last executing test programs: 8.496467254s ago: executing program 2 (id=3124): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)={{0x14}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 8.446645737s ago: executing program 2 (id=3127): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYBLOB="3c0100001900010029bd7000fbdbdf25fe880000000000000000000000000101fe8000000000000000000000000000bb000000008971b3920200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000fdffffffffffffff000000000000000000000000000000000500000000000000000000000020000000000000000000000000000000000000010002020000000084000500ac1e0101000000000000000000000000000004d63c0000000200000000000000000000000000ffff000000000735000000031000090000000000000001000100ff010000000000000000000000000001000004d42b"], 0x13c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804) 8.340857644s ago: executing program 2 (id=3130): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg(r0, &(0x7f0000000140)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x8, @local, 0x8, 0x3}, 0x80, &(0x7f0000000080)=[{&(0x7f00000005c0)='l', 0x1}], 0x1}}], 0x1, 0x40000050) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r1, 0x0, 0x10, &(0x7f00000000c0)="170000000200020000ffbe8c5ee17688a2003300010100000077fc5ad90200fb6a880000d6c9db0000db15d088bd8b7000000001d9ce9bc7e28db3000200ff01800a0000ebfc0607bdff59100ac45761547a681f009ceeff5acba400001fb700674f00c8e365d00b5033bf79ac2dfc061f15003901dee2000000000062068f5ee50c08af9b1c568302ffff02ff03310800ab0840024f02d8e9e90539062a80e605007f71174ab498ff0b3e5a1b47b6df7b23de8caa000000", 0x10c) 8.261695488s ago: executing program 2 (id=3134): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000500)='./file0\x00', 0x2200810, &(0x7f0000000280)=ANY=[@ANYRES64=0x0, @ANYRESHEX, @ANYRES8, @ANYBLOB="479446063e5ae0e1eff9575273fe293386346b2af951ded4d42bb874cc5122cfde0a5dca160c4fa76f6039397c9440764c3fcb6e029a6817b26bd04516313e243da16e92c2b4460be01c7849e483dcde0ddc3f55174b930be9fd8169ff4be922c308874e8a1b0b9f838dacc9", @ANYRES16, @ANYRESOCT], 0x4, 0x25d, &(0x7f0000000f40)="$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") mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000380)='./file0/../file0/../file0/file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f0000000040)='sysfs\x00', 0x10, 0x0) 8.104823978s ago: executing program 2 (id=3139): futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x20) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) 7.72766867s ago: executing program 2 (id=3159): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x200000ea, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c25}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10) 7.663272923s ago: executing program 32 (id=3159): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x200000ea, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c25}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10) 2.885601022s ago: executing program 5 (id=3285): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x22, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1f0519, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x9, 0x7}, 0xec25, 0x4085, 0xb, 0x4, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 1.327393763s ago: executing program 0 (id=3312): set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) unshare(0x2e000200) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd2d, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x4000, 0x300}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x200}, {0x0, 0x0, 0x0, 0x0, 0x3000000, 0x40000000}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8000, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x800000, 0x0, 0x6}, {0x0, 0xc3, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x470a, 0x0, 0x8000000, 0x4000000}, {}, {0x2, 0x0, 0x0, 0x0, 0x6, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x1, 0x0, 0xfff}, {0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x20000}, {}, {0x1, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x60569add}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff, 0x9}, {0x0, 0x0, 0x0, 0x0, 0xfffff800}, {}, {}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0xfffffffd}, {}, {0x0, 0x9, 0x0, 0xffffffff, 0x0, 0x2}, {}, {0x80, 0x0, 0x0, 0x0, 0x0, 0x80000}, {0x80}, {0x0, 0x0, 0x0, 0x5, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x2, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x8, 0x0, 0x3}, {}, {0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x8510}, {0xffff}, {}, {0x4000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x7}, {}, {0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x9}, {0x1, 0xfffffffc, 0x200}, {0x5, 0x0, 0x0, 0x200}, {}, {0x4}, {}, {0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x5, 0xfffffffe}, {0x0, 0x0, 0x0, 0x4, 0x9}, {}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x5}, {0x0, 0xb}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, {0x100000, 0x0, 0x0, 0xec33, 0x0, 0x4}, {}, {0xb, 0x0, 0x0, 0x0, 0x0, 0xfe1}, {0x0, 0x1, 0x0, 0x0, 0x4}, {0x0, 0x0, 0xfffffffc}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {0x0, 0x8, 0x0, 0x0, 0xfffffffe}, {0x4, 0x2, 0x2000000, 0x2, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0xe9d, 0x58a}, {0x2}, {0x2, 0x9, 0x20000000}, {0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0xe600, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x7, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0xfffffffb, 0x0, 0x0, 0x0, 0x8000}, {0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x2d, 0x0, 0x10000}, {0x0, 0x0, 0x8000}, {0x0, 0x8000}, {0x0, 0x0, 0x10000}, {0x0, 0x80000000, 0x0, 0x7fff800, 0x4}, {0x0, 0x3}, {0xffffffff, 0x0, 0x0, 0x0, 0xd}], [{}, {}, {0x0, 0x1}, {0x1}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5, 0x1}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x1, 0x1}, {}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x4}, {}, {0x5}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x2, 0x1}, {}, {}, {}, {}, {0x5, 0x1}, {}, {}, {}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) 1.288076955s ago: executing program 0 (id=3313): pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0x101, 0x0) close(r2) 1.20963476s ago: executing program 0 (id=3327): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4616, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x3, 0xb, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ptype\x00') r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 1.164733942s ago: executing program 0 (id=3317): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x3, @perf_bp={0x0, 0x6}, 0x4, 0x9, 0xfff, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000014"], 0x44}}, 0x0) 1.095311796s ago: executing program 0 (id=3320): r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) lseek(r0, 0x5, 0x4) 852.40879ms ago: executing program 4 (id=3324): r0 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) sendmmsg(r0, &(0x7f0000001280)=[{{&(0x7f0000000180)=@can={0x1d, r2}, 0x80, 0x0}}, {{&(0x7f00000022c0)=@can={0x1d, r2}, 0x80, 0x0}}], 0x2, 0x0) 739.192627ms ago: executing program 4 (id=3326): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000001600), 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @empty, 0x80002}, 0x1c) 723.077598ms ago: executing program 5 (id=3328): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000000c0)='./file0\x00', 0x1200081, &(0x7f0000000480)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c756e695f786c6174653d312c636865636b3d7374726963742c646f733178666c6f7070792c757466383d312c757466383d312c757466383d302c696f636861727365743d6370313235de26302c696f636861727365743d69736f383835392d342c696f636861727365743d64656661756c742c73686f72746e616d653d6d69786564", @ANYRES64], 0xfe, 0x19c, &(0x7f0000000200)="$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") syz_read_part_table(0x635, &(0x7f0000000000)="$eJzs3D9oXeUbB/DvSe899yaFtr8fTl1SncViZ28NSHqpdKp061IVJFQc4lSx5Ea6mCGDg7NLEbLUumjo4KAt4iROoYNacRWkqNQiPXLuOfdPBEFsOwifz5Dzvs953vd5n5yTMSf8py2kmxTjYS+dJMdf/kvGZiYJ6df5Sapue+/czuqp01VVVUWdcz7dPPn5oetJOu2S/nSbqqo2ppOTufrB0o13i1F353Zd9ObWgTq82BzjSPL0wbI/3mZuh1TVvoP1HuXvgX/n2uBWUVwp29lTvzxYST76efXs7pmt966/2IY3ki+T+vm/U78Xk+y3cvHYhc54WD/lN+f3/bW5lLPI7HEvprPvDKMr68PtlcHa3iRwdLjz6WvP/X7sRqoT+arsLExuFLP9ymT08O3X/R+u3/7tS4O1veHlxemNJ97//xdZbid3qypH6pL/y/hPZ/kRVAYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4HG4NriVZDTcTtb2hr02unp298xWmeSFV/tt6Pj8qgPt9WIu3KmvG1lPfvgk3fmkov4xjiyku9LEvl+unhkPOpP6vcVmcGmwtje8v5TcefbB0WGzKjc/OzErtzHdeTfPt6N7VWM82fy7JtsS1eEm7+v78/0XnWR9uD2uf/nHotM0/HExmh5zIcnrvbzSNFPdK9u1f8zaAAAAAAAAAAAAAAAAAAAAgIeyeur0G3fb8fl+kp/eXqjHVa/5L/diqdiX/20vWTyZXO2nGK0kuf3Sb+U3h7a+az8dMEovoyQHP9w81y4p920w/URAkap8nJ3xT/wZAAD//8Wbezo=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 658.062122ms ago: executing program 4 (id=3331): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x121a03, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x7d) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x7b) 612.909914ms ago: executing program 3 (id=3333): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000007c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000800)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="110026bd7000ffdbdf2518000000100030800c000180080001000300000008000300", @ANYRES32=r2], 0x2c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) 605.349035ms ago: executing program 0 (id=3334): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) io_uring_setup(0x68af, &(0x7f0000000480)={0x0, 0x0, 0x1880, 0x1}) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) 560.889918ms ago: executing program 1 (id=3335): symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) setreuid(0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x53b, &(0x7f0000000b80)="$eJzs3cFvHFcZAPBvNl7HSZzaBQ5QqaWiRUkF2Y1r2locSpEQnCohyj0Ye2NZWXste93GVgXrvwAJIUDiBBcuSPwBSCgSF44IKRKcQSoCIUhBggN00OzO2mY9a2/SjTde/37SZN6b2Znvexu/2Zmdp9kAzq3nI+KNiPggTdOXImImX17Kp2h1pux17z94dymbkkjTt/6WRJIv6+4ryedX8s2mIuJrX4n4ZnI07tbO7p3Fer22mderzbWN6tbO7o3VtcWV2kptfX5+7tWF1xZeWbg5lHZejYjXv/Sn73/np19+/ZeffeePt/5y/VtZWtP5+sPteEgTx63sNL18capng81HDPYkytpT7lYuDbbN3mPMBwCA/rJz/I9ExKci4qWYiQvHn84CAAAAZ1D6hen4TxKRFpvssxwAAAA4Q0rtMbBJqZKPBZiOUqlS6Yzh/VhcLtUbW83P3G5sry93xsrORrl0e7Veu5mPFZ6NcpLV59rlg/rLPfX5iHg6Ir43c6ldryw16suj/vIDAAAAzokrPdf//5zpXP8DAAAAY2Z21AkAAAAAj53rfwAAABh/rv8BAABgrH31zTezKe3+/vXy2zvbdxpv31iubd2prG0vVZYamxuVlUZjpf3MvrWT9ldvNDY+F+vbd6vN2lazenVn99ZaY3u9eWs1pk6lQQAAAMART3/y3u+TiGh9/lJ7ykyOOingVEzsl5J8XtD7//BUZ/7eKSUFnIoLA7zmvYvFy50nwNk20bugT18Hxk951AkAI5ecsL7v4J3fdGalIecDAAAM37VPFN//P/l8vuWUH844nRjOr577/+nMqBIBTl37/v+gA3mcLMBYKQ80AhAYZx/2/v/J0vShEgIAAIZuuj0lpUr+9d50lEqVSsTV9s8ClJPbq/XazYh4KiJ+N1O+mNXn2lsmJ14zAAAAAAAAAAAAAAAAAAAAAAAAAAAdaZpECgAAAIy1iNKfk191nuV/bebF6d7vByaTf7d/EngyIt750Vs/uLvYbG7OZcv/vr+8+cN8+cuj+AYDAAAA6NW9Tm/P/zXqbAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYN+8/eHepOw3w8kvDivvXL0bEbFH8iZhqz6eiHBGX/5HExKHtkoi4MIT4rb2I+HhR/CRLaz9kUfxhvAmtvaSVthXGj9n8XSiKf2UI8eE8u5cdf94o6v+leL49L+5/ExH/V39U/Y9/sX/8u9Cn/18dMMYz939e7Rt/L+KZieLjXzd+0if+CwPG/8bXd3f7rUt/HHGt+/nTPuIdjnBQqjbXNqpbO7s3VtcWV2ortfX5+blXF15beGXhZvX2ar2W/1sY47vP/uKD49p/ufDzL8mz6d/+Fwv2V/SZ9N/7dx98tFtpHY1//YWC+L/+Sf6Ko/FLeZxP5+Vs/bVuudUpH/bcz3773HHtXz5of/lh/v+v99tpryMd5dlB/3QAgMdga2f3zmK9Xtsc20J2lf4EpPEohcl4ItIY38K3s8L9Ye0wTdM061MFq+5FxCD7SWLILS0V53NQ6HsEGPWRCQAAGLaDk/5RZwIAAAAAAAAAAAAAAAAAAADn12k8Za035sEjkJNhPEIbAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAo/hcAAP//Yw3Xfw==") 560.732827ms ago: executing program 4 (id=3336): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100}, 0x1c) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0xad7f, 0x0, 0x2, 0x0, 0x43, 0x80000000, 0x80000001}, 0x1c) 534.677409ms ago: executing program 3 (id=3337): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x94) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000040)={0x25, 0x20000b, 0x4, 0x3, 0xb, 0xac, 0x5, 0x42}) 493.037771ms ago: executing program 4 (id=3338): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000900)=0x1, 0x4) 424.955256ms ago: executing program 3 (id=3339): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 420.581386ms ago: executing program 3 (id=3340): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newtaction={0xa0, 0x30, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x6a00}, [{0x8c, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x2, 0x0, 0xfffffffe}, 0x2, r2}}]}, {0x4, 0xa}, {0xc}, {0xc}}}, @m_mpls={0x38, 0x2, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x22}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) 419.481266ms ago: executing program 4 (id=3341): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') exit(0x6) fchdir(r0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 361.360019ms ago: executing program 5 (id=3342): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x26020480) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xffffffffffffffff]}, 0x8, 0x80000) ppoll(&(0x7f0000000180)=[{r0, 0x2005}], 0x1, 0x0, 0x0, 0x0) 314.586682ms ago: executing program 3 (id=3343): mbind(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x1ff, 0x3) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) 269.658714ms ago: executing program 1 (id=3344): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x15, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xecbd5a155ab96c04}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 213.088098ms ago: executing program 3 (id=3345): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xf6272000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000002f80)=""/61) 212.210088ms ago: executing program 1 (id=3355): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3af, 0x4}, 0x100000, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 157.139771ms ago: executing program 5 (id=3346): r0 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x2) fallocate(r0, 0x0, 0x0, 0x1000f4) ioprio_set$pid(0x2, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x800000a1e) 98.427684ms ago: executing program 5 (id=3347): r0 = io_uring_setup(0x68af, &(0x7f0000000340)={0x0, 0x0, 0x1880, 0x3, 0xfffffffd}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x4, &(0x7f0000000500)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x7, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000040)="e02742e8680d85ff9782762f86dd", 0x0, 0x4000002, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 52.705817ms ago: executing program 1 (id=3348): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="680000001000030400"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e003000028008000100100000001c0005800a000400aaaaaaaaaabb00000a000400aaaaaaaaaa000000080003"], 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x64000004) 46.981107ms ago: executing program 1 (id=3349): socket$inet6_tcp(0xa, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x4020940d, &(0x7f0000000440)={0x4, 0x0, 0x4}) 22.947099ms ago: executing program 1 (id=3350): r0 = syz_io_uring_setup(0x48ce, &(0x7f0000000140)={0x0, 0x5e99, 0x3000, 0x3, 0x19a}, &(0x7f0000000040), &(0x7f0000000200)) r1 = epoll_create1(0x0) epoll_pwait(r1, &(0x7f0000000240)=[{}], 0x1, 0x401, 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r0, 0x20}], 0x1, 0x0, 0x0, 0x0) 0s ago: executing program 5 (id=3351): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c00000010000305000000000000ffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b0001006d616373656300001c000280050007000000000005000a0000000000050009000000000008000500", @ANYRES32=r1], 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x0) kernel console output (not intermixed with test programs): device loop2): ext4_release_dquot:7022: comm kworker/u8:5: Failed to release dquot type 0 [ 79.784736][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.801479][ T6229] loop3: detected capacity change from 0 to 128 [ 79.868181][ T6236] netlink: 'syz.1.1204': attribute type 1 has an invalid length. [ 80.200627][ T6270] loop2: detected capacity change from 0 to 512 [ 80.231683][ T6270] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.252814][ T6270] ext4 filesystem being mounted at /268/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.275961][ T6270] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 80.310826][ T6278] loop4: detected capacity change from 0 to 128 [ 80.319600][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.438449][ T6287] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1226'. [ 80.469248][ T6292] program syz.3.1240 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 80.704193][ T6308] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 80.727828][ T6308] vhci_hcd vhci_hcd.2: invalid port number 96 [ 80.734368][ T6308] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 80.980607][ T6326] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1243'. [ 81.139182][ T6332] loop3: detected capacity change from 0 to 764 [ 81.325641][ T6347] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 81.337734][ T6347] vhci_hcd vhci_hcd.2: invalid port number 96 [ 81.344595][ T6347] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 81.461034][ T6360] loop4: detected capacity change from 0 to 1024 [ 81.476666][ T6360] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 81.493755][ T6360] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 81.501982][ T6360] EXT4-fs (loop4): orphan cleanup on readonly fs [ 81.509178][ T6360] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.1260: Failed to acquire dquot type 0 [ 81.531122][ T6360] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.1260: Failed to acquire dquot type 0 [ 81.575835][ T6368] loop2: detected capacity change from 0 to 128 [ 81.583972][ T6360] EXT4-fs error (device loop4): ext4_free_blocks:6728: comm syz.4.1260: Freeing blocks not in datazone - block = 0, count = 4096 [ 81.629848][ T6360] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.1260: Failed to acquire dquot type 0 [ 81.659060][ T6360] EXT4-fs (loop4): 1 orphan inode deleted [ 81.672214][ T6360] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 81.738703][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.010746][ T6400] loop0: detected capacity change from 0 to 1024 [ 82.027594][ T6400] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 82.051461][ T6400] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 82.071460][ T6400] EXT4-fs (loop0): orphan cleanup on readonly fs [ 82.097002][ T6400] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.1278: Failed to acquire dquot type 0 [ 82.121519][ T6400] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.1278: Failed to acquire dquot type 0 [ 82.154984][ T6400] EXT4-fs error (device loop0): ext4_free_blocks:6728: comm syz.0.1278: Freeing blocks not in datazone - block = 0, count = 4096 [ 82.173652][ T6400] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.1278: Failed to acquire dquot type 0 [ 82.186506][ T6400] EXT4-fs (loop0): 1 orphan inode deleted [ 82.246844][ T6400] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 82.358667][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.584919][ T6439] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1295'. [ 82.640530][ T6443] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 82.660617][ T6443] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 82.668840][ T6443] EXT4-fs (loop3): orphan cleanup on readonly fs [ 82.675591][ T6428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.675683][ T6428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.698845][ T6443] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.1297: Failed to acquire dquot type 0 [ 82.712844][ T6443] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.1297: Failed to acquire dquot type 0 [ 82.723769][ T6447] program syz.2.1298 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 82.734996][ T6443] EXT4-fs error (device loop3): ext4_free_blocks:6728: comm syz.3.1297: Freeing blocks not in datazone - block = 0, count = 4096 [ 82.764760][ T6443] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.1297: Failed to acquire dquot type 0 [ 82.791073][ T6443] EXT4-fs (loop3): 1 orphan inode deleted [ 82.804129][ T6443] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 82.877531][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.904924][ T6444] set_capacity_and_notify: 2 callbacks suppressed [ 82.904945][ T6444] loop0: detected capacity change from 0 to 32768 [ 83.021558][ T6465] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1308'. [ 83.110767][ T6477] loop3: detected capacity change from 0 to 512 [ 83.153699][ T6477] EXT4-fs (loop3): 1 truncate cleaned up [ 83.161520][ T6477] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.176287][ T6477] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.1312: invalid indirect mapped block 234881024 (level 0) [ 83.192868][ T6477] EXT4-fs (loop3): Remounting filesystem read-only [ 83.230682][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.319629][ T6501] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1321'. [ 83.540761][ T6496] loop3: detected capacity change from 0 to 32768 [ 83.629155][ T6528] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1334'. [ 83.658612][ T6515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.675498][ T6515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.079956][ T29] kauditd_printk_skb: 58 callbacks suppressed [ 84.079985][ T29] audit: type=1400 audit(1769730345.307:487): avc: denied { name_connect } for pid=6571 comm="syz.3.1355" dest=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 84.226220][ T6583] netlink: 'syz.2.1360': attribute type 1 has an invalid length. [ 84.234179][ T6583] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1360'. [ 84.657328][ T6620] netlink: 'syz.1.1374': attribute type 1 has an invalid length. [ 84.665843][ T6620] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1374'. [ 84.690432][ T6610] loop4: detected capacity change from 0 to 32768 [ 84.774433][ T6614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.783146][ T6614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.905439][ T6646] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1387'. [ 84.941722][ T6649] netlink: 'syz.0.1391': attribute type 1 has an invalid length. [ 84.949567][ T6649] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1391'. [ 85.001720][ T29] audit: type=1400 audit(1769730346.227:488): avc: denied { setopt } for pid=6656 comm="syz.4.1393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 85.073599][ T6667] loop4: detected capacity change from 0 to 512 [ 85.081169][ T6667] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 85.103107][ T6667] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 85.115136][ T6667] EXT4-fs (loop4): group descriptors corrupted! [ 85.329362][ T6698] sctp: [Deprecated]: syz.2.1413 (pid 6698) Use of int in max_burst socket option deprecated. [ 85.329362][ T6698] Use struct sctp_assoc_value instead [ 85.348350][ T6695] GUP no longer grows the stack in syz.0.1411 (6695): 200000004000-200000005000 (200000001000) [ 85.358865][ T6695] CPU: 1 UID: 0 PID: 6695 Comm: syz.0.1411 Not tainted syzkaller #0 PREEMPT(voluntary) [ 85.358963][ T6695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 85.358980][ T6695] Call Trace: [ 85.359021][ T6695] [ 85.359033][ T6695] __dump_stack+0x1d/0x30 [ 85.359138][ T6695] dump_stack_lvl+0x95/0xd0 [ 85.359191][ T6695] dump_stack+0x15/0x1b [ 85.359214][ T6695] __get_user_pages+0x195b/0x1ea0 [ 85.359253][ T6695] ? __rcu_read_unlock+0x4e/0x70 [ 85.359300][ T6695] ? try_charge_memcg+0x215/0xa10 [ 85.359323][ T6695] __gup_longterm_locked+0x8d7/0xe30 [ 85.359346][ T6695] ? __rcu_read_unlock+0x33/0x70 [ 85.359385][ T6695] ? try_get_folio+0x369/0x3b0 [ 85.359410][ T6695] ? try_grab_folio_fast+0xdc/0x370 [ 85.359436][ T6695] gup_fast_fallback+0x1f3/0x13c0 [ 85.359466][ T6695] get_user_pages_fast+0x5f/0x90 [ 85.359525][ T6695] __iov_iter_get_pages_alloc+0x24e/0x6f0 [ 85.359553][ T6695] ? __rcu_read_unlock+0x4e/0x70 [ 85.359588][ T6695] iov_iter_get_pages2+0x5e/0xa0 [ 85.359613][ T6695] __se_sys_vmsplice+0x538/0xf90 [ 85.359635][ T6695] ? ttwu_do_activate+0x1cf/0x210 [ 85.359744][ T6695] __x64_sys_vmsplice+0x55/0x70 [ 85.359767][ T6695] x64_sys_call+0x2344/0x3000 [ 85.359795][ T6695] do_syscall_64+0xc0/0x2a0 [ 85.359832][ T6695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.359918][ T6695] RIP: 0033:0x7fd06f92aeb9 [ 85.359935][ T6695] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.359954][ T6695] RSP: 002b:00007fd06e387028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 85.359976][ T6695] RAX: ffffffffffffffda RBX: 00007fd06fba5fa0 RCX: 00007fd06f92aeb9 [ 85.360080][ T6695] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000004 [ 85.360094][ T6695] RBP: 00007fd06f998c1f R08: 0000000000000000 R09: 0000000000000000 [ 85.360108][ T6695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.360122][ T6695] R13: 00007fd06fba6038 R14: 00007fd06fba5fa0 R15: 00007ffc53b86f28 [ 85.360143][ T6695] [ 85.590168][ T29] audit: type=1326 audit(1769730346.807:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6705 comm="syz.4.1416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f183307aeb9 code=0x7ffc0000 [ 85.596609][ T6708] __nla_validate_parse: 5 callbacks suppressed [ 85.596684][ T6708] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1417'. [ 85.615740][ T29] audit: type=1326 audit(1769730346.807:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6705 comm="syz.4.1416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f183307aeb9 code=0x7ffc0000 [ 85.653590][ T29] audit: type=1326 audit(1769730346.817:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6705 comm="syz.4.1416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7f183307aeb9 code=0x7ffc0000 [ 85.676990][ T29] audit: type=1326 audit(1769730346.817:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6705 comm="syz.4.1416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f183307aeb9 code=0x7ffc0000 [ 85.701586][ T29] audit: type=1326 audit(1769730346.817:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6705 comm="syz.4.1416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f183307aeb9 code=0x7ffc0000 [ 85.726337][ T29] audit: type=1326 audit(1769730346.817:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6705 comm="syz.4.1416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f183307aeb9 code=0x7ffc0000 [ 85.749661][ T29] audit: type=1326 audit(1769730346.817:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6705 comm="syz.4.1416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f183307aeb9 code=0x7ffc0000 [ 85.774326][ T29] audit: type=1326 audit(1769730346.817:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6705 comm="syz.4.1416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f183307aeb9 code=0x7ffc0000 [ 86.380472][ T6769] netlink: 'syz.0.1447': attribute type 39 has an invalid length. [ 86.718045][ T6791] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1455'. [ 86.760695][ T6791] vlan3: entered promiscuous mode [ 86.766440][ T6791] bond0: entered promiscuous mode [ 86.771857][ T6791] bond_slave_0: entered promiscuous mode [ 86.778043][ T6791] bond_slave_1: entered promiscuous mode [ 86.807765][ T6798] netlink: 'syz.3.1461': attribute type 39 has an invalid length. [ 87.008884][ T6816] loop2: detected capacity change from 0 to 128 [ 87.138871][ T6828] dvmrp6: entered allmulticast mode [ 87.363855][ T6839] loop3: detected capacity change from 0 to 512 [ 87.392653][ T6839] EXT4-fs (loop3): 1 truncate cleaned up [ 87.399344][ T6839] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.418147][ T6839] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1478: bg 0: block 465: padding at end of block bitmap is not set [ 87.432882][ T6839] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 87.442280][ T6839] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.1478: invalid indirect mapped block 234881024 (level 0) [ 87.476783][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.578378][ T6853] netlink: 136 bytes leftover after parsing attributes in process `syz.3.1485'. [ 87.588654][ T6853] net_ratelimit: 44 callbacks suppressed [ 87.588681][ T6853] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 87.687616][ T6865] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1492'. [ 87.701429][ T6865] vlan2: entered promiscuous mode [ 87.708082][ T6865] bond0: entered promiscuous mode [ 87.713199][ T6865] bond_slave_0: entered promiscuous mode [ 87.719753][ T6865] bond_slave_1: entered promiscuous mode [ 87.765155][ T6868] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1494'. [ 87.834016][ T6875] netlink: 774 bytes leftover after parsing attributes in process `syz.4.1497'. [ 88.136961][ T6907] dvmrp6: entered allmulticast mode [ 88.176142][ T6911] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1510'. [ 88.927534][ T6941] loop3: detected capacity change from 0 to 128 [ 89.147282][ T6966] loop0: detected capacity change from 0 to 512 [ 89.156110][ T6966] EXT4-fs (loop0): 1 truncate cleaned up [ 89.162254][ T6966] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.181260][ T6966] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1537: bg 0: block 465: padding at end of block bitmap is not set [ 89.196729][ T6966] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 89.206997][ T6966] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.1537: invalid indirect mapped block 234881024 (level 0) [ 89.247861][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.343554][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 89.343573][ T29] audit: type=1400 audit(1769730350.577:535): avc: denied { create } for pid=6979 comm="syz.4.1545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 89.411246][ T29] audit: type=1400 audit(1769730350.607:536): avc: denied { connect } for pid=6979 comm="syz.4.1545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 89.894337][ T6997] program syz.2.1562 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 89.969364][ T29] audit: type=1400 audit(1769730351.197:537): avc: denied { read } for pid=7002 comm="syz.4.1554" path="socket:[16452]" dev="sockfs" ino=16452 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 90.278433][ T7028] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1567'. [ 90.288196][ T7028] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1567'. [ 90.356622][ T7034] sd 0:0:1:0: device reset [ 90.428355][ T29] audit: type=1326 audit(1769730351.657:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7041 comm="syz.2.1573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f444f84aeb9 code=0x7ffc0000 [ 90.454294][ T29] audit: type=1326 audit(1769730351.657:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7041 comm="syz.2.1573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f444f84aeb9 code=0x7ffc0000 [ 90.482176][ T29] audit: type=1326 audit(1769730351.657:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7041 comm="syz.2.1573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f444f84aeb9 code=0x7ffc0000 [ 90.508851][ T29] audit: type=1400 audit(1769730351.707:541): avc: denied { getopt } for pid=7043 comm="syz.0.1575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 90.563440][ T29] audit: type=1326 audit(1769730351.757:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7041 comm="syz.2.1573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f444f84aeb9 code=0x7ffc0000 [ 90.587716][ T29] audit: type=1326 audit(1769730351.757:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7041 comm="syz.2.1573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f444f84aeb9 code=0x7ffc0000 [ 90.664406][ T7053] program syz.4.1579 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 90.676389][ T29] audit: type=1400 audit(1769730351.797:544): avc: denied { create } for pid=7048 comm="syz.4.1577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 90.825053][ T7061] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1583'. [ 90.859817][ T7061] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.046782][ T7085] program syz.2.1595 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 91.066062][ T7087] bpf: Bad value for 'uid' [ 91.220953][ T7102] program syz.1.1602 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 91.347934][ T7113] bpf: Bad value for 'uid' [ 91.407874][ T7118] program syz.1.1609 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 91.505962][ T7127] program syz.0.1614 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 91.767974][ T7134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.776718][ T7134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.036555][ T7158] program syz.4.1625 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 92.445997][ T7183] netlink: 'syz.4.1639': attribute type 10 has an invalid length. [ 92.501949][ T7183] team0 (unregistering): Port device C removed [ 92.539585][ T7183] team0 (unregistering): Port device team_slave_1 removed [ 92.611394][ T7195] loop0: detected capacity change from 0 to 128 [ 92.965632][ T7232] loop3: detected capacity change from 0 to 512 [ 93.045077][ T7232] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.094248][ T7232] ext4 filesystem being mounted at /323/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.147071][ T7232] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 93.197299][ T7252] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1671'. [ 93.207796][ T7232] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 16 with error 28 [ 93.221300][ T7232] EXT4-fs (loop3): This should not happen!! Data will be lost [ 93.221300][ T7232] [ 93.233445][ T7232] EXT4-fs (loop3): Total free blocks count 0 [ 93.239672][ T7232] EXT4-fs (loop3): Free/Dirty block details [ 93.245714][ T7232] EXT4-fs (loop3): free_blocks=65280 [ 93.251168][ T7232] EXT4-fs (loop3): dirty_blocks=16 [ 93.256597][ T7232] EXT4-fs (loop3): Block reservation details [ 93.263360][ T7232] EXT4-fs (loop3): i_reserved_data_blocks=16 [ 93.398978][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.444319][ T7271] loop3: detected capacity change from 0 to 128 [ 93.828232][ T7291] loop4: detected capacity change from 0 to 128 [ 93.885504][ T7297] loop4: detected capacity change from 0 to 512 [ 93.905099][ T7301] netlink: 220 bytes leftover after parsing attributes in process `syz.3.1691'. [ 93.910351][ T7300] netlink: 'syz.1.1692': attribute type 10 has an invalid length. [ 93.951309][ T7297] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.966586][ T7297] ext4 filesystem being mounted at /340/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.990181][ T7297] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 94.001478][ T7300] team0 (unregistering): Port device C removed [ 94.012468][ T7297] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 16 with error 28 [ 94.025476][ T7297] EXT4-fs (loop4): This should not happen!! Data will be lost [ 94.025476][ T7297] [ 94.037196][ T7297] EXT4-fs (loop4): Total free blocks count 0 [ 94.043412][ T7297] EXT4-fs (loop4): Free/Dirty block details [ 94.049371][ T7297] EXT4-fs (loop4): free_blocks=65280 [ 94.054737][ T7297] EXT4-fs (loop4): dirty_blocks=16 [ 94.059910][ T7297] EXT4-fs (loop4): Block reservation details [ 94.067126][ T7297] EXT4-fs (loop4): i_reserved_data_blocks=16 [ 94.079557][ T7300] team0 (unregistering): Port device team_slave_1 removed [ 94.113610][ T7307] loop3: detected capacity change from 0 to 512 [ 94.174753][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.352544][ T7309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.367570][ T7309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.386728][ T7326] loop2: detected capacity change from 0 to 128 [ 94.397769][ T7326] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 94.436199][ T7326] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 94.459808][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 94.459825][ T29] audit: type=1400 audit(1769730355.687:563): avc: denied { write } for pid=7329 comm="syz.0.1705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 94.525621][ T3350] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 94.560954][ T7332] loop4: detected capacity change from 0 to 1024 [ 94.580039][ T7338] netlink: 'syz.0.1709': attribute type 10 has an invalid length. [ 94.600095][ T7332] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 94.640366][ T7332] ext4 filesystem being mounted at /347/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.649340][ T7338] team0 (unregistering): Port device team_slave_0 removed [ 94.704532][ T7338] team0 (unregistering): Port device team_slave_1 removed [ 94.713583][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 94.779233][ T7354] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1715'. [ 94.930680][ T7373] loop0: detected capacity change from 0 to 1024 [ 94.996508][ T7373] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 95.022718][ T7373] ext4 filesystem being mounted at /347/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.088263][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 95.171764][ T7379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.193766][ T7379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.269409][ T29] audit: type=1400 audit(1769730356.497:564): avc: denied { create } for pid=7405 comm="syz.0.1751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 95.307821][ T29] audit: type=1400 audit(1769730356.497:565): avc: denied { write } for pid=7405 comm="syz.0.1751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 95.388101][ T7414] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1744'. [ 95.436311][ T7418] loop3: detected capacity change from 0 to 1024 [ 95.464335][ T7418] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 95.485099][ T7418] ext4 filesystem being mounted at /342/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.513353][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 95.677899][ T29] audit: type=1400 audit(1769730356.907:566): avc: denied { connect } for pid=7443 comm="syz.0.1758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 95.699764][ T29] audit: type=1400 audit(1769730356.927:567): avc: denied { write } for pid=7443 comm="syz.0.1758" path="socket:[17642]" dev="sockfs" ino=17642 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 95.939599][ T7478] loop0: detected capacity change from 0 to 512 [ 95.966503][ T7478] Quota error (device loop0): v2_read_file_info: Free block number 1 out of range (1, 6). [ 95.985874][ T7478] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 96.006673][ T7478] EXT4-fs (loop0): mount failed [ 96.178876][ T29] audit: type=1326 audit(1769730357.407:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7475 comm="syz.2.1775" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f444f84aeb9 code=0x0 [ 96.227492][ T7498] bridge_slave_1: left allmulticast mode [ 96.234485][ T7498] bridge_slave_1: left promiscuous mode [ 96.240349][ T7498] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.252080][ T7498] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 96.339167][ T7506] loop0: detected capacity change from 0 to 1024 [ 96.385395][ T7506] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 96.398534][ T7506] ext4 filesystem being mounted at /369/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.423007][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 96.603771][ T7532] bridge_slave_1: left allmulticast mode [ 96.610159][ T7532] bridge_slave_1: left promiscuous mode [ 96.617522][ T7532] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.687784][ T7532] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 96.756604][ T7538] loop3: detected capacity change from 0 to 128 [ 96.855278][ T7549] loop3: detected capacity change from 0 to 1024 [ 96.872040][ T7554] tipc: Started in network mode [ 96.877154][ T7554] tipc: Node identity ac14140f, cluster identity 4711 [ 96.909882][ T7549] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 96.917831][ T7554] tipc: New replicast peer: 255.255.255.255 [ 96.928871][ T7554] tipc: Enabled bearer , priority 10 [ 96.948485][ T7549] ext4 filesystem being mounted at /351/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.949234][ T7559] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1811'. [ 96.969148][ T7559] tipc: Disabling bearer [ 97.023277][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 97.084063][ T7577] bridge_slave_1: left allmulticast mode [ 97.089892][ T7577] bridge_slave_1: left promiscuous mode [ 97.095982][ T7577] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.107076][ T7577] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 97.161701][ T7581] netlink: 'syz.2.1823': attribute type 12 has an invalid length. [ 97.245808][ T7591] tipc: Started in network mode [ 97.250770][ T7591] tipc: Node identity ac14140f, cluster identity 4711 [ 97.262251][ T7595] loop4: detected capacity change from 0 to 1024 [ 97.283354][ T7591] tipc: New replicast peer: 255.255.255.255 [ 97.289794][ T7591] tipc: Enabled bearer , priority 10 [ 97.297386][ T7597] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1826'. [ 97.306593][ T7597] tipc: Disabling bearer [ 97.313009][ T7595] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 97.331305][ T7595] ext4 filesystem being mounted at /360/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.360468][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 97.529499][ T7616] EXT4-fs: Ignoring removed mblk_io_submit option [ 97.562139][ T7616] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 97.595145][ T7616] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.701423][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.732391][ T7631] tipc: New replicast peer: 255.255.255.255 [ 97.739477][ T7631] tipc: Enabled bearer , priority 10 [ 97.766679][ T7631] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1846'. [ 97.775811][ T7631] tipc: Disabling bearer [ 97.958820][ T29] audit: type=1400 audit(1769730359.187:569): avc: denied { watch_reads } for pid=7648 comm="syz.3.1852" path="/363/file0" dev="tmpfs" ino=1900 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 98.086318][ T29] audit: type=1400 audit(1769730359.317:570): avc: denied { override_creds } for pid=7656 comm="syz.4.1857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 98.177552][ T7665] netlink: 'syz.4.1862': attribute type 12 has an invalid length. [ 98.239881][ T7668] FAT-fs (loop2): error, clusters badly computed (1 != 0) [ 98.247216][ T7668] FAT-fs (loop2): Filesystem has been set read-only [ 98.613493][ T29] audit: type=1400 audit(1769730359.827:571): avc: denied { ioctl } for pid=7706 comm="syz.0.1880" path="/dev/ptp0" dev="devtmpfs" ino=247 ioctlcmd=0x3d0f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 98.763166][ T7724] EXT4-fs: Ignoring removed bh option [ 98.786573][ T7724] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.829792][ T7724] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 98.875976][ T7738] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1902'. [ 98.903607][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.038456][ T7751] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 99.069305][ T7755] EXT4-fs: Ignoring removed mblk_io_submit option [ 99.098923][ T7755] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 99.116327][ T7751] ext4 filesystem being mounted at /396/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 99.143928][ T7755] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.204462][ T3317] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 99.233620][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.268034][ T7769] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 99.287214][ T7769] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 99.294189][ T7769] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 99.300995][ T7769] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 99.308085][ T7769] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 99.314959][ T7769] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 99.321807][ T7769] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 99.404743][ T7776] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1909'. [ 99.449147][ T7780] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1911'. [ 99.523337][ T7780] bond1: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 99.548553][ T7780] bond1 (unregistering): Released all slaves [ 99.933431][ T29] audit: type=1400 audit(1769730361.157:572): avc: denied { map } for pid=7807 comm="syz.2.1923" path="socket:[18653]" dev="sockfs" ino=18653 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 99.983631][ T29] audit: type=1400 audit(1769730361.187:573): avc: denied { setopt } for pid=7807 comm="syz.2.1923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 100.074337][ T29] audit: type=1400 audit(1769730361.297:574): avc: denied { name_connect } for pid=7816 comm="syz.4.1929" dest=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 100.143413][ T29] audit: type=1400 audit(1769730361.327:575): avc: denied { listen } for pid=7824 comm="syz.1.1932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 100.436378][ T7867] set_capacity_and_notify: 5 callbacks suppressed [ 100.436401][ T7867] loop2: detected capacity change from 0 to 1024 [ 100.473323][ T7867] EXT4-fs: Ignoring removed bh option [ 100.519764][ T7876] loop4: detected capacity change from 0 to 512 [ 100.530549][ T7867] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.557935][ T7867] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.1946: Allocating blocks 497-513 which overlap fs metadata [ 100.572401][ T7876] EXT4-fs: Ignoring removed nobh option [ 100.629921][ T7867] EXT4-fs (loop2): Remounting filesystem read-only [ 100.653713][ T7876] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.672474][ T7876] ext4 filesystem being mounted at /387/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 100.694789][ T29] audit: type=1400 audit(1769730361.917:576): avc: denied { create } for pid=7875 comm="syz.4.1951" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 100.741724][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.783933][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.085237][ T7915] netlink: 182 bytes leftover after parsing attributes in process `syz.4.1971'. [ 101.156592][ T7922] sctp: [Deprecated]: syz.4.1974 (pid 7922) Use of int in max_burst socket option deprecated. [ 101.156592][ T7922] Use struct sctp_assoc_value instead [ 101.446714][ T7938] program syz.1.1991 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 101.549242][ T7949] loop0: detected capacity change from 0 to 512 [ 101.556122][ T7949] EXT4-fs: Ignoring removed nobh option [ 101.594221][ T7949] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.607149][ T7949] ext4 filesystem being mounted at /413/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 101.633727][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.686574][ T7959] netlink: 182 bytes leftover after parsing attributes in process `syz.0.1986'. [ 101.712799][ T7963] loop4: detected capacity change from 0 to 512 [ 101.723436][ T7963] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 101.737434][ T7963] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 101.747370][ T7963] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 101.768999][ T7967] program syz.0.1994 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 101.821362][ T7969] net_ratelimit: 3327 callbacks suppressed [ 101.821381][ T7969] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 101.834242][ T7969] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 101.841043][ T7969] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 101.847891][ T7969] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 101.854662][ T7969] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 101.861404][ T7969] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 101.868199][ T7969] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 101.875035][ T7969] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 101.881826][ T7969] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 101.888596][ T7969] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 102.160807][ T7994] loop2: detected capacity change from 0 to 512 [ 102.168265][ T7990] netlink: 182 bytes leftover after parsing attributes in process `syz.3.2005'. [ 102.182764][ T7994] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 102.193706][ T7994] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 102.422118][ T29] audit: type=1400 audit(1769730363.647:577): avc: denied { create } for pid=8015 comm="syz.1.2018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 102.449753][ T29] audit: type=1400 audit(1769730363.677:578): avc: denied { bind } for pid=8015 comm="syz.1.2018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 102.472034][ T29] audit: type=1400 audit(1769730363.677:579): avc: denied { listen } for pid=8015 comm="syz.1.2018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 102.482065][ T8019] loop3: detected capacity change from 0 to 512 [ 102.491453][ T29] audit: type=1400 audit(1769730363.677:580): avc: denied { accept } for pid=8015 comm="syz.1.2018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 102.518744][ T8019] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 102.529394][ T8019] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 103.344125][ T8045] af_packet: tpacket_rcv: packet too big, clamped from 28 to 4294967272. macoff=96 [ 103.511740][ T8066] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2043'. [ 103.543721][ T8070] SELinux: security policydb version 18 (MLS) not backwards compatible [ 103.553765][ T29] audit: type=1400 audit(1769730364.777:581): avc: denied { load_policy } for pid=8068 comm="syz.2.2044" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 103.583496][ T8070] SELinux: failed to load policy [ 103.799106][ T8094] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2057'. [ 103.809153][ T8094] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2057'. [ 103.873460][ T8102] SELinux: security policydb version 18 (MLS) not backwards compatible [ 103.892830][ T8102] SELinux: failed to load policy [ 104.074576][ T8130] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2072'. [ 104.084229][ T8130] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2072'. [ 104.161498][ T8143] SELinux: security policydb version 18 (MLS) not backwards compatible [ 104.173010][ T8143] SELinux: failed to load policy [ 104.212507][ T8147] wireguard: wg1: Could not create IPv4 socket [ 104.275966][ T8157] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 104.284481][ T8157] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 104.370297][ T8165] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2088'. [ 104.562876][ T8183] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2095'. [ 105.235717][ T8225] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2116'. [ 105.416117][ T8245] loop2: detected capacity change from 0 to 512 [ 105.435696][ T8245] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.452180][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 105.452197][ T29] audit: type=1400 audit(1769730366.677:584): avc: denied { remount } for pid=8244 comm="syz.2.2126" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 105.459170][ T8245] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 105.504820][ T8245] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 105.529994][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.560985][ T8256] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2129'. [ 105.753781][ T29] audit: type=1400 audit(1769730366.977:585): avc: denied { accept } for pid=8266 comm="syz.2.2133" path="socket:[19993]" dev="sockfs" ino=19993 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 105.967768][ T8291] loop4: detected capacity change from 0 to 512 [ 105.994924][ T8291] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.063025][ T8291] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 106.097987][ T8311] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 106.155065][ T8321] netlink: 'syz.3.2157': attribute type 8 has an invalid length. [ 106.163036][ T8321] netem: change failed [ 106.177811][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.392536][ T29] audit: type=1400 audit(1769730367.617:586): avc: denied { remount } for pid=8346 comm="syz.1.2170" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 106.675785][ T8381] block device autoloading is deprecated and will be removed. [ 106.698078][ T8385] netlink: 'syz.4.2188': attribute type 8 has an invalid length. [ 106.780829][ T8395] loop3: detected capacity change from 0 to 128 [ 106.809412][ T8395] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 106.886900][ T8395] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 107.076837][ T8430] loop2: detected capacity change from 0 to 1024 [ 107.115529][ T8430] EXT4-fs: inline encryption not supported [ 107.142776][ T8430] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.174462][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.565456][ T29] audit: type=1400 audit(1769730368.797:587): avc: denied { read } for pid=8466 comm="syz.0.2234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 107.631607][ T8469] net_ratelimit: 6650 callbacks suppressed [ 107.631635][ T8469] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 107.754906][ T29] audit: type=1326 audit(1769730368.987:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8481 comm="syz.0.2230" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd06f92aeb9 code=0x0 [ 107.818697][ T8485] loop2: detected capacity change from 0 to 128 [ 107.835672][ T8487] loop4: detected capacity change from 0 to 128 [ 107.853129][ T8487] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 107.881340][ T29] audit: type=1400 audit(1769730369.097:589): avc: denied { setattr } for pid=8491 comm="syz.1.2235" name="vcsa" dev="devtmpfs" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 107.916140][ T8487] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 107.964426][ T29] audit: type=1400 audit(1769730369.197:590): avc: denied { write } for pid=8494 comm="syz.2.2236" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 107.989193][ T8495] __nla_validate_parse: 1 callbacks suppressed [ 107.989212][ T8495] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2236'. [ 108.361342][ T29] audit: type=1400 audit(1769730369.587:591): avc: denied { mounton } for pid=8522 comm="syz.4.2249" path=2F3434332FE91F7189591E9233614B dev="tmpfs" ino=2296 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 108.517314][ T8535] loop1: detected capacity change from 0 to 8192 [ 108.528216][ T8535] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 109.070542][ T8569] loop1: detected capacity change from 0 to 512 [ 109.244934][ T8587] loop0: detected capacity change from 0 to 512 [ 109.262436][ T8582] wireguard0: entered promiscuous mode [ 109.268167][ T8582] wireguard0: entered allmulticast mode [ 109.314166][ T8587] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.339160][ T8587] ext4 filesystem being mounted at /471/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.368469][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.511996][ T8607] loop0: detected capacity change from 0 to 8192 [ 109.532497][ T8618] loop4: detected capacity change from 0 to 128 [ 109.554150][ T8607] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 109.565300][ T29] audit: type=1400 audit(1769730370.797:592): avc: denied { remount } for pid=8617 comm="syz.4.2290" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 109.692020][ T29] audit: type=1400 audit(1769730370.917:593): avc: denied { mount } for pid=8626 comm="syz.4.2296" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 110.034023][ T8644] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 110.408258][ T8658] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 110.499934][ T8669] wireguard0: entered promiscuous mode [ 110.505541][ T8669] wireguard0: entered allmulticast mode [ 110.572175][ T8677] EXT4-fs: inline encryption not supported [ 110.608415][ T8677] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.688570][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.071312][ T8711] set_capacity_and_notify: 3 callbacks suppressed [ 111.071334][ T8711] loop3: detected capacity change from 0 to 128 [ 111.124941][ T8711] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 111.164626][ T8711] ext4 filesystem being mounted at /457/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 111.225183][ T8711] EXT4-fs error (device loop3): htree_dirblock_to_tree:1080: inode #2: block 4: comm syz.3.2329: bad entry in directory: directory entry overrun - offset=1012, inode=128, rec_len=65544, size=1024 fake=0 [ 111.269482][ T8720] wireguard0: entered promiscuous mode [ 111.275095][ T8720] wireguard0: entered allmulticast mode [ 111.301745][ T3314] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 111.339272][ T8725] Process accounting resumed [ 111.409511][ T8736] Process accounting resumed [ 111.456112][ T8744] ÿÿÿÿ: renamed from bridge_slave_0 (while UP) [ 111.496057][ T8748] loop3: detected capacity change from 0 to 512 [ 111.510897][ T8748] EXT4-fs: Ignoring removed nobh option [ 111.529184][ T8748] ------------[ cut here ]------------ [ 111.535495][ T8748] EA inode 11 i_nlink=1026 [ 111.535524][ T8748] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#1: syz.3.2346/8748 [ 111.550771][ T8748] Modules linked in: [ 111.554808][ T8748] CPU: 1 UID: 0 PID: 8748 Comm: syz.3.2346 Not tainted syzkaller #0 PREEMPT(voluntary) [ 111.565474][ T8748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 111.575603][ T8748] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 111.582269][ T8748] Code: c4 e7 9a ff 4c 8d 2d 5d 22 3e 05 49 8d 7e 40 e8 d4 d1 b6 ff 49 8b 6e 40 4c 89 e7 e8 08 cd b6 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 1f d3 d0 03 66 66 66 66 66 66 2e [ 111.603083][ T8748] RSP: 0000:ffffc9001147b5a8 EFLAGS: 00010246 [ 111.609236][ T8748] RAX: ffff88811a9d1b10 RBX: ffff888107b1c1a8 RCX: ffffffff81be1808 [ 111.617418][ T8748] RDX: 0000000000000402 RSI: 000000000000000b RDI: ffffffff86fc3a50 [ 111.625516][ T8748] RBP: 000000000000000b R08: 0001888107b1c15b R09: 0000000000000000 [ 111.634193][ T8748] R10: ffffc9001147b4d8 R11: 0001c9001147b4d8 R12: ffff888107b1c158 [ 111.642174][ T8748] R13: ffffffff86fc3a50 R14: ffff888107b1c110 R15: 0000000000000001 [ 111.650203][ T8748] FS: 00007f6f876a76c0(0000) GS:ffff8882aec57000(0000) knlGS:0000000000000000 [ 111.659779][ T8748] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 111.667200][ T8748] CR2: 0000001b33e22ff8 CR3: 000000012e6bc000 CR4: 00000000003506f0 [ 111.675341][ T8748] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000200000000300 [ 111.683647][ T8748] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 111.691723][ T8748] Call Trace: [ 111.695819][ T8748] [ 111.698794][ T8748] ext4_xattr_set_entry+0x77c/0x1010 [ 111.704249][ T8748] ext4_xattr_ibody_set+0x184/0x3c0 [ 111.709603][ T8748] ext4_expand_extra_isize_ea+0xd7b/0x11a0 [ 111.715644][ T8748] __ext4_expand_extra_isize+0x246/0x280 [ 111.721669][ T8748] __ext4_mark_inode_dirty+0x29d/0x3f0 [ 111.728282][ T8748] ext4_evict_inode+0x7c3/0xd40 [ 111.733307][ T8748] ? __pfx_ext4_evict_inode+0x10/0x10 [ 111.738834][ T8748] evict+0x2af/0x510 [ 111.742872][ T8748] ? __dquot_initialize+0x146/0x7c0 [ 111.748462][ T8748] iput+0x4b9/0x650 [ 111.752498][ T8748] ext4_process_orphan+0x1a9/0x1c0 [ 111.758294][ T8748] ext4_orphan_cleanup+0x6a8/0xa00 [ 111.763560][ T8748] ext4_fill_super+0x3476/0x3800 [ 111.768577][ T8748] ? set_blocksize+0x1a3/0x310 [ 111.773433][ T8748] ? setup_bdev_super+0x30e/0x370 [ 111.778730][ T8748] ? __pfx_ext4_fill_super+0x10/0x10 [ 111.784795][ T8748] get_tree_bdev_flags+0x291/0x300 [ 111.790008][ T8748] ? __pfx_ext4_fill_super+0x10/0x10 [ 111.795392][ T8748] get_tree_bdev+0x1f/0x30 [ 111.799858][ T8748] ext4_get_tree+0x1c/0x30 [ 111.804518][ T8748] vfs_get_tree+0x57/0x1d0 [ 111.809147][ T8748] do_new_mount+0x288/0x700 [ 111.814419][ T8748] path_mount+0x4d0/0xbc0 [ 111.818910][ T8748] ? user_path_at+0xbf/0x130 [ 111.823579][ T8748] __se_sys_mount+0x28c/0x2e0 [ 111.828455][ T8748] __x64_sys_mount+0x67/0x80 [ 111.833175][ T8748] x64_sys_call+0x2cca/0x3000 [ 111.837937][ T8748] do_syscall_64+0xc0/0x2a0 [ 111.842494][ T8748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.848512][ T8748] RIP: 0033:0x7f6f88c4c14a [ 111.853609][ T8748] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.873341][ T8748] RSP: 002b:00007f6f876a6e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 111.881401][ T8753] loop0: detected capacity change from 0 to 512 [ 111.881793][ T8748] RAX: ffffffffffffffda RBX: 00007f6f876a6ee0 RCX: 00007f6f88c4c14a [ 111.896781][ T8748] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 00007f6f876a6ea0 [ 111.904914][ T8748] RBP: 0000200000000180 R08: 00007f6f876a6ee0 R09: 0000000000800718 [ 111.913749][ T8748] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000140 [ 111.921822][ T8748] R13: 00007f6f876a6ea0 R14: 00000000000004a3 R15: 0000200000000280 [ 111.930170][ T8748] [ 111.933299][ T8748] ---[ end trace 0000000000000000 ]--- [ 111.934845][ T8753] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.2348: invalid indirect mapped block 4294967295 (level 1) [ 111.943893][ T8748] EXT4-fs (loop3): 1 orphan inode deleted [ 111.953488][ T8753] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.2348: invalid indirect mapped block 4294967295 (level 1) [ 111.960006][ T8748] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.993736][ T8753] EXT4-fs (loop0): 2 truncates cleaned up [ 111.999946][ T8753] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.038618][ T8753] EXT4-fs (loop0): shut down requested (0) [ 112.061453][ T29] audit: type=1400 audit(1769730373.287:594): avc: denied { read } for pid=2983 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 112.084114][ T29] audit: type=1400 audit(1769730373.287:595): avc: denied { search } for pid=2983 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 112.105684][ T29] audit: type=1400 audit(1769730373.287:596): avc: denied { search } for pid=2983 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 112.128015][ T29] audit: type=1400 audit(1769730373.287:597): avc: denied { add_name } for pid=2983 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 112.148819][ T29] audit: type=1400 audit(1769730373.287:598): avc: denied { create } for pid=2983 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 112.170245][ T29] audit: type=1400 audit(1769730373.287:599): avc: denied { append open } for pid=2983 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 112.193999][ T29] audit: type=1400 audit(1769730373.287:600): avc: denied { getattr } for pid=2983 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 112.229317][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.287428][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.328407][ T8762] Process accounting resumed [ 112.367241][ T29] audit: type=1400 audit(1769730373.597:601): avc: denied { create } for pid=8769 comm="syz.0.2355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 112.411086][ T29] audit: type=1400 audit(1769730373.627:602): avc: denied { sys_admin } for pid=8769 comm="syz.0.2355" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 112.538736][ T8782] loop2: detected capacity change from 0 to 1024 [ 112.560903][ T8782] EXT4-fs: inline encryption not supported [ 112.590978][ T29] audit: type=1400 audit(1769730373.817:603): avc: denied { create } for pid=8788 comm="syz.3.2362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 112.614757][ T8782] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.648914][ T8796] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2363'. [ 112.718291][ T8800] loop1: detected capacity change from 0 to 512 [ 112.753320][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.769723][ T8800] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 112.782225][ T8800] EXT4-fs (loop1): orphan cleanup on readonly fs [ 112.790528][ T8800] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.2367: corrupted inode contents [ 112.803555][ T8800] EXT4-fs (loop1): Remounting filesystem read-only [ 112.810188][ T8800] EXT4-fs (loop1): 1 truncate cleaned up [ 112.816224][ T12] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 112.826815][ T12] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 112.843699][ T12] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 112.846510][ T8806] loop2: detected capacity change from 0 to 1024 [ 112.858684][ T8800] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 112.866043][ T8806] EXT4-fs: Ignoring removed nomblk_io_submit option [ 112.891215][ T8806] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 112.899566][ T8806] System zones: 0-1, 3-36 [ 112.905331][ T8806] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.933873][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.976611][ T8812] loop1: detected capacity change from 0 to 512 [ 113.004509][ T8812] EXT4-fs: Ignoring removed nobh option [ 113.019393][ T8812] EXT4-fs (loop1): 1 orphan inode deleted [ 113.025939][ T8812] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.081300][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.127243][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.226823][ T8825] loop2: detected capacity change from 0 to 1024 [ 113.247871][ T8829] netlink: 87 bytes leftover after parsing attributes in process `syz.3.2378'. [ 113.261831][ T8825] EXT4-fs: Ignoring removed orlov option [ 113.268003][ T8825] EXT4-fs: Ignoring removed nomblk_io_submit option [ 113.295943][ T8825] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.349164][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.422454][ T8847] loop3: detected capacity change from 0 to 512 [ 113.443791][ T8847] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.2387: invalid block [ 113.460594][ T8847] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.2387: invalid indirect mapped block 4294967295 (level 1) [ 113.506724][ T8851] loop0: detected capacity change from 0 to 1024 [ 113.516215][ T8851] EXT4-fs: Ignoring removed nomblk_io_submit option [ 113.528496][ T8851] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 113.544459][ T8847] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.2387: invalid indirect mapped block 4294967295 (level 1) [ 113.554922][ T8851] System zones: 0-1, 3-36 [ 113.558716][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88811ab9e200: rx timeout, send abort [ 113.567997][ T8851] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.573170][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88811ab9e200: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 113.598304][ T8847] EXT4-fs (loop3): 2 truncates cleaned up [ 113.619447][ T8847] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.649366][ T8847] EXT4-fs (loop3): shut down requested (0) [ 113.711755][ T8863] netlink: 87 bytes leftover after parsing attributes in process `syz.4.2392'. [ 113.732683][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.858979][ T8871] EXT4-fs: Ignoring removed orlov option [ 113.864920][ T8871] EXT4-fs: Ignoring removed nomblk_io_submit option [ 113.938922][ T8871] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.975952][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.004953][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.121938][ T8898] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 114.137718][ T8898] EXT4-fs (loop3): 1 truncate cleaned up [ 114.144781][ T8898] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.183523][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.515818][ T8922] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.547173][ T8922] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #11: comm syz.0.2418: missing EA_INODE flag [ 114.560189][ T8930] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 114.571247][ T8922] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.2418: error while reading EA inode 11 err=-117 [ 114.707890][ T12] bio_check_eod: 6880 callbacks suppressed [ 114.707911][ T12] kworker/u8:0: attempt to access beyond end of device [ 114.707911][ T12] loop2: rw=1, sector=2568, nr_sectors = 2104 limit=512 [ 114.743322][ T8935] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 114.768754][ T12] kworker/u8:0: attempt to access beyond end of device [ 114.768754][ T12] loop2: rw=1, sector=4672, nr_sectors = 2576 limit=512 [ 114.803420][ T12] kworker/u8:0: attempt to access beyond end of device [ 114.803420][ T12] loop2: rw=1, sector=7248, nr_sectors = 2064 limit=512 [ 114.804184][ T8935] EXT4-fs (loop4): 1 truncate cleaned up [ 114.826120][ T12] kworker/u8:0: attempt to access beyond end of device [ 114.826120][ T12] loop2: rw=1, sector=9312, nr_sectors = 3360 limit=512 [ 114.851389][ T8935] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.865473][ T12] kworker/u8:0: attempt to access beyond end of device [ 114.865473][ T12] loop2: rw=1, sector=12672, nr_sectors = 2056 limit=512 [ 114.884266][ T12] kworker/u8:0: attempt to access beyond end of device [ 114.884266][ T12] loop2: rw=1, sector=14728, nr_sectors = 1864 limit=512 [ 114.887879][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.918529][ T8935] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.2425: invalid indirect mapped block 4294901760 (level 0) [ 114.943948][ T8935] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.2425: invalid indirect mapped block 4294967295 (level 1) [ 115.016319][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.040058][ T8952] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2433'. [ 115.156940][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88811ab2aa00: rx timeout, send abort [ 115.165493][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88811ab2aa00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 115.215417][ T8963] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.230131][ T8966] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2437'. [ 115.320703][ T8984] program syz.1.2446 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 115.349150][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.387367][ T8988] syz_tun: entered allmulticast mode [ 115.409056][ T8988] syz_tun: left allmulticast mode [ 115.418063][ T8988] dvmrp6: left allmulticast mode [ 115.520177][ T8996] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2452'. [ 115.534606][ T8996] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2452'. [ 115.553526][ T8998] raw_sendmsg: syz.1.2453 forgot to set AF_INET. Fix it! [ 115.574878][ T9000] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2454'. [ 115.684100][ T9010] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2459'. [ 115.724827][ T9010] netlink: 'syz.2.2459': attribute type 2 has an invalid length. [ 116.274932][ T9059] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9059 comm=syz.4.2482 [ 116.442150][ T9080] set_capacity_and_notify: 6 callbacks suppressed [ 116.442172][ T9080] loop1: detected capacity change from 0 to 128 [ 116.529888][ T9086] loop2: detected capacity change from 0 to 1024 [ 116.606539][ T9086] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.677530][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.901090][ T9129] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2512'. [ 116.935917][ T9129] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2512'. [ 116.966433][ T9133] loop2: detected capacity change from 0 to 256 [ 117.045216][ T9133] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 117.086820][ T9137] erspan0: entered promiscuous mode [ 117.121873][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 117.121920][ T29] audit: type=1400 audit(1769730378.347:616): avc: denied { bind } for pid=9142 comm="syz.4.2518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 117.393260][ T9164] loop2: detected capacity change from 0 to 1024 [ 117.410419][ T9164] EXT4-fs: Ignoring removed orlov option [ 117.444924][ T9164] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a002c118, mo2=0002] [ 117.472044][ T9164] System zones: 0-1, 3-12 [ 117.480012][ T9168] netlink: 'syz.4.2529': attribute type 21 has an invalid length. [ 117.485647][ T9164] EXT4-fs (loop2): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.506406][ T29] audit: type=1400 audit(1769730378.737:617): avc: denied { remove_name } for pid=9163 comm="syz.2.2528" name="control" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 117.544336][ T29] audit: type=1400 audit(1769730378.737:618): avc: denied { rmdir } for pid=9163 comm="syz.2.2528" name="control" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 117.574805][ T29] audit: type=1400 audit(1769730378.807:619): avc: denied { getopt } for pid=9169 comm="syz.4.2530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 117.600521][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 117.721044][ T9180] loop4: detected capacity change from 0 to 512 [ 117.745033][ T9180] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 117.848774][ T29] audit: type=1400 audit(1769730379.067:620): avc: denied { create } for pid=9187 comm="syz.2.2539" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=isdn_socket permissive=1 [ 118.406859][ T9219] loop3: detected capacity change from 0 to 512 [ 118.523678][ T9219] EXT4-fs (loop3): orphan cleanup on readonly fs [ 118.547494][ T9219] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2553: bg 0: block 248: padding at end of block bitmap is not set [ 118.565336][ T9219] Quota error (device loop3): write_blk: dquota write failed [ 118.573780][ T9219] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 118.584027][ T9219] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.2553: Failed to acquire dquot type 1 [ 118.598336][ T9219] EXT4-fs (loop3): 1 truncate cleaned up [ 118.614005][ T9219] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 118.633959][ T9219] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 118.673998][ T9219] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 118.682979][ T9219] ext4 filesystem being remounted at /513/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.695339][ T9219] Quota error (device loop3): write_blk: dquota write failed [ 118.703599][ T9219] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 118.713635][ T9219] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.2553: Failed to acquire dquot type 1 [ 118.769224][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.819875][ T9237] loop5: detected capacity change from 0 to 7 [ 118.898074][ T29] audit: type=1400 audit(1769730380.107:621): avc: denied { bind } for pid=9240 comm="syz.4.2562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 118.977564][ T9246] program syz.4.2565 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 119.020970][ C1] invalid error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2 [ 119.031146][ C1] buffer_io_error: 6 callbacks suppressed [ 119.031160][ C1] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 119.150492][ T9255] loop0: detected capacity change from 0 to 512 [ 119.170723][ T9255] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.191395][ T9255] ext4 filesystem being mounted at /513/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 119.217155][ T9259] ieee802154 phy0 wpan0: encryption failed: -22 [ 119.265065][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.284208][ T9265] __nla_validate_parse: 2 callbacks suppressed [ 119.284225][ T9265] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2573'. [ 119.420046][ T9281] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2580'. [ 119.443901][ T9283] sctp: [Deprecated]: syz.4.2582 (pid 9283) Use of int in maxseg socket option. [ 119.443901][ T9283] Use struct sctp_assoc_value instead [ 119.650159][ T9312] loop1: detected capacity change from 0 to 1024 [ 119.663192][ T9312] EXT4-fs: Ignoring removed nomblk_io_submit option [ 119.702289][ T9312] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 119.711530][ T9321] ieee802154 phy0 wpan0: encryption failed: -22 [ 119.726778][ T9322] loop3: detected capacity change from 0 to 1024 [ 119.737011][ T9312] System zones: 0-1, 3-36 [ 119.750769][ T9312] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.766070][ T9322] EXT4-fs: Ignoring removed orlov option [ 119.771917][ T9322] EXT4-fs: Ignoring removed nomblk_io_submit option [ 119.837316][ T9322] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.908401][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.979524][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.072863][ T9340] netlink: 'syz.1.2606': attribute type 1 has an invalid length. [ 120.205657][ T9351] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.218626][ T9351] ext4 filesystem being mounted at /511/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 120.250707][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.339864][ T9361] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.400282][ T9361] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.415161][ C0] invalid error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2 [ 120.425265][ C0] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 120.497058][ T9361] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.600040][ T9361] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.631354][ T9380] netlink: 'syz.0.2626': attribute type 2 has an invalid length. [ 120.639235][ T9380] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2626'. [ 120.694974][ T3350] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.718194][ T3350] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.745785][ T3350] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.765540][ T3350] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.785297][ T9389] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 121.127931][ T9412] EXT4-fs: Ignoring removed orlov option [ 121.134719][ T9412] EXT4-fs: Ignoring removed nomblk_io_submit option [ 121.169021][ T9412] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.224786][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.273844][ T9421] EXT4-fs: inline encryption not supported [ 121.279931][ T9421] EXT4-fs: Ignoring removed nobh option [ 121.286438][ T9421] EXT4-fs: Ignoring removed bh option [ 121.334298][ T9421] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.391008][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.441526][ T9431] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 121.453520][ T9430] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2647'. [ 121.511095][ T9433] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2648'. [ 121.879373][ T9464] sock: sock_set_timeout: `syz.4.2659' (pid 9464) tries to set negative timeout [ 122.522229][ T9492] sock: sock_set_timeout: `syz.1.2674' (pid 9492) tries to set negative timeout [ 122.599358][ T9501] set_capacity_and_notify: 6 callbacks suppressed [ 122.599376][ T9501] loop2: detected capacity change from 0 to 128 [ 123.642619][ T3623] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 123.717557][ T9538] loop3: detected capacity change from 0 to 1024 [ 123.737173][ T9538] EXT4-fs: Ignoring removed orlov option [ 123.766441][ T9538] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.826195][ T9548] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2696'. [ 123.835335][ T9548] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2696'. [ 123.847686][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 123.847704][ T29] audit: type=1400 audit(1769730385.077:625): avc: denied { unlink } for pid=9537 comm="syz.3.2693" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 123.879717][ T9548] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2696'. [ 123.889533][ T9548] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2696'. [ 123.940704][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.161941][ T29] audit: type=1400 audit(1769730385.387:626): avc: denied { create } for pid=9578 comm="syz.1.2713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 124.236727][ T29] audit: type=1400 audit(1769730385.417:627): avc: denied { setopt } for pid=9578 comm="syz.1.2713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 124.302629][ T29] audit: type=1400 audit(1769730385.507:628): avc: denied { ioctl } for pid=9588 comm="syz.0.2719" path="socket:[24286]" dev="sockfs" ino=24286 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 124.389507][ T29] audit: type=1400 audit(1769730385.597:629): avc: denied { getopt } for pid=9592 comm="syz.0.2721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 124.552368][ T9608] xt_hashlimit: size too large, truncated to 1048576 [ 124.668199][ T29] audit: type=1400 audit(1769730385.877:630): avc: denied { bind } for pid=9609 comm="syz.3.2729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 124.861238][ T9635] loop0: detected capacity change from 0 to 1024 [ 124.875800][ T29] audit: type=1400 audit(1769730386.107:631): avc: denied { shutdown } for pid=9636 comm="syz.4.2740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 124.881743][ T9638] loop3: detected capacity change from 0 to 1024 [ 124.920344][ T9635] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.923319][ T9638] EXT4-fs: inline encryption not supported [ 124.941818][ T9638] EXT4-fs: Ignoring removed bh option [ 124.968072][ T9638] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 124.969938][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.988504][ T9638] EXT4-fs (loop3): orphan cleanup on readonly fs [ 125.009636][ T9638] EXT4-fs error (device loop3): ext4_quota_enable:7177: comm syz.3.2741: inode #2304: comm syz.3.2741: iget: illegal inode # [ 125.017025][ T9646] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2745'. [ 125.038469][ T29] audit: type=1326 audit(1769730386.267:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9647 comm="syz.4.2746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f183307aeb9 code=0x7ffc0000 [ 125.050202][ T9638] EXT4-fs (loop3): Remounting filesystem read-only [ 125.063255][ T29] audit: type=1326 audit(1769730386.267:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9647 comm="syz.4.2746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f183307aeb9 code=0x7ffc0000 [ 125.069193][ T9638] EXT4-fs warning (device loop3): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-117, ino=2304). Please run e2fsck to fix. [ 125.093664][ T29] audit: type=1326 audit(1769730386.267:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9647 comm="syz.4.2746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f183307aeb9 code=0x7ffc0000 [ 125.110120][ T9638] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 125.173748][ T9638] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 125.199356][ T9652] loop4: detected capacity change from 0 to 128 [ 125.234202][ T9652] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 125.263287][ T9652] ext4 filesystem being mounted at /543/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 125.327491][ T9665] vhci_hcd vhci_hcd.0: invalid port number 65 [ 125.333671][ T9665] vhci_hcd vhci_hcd.0: invalid port number 65 [ 125.406617][ T9673] netlink: 27 bytes leftover after parsing attributes in process `syz.4.2756'. [ 125.430735][ T9676] loop3: detected capacity change from 0 to 1764 [ 125.486579][ T9681] loop3: detected capacity change from 0 to 512 [ 125.504206][ T9681] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.2761: inode has both inline data and extents flags [ 125.527209][ T9681] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.2761: couldn't read orphan inode 15 (err -117) [ 125.540042][ T9690] pimreg: entered allmulticast mode [ 125.548634][ T9690] pimreg: left allmulticast mode [ 125.620913][ T9691] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2762'. [ 125.818603][ T9702] netlink: 'syz.1.2767': attribute type 5 has an invalid length. [ 125.873760][ T9708] netlink: 'syz.2.2771': attribute type 27 has an invalid length. [ 126.017672][ T9721] loop1: detected capacity change from 0 to 128 [ 126.075104][ T9723] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2778'. [ 126.177958][ T9734] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2783'. [ 126.184493][ T9732] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2782'. [ 126.288242][ T9747] loop4: detected capacity change from 0 to 128 [ 126.377382][ T9757] program syz.1.2793 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 126.427715][ T9765] program syz.3.2795 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 126.755808][ T9810] can0: slcan on ptm0. [ 126.843606][ T9809] can0 (unregistered): slcan off ptm0. [ 126.892357][ T9825] loop3: detected capacity change from 0 to 512 [ 127.584732][ T9886] EXT4-fs warning (device loop3): ext4_empty_dir:3097: inode #11: comm syz.3.2838: directory missing '..' [ 127.961210][ T9917] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2852'. [ 128.161748][ T9861] Set syz1 is full, maxelem 65536 reached [ 128.212465][ T9933] program syz.3.2859 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 128.532148][ T9973] netlink: 'syz.0.2878': attribute type 5 has an invalid length. [ 128.663618][ T9982] tap0: tun_chr_ioctl cmd 35108 [ 128.690951][ T23] kernel write not supported for file /sg0 (pid: 23 comm: kworker/1:0) [ 128.905125][T10000] set_capacity_and_notify: 1 callbacks suppressed [ 128.905145][T10000] loop0: detected capacity change from 0 to 2048 [ 128.980316][T10000] EXT4-fs (loop0): resizing filesystem from 512 to 0 blocks [ 128.987919][T10000] EXT4-fs warning (device loop0): ext4_resize_fs:2042: can't shrink FS - resize aborted [ 129.060016][ T29] kauditd_printk_skb: 41 callbacks suppressed [ 129.060104][ T29] audit: type=1400 audit(1769730390.287:676): avc: denied { connect } for pid=10017 comm="syz.2.2895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 129.270004][T10037] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 129.273940][T10037] @0Ù: renamed from bond_slave_1 (while UP) [ 129.306243][ T29] audit: type=1400 audit(1769730390.507:677): avc: denied { ioctl } for pid=10040 comm="syz.2.2907" path="socket:[25957]" dev="sockfs" ino=25957 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 129.465416][ T29] audit: type=1400 audit(1769730390.697:678): avc: denied { read } for pid=10046 comm="syz.1.2911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 129.558226][T10052] loop2: detected capacity change from 0 to 1024 [ 129.575089][T10052] EXT4-fs: Ignoring removed orlov option [ 129.594809][T10052] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a803c118, mo2=0102] [ 129.622250][T10052] System zones: 0-1, 3-12 [ 129.658141][T10052] EXT4-fs error (device loop2): __ext4_remount:6789: comm syz.2.2910: Abort forced by user [ 129.716544][T10052] EXT4-fs (loop2): Remounting filesystem read-only [ 129.723240][T10061] loop3: detected capacity change from 0 to 512 [ 129.730271][T10052] EXT4-fs (loop2): re-mounted 00000000-0500-0000-0000-000000000000 ro. [ 129.746867][T10061] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.2915: invalid indirect mapped block 4294967295 (level 1) [ 129.772191][T10061] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.2915: invalid indirect mapped block 4294967295 (level 1) [ 129.787509][T10061] EXT4-fs (loop3): 2 truncates cleaned up [ 129.908811][ T29] audit: type=1400 audit(1769730391.137:679): avc: denied { bind } for pid=10070 comm="syz.2.2919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 129.984349][ T29] audit: type=1400 audit(1769730391.217:680): avc: denied { mount } for pid=10076 comm="syz.3.2921" name="/" dev="ramfs" ino=25306 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 130.078351][ T3417] IPVS: starting estimator thread 0... [ 130.085877][T10084] IPVS: sed: FWM 3 0x00000003 - no destination available [ 130.129765][T10089] loop0: detected capacity change from 0 to 128 [ 130.183698][T10085] IPVS: using max 2208 ests per chain, 110400 per kthread [ 130.329246][T10117] loop4: detected capacity change from 0 to 1024 [ 130.337062][T10117] EXT4-fs: Ignoring removed mblk_io_submit option [ 130.343880][T10117] EXT4-fs: Ignoring removed nobh option [ 130.394049][ T29] audit: type=1400 audit(1769730391.617:681): avc: denied { mount } for pid=10120 comm="syz.1.2941" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 130.431231][T10123] pimreg: entered allmulticast mode [ 130.455929][T10123] pimreg: left allmulticast mode [ 130.477131][ T29] audit: type=1326 audit(1769730391.707:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10126 comm="syz.4.2944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f183307aeb9 code=0x7ffc0000 [ 130.504731][ T29] audit: type=1326 audit(1769730391.737:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10126 comm="syz.4.2944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f183307aeb9 code=0x7ffc0000 [ 130.528818][ T29] audit: type=1326 audit(1769730391.737:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10126 comm="syz.4.2944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f183307aeb9 code=0x7ffc0000 [ 130.553323][ T29] audit: type=1326 audit(1769730391.737:685): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10126 comm="syz.4.2944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f183307aeb9 code=0x7ffc0000 [ 130.595839][T10129] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2945'. [ 130.618065][T10129] netlink: 'syz.4.2945': attribute type 2 has an invalid length. [ 131.020445][T10149] loop1: detected capacity change from 0 to 1024 [ 131.048591][T10149] EXT4-fs: Ignoring removed nobh option [ 131.054344][T10149] EXT4-fs: Ignoring removed bh option [ 131.170467][T10163] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2956'. [ 131.290708][T10172] loop1: detected capacity change from 0 to 512 [ 131.326445][T10172] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.2960: bad orphan inode 15 [ 131.350273][T10172] ext4_test_bit(bit=14, block=5) = 0 [ 131.384753][T10179] pimreg3: entered allmulticast mode [ 131.543235][T10193] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2970'. [ 131.583616][T10189] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.625417][T10200] loop3: detected capacity change from 0 to 512 [ 131.666569][T10200] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 131.687153][T10189] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.776636][T10189] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.814210][T10214] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2981'. [ 131.866180][T10189] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.921999][ T52] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.942919][ T52] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.951313][ T52] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.960777][ T52] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.078985][T10220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.097293][T10220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.401810][T10256] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3000'. [ 132.432016][T10258] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3001'. [ 132.441891][T10258] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3001'. [ 132.451118][T10258] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3001'. [ 132.461684][T10258] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3001'. [ 132.531660][ T52] Bluetooth: hci0: Frame reassembly failed (-84) [ 132.649602][T10269] pimreg: entered allmulticast mode [ 132.657720][T10269] pimreg: left allmulticast mode [ 132.733886][T10273] loop0: detected capacity change from 0 to 512 [ 132.745326][T10273] EXT4-fs: inline encryption not supported [ 132.775478][T10273] EXT4-fs (loop0): 1 orphan inode deleted [ 132.781946][T10273] ext4 filesystem being mounted at /598/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.793384][ T52] EXT4-fs error (device loop0): ext4_release_dquot:7022: comm kworker/u8:3: Failed to release dquot type 1 [ 133.666651][T10304] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3018'. [ 133.817860][T10322] loop2: detected capacity change from 0 to 1024 [ 133.824871][T10322] EXT4-fs: Ignoring removed orlov option [ 133.866474][T10328] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 133.886704][T10328] EXT4-fs (loop1): 1 truncate cleaned up [ 134.062393][T10350] set_capacity_and_notify: 1 callbacks suppressed [ 134.062415][T10350] loop1: detected capacity change from 0 to 512 [ 134.090571][T10350] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 134.188561][T10362] loop3: detected capacity change from 0 to 512 [ 134.195404][T10362] EXT4-fs: inline encryption not supported [ 134.216706][T10362] EXT4-fs (loop3): 1 orphan inode deleted [ 134.223340][T10362] ext4 filesystem being mounted at /616/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.234957][ T52] __quota_error: 70 callbacks suppressed [ 134.234976][ T52] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 134.250469][ T52] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:3: Failed to release dquot type 1 [ 134.353716][ T52] kworker/u8:3: attempt to access beyond end of device [ 134.353716][ T52] loop1: rw=1, sector=5376, nr_sectors = 3272 limit=512 [ 134.372216][ T52] kworker/u8:3: attempt to access beyond end of device [ 134.372216][ T52] loop1: rw=1, sector=8648, nr_sectors = 2320 limit=512 [ 134.389405][ T52] kworker/u8:3: attempt to access beyond end of device [ 134.389405][ T52] loop1: rw=1, sector=10968, nr_sectors = 2048 limit=512 [ 134.410306][ T52] kworker/u8:3: attempt to access beyond end of device [ 134.410306][ T52] loop1: rw=1, sector=13016, nr_sectors = 2056 limit=512 [ 134.436836][ T52] kworker/u8:3: attempt to access beyond end of device [ 134.436836][ T52] loop1: rw=1, sector=15072, nr_sectors = 1520 limit=512 [ 134.564951][T10383] pimreg: entered allmulticast mode [ 134.566988][ T29] audit: type=1326 audit(1769730395.797:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10384 comm="syz.1.3056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f733fd6aeb9 code=0x7ffc0000 [ 134.594883][T10383] pimreg: left allmulticast mode [ 134.602732][ T9442] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 134.671060][ T29] audit: type=1326 audit(1769730395.827:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10384 comm="syz.1.3056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f733fd6aeb9 code=0x7ffc0000 [ 134.695443][ T29] audit: type=1326 audit(1769730395.827:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10384 comm="syz.1.3056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f733fd6aeb9 code=0x7ffc0000 [ 134.719117][ T29] audit: type=1326 audit(1769730395.827:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10384 comm="syz.1.3056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f733fd6aeb9 code=0x7ffc0000 [ 134.743447][ T29] audit: type=1326 audit(1769730395.827:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10384 comm="syz.1.3056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f733fd6aeb9 code=0x7ffc0000 [ 134.767191][ T29] audit: type=1326 audit(1769730395.827:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10384 comm="syz.1.3056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f733fd6ac22 code=0x7ffc0000 [ 134.791263][ T29] audit: type=1326 audit(1769730395.827:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10384 comm="syz.1.3056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f733fd6ac22 code=0x7ffc0000 [ 134.815409][ T29] audit: type=1326 audit(1769730395.827:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10384 comm="syz.1.3056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f733fd6aeb9 code=0x7ffc0000 [ 134.839028][ T29] audit: type=1326 audit(1769730395.827:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10384 comm="syz.1.3056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f733fd6aeb9 code=0x7ffc0000 [ 134.974914][T10403] loop1: detected capacity change from 0 to 1024 [ 135.006036][T10403] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #11: comm syz.1.3065: missing EA_INODE flag [ 135.028947][T10403] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.3065: error while reading EA inode 11 err=-117 [ 135.222122][T10417] loop0: detected capacity change from 0 to 1764 [ 135.315072][T10427] loop3: detected capacity change from 0 to 512 [ 135.375766][T10427] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3074: bg 0: block 458: padding at end of block bitmap is not set [ 135.398961][T10432] loop2: detected capacity change from 0 to 1024 [ 135.450933][T10434] loop1: detected capacity change from 0 to 256 [ 135.458895][T10432] EXT4-fs mount: 29 callbacks suppressed [ 135.458913][T10432] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.482162][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.504598][T10438] loop0: detected capacity change from 0 to 128 [ 135.511338][T10434] FAT-fs (loop1): Directory bread(block 64) failed [ 135.534851][T10434] FAT-fs (loop1): Directory bread(block 65) failed [ 135.541647][T10434] FAT-fs (loop1): Directory bread(block 66) failed [ 135.555766][T10434] FAT-fs (loop1): Directory bread(block 67) failed [ 135.562385][T10434] FAT-fs (loop1): Directory bread(block 68) failed [ 135.569180][T10434] FAT-fs (loop1): Directory bread(block 69) failed [ 135.575809][T10434] FAT-fs (loop1): Directory bread(block 70) failed [ 135.584527][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.617112][T10434] FAT-fs (loop1): Directory bread(block 71) failed [ 135.628948][T10446] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3080'. [ 135.640393][T10434] FAT-fs (loop1): Directory bread(block 72) failed [ 135.656846][T10445] loop2: detected capacity change from 0 to 2048 [ 135.671504][T10434] FAT-fs (loop1): Directory bread(block 73) failed [ 135.695019][T10450] option changes via remount are deprecated (pid=10449 comm=syz.3.3082) [ 135.704117][T10450] cgroup: option or name mismatch, new: 0x0 "pim6reg0", old: 0x0 "" [ 135.744894][T10453] loop4: detected capacity change from 0 to 1024 [ 135.779421][T10453] EXT4-fs: Ignoring removed mblk_io_submit option [ 135.805879][T10453] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 135.836593][T10453] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 135.874170][T10453] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #11: comm syz.4.3085: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 135.909083][T10453] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.3085: couldn't read orphan inode 11 (err -117) [ 135.940748][T10453] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.966812][T10453] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.3085: Invalid block bitmap block 0 in block_group 0 [ 135.967564][T10466] EXT4-fs: Ignoring removed mblk_io_submit option [ 135.992951][T10453] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.3085: Failed to acquire dquot type 0 [ 136.047357][T10472] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.3085: Invalid inode bitmap blk 137438953472 in block_group 0 [ 136.064501][T10466] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.117613][T10478] netlink: 'syz.1.3096': attribute type 27 has an invalid length. [ 136.143382][ T52] EXT4-fs error (device loop4): __ext4_get_inode_loc:4830: comm kworker/u8:3: Invalid inode table block 8589934593 in block_group 0 [ 136.169664][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.296492][T10490] syz.0.3112: attempt to access beyond end of device [ 136.296492][T10490] loop0: rw=2049, sector=145, nr_sectors = 57 limit=128 [ 136.415539][T10504] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3109'. [ 136.427570][T10505] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.546014][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.616157][T10516] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 136.637435][T10516] ext4 filesystem being mounted at /633/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 136.729253][ T3314] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 136.761916][T10466] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3093: bg 0: block 234: padding at end of block bitmap is not set [ 136.802022][T10466] EXT4-fs (loop2): Remounting filesystem read-only [ 136.904615][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.005717][T10534] program syz.0.3122 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 137.078838][T10537] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3123: bg 0: block 248: padding at end of block bitmap is not set [ 137.097489][T10537] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.3123: Failed to acquire dquot type 1 [ 137.110803][T10537] EXT4-fs (loop3): 1 truncate cleaned up [ 137.117299][T10537] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.131548][T10537] ext4 filesystem being mounted at /637/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.150758][T10547] vlan2: entered allmulticast mode [ 137.156651][T10547] veth0_to_bond: entered allmulticast mode [ 137.199000][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.213650][ T52] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:3: Failed to release dquot type 1 [ 137.316903][T10566] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 137.367000][ T3318] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 137.374679][ T3318] FAT-fs (loop2): Filesystem has been set read-only [ 137.408889][ T3318] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 137.440295][T10574] EXT4-fs: Ignoring removed nobh option [ 137.496304][T10574] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.523078][T10574] ext4 filesystem being mounted at /605/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.556312][T10584] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.579154][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.630727][T10584] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.657705][ T12] bond0: (slave bond_slave_0): interface is now down [ 137.665210][ T12] bond0: (slave c@0Ù): interface is now down [ 137.672573][ T12] bond0: now running without any active interface! [ 137.706980][T10584] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.731633][ T23] IPVS: starting estimator thread 0... [ 137.777817][ T58] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.804526][T10584] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.822658][T10601] IPVS: using max 2208 ests per chain, 110400 per kthread [ 137.855797][ T58] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.938557][ T405] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.998120][ T58] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.041349][ T405] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.053580][ T52] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.062149][ T52] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.074352][ T58] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.136339][T10633] netlink: 'syz.3.3167': attribute type 10 has an invalid length. [ 138.144929][T10633] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3167'. [ 138.186724][T10633] team0: Port device geneve1 added [ 138.223472][ T58] bridge_slave_0: left allmulticast mode [ 138.229186][ T58] bridge_slave_0: left promiscuous mode [ 138.235931][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.277756][ T58] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 138.294068][T10650] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10650 comm=syz.4.3173 [ 138.417272][ T58] batman_adv: batadv0: Removing interface: ip6gretap1 [ 138.455996][ T58] dvmrp6 (unregistering): left allmulticast mode [ 138.529877][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 138.539354][ T58] bond_slave_0: left promiscuous mode [ 138.546657][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 138.556312][ T58] bond_slave_1: left promiscuous mode [ 138.563823][ T58] bond0 (unregistering): Released all slaves [ 138.595617][ T58] tipc: Left network mode [ 138.608099][ T58] hsr_slave_0: left promiscuous mode [ 138.614628][ T58] hsr_slave_1: left promiscuous mode [ 138.620406][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 138.629120][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 138.662486][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 138.669991][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 138.692999][ T58] veth1_macvtap: left promiscuous mode [ 138.703963][ T58] veth0_macvtap: left promiscuous mode [ 138.709713][ T58] veth1_vlan: left promiscuous mode [ 138.716201][ T58] veth0_vlan: left promiscuous mode [ 138.893276][ T58] team0 (unregistering): Port device team_slave_1 removed [ 138.905332][ T58] team0 (unregistering): Port device C removed [ 138.964831][T10701] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 139.153934][T10617] chnl_net:caif_netlink_parms(): no params data found [ 139.271530][T10740] set_capacity_and_notify: 12 callbacks suppressed [ 139.271554][T10740] loop4: detected capacity change from 0 to 8192 [ 139.288587][T10617] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.295794][T10617] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.322766][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 139.322786][ T29] audit: type=1400 audit(1769730656.548:773): avc: denied { create } for pid=10744 comm="syz.1.3201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 139.350128][T10745] delete_channel: no stack [ 139.388899][T10617] bridge_slave_0: entered allmulticast mode [ 139.395603][T10617] bridge_slave_0: entered promiscuous mode [ 139.424928][ T58] IPVS: stop unused estimator thread 0... [ 139.435716][T10617] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.443592][T10617] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.479613][ T29] audit: type=1400 audit(1769730656.638:774): avc: denied { setopt } for pid=10744 comm="syz.1.3201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 139.500101][ T29] audit: type=1400 audit(1769730656.678:775): avc: denied { open } for pid=10747 comm="syz.3.3202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 139.515966][T10617] bridge_slave_1: entered allmulticast mode [ 139.519668][ T29] audit: type=1400 audit(1769730656.678:776): avc: denied { kernel } for pid=10747 comm="syz.3.3202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 139.540062][T10617] bridge_slave_1: entered promiscuous mode [ 139.600297][T10762] netlink: 1367 bytes leftover after parsing attributes in process `syz.4.3208'. [ 139.618340][T10761] loop3: detected capacity change from 0 to 2048 [ 139.634893][T10617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 139.666240][T10761] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.678606][T10617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 139.711724][T10617] team0: Port device team_slave_0 added [ 139.718563][T10617] team0: Port device team_slave_1 added [ 139.720210][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.739170][T10771] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3209'. [ 139.743809][T10617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 139.755916][T10617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 139.781985][T10617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 139.848792][T10617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 139.856509][T10617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 139.882535][T10617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 139.957614][T10786] loop3: detected capacity change from 0 to 512 [ 139.969571][T10786] EXT4-fs: Ignoring removed oldalloc option [ 140.004631][T10617] hsr_slave_0: entered promiscuous mode [ 140.013838][T10617] hsr_slave_1: entered promiscuous mode [ 140.019781][T10617] debugfs: 'hsr0' already exists in 'hsr' [ 140.026331][T10617] Cannot create hsr debugfs directory [ 140.113160][T10791] loop1: detected capacity change from 0 to 1024 [ 140.130789][T10786] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: comm syz.3.3213: Parent and EA inode have the same ino 15 [ 140.140956][T10791] EXT4-fs: Ignoring removed bh option [ 140.183665][T10786] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: comm syz.3.3213: Parent and EA inode have the same ino 15 [ 140.213707][T10786] EXT4-fs (loop3): 1 orphan inode deleted [ 140.219939][T10786] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.238273][T10791] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.263813][T10617] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 140.275447][T10791] EXT4-fs error (device loop1): ext4_find_dest_de:2050: inode #2: block 16: comm syz.1.3215: bad entry in directory: directory entry overrun - offset=24, inode=267, rec_len=1024, size=1024 fake=0 [ 140.297013][T10617] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 140.304868][T10791] EXT4-fs (loop1): Remounting filesystem read-only [ 140.309349][T10617] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 140.340155][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.342667][T10617] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 140.351813][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.393322][ T29] audit: type=1400 audit(1769730657.618:777): avc: denied { tracepoint } for pid=10809 comm="syz.1.3218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 140.459997][T10824] loop0: detected capacity change from 0 to 128 [ 140.507610][T10617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.537551][T10617] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.604229][ T3350] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.611445][ T3350] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.625449][ T3350] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.632645][ T3350] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.781263][T10856] netem: change failed [ 140.787376][T10858] delete_channel: no stack [ 140.793243][ T29] audit: type=1400 audit(1769730658.028:778): avc: denied { write } for pid=10857 comm="syz.1.3230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 140.823164][T10617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 140.916416][T10871] loop4: detected capacity change from 0 to 512 [ 140.957231][T10871] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3233: bg 0: block 248: padding at end of block bitmap is not set [ 140.984571][T10871] Quota error (device loop4): write_blk: dquota write failed [ 140.992068][T10871] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 141.005876][T10871] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.3233: Failed to acquire dquot type 1 [ 141.020811][T10871] EXT4-fs (loop4): 1 truncate cleaned up [ 141.027639][T10871] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.048314][T10871] ext4 filesystem being mounted at /631 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.073736][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.092616][ T29] audit: type=1400 audit(1769730658.318:779): avc: denied { unmount } for pid=3321 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 141.122276][T10887] loop4: detected capacity change from 0 to 512 [ 141.139046][T10617] veth0_vlan: entered promiscuous mode [ 141.148747][T10617] veth1_vlan: entered promiscuous mode [ 141.157704][T10887] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 141.179735][T10617] veth0_macvtap: entered promiscuous mode [ 141.185848][T10887] System zones: 1-12 [ 141.192499][T10617] veth1_macvtap: entered promiscuous mode [ 141.198940][T10887] EXT4-fs error (device loop4): ext4_iget_extra_inode:5073: inode #15: comm syz.4.3234: corrupted in-inode xattr: e_value size too large [ 141.217965][T10892] program syz.0.3236 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 141.220958][T10617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 141.238437][T10617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 141.246738][T10887] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.3234: couldn't read orphan inode 15 (err -117) [ 141.262265][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.275179][T10887] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.291972][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.301082][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.314846][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.322381][ T29] audit: type=1400 audit(1769730658.548:780): avc: denied { mounton } for pid=10617 comm="syz-executor" path="/root/syzkaller.5MyavH/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=29809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 141.370846][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.622716][T10909] loop5: detected capacity change from 0 to 8192 [ 141.743708][T10927] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3250'. [ 141.862061][T10937] IPVS: Error connecting to the multicast addr [ 142.023069][T10951] macvtap1: entered promiscuous mode [ 142.028528][T10951] macvtap1: entered allmulticast mode [ 142.073986][T10960] loop0: detected capacity change from 0 to 128 [ 142.113115][T10960] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 142.154713][T10960] ext4 filesystem being mounted at /669/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 142.189079][T10967] loop1: detected capacity change from 0 to 512 [ 142.202215][T10967] EXT4-fs warning (device loop1): ext4_multi_mount_protect:314: fsck is running on the filesystem [ 142.213736][T10967] EXT4-fs warning (device loop1): ext4_multi_mount_protect:314: MMP failure info: last update time: 1669132786, last update node: dvyukov-desk.muc.corp.google.com, last update device: loop4 [ 142.254863][ T3317] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 142.276531][T10971] bpf: Bad value for 'gid' [ 142.292148][T10973] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3270'. [ 142.359067][T10977] netlink: 'syz.3.3271': attribute type 1 has an invalid length. [ 142.366972][T10977] netlink: 'syz.3.3271': attribute type 2 has an invalid length. [ 142.405571][T10983] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3274'. [ 142.654538][T11007] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.711314][T11011] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3287'. [ 142.839212][T11005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.850161][T11005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.174550][T11025] vfat: Bad value for 'shortname' [ 143.223190][ T3306] loop1: p1 < > p3 [ 143.228026][ T3306] loop1: p3 size 134217728 extends beyond EOD, truncated [ 143.239387][T11025] loop1: p1 < > p3 [ 143.244612][T11025] loop1: p3 size 134217728 extends beyond EOD, truncated [ 143.319488][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 143.327693][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 143.357049][T11032] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.376299][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 143.376465][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 143.540965][T11039] program syz.3.3308 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 143.587872][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.615928][ T23] hid-generic 0103:0004:0000.0001: unknown main item tag 0x0 [ 143.624514][ T23] hid-generic 0103:0004:0000.0001: unknown main item tag 0x0 [ 143.632040][ T23] hid-generic 0103:0004:0000.0001: unknown main item tag 0x0 [ 143.639541][ T23] hid-generic 0103:0004:0000.0001: unknown main item tag 0x0 [ 143.647114][ T23] hid-generic 0103:0004:0000.0001: unknown main item tag 0x0 [ 143.655410][ T23] hid-generic 0103:0004:0000.0001: unknown main item tag 0x0 [ 143.662930][ T23] hid-generic 0103:0004:0000.0001: unknown main item tag 0x0 [ 143.670430][ T23] hid-generic 0103:0004:0000.0001: unknown main item tag 0x0 [ 143.677901][ T23] hid-generic 0103:0004:0000.0001: unknown main item tag 0x0 [ 143.686011][ T23] hid-generic 0103:0004:0000.0001: unknown main item tag 0x0 [ 143.693965][ T23] hid-generic 0103:0004:0000.0001: hidraw0: HID v0.02 Device [syz0] on syz1 [ 143.747446][T11048] fido_id[11048]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 143.774308][T11051] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.808061][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.109904][T11007] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.122043][T11074] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3310'. [ 144.122284][T11073] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2808: inode #11: comm syz.3.3311: corrupted xattr block 95: invalid header [ 144.147328][T11073] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.3311: bg 0: block 7: invalid block bitmap [ 144.164267][T11073] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 144.174112][T11073] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2972: inode #11: comm syz.3.3311: corrupted xattr block 95: invalid header [ 144.188605][T11073] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -117) [ 144.198545][T11073] EXT4-fs (loop3): 1 orphan inode deleted [ 144.206672][T11073] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.251232][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.358591][T11090] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3317'. [ 144.462418][T11098] bpf: Bad value for 'gid' [ 144.496265][T11007] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.578450][T11007] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.598915][T11101] set_capacity_and_notify: 5 callbacks suppressed [ 144.599010][T11101] loop4: detected capacity change from 0 to 512 [ 144.614332][T11101] EXT4-fs warning (device loop4): ext4_multi_mount_protect:314: fsck is running on the filesystem [ 144.625161][T11101] EXT4-fs warning (device loop4): ext4_multi_mount_protect:314: MMP failure info: last update time: 1669132786, last update node: dvyukov-desk.muc.corp.google.com, last update device: loop4 [ 144.691529][ T52] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.727653][ T52] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.748517][ T52] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.764115][ T52] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.829162][T11113] loop5: detected capacity change from 0 to 128 [ 144.853028][T11113] vfat: Bad value for 'shortname' [ 144.920361][T11113] loop5: detected capacity change from 0 to 2048 [ 144.971083][ T3306] loop5: p1 < > p3 [ 144.983999][ T3306] loop5: p3 size 134217728 extends beyond EOD, truncated [ 145.008049][T11128] loop1: detected capacity change from 0 to 512 [ 145.029985][T11113] loop5: p1 < > p3 [ 145.037433][T11113] loop5: p3 size 134217728 extends beyond EOD, truncated [ 145.071413][T11128] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.3335: bg 0: block 248: padding at end of block bitmap is not set [ 145.096771][T11128] __quota_error: 13 callbacks suppressed [ 145.096790][T11128] Quota error (device loop1): write_blk: dquota write failed [ 145.111125][T11128] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 145.138939][T11128] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.3335: Failed to acquire dquot type 1 [ 145.156077][T11128] EXT4-fs (loop1): 1 truncate cleaned up [ 145.177394][T11128] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.190880][T11128] ext4 filesystem being mounted at /646 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.212064][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 145.224250][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 145.247149][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.439457][T11160] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3348'. [ 145.525538][T11169] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3351'. [ 145.559707][T11171] loop5: detected capacity change from 0 to 512 [ 145.568304][ T3306] ================================================================== [ 145.576441][ T3306] BUG: KCSAN: data-race in set_nlink / set_nlink [ 145.582816][ T3306] [ 145.585173][ T3306] read to 0xffff888107915858 of 4 bytes by task 3001 on cpu 0: [ 145.592764][ T3306] set_nlink+0x29/0xb0 [ 145.596877][ T3306] kernfs_iop_permission+0x1e2/0x220 [ 145.602216][ T3306] inode_permission+0x2de/0x3c0 [ 145.607108][ T3306] link_path_walk+0x779/0xe30 [ 145.611923][ T3306] path_lookupat+0x8c/0x500 [ 145.616476][ T3306] filename_lookup+0x190/0x390 [ 145.621295][ T3306] vfs_statx+0x96/0x170 [ 145.625514][ T3306] vfs_fstatat+0x115/0x170 [ 145.629984][ T3306] __se_sys_newfstatat+0x55/0x3e0 [ 145.633330][T11171] EXT4-fs error (device loop5): ext4_expand_extra_isize_ea:2808: inode #11: comm syz.5.3352: corrupted xattr block 95: invalid header [ 145.635051][ T3306] __x64_sys_newfstatat+0x55/0x70 [ 145.635088][ T3306] x64_sys_call+0x111f/0x3000 [ 145.635114][ T3306] do_syscall_64+0xc0/0x2a0 [ 145.649655][T11171] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.3352: bg 0: block 7: invalid block bitmap [ 145.653874][ T3306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.653905][ T3306] [ 145.653914][ T3306] write to 0xffff888107915858 of 4 bytes by task 3306 on cpu 1: [ 145.660592][T11171] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 145.663109][ T3306] set_nlink+0x99/0xb0 [ 145.663138][ T3306] kernfs_iop_permission+0x1e2/0x220 [ 145.663169][ T3306] inode_permission+0x2de/0x3c0 [ 145.663201][ T3306] link_path_walk+0x779/0xe30 [ 145.663229][ T3306] path_openat+0x1bf/0x23c0 [ 145.663267][ T3306] do_filp_open+0x15d/0x280 [ 145.663301][ T3306] do_sys_openat2+0xa6/0x150 [ 145.663337][ T3306] __x64_sys_openat+0xf2/0x120 [ 145.663371][ T3306] x64_sys_call+0x2b07/0x3000 [ 145.663404][ T3306] do_syscall_64+0xc0/0x2a0 [ 145.663440][ T3306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.663470][ T3306] [ 145.663474][ T3306] value changed: 0x00000008 -> 0x00000009 [ 145.663488][ T3306] [ 145.663494][ T3306] Reported by Kernel Concurrency Sanitizer on: [ 145.663511][ T3306] CPU: 1 UID: 0 PID: 3306 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 145.663549][ T3306] Tainted: [W]=WARN [ 145.663559][ T3306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 145.663574][ T3306] ================================================================== [ 145.806551][T11171] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2972: inode #11: comm syz.5.3352: corrupted xattr block 95: invalid header [ 145.821444][T11171] EXT4-fs warning (device loop5): ext4_evict_inode:273: xattr delete (err -117) [ 145.830807][T11171] EXT4-fs (loop5): 1 orphan inode deleted [ 145.838408][T11171] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.876082][T10617] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.