][ T7522] EXT4-fs (loop0): This should not happen!! Data will be lost [ 75.407917][ T7522] [ 75.439205][ T1714] EXT4-fs error (device loop0): ext4_map_blocks:825: inode #15: block 8: comm kworker/u8:5: lblock 8 mapped to illegal pblock 8 (length 8) [ 75.463787][ T7577] loop1: detected capacity change from 0 to 128 [ 75.484982][ T7577] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 75.507132][ T1714] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 75.519461][ T1714] EXT4-fs (loop0): This should not happen!! Data will be lost [ 75.519461][ T1714] [ 75.529429][ T7577] ext4 filesystem being mounted at /353/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 75.577685][ T41] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm kworker/u8:2: bg 0: block 112: padding at end of block bitmap is not set [ 75.604138][ T41] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 2060 with max blocks 2048 with error 28 [ 75.616895][ T41] EXT4-fs (loop0): This should not happen!! Data will be lost [ 75.616895][ T41] [ 75.626544][ T41] EXT4-fs (loop0): Total free blocks count 0 [ 75.632658][ T41] EXT4-fs (loop0): Free/Dirty block details [ 75.638544][ T41] EXT4-fs (loop0): free_blocks=0 [ 75.722875][ T7587] loop0: detected capacity change from 0 to 256 [ 75.731340][ T3312] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 75.746279][ T7587] FAT-fs (loop0): error, clusters badly computed (0 != 128) [ 75.753696][ T7587] FAT-fs (loop0): Filesystem has been set read-only [ 75.760522][ T7587] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 75.848801][ T7599] loop2: detected capacity change from 0 to 1024 [ 75.876862][ T7599] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 75.916223][ T7599] ext4 filesystem being mounted at /354/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.025983][ T7612] loop1: detected capacity change from 0 to 1024 [ 76.035686][ T7612] EXT4-fs: inline encryption not supported [ 76.041652][ T7612] EXT4-fs: Ignoring removed oldalloc option [ 76.048582][ T7612] EXT4-fs: inline encryption not supported [ 76.054544][ T7612] EXT4-fs: Ignoring removed orlov option [ 76.081914][ T7612] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.114033][ T7612] IPVS: set_ctl: invalid protocol: 12078 108.101.49.0:0 [ 76.133317][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.245678][ T7628] netlink: 'syz.0.1800': attribute type 8 has an invalid length. [ 76.253514][ T7628] netem: change failed [ 76.326735][ T7634] EXT4-fs (loop0): 1 truncate cleaned up [ 76.336263][ T7634] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.406703][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.426056][ T7626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.434920][ T7626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.468988][ T7637] EXT4-fs: inline encryption not supported [ 76.474930][ T7637] EXT4-fs: Ignoring removed oldalloc option [ 76.481402][ T7637] EXT4-fs: inline encryption not supported [ 76.487266][ T7637] EXT4-fs: Ignoring removed orlov option [ 76.504026][ T7637] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.521641][ T7637] IPVS: set_ctl: invalid protocol: 12078 108.101.49.0:0 [ 76.539423][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.586824][ T7599] EXT4-fs error (device loop2): ext4_map_blocks:825: inode #15: comm syz.2.1788: lblock 0 mapped to illegal pblock 0 (length 6) [ 76.600725][ T7599] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 76.613036][ T7599] EXT4-fs (loop2): This should not happen!! Data will be lost [ 76.613036][ T7599] [ 76.642691][ T7647] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 76.664329][ T7649] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.671462][ T7649] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.681815][ T7647] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 76.688114][ T7647] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 76.694416][ T7647] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 76.700612][ T7647] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 76.706875][ T7647] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 76.713080][ T7647] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 76.719300][ T7647] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 76.725494][ T7647] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 76.731788][ T7647] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 76.759383][ T2155] EXT4-fs error (device loop2): ext4_map_blocks:825: inode #15: block 8: comm kworker/u8:6: lblock 8 mapped to illegal pblock 8 (length 8) [ 76.775331][ T2155] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 76.787738][ T2155] EXT4-fs (loop2): This should not happen!! Data will be lost [ 76.787738][ T2155] [ 76.809061][ T2155] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:6: bg 0: block 112: padding at end of block bitmap is not set [ 76.828318][ T2155] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 2060 with max blocks 2048 with error 28 [ 76.841090][ T2155] EXT4-fs (loop2): This should not happen!! Data will be lost [ 76.841090][ T2155] [ 76.850719][ T2155] EXT4-fs (loop2): Total free blocks count 0 [ 76.856783][ T2155] EXT4-fs (loop2): Free/Dirty block details [ 76.862699][ T2155] EXT4-fs (loop2): free_blocks=0 [ 77.141873][ T7673] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.163970][ T7683] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1824'. [ 77.173521][ T7683] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1824'. [ 77.301108][ T3467] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.312108][ T7695] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 77.324280][ T3467] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.351249][ T7695] ext4 filesystem being mounted at /367/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.388926][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.400868][ T3467] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.420659][ T3467] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.420854][ T7695] EXT4-fs error (device loop1): ext4_map_blocks:825: inode #15: block 3: comm syz.1.1829: lblock 3 mapped to illegal pblock 3 (length 3) [ 77.451358][ T7695] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 77.463717][ T7695] EXT4-fs (loop1): This should not happen!! Data will be lost [ 77.463717][ T7695] [ 77.473978][ T7701] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1829: bg 0: block 112: padding at end of block bitmap is not set [ 77.617112][ T7716] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 77.651420][ T7718] EXT4-fs warning (device loop2): ext4_multi_mount_protect:314: fsck is running on the filesystem [ 77.663699][ T7718] EXT4-fs warning (device loop2): ext4_multi_mount_protect:314: MMP failure info: last update time: 1669132786, last update node: dvyukov-desk.muc.corp.google.com, last update device: loop4 [ 77.693964][ T41] EXT4-fs error (device loop1): ext4_map_blocks:825: inode #15: block 8: comm kworker/u8:2: lblock 8 mapped to illegal pblock 8 (length 5) [ 77.729470][ T41] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 5 with error 117 [ 77.741944][ T41] EXT4-fs (loop1): This should not happen!! Data will be lost [ 77.741944][ T41] [ 77.761903][ T7714] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.777877][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 77.876999][ T7735] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.944711][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.955225][ T7735] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.994823][ T7746] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.024074][ T7735] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.074361][ T7746] ext4 filesystem being mounted at /359/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 78.124915][ T7735] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.145506][ T7746] EXT4-fs error (device loop3): ext4_get_first_dir_block:3550: inode #12: comm syz.3.1853: directory missing '..' [ 78.167887][ T7761] EXT4-fs: Ignoring removed mblk_io_submit option [ 78.203766][ T2155] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.219396][ T7761] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 78.234214][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.242715][ T7761] ext4 filesystem being mounted at /370/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.252748][ T2155] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.259980][ T7761] EXT4-fs error (device loop1): ext4_map_blocks:825: inode #15: block 3: comm syz.1.1857: lblock 3 mapped to illegal pblock 3 (length 3) [ 78.287463][ T2155] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.295771][ T7761] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 78.308062][ T7761] EXT4-fs (loop1): This should not happen!! Data will be lost [ 78.308062][ T7761] [ 78.361269][ T2155] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.380473][ T3467] EXT4-fs error (device loop1): ext4_map_blocks:825: inode #15: block 8: comm kworker/u8:7: lblock 8 mapped to illegal pblock 8 (length 8) [ 78.432367][ T3467] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 78.444703][ T3467] EXT4-fs (loop1): This should not happen!! Data will be lost [ 78.444703][ T3467] [ 78.468564][ T7774] FAT-fs (loop0): Directory bread(block 64) failed [ 78.486483][ T7774] FAT-fs (loop0): Directory bread(block 65) failed [ 78.497368][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 78.525622][ T7774] FAT-fs (loop0): Directory bread(block 66) failed [ 78.632097][ T7774] FAT-fs (loop0): Directory bread(block 67) failed [ 78.638818][ T7774] FAT-fs (loop0): Directory bread(block 68) failed [ 78.645567][ T7774] FAT-fs (loop0): Directory bread(block 69) failed [ 78.652299][ T7774] FAT-fs (loop0): Directory bread(block 70) failed [ 78.659161][ T7774] FAT-fs (loop0): Directory bread(block 71) failed [ 78.665824][ T7774] FAT-fs (loop0): Directory bread(block 72) failed [ 78.683215][ T7786] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1869'. [ 78.701517][ T7774] FAT-fs (loop0): Directory bread(block 73) failed [ 78.716320][ T7788] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1870'. [ 78.764254][ T7788] bond_slave_0: entered promiscuous mode [ 78.770025][ T7788] bond_slave_1: entered promiscuous mode [ 78.803470][ T7796] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 78.817221][ T7788] macsec1: entered allmulticast mode [ 78.822613][ T7788] bond0: entered allmulticast mode [ 78.827760][ T7788] bond_slave_0: entered allmulticast mode [ 78.833614][ T7788] bond_slave_1: entered allmulticast mode [ 78.845827][ T7788] bond0: left allmulticast mode [ 78.850714][ T7788] bond_slave_0: left allmulticast mode [ 78.856264][ T7788] bond_slave_1: left allmulticast mode [ 78.862026][ T7788] bond_slave_0: left promiscuous mode [ 78.867442][ T7788] bond_slave_1: left promiscuous mode [ 78.917429][ T7804] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=24 sclass=netlink_audit_socket pid=7804 comm=syz.2.1879 [ 78.954842][ T7806] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1878'. [ 78.968393][ T7806] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1878'. [ 79.084480][ T7825] EXT4-fs warning (device loop3): ext4_multi_mount_protect:314: fsck is running on the filesystem [ 79.095221][ T7825] EXT4-fs warning (device loop3): ext4_multi_mount_protect:314: MMP failure info: last update time: 1669132786, last update node: dvyukov-desk.muc.corp.google.com, last update device: loop4 [ 79.134291][ T7830] tipc: Enabling of bearer rejected, failed to enable media [ 79.159990][ T7831] set_capacity_and_notify: 10 callbacks suppressed [ 79.160003][ T7831] loop1: detected capacity change from 0 to 512 [ 79.180259][ T7829] loop0: detected capacity change from 0 to 2048 [ 79.217627][ T7842] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=24 sclass=netlink_audit_socket pid=7842 comm=syz.4.1893 [ 79.230898][ T7829] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 79.245584][ T7831] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.267313][ T7829] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 79.295142][ T7831] EXT4-fs error (device loop1): ext4_get_first_dir_block:3550: inode #12: comm syz.1.1890: directory missing '..' [ 79.302955][ T7829] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28 [ 79.319580][ T7829] EXT4-fs (loop0): This should not happen!! Data will be lost [ 79.319580][ T7829] [ 79.330707][ T7829] EXT4-fs (loop0): Total free blocks count 0 [ 79.336871][ T7829] EXT4-fs (loop0): Free/Dirty block details [ 79.342803][ T7829] EXT4-fs (loop0): free_blocks=2415919104 [ 79.348560][ T7829] EXT4-fs (loop0): dirty_blocks=32 [ 79.355113][ T7829] EXT4-fs (loop0): Block reservation details [ 79.361200][ T7829] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 79.411397][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.421549][ T41] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 79.507985][ T7852] loop1: detected capacity change from 0 to 4096 [ 79.564447][ T7852] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.650904][ T7864] loop4: detected capacity change from 0 to 1024 [ 79.689052][ T7864] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.731996][ T7864] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #11: comm syz.4.1904: missing EA_INODE flag [ 79.764932][ T7864] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.1904: error while reading EA inode 11 err=-117 [ 79.788797][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.911791][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.973169][ T7888] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1915'. [ 80.002952][ T7891] netlink: 'syz.0.1916': attribute type 2 has an invalid length. [ 80.010766][ T7891] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1916'. [ 80.021522][ T7893] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1917'. [ 80.349574][ T7924] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1929'. [ 80.384412][ T7924] vlan2: entered allmulticast mode [ 80.766835][ T29] kauditd_printk_skb: 62 callbacks suppressed [ 80.766851][ T29] audit: type=1400 audit(80.748:696): avc: denied { mounton } for pid=7948 comm="syz.2.1944" path="/384/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 80.814211][ T7950] bond_slave_0: entered promiscuous mode [ 80.819890][ T7950] bond_slave_1: entered promiscuous mode [ 80.837479][ T7950] macsec2: entered allmulticast mode [ 80.843021][ T7950] bond0: entered allmulticast mode [ 80.848154][ T7950] bond_slave_0: entered allmulticast mode [ 80.854635][ T7950] bond_slave_1: entered allmulticast mode [ 80.863157][ T7950] bond0: left allmulticast mode [ 80.868097][ T7950] bond_slave_0: left allmulticast mode [ 80.873812][ T7950] bond_slave_1: left allmulticast mode [ 80.879360][ T7950] bond_slave_0: left promiscuous mode [ 80.884801][ T7950] bond_slave_1: left promiscuous mode [ 81.028389][ T29] audit: type=1400 audit(80.918:697): avc: denied { read write } for pid=7957 comm="syz.4.1948" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 81.052518][ T29] audit: type=1400 audit(80.918:698): avc: denied { open } for pid=7957 comm="syz.4.1948" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 81.091780][ T7963] netlink: 'syz.3.1950': attribute type 2 has an invalid length. [ 81.100528][ T7964] loop4: detected capacity change from 0 to 128 [ 81.162928][ T7967] vlan2: entered allmulticast mode [ 81.455366][ T29] audit: type=1400 audit(81.438:699): avc: denied { map } for pid=7985 comm="syz.4.1961" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 81.479854][ T29] audit: type=1400 audit(81.438:700): avc: denied { execute } for pid=7985 comm="syz.4.1961" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 81.708038][ T7998] SELinux: security policydb version 18 (MLS) not backwards compatible [ 81.712437][ T29] audit: type=1400 audit(81.688:701): avc: denied { load_policy } for pid=7997 comm="syz.4.1967" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 81.772501][ T7998] SELinux: failed to load policy [ 81.911673][ T8009] netlink: 'syz.3.1971': attribute type 2 has an invalid length. [ 81.938525][ T7960] syz.1.1947 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 81.954186][ T7960] CPU: 1 UID: 0 PID: 7960 Comm: syz.1.1947 Not tainted syzkaller #0 PREEMPT(voluntary) [ 81.954219][ T7960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 81.954265][ T7960] Call Trace: [ 81.954273][ T7960] [ 81.954281][ T7960] __dump_stack+0x1d/0x30 [ 81.954312][ T7960] dump_stack_lvl+0x95/0xd0 [ 81.954339][ T7960] dump_stack+0x15/0x1b [ 81.954433][ T7960] dump_header+0x80/0x240 [ 81.954501][ T7960] oom_kill_process+0x295/0x350 [ 81.954533][ T7960] out_of_memory+0x97d/0xb80 [ 81.954564][ T7960] try_charge_memcg+0x62e/0xa10 [ 81.954595][ T7960] obj_cgroup_charge_pages+0x23/0xc0 [ 81.954633][ T7960] __memcg_kmem_charge_page+0x9e/0x170 [ 81.954673][ T7960] __alloc_frozen_pages_noprof+0x18a/0x350 [ 81.954819][ T7960] alloc_pages_mpol+0xb3/0x260 [ 81.954859][ T7960] alloc_pages_noprof+0x8f/0x130 [ 81.954897][ T7960] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 81.955069][ T7960] __kvmalloc_node_noprof+0x471/0x680 [ 81.955100][ T7960] ? ip_set_alloc+0x24/0x30 [ 81.955133][ T7960] ? ip_set_alloc+0x24/0x30 [ 81.955212][ T7960] ? __kmalloc_cache_noprof+0x3cd/0x4a0 [ 81.955295][ T7960] ip_set_alloc+0x24/0x30 [ 81.955327][ T7960] hash_netiface_create+0x282/0x740 [ 81.955368][ T7960] ? __pfx_hash_netiface_create+0x10/0x10 [ 81.955460][ T7960] ip_set_create+0x3cf/0x970 [ 81.955503][ T7960] ? __nla_parse+0x40/0x60 [ 81.955580][ T7960] nfnetlink_rcv_msg+0x509/0x5d0 [ 81.955628][ T7960] netlink_rcv_skb+0x123/0x220 [ 81.955741][ T7960] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 81.955777][ T7960] nfnetlink_rcv+0x167/0x1720 [ 81.955807][ T7960] ? __kfree_skb+0x109/0x150 [ 81.955845][ T7960] ? nlmon_xmit+0x4f/0x60 [ 81.955973][ T7960] ? consume_skb+0x49/0x140 [ 81.956006][ T7960] ? nlmon_xmit+0x4f/0x60 [ 81.956131][ T7960] ? dev_hard_start_xmit+0x3a8/0x3e0 [ 81.956172][ T7960] ? __dev_queue_xmit+0x139a/0x1f20 [ 81.956206][ T7960] ? __dev_queue_xmit+0x148/0x1f20 [ 81.956310][ T7960] ? ref_tracker_free+0x37d/0x3e0 [ 81.956347][ T7960] ? __netlink_deliver_tap+0x4dc/0x500 [ 81.956454][ T7960] netlink_unicast+0x5c0/0x690 [ 81.956494][ T7960] netlink_sendmsg+0x5c8/0x6f0 [ 81.956514][ T7960] ? __pfx_netlink_sendmsg+0x10/0x10 [ 81.956538][ T7960] ____sys_sendmsg+0x5af/0x600 [ 81.956610][ T7960] ___sys_sendmsg+0x195/0x1e0 [ 81.956692][ T7960] __x64_sys_sendmsg+0xd4/0x160 [ 81.956720][ T7960] x64_sys_call+0x17ba/0x3000 [ 81.956753][ T7960] do_syscall_64+0xc0/0x2a0 [ 81.956786][ T7960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.956850][ T7960] RIP: 0033:0x7fd187e7aeb9 [ 81.956908][ T7960] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.956980][ T7960] RSP: 002b:00007fd1868d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 81.957005][ T7960] RAX: ffffffffffffffda RBX: 00007fd1880f5fa0 RCX: 00007fd187e7aeb9 [ 81.957029][ T7960] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 81.957045][ T7960] RBP: 00007fd187ee8c1f R08: 0000000000000000 R09: 0000000000000000 [ 81.957065][ T7960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 81.957081][ T7960] R13: 00007fd1880f6038 R14: 00007fd1880f5fa0 R15: 00007ffe7b0d9188 [ 81.957162][ T7960] [ 81.957171][ T7960] memory: usage 307200kB, limit 307200kB, failcnt 264 [ 82.199672][ T8022] __nla_validate_parse: 10 callbacks suppressed [ 82.199688][ T8022] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1977'. [ 82.205521][ T7960] memory+swap: usage 307468kB, limit 9007199254740988kB, failcnt 0 [ 82.253576][ T8024] netlink: 184 bytes leftover after parsing attributes in process `syz.3.1979'. [ 82.260292][ T7960] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 82.307813][ T8026] loop0: detected capacity change from 0 to 128 [ 82.312233][ T7960] Memory cgroup stats for /syz1: [ 82.327606][ T7960] cache 0 [ 82.352516][ T7960] rss 0 [ 82.355337][ T7960] shmem 0 [ 82.358267][ T7960] mapped_file 0 [ 82.361733][ T7960] dirty 0 [ 82.364785][ T7960] writeback 0 [ 82.368216][ T7960] workingset_refault_anon 51 [ 82.372853][ T7960] workingset_refault_file 896 [ 82.377531][ T7960] swap 274432 [ 82.380800][ T7960] swapcached 12288 [ 82.385970][ T7960] pgpgin 81649 [ 82.389339][ T7960] pgpgout 81644 [ 82.392822][ T7960] pgfault 105704 [ 82.396455][ T7960] pgmajfault 32 [ 82.399901][ T7960] inactive_anon 0 [ 82.403690][ T7960] active_anon 12288 [ 82.407663][ T7960] inactive_file 0 [ 82.412671][ T7960] active_file 8192 [ 82.416402][ T7960] unevictable 0 [ 82.419989][ T7960] hierarchical_memory_limit 314572800 [ 82.425393][ T7960] hierarchical_memsw_limit 9223372036854771712 [ 82.431562][ T7960] total_cache 0 [ 82.435027][ T7960] total_rss 0 [ 82.438299][ T7960] total_shmem 0 [ 82.443098][ T7960] total_mapped_file 0 [ 82.447068][ T7960] total_dirty 0 [ 82.450611][ T7960] total_writeback 0 [ 82.454556][ T7960] total_workingset_refault_anon 51 [ 82.459722][ T7960] total_workingset_refault_file 896 [ 82.465110][ T7960] total_swap 274432 [ 82.468912][ T7960] total_swapcached 12288 [ 82.474566][ T7960] total_pgpgin 81649 [ 82.478460][ T7960] total_pgpgout 81644 [ 82.482479][ T7960] total_pgfault 105704 [ 82.486532][ T7960] total_pgmajfault 32 [ 82.490503][ T7960] total_inactive_anon 0 [ 82.494874][ T7960] total_active_anon 12288 [ 82.499266][ T7960] total_inactive_file 0 [ 82.504766][ T7960] total_active_file 8192 [ 82.509007][ T7960] total_unevictable 0 [ 82.513043][ T7960] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1947,pid=7959,uid=0 [ 82.527823][ T7960] Memory cgroup out of memory: Killed process 7959 (syz.1.1947) total-vm:96048kB, anon-rss:1332kB, file-rss:22156kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 82.607539][ T8037] netlink: 'syz.0.1984': attribute type 2 has an invalid length. [ 82.615438][ T8037] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1984'. [ 82.667898][ T8040] xt_hashlimit: size too large, truncated to 1048576 [ 82.749143][ T7960] syz.1.1947 (7960) used greatest stack depth: 7232 bytes left [ 82.807703][ T8042] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1997'. [ 82.853320][ T8046] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1987'. [ 82.880974][ T8046] bond_slave_0: left promiscuous mode [ 82.886392][ T8046] bond_slave_1: left promiscuous mode [ 82.943082][ T8048] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1988'. [ 83.034147][ T8057] sg_write: data in/out 33947872/224 bytes for SCSI command 0x0-- guessing data in; [ 83.034147][ T8057] program syz.3.1991 not setting count and/or reply_len properly [ 83.073387][ T29] audit: type=1400 audit(83.048:702): avc: denied { create } for pid=8056 comm="syz.1.1992" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_iscsi_socket permissive=1 [ 83.217424][ T8074] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2000'. [ 83.258611][ T8078] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2001'. [ 83.312728][ T8083] SELinux: security policydb version 18 (MLS) not backwards compatible [ 83.321199][ T8083] SELinux: failed to load policy [ 83.392867][ T29] audit: type=1326 audit(83.368:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8093 comm="syz.0.2008" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1162d7aeb9 code=0x0 [ 83.450074][ T29] audit: type=1400 audit(83.428:704): avc: denied { mounton } for pid=8093 comm="syz.0.2008" path="/proc/949/task/950/net" dev="proc" ino=20372 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 83.505931][ T8102] loop3: detected capacity change from 0 to 1024 [ 83.521028][ T8102] EXT4-fs: Ignoring removed orlov option [ 83.585660][ T8102] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.646985][ T8112] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2016'. [ 83.672753][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.722319][ T8120] netem: incorrect gi model size [ 83.727327][ T8120] netem: change failed [ 83.906936][ T8139] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2029'. [ 83.913838][ T8141] loop4: detected capacity change from 0 to 1024 [ 83.931725][ T8141] EXT4-fs: Ignoring removed orlov option [ 83.959805][ T8141] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.988959][ T8149] netlink: 'syz.3.2033': attribute type 6 has an invalid length. [ 84.034994][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.066632][ T8155] sd 0:0:1:0: device reset [ 84.090182][ T29] audit: type=1400 audit(84.068:705): avc: denied { write } for pid=8156 comm="syz.3.2037" name="cgroup.subtree_control" dev="cgroup2" ino=331 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 84.157307][ T8162] loop3: detected capacity change from 0 to 512 [ 84.175271][ T8162] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 84.206178][ T8162] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.294682][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.377085][ T8180] netlink: 'syz.3.2045': attribute type 12 has an invalid length. [ 84.429480][ T8184] RDS: rds_bind could not find a transport for c00::, load rds_tcp or rds_rdma? [ 84.606689][ T8191] loop1: detected capacity change from 0 to 512 [ 84.653807][ T8196] loop4: detected capacity change from 0 to 1024 [ 84.672182][ T8196] EXT4-fs: Ignoring removed oldalloc option [ 84.704097][ T8196] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.718784][ T8191] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.748805][ T8196] EXT4-fs warning (device loop4): ext4_empty_dir:3097: inode #11: comm syz.4.2054: directory missing '..' [ 84.797682][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.844984][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.943917][ T8219] loop0: detected capacity change from 0 to 512 [ 85.007939][ T8219] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 85.073496][ T8230] loop3: detected capacity change from 0 to 1024 [ 85.111662][ T8230] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2067: bg 0: block 112: padding at end of block bitmap is not set [ 85.137642][ T8230] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 43 with error 117 [ 85.150197][ T8230] EXT4-fs (loop3): This should not happen!! Data will be lost [ 85.150197][ T8230] [ 85.278533][ T3467] kworker/u8:7: attempt to access beyond end of device [ 85.278533][ T3467] loop0: rw=1, sector=3520, nr_sectors = 2104 limit=512 [ 85.304124][ T3467] kworker/u8:7: attempt to access beyond end of device [ 85.304124][ T3467] loop0: rw=1, sector=5624, nr_sectors = 3480 limit=512 [ 85.338574][ T3467] kworker/u8:7: attempt to access beyond end of device [ 85.338574][ T3467] loop0: rw=1, sector=9104, nr_sectors = 2072 limit=512 [ 85.373468][ T3467] kworker/u8:7: attempt to access beyond end of device [ 85.373468][ T3467] loop0: rw=1, sector=11176, nr_sectors = 2840 limit=512 [ 85.422375][ T3467] kworker/u8:7: attempt to access beyond end of device [ 85.422375][ T3467] loop0: rw=1, sector=14016, nr_sectors = 2072 limit=512 [ 85.450062][ T3467] kworker/u8:7: attempt to access beyond end of device [ 85.450062][ T3467] loop0: rw=1, sector=16088, nr_sectors = 504 limit=512 [ 85.596192][ T8243] syz.3.2081 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 85.610365][ T8243] CPU: 0 UID: 0 PID: 8243 Comm: syz.3.2081 Not tainted syzkaller #0 PREEMPT(voluntary) [ 85.610394][ T8243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 85.610490][ T8243] Call Trace: [ 85.610498][ T8243] [ 85.610506][ T8243] __dump_stack+0x1d/0x30 [ 85.610531][ T8243] dump_stack_lvl+0x95/0xd0 [ 85.610553][ T8243] dump_stack+0x15/0x1b [ 85.610574][ T8243] dump_header+0x80/0x240 [ 85.610664][ T8243] oom_kill_process+0x295/0x350 [ 85.610694][ T8243] out_of_memory+0x97d/0xb80 [ 85.610720][ T8243] try_charge_memcg+0x62e/0xa10 [ 85.610775][ T8243] obj_cgroup_charge_pages+0x23/0xc0 [ 85.610811][ T8243] __memcg_kmem_charge_page+0x9e/0x170 [ 85.610928][ T8243] __alloc_frozen_pages_noprof+0x18a/0x350 [ 85.610964][ T8243] alloc_pages_mpol+0xb3/0x260 [ 85.611031][ T8243] alloc_pages_noprof+0x8f/0x130 [ 85.611101][ T8243] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 85.611141][ T8243] __kvmalloc_node_noprof+0x471/0x680 [ 85.611176][ T8243] ? ip_set_alloc+0x24/0x30 [ 85.611231][ T8243] ? ip_set_alloc+0x24/0x30 [ 85.611261][ T8243] ? __kmalloc_cache_noprof+0x3cd/0x4a0 [ 85.611354][ T8243] ip_set_alloc+0x24/0x30 [ 85.611465][ T8243] hash_netiface_create+0x282/0x740 [ 85.611558][ T8243] ? __pfx_hash_netiface_create+0x10/0x10 [ 85.611592][ T8243] ip_set_create+0x3cf/0x970 [ 85.611666][ T8243] ? __nla_parse+0x40/0x60 [ 85.611704][ T8243] nfnetlink_rcv_msg+0x509/0x5d0 [ 85.611747][ T8243] netlink_rcv_skb+0x123/0x220 [ 85.611796][ T8243] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 85.611873][ T8243] nfnetlink_rcv+0x167/0x1720 [ 85.611955][ T8243] ? __kfree_skb+0x109/0x150 [ 85.611998][ T8243] ? nlmon_xmit+0x4f/0x60 [ 85.612030][ T8243] ? consume_skb+0x49/0x140 [ 85.612147][ T8243] ? nlmon_xmit+0x4f/0x60 [ 85.612187][ T8243] ? dev_hard_start_xmit+0x3a8/0x3e0 [ 85.612309][ T8243] ? __dev_queue_xmit+0x139a/0x1f20 [ 85.612347][ T8243] ? __dev_queue_xmit+0x148/0x1f20 [ 85.612390][ T8243] ? ref_tracker_free+0x37d/0x3e0 [ 85.612488][ T8243] ? __netlink_deliver_tap+0x4dc/0x500 [ 85.612614][ T8243] netlink_unicast+0x5c0/0x690 [ 85.612654][ T8243] netlink_sendmsg+0x5c8/0x6f0 [ 85.612679][ T8243] ? __pfx_netlink_sendmsg+0x10/0x10 [ 85.612698][ T8243] ____sys_sendmsg+0x5af/0x600 [ 85.612744][ T8243] ___sys_sendmsg+0x195/0x1e0 [ 85.612846][ T8243] __x64_sys_sendmsg+0xd4/0x160 [ 85.612872][ T8243] x64_sys_call+0x17ba/0x3000 [ 85.612967][ T8243] do_syscall_64+0xc0/0x2a0 [ 85.613006][ T8243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.613029][ T8243] RIP: 0033:0x7f573c19aeb9 [ 85.613119][ T8243] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.613139][ T8243] RSP: 002b:00007f573abf7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 85.613160][ T8243] RAX: ffffffffffffffda RBX: 00007f573c415fa0 RCX: 00007f573c19aeb9 [ 85.613175][ T8243] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 85.613237][ T8243] RBP: 00007f573c208c1f R08: 0000000000000000 R09: 0000000000000000 [ 85.613252][ T8243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.613265][ T8243] R13: 00007f573c416038 R14: 00007f573c415fa0 R15: 00007ffd1db0e4e8 [ 85.613284][ T8243] [ 85.929341][ T8243] memory: usage 307200kB, limit 307200kB, failcnt 105 [ 85.936159][ T8243] memory+swap: usage 307380kB, limit 9007199254740988kB, failcnt 0 [ 85.944138][ T8243] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 85.951449][ T8243] Memory cgroup stats for /syz3: [ 86.011817][ T8243] cache 4096 [ 86.020175][ T8243] rss 0 [ 86.023048][ T8243] shmem 0 [ 86.025982][ T8243] mapped_file 0 [ 86.029435][ T8243] dirty 0 [ 86.032428][ T8243] writeback 4096 [ 86.035990][ T8243] workingset_refault_anon 21 [ 86.040585][ T8243] workingset_refault_file 1 [ 86.045195][ T8243] swap 184320 [ 86.048476][ T8243] swapcached 4096 [ 86.052299][ T8243] pgpgin 129748 [ 86.055758][ T8243] pgpgout 129745 [ 86.059298][ T8243] pgfault 110859 [ 86.062922][ T8243] pgmajfault 21 [ 86.066385][ T8243] inactive_anon 0 [ 86.070009][ T8243] active_anon 4096 [ 86.073759][ T8243] inactive_file 0 [ 86.077460][ T8243] active_file 4096 [ 86.081199][ T8243] unevictable 0 [ 86.084699][ T8243] hierarchical_memory_limit 314572800 [ 86.090180][ T8243] hierarchical_memsw_limit 9223372036854771712 [ 86.095085][ T8251] xt_hashlimit: size too large, truncated to 1048576 [ 86.096437][ T8243] total_cache 4096 [ 86.106831][ T8243] total_rss 0 [ 86.110109][ T8243] total_shmem 0 [ 86.113596][ T8243] total_mapped_file 0 [ 86.117570][ T8243] total_dirty 0 [ 86.121101][ T8243] total_writeback 4096 [ 86.125159][ T8243] total_workingset_refault_anon 21 [ 86.130258][ T8243] total_workingset_refault_file 1 [ 86.135304][ T8243] total_swap 184320 [ 86.139122][ T8243] total_swapcached 4096 [ 86.143283][ T8243] total_pgpgin 129748 [ 86.147253][ T8243] total_pgpgout 129745 [ 86.151332][ T8243] total_pgfault 110859 [ 86.155391][ T8243] total_pgmajfault 21 [ 86.159359][ T8243] total_inactive_anon 0 [ 86.163524][ T8243] total_active_anon 4096 [ 86.167775][ T8243] total_inactive_file 0 [ 86.171929][ T8243] total_active_file 4096 [ 86.176238][ T8243] total_unevictable 0 [ 86.180205][ T8243] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.2081,pid=8242,uid=0 [ 86.194896][ T8243] Memory cgroup out of memory: Killed process 8242 (syz.3.2081) total-vm:96048kB, anon-rss:1204kB, file-rss:22156kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 86.275084][ T8253] loop1: detected capacity change from 0 to 512 [ 86.294815][ T8253] msdos: Bad value for 'uid' [ 86.299485][ T8253] msdos: Bad value for 'uid' [ 86.623417][ T8273] netlink: 'syz.4.2084': attribute type 6 has an invalid length. [ 86.661381][ T8277] loop4: detected capacity change from 0 to 512 [ 86.670336][ T8277] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 87.701033][ T8293] sd 0:0:1:0: device reset [ 87.933341][ T8296] RDS: rds_bind could not find a transport for c00::, load rds_tcp or rds_rdma? [ 88.023482][ T8300] __nla_validate_parse: 12 callbacks suppressed [ 88.023498][ T8300] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2092'. [ 88.387628][ T8287] syz.4.2088 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 88.398758][ T8287] CPU: 0 UID: 0 PID: 8287 Comm: syz.4.2088 Not tainted syzkaller #0 PREEMPT(voluntary) [ 88.398834][ T8287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 88.398845][ T8287] Call Trace: [ 88.398852][ T8287] [ 88.398859][ T8287] __dump_stack+0x1d/0x30 [ 88.398882][ T8287] dump_stack_lvl+0x95/0xd0 [ 88.398983][ T8287] dump_stack+0x15/0x1b [ 88.399001][ T8287] dump_header+0x80/0x240 [ 88.399022][ T8287] oom_kill_process+0x295/0x350 [ 88.399045][ T8287] out_of_memory+0x97d/0xb80 [ 88.399130][ T8287] try_charge_memcg+0x62e/0xa10 [ 88.399181][ T8287] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 88.399297][ T8287] __read_swap_cache_async+0x17b/0x2d0 [ 88.399329][ T8287] swap_cluster_readahead+0x362/0x3c0 [ 88.399361][ T8287] swapin_readahead+0xde/0x840 [ 88.399443][ T8287] ? __rcu_read_unlock+0x33/0x70 [ 88.399471][ T8287] ? __rcu_read_unlock+0x4e/0x70 [ 88.399497][ T8287] ? swap_cache_get_folio+0x26f/0x280 [ 88.399579][ T8287] do_swap_page+0x59b/0x2a50 [ 88.399610][ T8287] ? __rcu_read_lock+0x36/0x50 [ 88.399716][ T8287] ? __pfx_default_wake_function+0x10/0x10 [ 88.399837][ T8287] handle_mm_fault+0xb40/0x3030 [ 88.399942][ T8287] ? vma_start_read+0x1c7/0x2c0 [ 88.399968][ T8287] do_user_addr_fault+0x62f/0x1050 [ 88.400001][ T8287] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 88.400037][ T8287] ? irqentry_exit+0x3c/0x510 [ 88.400060][ T8287] exc_page_fault+0x62/0xa0 [ 88.400081][ T8287] asm_exc_page_fault+0x26/0x30 [ 88.400100][ T8287] RIP: 0033:0x7f7bf2c38910 [ 88.400115][ T8287] Code: c4 4c 0f 42 e0 83 3d ba f4 3a 00 00 0f 8e d9 fd ff ff e8 b3 88 fe ff 49 39 c4 0f 82 82 00 00 00 66 2e 0f 1f 84 00 00 00 00 00 <69> 3d 7e cd ed 00 e8 03 00 00 48 8d 1d 7f d6 3a 00 e8 ca 30 13 00 [ 88.400168][ T8287] RSP: 002b:00007ffec35c62d0 EFLAGS: 00010216 [ 88.400184][ T8287] RAX: 000000000001591c RBX: 00007f7bf2fe7da0 RCX: 00000000000157c0 [ 88.400196][ T8287] RDX: 000000000000015c RSI: 00007ffec35c62b0 RDI: 0000000000000001 [ 88.400209][ T8287] RBP: 00007f7bf2fe7da0 R08: 0000000014c922a9 R09: 7fffffffffffffff [ 88.400222][ T8287] R10: 3fffffffffffffff R11: 0000000000000246 R12: 0000000000015964 [ 88.400234][ T8287] R13: 00007f7bf2fe5fac R14: 000000000001568a R15: 00007ffec35c63d0 [ 88.400302][ T8287] [ 88.400308][ T8287] memory: usage 307200kB, limit 307200kB, failcnt 452 [ 88.532360][ T4066] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 88.535609][ T8287] memory+swap: usage 307572kB, limit 9007199254740988kB, failcnt 0 [ 88.535625][ T8287] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 88.646771][ T8287] Memory cgroup stats for /syz4: [ 88.648275][ T8287] cache 0 [ 88.656167][ T8287] rss 0 [ 88.658942][ T8287] shmem 0 [ 88.661918][ T8287] mapped_file 0 [ 88.665365][ T8287] dirty 0 [ 88.668295][ T8287] writeback 0 [ 88.671598][ T8287] workingset_refault_anon 58 [ 88.676303][ T8287] workingset_refault_file 155 [ 88.680996][ T8287] swap 380928 [ 88.684324][ T8287] swapcached 0 [ 88.687684][ T8287] pgpgin 73025 [ 88.691145][ T8287] pgpgout 73022 [ 88.694634][ T8287] pgfault 111025 [ 88.698162][ T8287] pgmajfault 31 [ 88.701671][ T8287] inactive_anon 0 [ 88.705294][ T8287] active_anon 0 [ 88.708744][ T8287] inactive_file 12288 [ 88.712775][ T8287] active_file 0 [ 88.716227][ T8287] unevictable 0 [ 88.719677][ T8287] hierarchical_memory_limit 314572800 [ 88.725113][ T8287] hierarchical_memsw_limit 9223372036854771712 [ 88.731328][ T8287] total_cache 0 [ 88.734894][ T8287] total_rss 0 [ 88.738233][ T8287] total_shmem 0 [ 88.741704][ T8287] total_mapped_file 0 [ 88.745676][ T8287] total_dirty 0 [ 88.749130][ T8287] total_writeback 0 [ 88.752956][ T8287] total_workingset_refault_anon 58 [ 88.758066][ T8287] total_workingset_refault_file 155 [ 88.763351][ T8287] total_swap 380928 [ 88.767156][ T8287] total_swapcached 0 [ 88.771117][ T8287] total_pgpgin 73025 [ 88.775000][ T8287] total_pgpgout 73022 [ 88.778976][ T8287] total_pgfault 111025 [ 88.783084][ T8287] total_pgmajfault 31 [ 88.787052][ T8287] total_inactive_anon 0 [ 88.791231][ T8287] total_active_anon 0 [ 88.795201][ T8287] total_inactive_file 12288 [ 88.799695][ T8287] total_active_file 0 [ 88.803771][ T8287] total_unevictable 0 [ 88.807740][ T8287] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.2088,pid=8287,uid=0 [ 88.822445][ T8287] Memory cgroup out of memory: Killed process 8287 (syz.4.2088) total-vm:96048kB, anon-rss:1208kB, file-rss:22156kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 88.943156][ T8310] loop1: detected capacity change from 0 to 512 [ 88.960519][ T8310] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 89.045846][ T8316] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 89.074480][ T8318] netlink: 'syz.1.2102': attribute type 10 has an invalid length. [ 89.105334][ T8318] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 89.171906][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 89.171922][ T29] audit: type=1326 audit(89.158:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8321 comm="syz.1.2105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd187e7aeb9 code=0x7ffc0000 [ 89.202063][ T29] audit: type=1326 audit(89.158:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8321 comm="syz.1.2105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd187e7aeb9 code=0x7ffc0000 [ 89.224981][ T29] audit: type=1326 audit(89.158:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8321 comm="syz.1.2105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd187e7aeb9 code=0x7ffc0000 [ 89.276862][ T8328] loop4: detected capacity change from 0 to 1024 [ 89.326962][ T29] audit: type=1326 audit(89.228:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8321 comm="syz.1.2105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd187e7aeb9 code=0x7ffc0000 [ 89.351115][ T29] audit: type=1326 audit(89.228:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8321 comm="syz.1.2105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fd187e7aeb9 code=0x7ffc0000 [ 89.374514][ T29] audit: type=1326 audit(89.228:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8321 comm="syz.1.2105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd187e7aeb9 code=0x7ffc0000 [ 89.398002][ T29] audit: type=1326 audit(89.228:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8321 comm="syz.1.2105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd187e7aeb9 code=0x7ffc0000 [ 89.422084][ T29] audit: type=1326 audit(89.228:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8321 comm="syz.1.2105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd187e7aeb9 code=0x7ffc0000 [ 89.444810][ T29] audit: type=1326 audit(89.228:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8321 comm="syz.1.2105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7fd187e7aeb9 code=0x7ffc0000 [ 89.469094][ T29] audit: type=1326 audit(89.228:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8321 comm="syz.1.2105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd187e7aeb9 code=0x7ffc0000 [ 89.563041][ T8336] pim6reg: entered allmulticast mode [ 89.574367][ T8336] pim6reg: left allmulticast mode [ 89.597426][ T8340] loop1: detected capacity change from 0 to 512 [ 89.669492][ T8340] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2112: bg 0: block 248: padding at end of block bitmap is not set [ 89.694056][ T8340] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.2112: Failed to acquire dquot type 1 [ 89.706193][ T8340] EXT4-fs (loop1): 1 truncate cleaned up [ 89.789783][ T2155] EXT4-fs error (device loop1): ext4_release_dquot:7022: comm kworker/u8:6: Failed to release dquot type 1 [ 89.866888][ T8362] loop1: detected capacity change from 0 to 512 [ 89.899001][ T8362] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 90.198680][ T1714] kworker/u8:5: attempt to access beyond end of device [ 90.198680][ T1714] loop1: rw=1, sector=3792, nr_sectors = 3112 limit=512 [ 90.275382][ T1714] kworker/u8:5: attempt to access beyond end of device [ 90.275382][ T1714] loop1: rw=1, sector=6904, nr_sectors = 4016 limit=512 [ 90.295221][ T1714] kworker/u8:5: attempt to access beyond end of device [ 90.295221][ T1714] loop1: rw=1, sector=10920, nr_sectors = 2328 limit=512 [ 90.306141][ T8383] loop3: detected capacity change from 0 to 512 [ 90.314963][ T1714] kworker/u8:5: attempt to access beyond end of device [ 90.314963][ T1714] loop1: rw=1, sector=13248, nr_sectors = 2776 limit=512 [ 90.331110][ T1714] kworker/u8:5: attempt to access beyond end of device [ 90.331110][ T1714] loop1: rw=1, sector=16024, nr_sectors = 568 limit=512 [ 90.347678][ T3312] ================================================================== [ 90.355785][ T3312] BUG: KCSAN: data-race in __xa_clear_mark / xas_find_marked [ 90.363188][ T3312] [ 90.365506][ T3312] read-write to 0xffff88813e5ba230 of 8 bytes by interrupt on cpu 0: [ 90.373578][ T3312] __xa_clear_mark+0xf5/0x1e0 [ 90.378273][ T3312] __folio_end_writeback+0xf4/0x360 [ 90.383529][ T3312] folio_end_writeback_no_dropbehind+0x6d/0x1d0 [ 90.389778][ T3312] folio_end_writeback+0x1c/0x70 [ 90.394749][ T3312] mpage_write_end_io+0x270/0x630 [ 90.399788][ T3312] bio_endio+0x37a/0x410 [ 90.404035][ T3312] blk_update_request+0x338/0x730 [ 90.409065][ T3312] blk_mq_end_request+0x26/0x50 [ 90.413931][ T3312] lo_complete_rq+0x98/0x140 [ 90.418514][ T3312] blk_done_softirq+0x77/0xb0 [ 90.423194][ T3312] handle_softirqs+0xb9/0x280 [ 90.427878][ T3312] run_ksoftirqd+0x1c/0x30 [ 90.432319][ T3312] smpboot_thread_fn+0x32a/0x510 [ 90.437256][ T3312] kthread+0x488/0x510 [ 90.441332][ T3312] ret_from_fork+0x148/0x280 [ 90.445926][ T3312] ret_from_fork_asm+0x1a/0x30 [ 90.450694][ T3312] [ 90.453015][ T3312] read to 0xffff88813e5ba230 of 8 bytes by task 3312 on cpu 1: [ 90.460560][ T3312] xas_find_marked+0x213/0x620 [ 90.465338][ T3312] filemap_get_folios_tag+0xfa/0x510 [ 90.470637][ T3312] filemap_fdatawait_keep_errors+0x6c/0x190 [ 90.476533][ T3312] sync_inodes_sb+0x40e/0x4c0 [ 90.481223][ T3312] sync_filesystem+0x102/0x190 [ 90.485985][ T3312] generic_shutdown_super+0x44/0x210 [ 90.491278][ T3312] kill_block_super+0x2a/0x70 [ 90.495963][ T3312] deactivate_locked_super+0x75/0x1c0 [ 90.501368][ T3312] deactivate_super+0x97/0xa0 [ 90.506055][ T3312] cleanup_mnt+0x2bb/0x330 [ 90.510483][ T3312] __cleanup_mnt+0x19/0x20 [ 90.514901][ T3312] task_work_run+0x130/0x1a0 [ 90.519506][ T3312] exit_to_user_mode_loop+0x1f7/0x6f0 [ 90.524884][ T3312] do_syscall_64+0x1d3/0x2a0 [ 90.529476][ T3312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.535360][ T3312] [ 90.537675][ T3312] value changed: 0xffffc00000000000 -> 0xfffc000000000000 [ 90.544768][ T3312] [ 90.547092][ T3312] Reported by Kernel Concurrency Sanitizer on: [ 90.553248][ T3312] CPU: 1 UID: 0 PID: 3312 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 90.563139][ T3312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 90.573191][ T3312] ================================================================== [ 90.584628][ T8383] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2130: bg 0: block 248: padding at end of block bitmap is not set [ 90.610134][ T8383] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.2130: Failed to acquire dquot type 1 [ 90.627837][ T8383] EXT4-fs (loop3): 1 truncate cleaned up [ 90.651062][ T2155] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:6: Failed to release dquot type 1