last executing test programs: 2.594758815s ago: executing program 1 (id=4060): r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x8b) close(r0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 2.594189705s ago: executing program 1 (id=4062): unshare(0x62040200) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x8, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, {[], @echo_request={0x80, 0x0, 0x0, 0x0, 0x9}}}}}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x5, 0xb68, 0xfffffffffffffeb9, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0xe}, 0x48) 2.23929423s ago: executing program 4 (id=4072): syz_open_dev$sg(&(0x7f00000002c0), 0x5d7000000000000, 0x82442) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') write$tun(r0, &(0x7f00000001c0)={@void, @val={0x0, 0x4, 0x8, 0x1ff, 0x0, 0x3e}, @x25={0x1, 0x4a, 0x1, "ec2131a68aadfc830d8bdad52b63204c122eb3d9d490a62b1e0533280ce132c01a"}}, 0x2e) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000240), 0x8080, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 2.23906512s ago: executing program 4 (id=4073): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000240)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x4004550d, 0x0) 2.119543362s ago: executing program 1 (id=4076): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x13) waitid(0x1, r0, 0x0, 0x2, 0x0) waitid(0x1, r0, 0x0, 0x2, 0x0) 1.469646735s ago: executing program 4 (id=4078): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x759, &(0x7f0000000780)={[{@noload}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}, 0x0}, {@data_journal}, {@journal_dev={'journal_dev', 0x3d, 0xf}}, {@i_version}, {@nobarrier}, {@debug}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xb6a}}, {@data_err_ignore}], [], 0x2c}, 0x2, 0x4f9, &(0x7f0000000200)="$eJzs3ElvHFUeAPB/te04zjL2ZNYsM+mZzAgLRBw764FDgkDKBQkJhMLR2E4U4iQoNlISWcRBKEgcQPkELDckPgEnuCBAHEBcibgipAj5ksABFarqatN2ub2l7cbx7yd151XVq37v31Uv/ZZuB7BpVbOnJGJHRHwXEb21zbkZqrV/7s9Mjfw8MzWSRJo+91OS57s3MzVSz1o/b3ux0V+JqLyRxN5ysd0T165fGB4fH7tS7BiYrBSpi8Pnxs6NXRo6ceLI4Z7jx4aOtiTOrE739rx2ed/u0y/efmbkzO2Xvvgoq29aHG+Mo6Yvf96y7BI6SnuqUZ37Xjb4//KrviHsbEgnndlzpX2VYdmyuza7XF15+++Njnyrpjeefr2tlQPWVJqmaXdp7+xn2XTaKElqJ6TpzRR4CCTR7hoA7VH/oL83k41Up0bK4+CH291TkY+AsrjvF4/akc58BFvtq42Nutao/L9GxJnpX97NHrHgPAQAQGt9cipiW9HvqD9qRyrx94Z8fyrWhvoi4s8RsSsi/lL0X/4Wkef9R0T8s+GcHctYBajO2y73f77pKRKN3dWWyfp/TxRrW3P7f7M17+sotnbm8XclZ8+Pjx0q3pP+6OrOtgfLLz07rfbpU9++06z8akP/L3tk5df7gkU9fuycN0E3Ojw5/KBx1929mb+xN8rxJ9GZ1FMRuyNizypeP3vPzj/64b5mx+fEn8VZiv/t5i/euYoKzZO+H/FI7fpPx7z4o1j/S/L1yYuvDExcu/74+cb1ycHjx4aODmyN8bFDA/W7ouzLr289WyRLw4hFrn+9aazpQlp2/bcteP/Prlz2ZanZ9dqJlZdx686bTcc0q73/tyTP5+n6+uzV4cnJK4MRW5Lp8v6h38+9OtwzJ38Wf/+Bhdv/rohf3yvO2xsR2U38r4j4d0TsL+r+n4j4b0QcWCT+z5/838vNhpBLx7+2svhHV3T9myVOfhWx8KGOC599XCr4rWop/q5odv2P5Kn+Ys/o8OTWpeJarKaNiQd+AwEAAGAD2J/P0yaVg8VE046oVA4ejNg+O4MyMfnY2cuvXhqtzef2RVelPtPV2zAfOljMDWfb2VlDDdvZ8cP5vHGapmlPtp2N38d3tjd02PS2N2n/mR/KP2kBHjYrWkdr9os2YEOa3/7vLPvM1n8hA1hfLfgeDbBBaf+weS27/a/Vr+CAtlmo/d+IuN+GqgDrbKH2/0Jpz8l1qQuwvoz/YfNaffv3ZQDY6Hz+w6a0rB/JryKx6/QieZLOtSm0eaISi/8VgL6I+p56n2bxF/y+EtGaGna0NNKeOde0smCerdGKsqKyZJ7OFfwhhvVNVP4Y1agluiNiibt39ma7UU9cX+uK5Y3gg/b+7wQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDgfgsAAP//RUTTKw==") 1.259855786s ago: executing program 0 (id=4081): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000740)={0x9c9, 0x0, 0x1, 'queue0\x00', 0x200000}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r1, &(0x7f0000000080)=[{0x1e, 0x0, 0x0, 0xfd, @time, {}, {}, @result}], 0x1c) 1.237682578s ago: executing program 0 (id=4082): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x1, 0x800001, 0x0, 0x0, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, 0x0) 1.173777574s ago: executing program 4 (id=4084): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x183, 0x6}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x3}, 0x0, 0x0) 1.173478075s ago: executing program 1 (id=4085): r0 = socket(0x1e, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000480), 0x4) recvmmsg(r0, &(0x7f0000002500)=[{{0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000002280)=""/58, 0x3a}], 0x1, &(0x7f0000002300)=""/12, 0xc}, 0x90}], 0x1, 0x40002122, 0x0) sendmsg$tipc(r0, &(0x7f0000000200)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x2, {0x4e23}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000500)="e8", 0x1}], 0x1, 0x0, 0x0, 0x48040}, 0x4800) 1.058314406s ago: executing program 1 (id=4091): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x12, &(0x7f00000004c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb01267100000e000442"], 0x0) 1.058047356s ago: executing program 0 (id=4092): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000240)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x4004550d, 0x0) 1.009272281s ago: executing program 2 (id=4095): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000007c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000f000000050030000000000005002f000300000008000300", @ANYRES32=r2], 0x2c}}, 0x0) 991.095132ms ago: executing program 2 (id=4096): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x9) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)=0x17) 965.068155ms ago: executing program 1 (id=4097): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8, 0x10008) 964.914845ms ago: executing program 2 (id=4098): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 787.978813ms ago: executing program 3 (id=4101): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20082, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x3) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000140)='>', 0x1}], 0x1) 787.475363ms ago: executing program 2 (id=4111): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xe8001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'dvmrp1\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30c) 704.314581ms ago: executing program 2 (id=4102): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x2}, 0x18) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) 700.812591ms ago: executing program 3 (id=4103): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8458, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)={0x1c, r0, 0x10ada85e65c25359, 0xfffffffc, 0x25dfdbfd, {{0x6b}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8441}, 0x4000000) 412.883339ms ago: executing program 3 (id=4104): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0x19, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76389e147583ddd056fea56a888e", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 398.977531ms ago: executing program 3 (id=4105): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x24, r1, 0x1, 0x70bd2d, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) writev(r0, &(0x7f0000000180), 0x100000000000003c) 253.838285ms ago: executing program 3 (id=4106): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="120000000000000029"], 0x108}}], 0x2, 0xc040) 225.030178ms ago: executing program 3 (id=4107): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x9) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)=0x17) 121.881998ms ago: executing program 0 (id=4108): socket$xdp(0x2c, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1830000009000000000000000300000095"], &(0x7f0000000180)='syzkaller\x00', 0x1, 0x99, &(0x7f0000000240)=""/153}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 73.668303ms ago: executing program 0 (id=4109): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a3a0000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000054000000050a01020000000000000000010020000c00024000000000000000010900010073797a31"], 0xf0}}, 0x0) 73.242663ms ago: executing program 4 (id=4110): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) request_key(&(0x7f0000000040)='user\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000700)='\x01\x9cs\x9f\xf8Ss9\x1cX\b\xc6\f\'\xa8\xe3\xdf\xb59T\xe4\x96\xfc\x94\xea\xad\x1b\xbd HID v0.00 Device [syz0] on syz1 [ 120.239166][T10153] loop0: detected capacity change from 0 to 128 [ 120.286831][T10160] rdma_rxe: rxe_newlink: failed to add vcan0 [ 120.294479][T10161] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2828'. [ 120.303549][T10161] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2828'. [ 120.336472][T10161] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2828'. [ 120.345595][T10161] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2828'. [ 120.363281][T10164] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2845'. [ 120.396185][T10161] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2828'. [ 120.405232][T10161] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2828'. [ 120.419837][T10174] loop0: detected capacity change from 0 to 512 [ 120.441196][T10174] EXT4-fs error (device loop0): ext4_iget_extra_inode:5075: inode #15: comm syz.0.2833: corrupted in-inode xattr: invalid ea_ino [ 120.465345][T10174] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.2833: couldn't read orphan inode 15 (err -117) [ 120.524277][T10186] netlink: 'syz.4.2843': attribute type 21 has an invalid length. [ 120.561781][T10192] netlink: 'syz.2.2856': attribute type 13 has an invalid length. [ 120.580716][T10192] gretap0: refused to change device tx_queue_len [ 120.587367][T10192] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 120.634167][T10198] loop2: detected capacity change from 0 to 256 [ 120.660795][T10198] FAT-fs (loop2): Directory bread(block 64) failed [ 120.670390][T10198] FAT-fs (loop2): Directory bread(block 65) failed [ 120.705060][T10198] FAT-fs (loop2): Directory bread(block 66) failed [ 120.715290][T10198] FAT-fs (loop2): Directory bread(block 67) failed [ 120.722532][T10198] FAT-fs (loop2): Directory bread(block 68) failed [ 120.776981][T10198] FAT-fs (loop2): Directory bread(block 69) failed [ 120.793882][T10198] FAT-fs (loop2): Directory bread(block 70) failed [ 120.810745][T10198] FAT-fs (loop2): Directory bread(block 71) failed [ 120.825063][T10198] FAT-fs (loop2): Directory bread(block 72) failed [ 120.835013][T10198] FAT-fs (loop2): Directory bread(block 73) failed [ 120.932494][T10202] loop3: detected capacity change from 0 to 8192 [ 120.967896][T10204] loop0: detected capacity change from 0 to 512 [ 120.996668][T10204] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.2851: inode has both inline data and extents flags [ 121.060228][T10204] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.2851: couldn't read orphan inode 15 (err -117) [ 121.195684][T10219] loop2: detected capacity change from 0 to 1024 [ 121.212392][T10219] EXT4-fs: Ignoring removed orlov option [ 121.218361][T10219] EXT4-fs: Ignoring removed nomblk_io_submit option [ 121.228442][T10221] loop3: detected capacity change from 0 to 512 [ 121.298717][T10226] loop3: detected capacity change from 0 to 512 [ 121.309834][T10227] wireguard0: entered promiscuous mode [ 121.315416][T10227] wireguard0: entered allmulticast mode [ 121.323837][T10226] ext4 filesystem being mounted at /615/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.412074][T10235] loop0: detected capacity change from 0 to 2048 [ 121.468130][T10235] Alternate GPT is invalid, using primary GPT. [ 121.474782][T10235] loop0: p1 p2 p3 [ 121.478632][T10235] loop0: partition table partially beyond EOD, truncated [ 121.490763][T10242] loop3: detected capacity change from 0 to 1024 [ 121.529517][T10242] EXT4-fs: Ignoring removed nobh option [ 121.535167][T10242] EXT4-fs: inline encryption not supported [ 121.549206][T10244] __nla_validate_parse: 6 callbacks suppressed [ 121.549225][T10244] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2863'. [ 121.604797][T10244] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2863'. [ 121.618345][T10242] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4193: comm syz.3.2862: Allocating blocks 497-513 which overlap fs metadata [ 121.634519][ T29] kauditd_printk_skb: 193 callbacks suppressed [ 121.634547][ T29] audit: type=1400 audit(1760594417.882:2186): avc: denied { setattr } for pid=10241 comm="syz.3.2862" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 121.634558][T10242] EXT4-fs (loop3): pa ffff888106a23b60: logic 16, phys. 129, len 24 [ 121.671734][T10242] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 1 [ 121.697624][ T29] audit: type=1400 audit(1760594417.952:2187): avc: denied { create } for pid=10247 comm="syz.0.2864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 121.717451][ T29] audit: type=1400 audit(1760594417.952:2188): avc: denied { setopt } for pid=10247 comm="syz.0.2864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 121.801907][ T29] audit: type=1400 audit(1760594418.052:2189): avc: denied { mounton } for pid=10249 comm="syz.3.2865" path="/618/bus" dev="tmpfs" ino=3216 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 122.193878][T10257] vcan0 speed is unknown, defaulting to 1000 [ 122.242844][T10261] loop0: detected capacity change from 0 to 128 [ 122.298707][ T29] audit: type=1400 audit(1760594418.552:2190): avc: denied { read write } for pid=10265 comm="syz.0.2874" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 122.323461][ T29] audit: type=1400 audit(1760594418.552:2191): avc: denied { open } for pid=10265 comm="syz.0.2874" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 122.429890][ T29] audit: type=1400 audit(1760594418.672:2192): avc: denied { bind } for pid=10269 comm="syz.3.2876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 122.449895][ T29] audit: type=1400 audit(1760594418.672:2193): avc: denied { node_bind } for pid=10269 comm="syz.3.2876" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 122.471210][ T29] audit: type=1400 audit(1760594418.672:2194): avc: denied { write } for pid=10269 comm="syz.3.2876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 122.490980][ T29] audit: type=1400 audit(1760594418.672:2195): avc: denied { read } for pid=10269 comm="syz.3.2876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 122.526006][T10271] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 122.532011][T10271] syzkaller1: linktype set to 773 [ 122.666348][T10292] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2888'. [ 122.933206][T10319] loop2: detected capacity change from 0 to 2048 [ 123.018824][T10332] 9pnet_fd: Insufficient options for proto=fd [ 123.153920][T10350] loop0: detected capacity change from 0 to 2048 [ 123.215477][T10350] loop0: p1 < > p4 [ 123.220113][T10350] loop0: p4 size 8388608 extends beyond EOD, truncated [ 123.290131][T10370] loop2: detected capacity change from 0 to 512 [ 123.313662][T10373] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 123.324713][T10373] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 123.335498][T10370] EXT4-fs: Ignoring removed oldalloc option [ 123.366131][T10370] EXT4-fs (loop2): 1 truncate cleaned up [ 123.502118][ T23] kernel write not supported for file /376/sched (pid: 23 comm: kworker/1:0) [ 123.534236][T10393] loop2: detected capacity change from 0 to 128 [ 123.583868][T10393] FAT-fs (loop2): Directory bread(block 32) failed [ 123.591208][T10393] FAT-fs (loop2): Directory bread(block 33) failed [ 123.597957][T10393] FAT-fs (loop2): Directory bread(block 34) failed [ 123.597991][T10393] FAT-fs (loop2): Directory bread(block 35) failed [ 123.621546][T10393] FAT-fs (loop2): Directory bread(block 36) failed [ 123.636384][T10393] FAT-fs (loop2): Directory bread(block 37) failed [ 123.636470][T10393] FAT-fs (loop2): Directory bread(block 38) failed [ 123.662084][T10393] FAT-fs (loop2): Directory bread(block 39) failed [ 123.662125][T10393] FAT-fs (loop2): Directory bread(block 40) failed [ 123.662145][T10393] FAT-fs (loop2): Directory bread(block 41) failed [ 123.740847][T10393] bio_check_eod: 547 callbacks suppressed [ 123.740871][T10393] syz.2.2934: attempt to access beyond end of device [ 123.740871][T10393] loop2: rw=0, sector=4108, nr_sectors = 4 limit=128 [ 124.123523][T10421] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2948'. [ 124.385394][T10436] loop0: detected capacity change from 0 to 1024 [ 124.389796][T10436] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 124.403072][T10436] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 124.412152][T10436] JBD2: no valid journal superblock found [ 124.420847][T10436] EXT4-fs (loop0): Could not load journal inode [ 124.475658][T10439] veth1_macvtap: left promiscuous mode [ 124.475679][T10439] macsec0: entered promiscuous mode [ 124.477069][T10441] 9pnet: Could not find request transport: rd [ 124.529891][T10439] veth1_macvtap: entered promiscuous mode [ 124.596968][T10439] macsec0: left promiscuous mode [ 124.713910][T10465] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2965'. [ 124.769349][T10477] loop0: detected capacity change from 0 to 512 [ 124.776860][T10477] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 124.815127][T10477] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.2970: Failed to acquire dquot type 1 [ 124.827223][T10477] EXT4-fs (loop0): 1 truncate cleaned up [ 124.885731][T10487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.885814][T10487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.052370][T10502] loop3: detected capacity change from 0 to 1024 [ 125.140736][T10514] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=10514 comm=syz.1.2986 [ 125.149648][T10510] loop3: detected capacity change from 0 to 512 [ 125.186258][T10518] loop0: detected capacity change from 0 to 128 [ 125.194778][T10510] ext4 filesystem being mounted at /646/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.358809][T10536] vcan0 speed is unknown, defaulting to 1000 [ 125.617607][T10555] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3004'. [ 125.785945][T10573] SELinux: security_context_str_to_sid (s) failed with errno=-22 [ 125.844023][T10578] loop0: detected capacity change from 0 to 512 [ 125.858014][T10578] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 125.942333][T10590] loop4: detected capacity change from 0 to 512 [ 125.954064][T10590] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 125.983802][T10598] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.3025' sets config #1 [ 125.996633][T10590] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 126.027927][T10590] EXT4-fs (loop4): 1 truncate cleaned up [ 126.187204][T10626] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.195428][T10626] bridge_slave_1: left allmulticast mode [ 126.201143][T10626] bridge_slave_1: left promiscuous mode [ 126.206983][T10626] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.235057][T10626] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 126.277690][T10636] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3043'. [ 126.286844][T10636] A link change request failed with some changes committed already. Interface veth0_to_batadv may have been left with an inconsistent configuration, please check. [ 126.419954][T10656] loop0: detected capacity change from 0 to 1024 [ 126.502614][T10674] SELinux: policydb version 586747130 does not match my version range 15-35 [ 126.512886][T10674] SELinux: failed to load policy [ 126.636609][ T29] kauditd_printk_skb: 194 callbacks suppressed [ 126.636624][ T29] audit: type=1400 audit(1760594422.892:2388): avc: denied { watch watch_reads } for pid=10688 comm="syz.3.3068" path="/657/file1" dev="tmpfs" ino=3419 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 126.686804][ T29] audit: type=1400 audit(1760594422.932:2389): avc: denied { read } for pid=10690 comm="syz.2.3066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 126.748010][ T29] audit: type=1326 audit(1760594423.002:2390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10695 comm="syz.3.3070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f73a8eec9 code=0x7ffc0000 [ 126.771753][ T29] audit: type=1326 audit(1760594423.002:2391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10695 comm="syz.3.3070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f73a8eec9 code=0x7ffc0000 [ 126.795914][ T29] audit: type=1326 audit(1760594423.002:2392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10695 comm="syz.3.3070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7f3f73a8eec9 code=0x7ffc0000 [ 126.820235][ T29] audit: type=1326 audit(1760594423.002:2393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10695 comm="syz.3.3070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f73a8eec9 code=0x7ffc0000 [ 126.844393][ T29] audit: type=1326 audit(1760594423.002:2394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10695 comm="syz.3.3070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f73a8eec9 code=0x7ffc0000 [ 126.973476][ T29] audit: type=1400 audit(1760594423.212:2395): avc: denied { nlmsg_write } for pid=10708 comm="syz.2.3077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 127.047522][ T29] audit: type=1400 audit(1760594423.302:2396): avc: denied { read } for pid=10721 comm="syz.3.3081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 127.130746][T10733] loop3: detected capacity change from 0 to 512 [ 127.163066][T10733] ext4 filesystem being mounted at /665/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.189189][ T29] audit: type=1400 audit(1760594423.442:2397): avc: denied { setattr } for pid=10732 comm="syz.3.3083" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 127.276396][T10746] SELinux: Context is not valid (left unmapped). [ 127.387189][T10760] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3095'. [ 127.398392][T10760] 0X: renamed from caif0 [ 127.414251][T10760] 0X: entered allmulticast mode [ 127.419661][T10760] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 127.515588][T10776] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 127.540004][T10780] loop2: detected capacity change from 0 to 128 [ 127.546762][T10768] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3098'. [ 127.547742][T10780] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 127.556060][T10768] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3098'. [ 127.580198][T10780] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 127.582248][T10779] program syz.4.3105 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 127.607915][T10782] loop0: detected capacity change from 0 to 1024 [ 127.614557][ T116] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 127.624085][T10782] EXT4-fs: Ignoring removed nobh option [ 127.638753][T10782] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 127.655017][T10782] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #11: comm syz.0.3106: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 127.675610][T10788] syz!: rxe_newlink: already configured on team_slave_0 [ 127.693091][T10782] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.3106: couldn't read orphan inode 11 (err -117) [ 127.780795][T10800] loop2: detected capacity change from 0 to 512 [ 127.789722][T10800] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 127.893952][T10814] vcan0 speed is unknown, defaulting to 1000 [ 127.921362][T10823] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3123'. [ 127.953204][T10823] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3123'. [ 127.956131][T10819] loop1: detected capacity change from 0 to 1024 [ 127.975537][T10819] EXT4-fs: Ignoring removed orlov option [ 127.981411][T10819] EXT4-fs: Ignoring removed nomblk_io_submit option [ 128.187966][T10846] loop3: detected capacity change from 0 to 764 [ 128.199450][T10846] Symlink component flag not implemented [ 128.205731][T10846] Symlink component flag not implemented [ 128.214990][T10846] Symlink component flag not implemented (128) [ 128.221188][T10846] Symlink component flag not implemented (122) [ 128.258343][T10833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.267203][T10833] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.278314][T10851] loop2: detected capacity change from 0 to 256 [ 128.335236][T10853] loop1: detected capacity change from 0 to 1024 [ 128.342467][T10853] EXT4-fs: Ignoring removed oldalloc option [ 128.349847][T10853] EXT4-fs: Ignoring removed orlov option [ 128.366026][T10853] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 128.371292][T10859] loop4: detected capacity change from 0 to 512 [ 128.383975][T10859] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000101) [ 128.405478][T10853] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 128.468765][T10870] loop1: detected capacity change from 0 to 1024 [ 128.475872][T10870] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 128.487820][T10870] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #3: block 1: comm syz.1.3144: lblock 1 mapped to illegal pblock 1 (length 1) [ 128.502286][T10870] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.3144: Failed to acquire dquot type 0 [ 128.514496][T10870] EXT4-fs error (device loop1): ext4_free_blocks:6706: comm syz.1.3144: Freeing blocks not in datazone - block = 0, count = 4096 [ 128.528367][T10870] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.3144: Invalid inode bitmap blk 0 in block_group 0 [ 128.541488][T10870] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 128.550500][ T116] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 128.565078][T10870] EXT4-fs (loop1): 1 orphan inode deleted [ 128.571123][ T116] EXT4-fs error (device loop1): ext4_release_dquot:6981: comm kworker/u8:4: Failed to release dquot type 0 [ 128.648915][T10876] 9p: Unknown access argument : -22 [ 128.839820][T10891] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 128.860078][T10891] pim6reg0: linktype set to 805 [ 128.986630][T10901] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3158'. [ 128.999121][T10902] loop0: detected capacity change from 0 to 512 [ 129.085262][T10902] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 129.210883][T10921] loop2: detected capacity change from 0 to 2048 [ 129.248359][T10923] vcan0 speed is unknown, defaulting to 1000 [ 129.266228][T10921] Alternate GPT is invalid, using primary GPT. [ 129.272583][T10921] loop2: p1 p2 p3 [ 129.276392][T10921] loop2: partition table partially beyond EOD, truncated [ 129.342314][T10929] loop1: detected capacity change from 0 to 1024 [ 129.429141][T10933] loop3: detected capacity change from 0 to 1024 [ 129.455571][T10933] EXT4-fs: Ignoring removed nobh option [ 129.472258][T10933] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 129.493240][T10933] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #11: comm syz.3.3172: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 129.516099][T10933] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.3172: couldn't read orphan inode 11 (err -117) [ 129.532361][T10933] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.3172: Invalid block bitmap block 0 in block_group 0 [ 129.551043][T10933] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.3172: Failed to acquire dquot type 0 [ 129.577071][T10933] EXT4-fs error (device loop3): __ext4_get_inode_loc:4832: comm syz.3.3172: Invalid inode table block 51539607553 in block_group 0 [ 129.636505][T10947] vcan0 speed is unknown, defaulting to 1000 [ 129.654692][ T406] EXT4-fs error (device loop3): __ext4_get_inode_loc:4832: comm kworker/u8:5: Invalid inode table block 51539607553 in block_group 0 [ 129.717838][T10956] macvtap0: refused to change device tx_queue_len [ 129.864772][T10969] vcan0 speed is unknown, defaulting to 1000 [ 129.931338][T10977] 9pnet: Could not find request transport: rd [ 130.009850][T10983] loop0: detected capacity change from 0 to 1024 [ 130.055494][T10983] EXT4-fs: Ignoring removed nobh option [ 130.082510][T10983] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 130.112866][T10983] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #11: comm syz.0.3193: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 130.144035][T10983] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.3193: couldn't read orphan inode 11 (err -117) [ 130.161322][T10983] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.3193: Invalid block bitmap block 0 in block_group 0 [ 130.177526][T10983] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.3193: Failed to acquire dquot type 0 [ 130.196296][T10983] EXT4-fs error (device loop0): __ext4_get_inode_loc:4832: comm syz.0.3193: Invalid inode table block 51539607553 in block_group 0 [ 130.215013][T10988] loop2: detected capacity change from 0 to 1024 [ 130.239200][ T52] EXT4-fs error (device loop0): __ext4_get_inode_loc:4832: comm kworker/u8:3: Invalid inode table block 51539607553 in block_group 0 [ 130.270519][T10988] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 130.281549][T10988] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 130.324415][T10996] loop3: detected capacity change from 0 to 2048 [ 130.327799][T10988] JBD2: no valid journal superblock found [ 130.336849][T10988] EXT4-fs (loop2): Could not load journal inode [ 130.427433][T11010] wireguard0: entered promiscuous mode [ 130.433133][T11010] wireguard0: entered allmulticast mode [ 130.521744][T11002] loop1: detected capacity change from 0 to 8192 [ 130.532780][T11008] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 130.548929][ T3424] vcan0 speed is unknown, defaulting to 1000 [ 130.706788][T11036] loop4: detected capacity change from 0 to 2048 [ 130.828532][T11043] loop3: detected capacity change from 0 to 164 [ 130.843901][T11043] ISOFS: unable to read i-node block [ 130.859503][T11043] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 130.907204][T11050] loop2: detected capacity change from 0 to 512 [ 130.932031][T11050] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 130.958544][T11050] EXT4-fs (loop2): 1 truncate cleaned up [ 131.059567][T11062] loop2: detected capacity change from 0 to 512 [ 131.088585][T11064] wireguard0: entered promiscuous mode [ 131.094104][T11064] wireguard0: entered allmulticast mode [ 131.409356][T11090] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3239'. [ 131.418691][T11090] 0X: renamed from caif0 [ 131.425437][T11090] 0X: entered allmulticast mode [ 131.430912][T11090] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 131.456141][T11094] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 131.558836][T11104] vcan0 speed is unknown, defaulting to 1000 [ 131.611390][T11106] vcan0 speed is unknown, defaulting to 1000 [ 131.809462][ T29] kauditd_printk_skb: 111 callbacks suppressed [ 131.809481][ T29] audit: type=1400 audit(1760594684.059:2502): avc: denied { create } for pid=11121 comm="syz.1.3255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 131.837189][ T29] audit: type=1400 audit(1760594684.089:2503): avc: denied { bind } for pid=11121 comm="syz.1.3255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 131.857288][ T29] audit: type=1400 audit(1760594684.089:2504): avc: denied { name_bind } for pid=11121 comm="syz.1.3255" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 131.878748][ T29] audit: type=1400 audit(1760594684.089:2505): avc: denied { node_bind } for pid=11121 comm="syz.1.3255" saddr=fe80::aa src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 131.907701][T11126] loop4: detected capacity change from 0 to 764 [ 131.918398][T11126] Symlink component flag not implemented [ 131.924233][T11126] Symlink component flag not implemented [ 131.930279][T11126] Symlink component flag not implemented (128) [ 131.936674][T11126] Symlink component flag not implemented (122) [ 132.011483][ T29] audit: type=1326 audit(1760594684.259:2506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11129 comm="syz.4.3259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff82fb3eec9 code=0x7ffc0000 [ 132.035400][ T29] audit: type=1326 audit(1760594684.259:2507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11129 comm="syz.4.3259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff82fb3eec9 code=0x7ffc0000 [ 132.059086][ T29] audit: type=1326 audit(1760594684.259:2508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11129 comm="syz.4.3259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff82fb3eec9 code=0x7ffc0000 [ 132.115008][ T29] audit: type=1326 audit(1760594684.259:2509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11129 comm="syz.4.3259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff82fb3eec9 code=0x7ffc0000 [ 132.138613][ T29] audit: type=1326 audit(1760594684.269:2510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11129 comm="syz.4.3259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff82fb3eec9 code=0x7ffc0000 [ 132.162181][ T29] audit: type=1326 audit(1760594684.269:2511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11129 comm="syz.4.3259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff82fb3eec9 code=0x7ffc0000 [ 132.301596][T11143] loop4: detected capacity change from 0 to 8192 [ 132.343641][T11147] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3264'. [ 132.366689][T11143] loop4: p1 p2 p3 p4[DM] [ 132.371527][T11143] loop4: p1 size 835329 extends beyond EOD, truncated [ 132.398799][T11149] netlink: 136 bytes leftover after parsing attributes in process `syz.2.3265'. [ 132.405598][T11143] loop4: p2 size 327680 extends beyond EOD, truncated [ 132.412574][T11149] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3265'. [ 132.465147][T11151] loop3: detected capacity change from 0 to 512 [ 132.465546][T11143] loop4: p3 start 1052673 is beyond EOD, truncated [ 132.473650][T11151] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 132.478244][T11143] loop4: p4 size 262144 extends beyond EOD, truncated [ 132.537385][T11151] EXT4-fs (loop3): 1 truncate cleaned up [ 132.543437][T11159] loop0: detected capacity change from 0 to 764 [ 132.579504][T11159] Symlink component flag not implemented [ 132.585377][T11159] Symlink component flag not implemented [ 132.589094][T11163] loop4: detected capacity change from 0 to 256 [ 132.597582][T11159] Symlink component flag not implemented (128) [ 132.604011][T11159] Symlink component flag not implemented (122) [ 132.623106][T11163] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 198, start 00000006) [ 132.633522][T11163] FAT-fs (loop4): Filesystem has been set read-only [ 132.691849][T11175] loop4: detected capacity change from 0 to 512 [ 132.704997][T11175] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 132.732316][T11177] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 132.732316][T11177] program syz.0.3288 not setting count and/or reply_len properly [ 132.769990][T11175] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.3276: Failed to acquire dquot type 1 [ 132.782470][T11175] EXT4-fs (loop4): 1 truncate cleaned up [ 132.800266][T11187] loop3: detected capacity change from 0 to 2048 [ 132.811837][T11189] loop0: detected capacity change from 0 to 512 [ 132.827252][T11189] EXT4-fs (loop0): orphan cleanup on readonly fs [ 132.837396][T11189] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.3283: bg 0: block 248: padding at end of block bitmap is not set [ 132.852107][T11189] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.3283: Failed to acquire dquot type 1 [ 132.866457][T11189] EXT4-fs (loop0): 1 truncate cleaned up [ 132.905790][T11187] Alternate GPT is invalid, using primary GPT. [ 132.912250][T11187] loop3: p1 p2 p3 [ 132.916366][T11187] loop3: partition table partially beyond EOD, truncated [ 132.989291][T11185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.998133][T11185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.049730][T11201] vcan0 speed is unknown, defaulting to 1000 [ 133.106056][T11211] loop4: detected capacity change from 0 to 512 [ 133.147845][T11213] loop0: detected capacity change from 0 to 256 [ 133.161104][T11215] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 133.161104][T11215] program syz.4.3295 not setting count and/or reply_len properly [ 133.207241][T11217] loop0: detected capacity change from 0 to 128 [ 133.223605][T11217] syz.0.3296: attempt to access beyond end of device [ 133.223605][T11217] loop0: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 133.237498][T11217] syz.0.3296: attempt to access beyond end of device [ 133.237498][T11217] loop0: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 133.251035][T11217] Buffer I/O error on dev loop0, logical block 79, lost async page write [ 133.267592][T11219] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3297'. [ 133.271919][T11217] syz.0.3296: attempt to access beyond end of device [ 133.271919][T11217] loop0: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 133.290318][T11217] Buffer I/O error on dev loop0, logical block 80, lost async page write [ 133.302702][T11217] syz.0.3296: attempt to access beyond end of device [ 133.302702][T11217] loop0: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 133.319482][T11217] syz.0.3296: attempt to access beyond end of device [ 133.319482][T11217] loop0: rw=2049, sector=166, nr_sectors = 2 limit=128 [ 133.333473][T11217] Buffer I/O error on dev loop0, logical block 83, lost async page write [ 133.343148][T11217] syz.0.3296: attempt to access beyond end of device [ 133.343148][T11217] loop0: rw=2049, sector=168, nr_sectors = 2 limit=128 [ 133.356713][T11217] Buffer I/O error on dev loop0, logical block 84, lost async page write [ 133.366244][T11217] syz.0.3296: attempt to access beyond end of device [ 133.366244][T11217] loop0: rw=2049, sector=202, nr_sectors = 6 limit=128 [ 133.388294][T11224] loop4: detected capacity change from 0 to 512 [ 133.398008][T11226] loop3: detected capacity change from 0 to 512 [ 133.406752][T11217] syz.0.3296: attempt to access beyond end of device [ 133.406752][T11217] loop0: rw=2049, sector=206, nr_sectors = 2 limit=128 [ 133.420734][T11217] Buffer I/O error on dev loop0, logical block 103, lost async page write [ 133.429540][T11217] syz.0.3296: attempt to access beyond end of device [ 133.429540][T11217] loop0: rw=2049, sector=208, nr_sectors = 2 limit=128 [ 133.443483][T11217] Buffer I/O error on dev loop0, logical block 104, lost async page write [ 133.452640][T11217] syz.0.3296: attempt to access beyond end of device [ 133.452640][T11217] loop0: rw=2049, sector=210, nr_sectors = 6 limit=128 [ 133.466763][T11217] Buffer I/O error on dev loop0, logical block 107, lost async page write [ 133.468114][T11226] EXT4-fs mount: 96 callbacks suppressed [ 133.468190][T11226] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.476299][T11217] Buffer I/O error on dev loop0, logical block 108, lost async page write [ 133.483466][T11226] ext4 filesystem being mounted at /712/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 133.514872][T11217] Buffer I/O error on dev loop0, logical block 119, lost async page write [ 133.524288][T11217] Buffer I/O error on dev loop0, logical block 120, lost async page write [ 133.533292][T11224] EXT4-fs (loop4): too many log groups per flexible block group [ 133.543608][T11224] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 133.551389][T11224] EXT4-fs (loop4): mount failed [ 133.569923][T11226] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.3300: corrupted inode contents [ 133.589037][T11226] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #2: comm syz.3.3300: mark_inode_dirty error [ 133.603363][T11232] loop2: detected capacity change from 0 to 512 [ 133.622264][T11232] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 133.635382][T11226] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.3300: corrupted inode contents [ 133.655620][T11233] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.3300: corrupted inode contents [ 133.667949][T11232] EXT4-fs (loop2): 1 truncate cleaned up [ 133.674328][T11232] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.682359][T11233] EXT4-fs error (device loop3): ext4_setattr:5892: inode #2: comm syz.3.3300: mark_inode_dirty error [ 133.720417][ T8311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.786809][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.790396][T11246] loop0: detected capacity change from 0 to 512 [ 133.938543][T11257] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.948399][T11257] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.969394][T11257] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 133.998164][T11261] loop2: detected capacity change from 0 to 512 [ 134.005473][T11259] vcan0 speed is unknown, defaulting to 1000 [ 134.011858][T11261] EXT4-fs: Ignoring removed nobh option [ 134.030482][T11261] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #3: comm syz.2.3312: corrupted inode contents [ 134.043977][T11261] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #3: comm syz.2.3312: mark_inode_dirty error [ 134.056273][T11261] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #3: comm syz.2.3312: corrupted inode contents [ 134.068546][T11261] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #3: comm syz.2.3312: mark_inode_dirty error [ 134.080755][T11261] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.3312: Failed to acquire dquot type 0 [ 134.092799][T11261] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.3312: corrupted inode contents [ 134.106672][T11261] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #16: comm syz.2.3312: mark_inode_dirty error [ 134.119690][T11261] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.3312: corrupted inode contents [ 134.125624][T11272] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3317'. [ 134.141159][T11261] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.3312: mark_inode_dirty error [ 134.152923][T11261] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.3312: corrupted inode contents [ 134.165291][T11261] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem [ 134.175362][T11261] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.3312: corrupted inode contents [ 134.197192][T11261] EXT4-fs error (device loop2): ext4_truncate:4637: inode #16: comm syz.2.3312: mark_inode_dirty error [ 134.216034][T11261] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem [ 134.225706][T11261] EXT4-fs (loop2): 1 truncate cleaned up [ 134.232040][T11261] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.244921][T11261] ext4 filesystem being mounted at /254/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.256607][T11261] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.591547][T11280] sctp: [Deprecated]: syz.0.3330 (pid 11280) Use of struct sctp_assoc_value in delayed_ack socket option. [ 134.591547][T11280] Use struct sctp_sack_info instead [ 134.631673][T11287] loop0: detected capacity change from 0 to 764 [ 134.668749][T11287] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 134.690112][T11292] loop1: detected capacity change from 0 to 512 [ 134.697014][T11287] Symlink component flag not implemented [ 134.702738][T11287] Symlink component flag not implemented (7) [ 134.729287][T11292] journal_path: Lookup failure for './file0/../file0' [ 134.736249][T11292] EXT4-fs: error: could not find journal device path [ 134.807834][T11295] loop2: detected capacity change from 0 to 8192 [ 134.890600][T11298] program syz.1.3337 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 134.977756][T11312] loop0: detected capacity change from 0 to 512 [ 135.063917][T11312] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.090181][T11312] ext4 filesystem being mounted at /509/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 135.291380][ T5243] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.376965][T11329] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3339'. [ 135.386623][T11329] unsupported nlmsg_type 40 [ 135.413153][T11331] tmpfs: Cannot enable swap on remount if it was disabled on first mount [ 135.479133][T11335] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3343'. [ 135.682265][T11359] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3353'. [ 135.753140][T11368] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.762811][T11368] bridge_slave_1: left allmulticast mode [ 135.768638][T11368] bridge_slave_1: left promiscuous mode [ 135.774477][T11368] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.786540][T11368] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 135.807154][T11365] loop3: detected capacity change from 0 to 2048 [ 135.849039][T11365] loop3: p2 p3 p7 [ 135.856530][T11376] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.947617][T11388] loop3: detected capacity change from 0 to 128 [ 135.968410][T11388] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 135.998048][T11388] ext4 filesystem being mounted at /730/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 136.027624][T11379] loop1: detected capacity change from 0 to 2048 [ 136.034487][T11379] ext4: Unknown parameter 'uid<00000000000000000000' [ 136.046433][ T3323] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 136.092447][T11396] loop3: detected capacity change from 0 to 512 [ 136.100966][T11396] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 136.117717][T11396] EXT4-fs (loop3): 1 truncate cleaned up [ 136.123909][T11396] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.167753][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.193768][T11400] loop3: detected capacity change from 0 to 1024 [ 136.202186][T11400] EXT4-fs: Ignoring removed nobh option [ 136.209848][T11400] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 136.224802][T11400] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #11: comm syz.3.3370: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 136.261501][T11400] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.3370: couldn't read orphan inode 11 (err -117) [ 136.274921][T11400] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.303205][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.450275][T11423] vcan0 speed is unknown, defaulting to 1000 [ 136.537985][T11432] loop3: detected capacity change from 0 to 512 [ 136.546067][T11432] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000101) [ 136.561431][T11434] loop0: detected capacity change from 0 to 512 [ 136.569537][T11434] EXT4-fs: Ignoring removed nobh option [ 136.592048][T11434] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #3: comm syz.0.3386: corrupted inode contents [ 136.604808][T11434] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #3: comm syz.0.3386: mark_inode_dirty error [ 136.641918][T11434] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #3: comm syz.0.3386: corrupted inode contents [ 136.662024][T11434] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.3386: mark_inode_dirty error [ 136.674596][T11434] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.3386: Failed to acquire dquot type 0 [ 136.703138][T11448] program syz.4.3393 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 136.725871][T11434] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.3386: corrupted inode contents [ 136.739118][T11434] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #16: comm syz.0.3386: mark_inode_dirty error [ 136.751810][T11434] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.3386: corrupted inode contents [ 136.764400][T11434] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.3386: mark_inode_dirty error [ 136.776213][T11434] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.3386: corrupted inode contents [ 136.788354][T11434] EXT4-fs error (device loop0) in ext4_orphan_del:301: Corrupt filesystem [ 136.797659][T11434] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.3386: corrupted inode contents [ 136.810463][T11434] EXT4-fs error (device loop0): ext4_truncate:4637: inode #16: comm syz.0.3386: mark_inode_dirty error [ 136.823522][ T29] kauditd_printk_skb: 158 callbacks suppressed [ 136.823538][ T29] audit: type=1400 audit(1760594689.079:2662): avc: denied { module_request } for pid=11452 comm="syz.3.3394" kmod="bpf_preload" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 136.856777][T11434] EXT4-fs error (device loop0) in ext4_process_orphan:343: Corrupt filesystem [ 136.874467][ T29] audit: type=1400 audit(1760594689.109:2663): avc: denied { create } for pid=11454 comm="syz.4.3395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 136.894527][ T29] audit: type=1400 audit(1760594689.129:2664): avc: denied { read } for pid=11454 comm="syz.4.3395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 136.897222][T11459] loop2: detected capacity change from 0 to 512 [ 136.915365][T11434] EXT4-fs (loop0): 1 truncate cleaned up [ 136.926783][T11434] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.939492][ T29] audit: type=1400 audit(1760594689.169:2665): avc: denied { mount } for pid=11452 comm="syz.3.3394" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 136.964491][T11434] ext4 filesystem being mounted at /527/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.975371][ T29] audit: type=1400 audit(1760594689.199:2666): avc: denied { write } for pid=11454 comm="syz.4.3395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 136.995423][ T29] audit: type=1400 audit(1760594689.199:2667): avc: denied { mount } for pid=11458 comm="syz.2.3396" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 137.017794][ T29] audit: type=1400 audit(1760594689.219:2668): avc: denied { mount } for pid=11433 comm="syz.0.3386" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 137.045076][ T29] audit: type=1400 audit(1760594689.299:2669): avc: denied { getopt } for pid=11454 comm="syz.4.3395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 137.066424][T11434] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.107756][ T29] audit: type=1400 audit(1760594689.359:2670): avc: denied { read write } for pid=5243 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 137.132501][ T29] audit: type=1400 audit(1760594689.359:2671): avc: denied { open } for pid=5243 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 137.200287][T11470] futex_wake_op: syz.3.3400 tries to shift op by -1; fix this program [ 137.441256][T11503] netlink: 268 bytes leftover after parsing attributes in process `syz.2.3415'. [ 137.460848][T11505] loop3: detected capacity change from 0 to 1024 [ 137.468339][T11505] EXT4-fs: Ignoring removed oldalloc option [ 137.475517][T11508] loop0: detected capacity change from 0 to 2048 [ 137.478070][T11505] EXT4-fs: Ignoring removed orlov option [ 137.483850][T11508] ext4: Unknown parameter 'uid<00000000000000000000' [ 137.493048][T11505] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 137.511810][T11509] loop1: detected capacity change from 0 to 512 [ 137.539006][T11505] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.573024][T11509] EXT4-fs (loop1): write access unavailable, skipping orphan cleanup [ 137.599344][T11505] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 137.602102][T11522] netlink: 312 bytes leftover after parsing attributes in process `syz.0.3423'. [ 137.650941][T11526] loop0: detected capacity change from 0 to 512 [ 137.658310][T11509] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 137.665886][T11528] loop2: detected capacity change from 0 to 128 [ 137.679075][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.689369][T11526] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.724543][ T8336] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.785610][ T5243] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.819927][T11534] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3430'. [ 137.827507][T11535] pim6reg0: tun_chr_ioctl cmd 35108 [ 137.854224][T11543] loop0: detected capacity change from 0 to 512 [ 137.861505][T11543] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 137.873273][T11543] EXT4-fs (loop0): orphan cleanup on readonly fs [ 137.880310][T11543] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:517: comm syz.0.3429: Block bitmap for bg 0 marked uninitialized [ 137.904244][T11543] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 137.913820][T11543] EXT4-fs (loop0): 1 orphan inode deleted [ 137.924612][T11543] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 137.939012][T11543] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 137.955643][T11543] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 137.958854][T11547] loop3: detected capacity change from 0 to 512 [ 137.975309][T11543] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:517: comm syz.0.3429: Block bitmap for bg 0 marked uninitialized [ 138.007783][T11552] loop4: detected capacity change from 0 to 128 [ 138.015167][T11547] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.031549][ T5243] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.041032][T11547] ext4 filesystem being mounted at /750/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 138.053285][T11552] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 138.074204][T11552] ext4 filesystem being mounted at /252/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 138.110560][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.180594][ T8715] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 138.200599][T11568] netlink: 'syz.2.3441': attribute type 4 has an invalid length. [ 138.208424][T11568] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.3441'. [ 138.240622][T11570] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 138.240622][T11570] program syz.3.3443 not setting count and/or reply_len properly [ 138.265836][T11574] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3442'. [ 138.327699][T11588] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3452'. [ 138.385903][T11601] loop2: detected capacity change from 0 to 512 [ 138.417842][T11601] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.441902][T11610] netlink: 'syz.0.3461': attribute type 2 has an invalid length. [ 138.476830][T11616] vlan3: entered promiscuous mode [ 138.481903][T11616] geneve1: entered promiscuous mode [ 138.487360][T11616] vlan3: entered allmulticast mode [ 138.492500][T11616] geneve1: entered allmulticast mode [ 138.512890][ T8311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.525576][T11621] loop0: detected capacity change from 0 to 128 [ 138.536607][T11621] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 138.549363][T11621] ext4 filesystem being mounted at /549/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 138.573403][T11624] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3466'. [ 138.599209][ T5243] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 138.661226][T11634] loop0: detected capacity change from 0 to 512 [ 138.668699][T11634] journal_path: Non-blockdev passed as './bus' [ 138.675040][T11634] EXT4-fs: error: could not find journal device path [ 138.769733][T11652] vcan0 speed is unknown, defaulting to 1000 [ 138.797017][T11650] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3481'. [ 138.939967][ T3401] kernel read not supported for file /vcs (pid: 3401 comm: kworker/0:3) [ 138.975149][T11677] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3491'. [ 138.995313][T11679] loop3: detected capacity change from 0 to 512 [ 139.024436][T11679] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.061341][T11679] ext4 filesystem being mounted at /764/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 139.113181][T11698] netlink: 27 bytes leftover after parsing attributes in process `syz.2.3498'. [ 139.185372][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.344450][T11732] loop0: detected capacity change from 0 to 512 [ 139.357740][T11735] netlink: 'syz.3.3513': attribute type 13 has an invalid length. [ 139.431104][T11732] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.466626][T11744] 9pnet_fd: Insufficient options for proto=fd [ 139.564645][ T5243] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.591492][T11735] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.626508][T11735] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.706534][T11735] veth1_vlan: left allmulticast mode [ 139.717374][ T1740] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.755650][ T1740] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.764581][ T1740] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.780650][T11774] loop3: detected capacity change from 0 to 512 [ 139.788172][T11774] EXT4-fs: Ignoring removed nomblk_io_submit option [ 139.798947][T11774] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 139.807806][T11774] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 139.817361][T11768] tap0: tun_chr_ioctl cmd 1074025681 [ 139.819490][ T406] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.836766][T11774] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4193: comm syz.3.3524: Allocating blocks 41-42 which overlap fs metadata [ 139.851482][T11774] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4193: comm syz.3.3524: Allocating blocks 41-42 which overlap fs metadata [ 139.873097][T11774] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.3524: Failed to acquire dquot type 1 [ 139.895254][T11774] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 139.931348][T11774] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #12: comm syz.3.3524: corrupted inode contents [ 139.947171][T11774] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #12: comm syz.3.3524: mark_inode_dirty error [ 139.959245][T11774] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #12: comm syz.3.3524: corrupted inode contents [ 140.015392][T11774] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #12: comm syz.3.3524: mark_inode_dirty error [ 140.027404][T11774] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #12: comm syz.3.3524: corrupted inode contents [ 140.032373][T11789] xt_CT: You must specify a L4 protocol and not use inversions on it [ 140.053872][T11774] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem [ 140.063220][T11774] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #12: comm syz.3.3524: corrupted inode contents [ 140.075974][T11774] EXT4-fs error (device loop3): ext4_truncate:4637: inode #12: comm syz.3.3524: mark_inode_dirty error [ 140.087368][T11774] EXT4-fs error (device loop3) in ext4_process_orphan:343: Corrupt filesystem [ 140.104736][T11774] EXT4-fs (loop3): 1 truncate cleaned up [ 140.113225][T11774] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.159768][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.162293][T11798] vcan0 speed is unknown, defaulting to 1000 [ 140.208428][T11805] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 140.215011][T11805] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 140.222796][T11805] vhci_hcd vhci_hcd.0: Device attached [ 140.232869][T11806] vhci_hcd: connection closed [ 140.233172][ T406] vhci_hcd: stop threads [ 140.242650][ T406] vhci_hcd: release socket [ 140.247450][ T406] vhci_hcd: disconnect device [ 140.268693][T11809] loop0: detected capacity change from 0 to 512 [ 140.276312][T11809] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 140.285328][T11809] EXT4-fs (loop0): invalid journal inode [ 140.291008][T11809] EXT4-fs (loop0): can't get journal size [ 140.299209][T11809] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c198, mo2=0002] [ 140.307880][T11809] System zones: 1-12, 13-13 [ 140.313042][T11809] EXT4-fs (loop0): 1 truncate cleaned up [ 140.318884][T11815] loop1: detected capacity change from 0 to 512 [ 140.320840][T11809] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.421187][ T5243] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.448788][T11823] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 140.448788][T11823] program syz.2.3543 not setting count and/or reply_len properly [ 140.523941][T11832] 8021q: adding VLAN 0 to HW filter on device bond1 [ 140.578521][T11847] netlink: 'syz.2.3554': attribute type 21 has an invalid length. [ 140.592838][T11849] loop0: detected capacity change from 0 to 512 [ 140.621132][T11851] Cannot find del_set index 2 as target [ 140.628223][T11849] EXT4-fs error (device loop0): ext4_iget_extra_inode:5075: inode #15: comm syz.0.3555: corrupted in-inode xattr: invalid ea_ino [ 140.643726][T11849] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.3555: couldn't read orphan inode 15 (err -117) [ 140.660947][T11849] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.663414][T11858] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=11858 comm=syz.2.3559 [ 140.699602][ T5243] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.793955][T11867] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 140.793955][T11867] program syz.0.3561 not setting count and/or reply_len properly [ 140.952845][T11882] loop0: detected capacity change from 0 to 512 [ 140.959890][T11882] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 140.970459][T11882] EXT4-fs (loop0): invalid journal inode [ 140.976365][T11882] EXT4-fs (loop0): can't get journal size [ 140.982866][T11882] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e056c118, mo2=0002] [ 140.990958][T11882] System zones: 1-12, 13-13 [ 140.996526][T11882] EXT4-fs (loop0): 1 truncate cleaned up [ 141.002671][T11882] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.030875][ T5243] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.038442][T11855] Set syz1 is full, maxelem 65536 reached [ 141.082443][T11885] vcan0 speed is unknown, defaulting to 1000 [ 141.420098][T11911] 9pnet: Could not find request transport: f [ 141.447506][T11914] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0 [ 141.473101][T11916] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 141.764670][T11960] loop4: detected capacity change from 0 to 512 [ 141.774658][T11960] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 141.786628][T11960] EXT4-fs (loop4): invalid journal inode [ 141.792427][T11960] EXT4-fs (loop4): can't get journal size [ 141.798845][T11960] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e056c118, mo2=0002] [ 141.808728][T11960] System zones: 1-12, 13-13 [ 141.815246][T11960] EXT4-fs (loop4): 1 truncate cleaned up [ 141.821386][T11960] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.865898][T11969] IPv6: NLM_F_CREATE should be specified when creating new route [ 141.875737][ T8715] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.885120][ T29] kauditd_printk_skb: 168 callbacks suppressed [ 141.885218][ T29] audit: type=1400 audit(1760594694.119:2836): avc: denied { mac_admin } for pid=11967 comm="syz.3.3607" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 141.899746][T11971] loop0: detected capacity change from 0 to 128 [ 141.913246][ T29] audit: type=1400 audit(1760594694.129:2837): avc: denied { relabelto } for pid=11967 comm="syz.3.3607" name="cgroup.procs" dev="cgroup" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:netutils_exec_t:s0" [ 141.947363][ T29] audit: type=1400 audit(1760594694.129:2838): avc: denied { associate } for pid=11967 comm="syz.3.3607" name="cgroup.procs" dev="cgroup" ino=200 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:netutils_exec_t:s0" [ 141.986905][T11976] loop4: detected capacity change from 0 to 512 [ 141.998060][T11971] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 142.014998][ T29] audit: type=1326 audit(1760594694.259:2839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11977 comm="syz.2.3611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f0eaaeec9 code=0x7ffc0000 [ 142.038628][ T29] audit: type=1326 audit(1760594694.259:2840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11977 comm="syz.2.3611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f0eaaeec9 code=0x7ffc0000 [ 142.040277][T11971] ext4 filesystem being mounted at /585/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 142.062735][ T29] audit: type=1326 audit(1760594694.259:2841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11977 comm="syz.2.3611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f1f0eaaeec9 code=0x7ffc0000 [ 142.096692][T11978] vcan0 speed is unknown, defaulting to 1000 [ 142.126633][T11971] EXT4-fs error (device loop0): __ext4_find_entry:1626: inode #2: comm syz.0.3610: checksumming directory block 0 [ 142.145329][T11971] EXT4-fs error (device loop0): __ext4_find_entry:1626: inode #2: comm syz.0.3610: checksumming directory block 0 [ 142.168117][ T29] audit: type=1400 audit(1760594694.399:2842): avc: denied { ioctl } for pid=11970 comm="syz.0.3610" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 142.193981][ T29] audit: type=1326 audit(1760594694.399:2843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11977 comm="syz.2.3611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f0eaaeec9 code=0x7ffc0000 [ 142.217730][ T29] audit: type=1326 audit(1760594694.399:2844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11977 comm="syz.2.3611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f1f0eaaeec9 code=0x7ffc0000 [ 142.241421][ T29] audit: type=1326 audit(1760594694.399:2845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11977 comm="syz.2.3611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f0eaaeec9 code=0x7ffc0000 [ 142.266094][ T5243] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 142.405529][T11997] loop3: detected capacity change from 0 to 512 [ 142.414486][T11997] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 142.442072][T11997] EXT4-fs (loop3): invalid journal inode [ 142.447888][T11997] EXT4-fs (loop3): can't get journal size [ 142.466889][T11997] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e056c118, mo2=0002] [ 142.483687][T11997] System zones: 1-12, 13-13 [ 142.500367][T11997] EXT4-fs (loop3): 1 truncate cleaned up [ 142.512927][T11997] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.598802][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.647526][T12006] loop3: detected capacity change from 0 to 1024 [ 142.699309][T12006] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.752826][T12006] EXT4-fs (loop3): shut down requested (2) [ 142.771215][T12006] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=15 [ 142.791624][T12006] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=15 [ 142.817676][T12025] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 142.825982][T12025] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 142.871883][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.924063][T12040] Cannot find del_set index 2 as target [ 142.982126][T12050] loop0: detected capacity change from 0 to 512 [ 142.989525][T12050] EXT4-fs: Ignoring removed nomblk_io_submit option [ 143.023474][T12050] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 143.032168][T12050] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 143.058130][T12050] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4193: comm syz.0.3643: Allocating blocks 41-42 which overlap fs metadata [ 143.072449][T12050] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4193: comm syz.0.3643: Allocating blocks 41-42 which overlap fs metadata [ 143.141411][T12050] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.3643: Failed to acquire dquot type 1 [ 143.175630][T12050] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 143.217116][T12050] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #12: comm syz.0.3643: corrupted inode contents [ 143.229666][T12050] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #12: comm syz.0.3643: mark_inode_dirty error [ 143.243027][T12072] RDS: rds_bind could not find a transport for 0:0:20::, load rds_tcp or rds_rdma? [ 143.266784][T12050] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #12: comm syz.0.3643: corrupted inode contents [ 143.300106][T12079] loop3: detected capacity change from 0 to 1024 [ 143.312329][T12079] EXT4-fs: Ignoring removed nomblk_io_submit option [ 143.325973][T12085] Cannot find del_set index 2 as target [ 143.330617][T12050] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #12: comm syz.0.3643: mark_inode_dirty error [ 143.332953][T12079] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 143.354553][T12084] loop2: detected capacity change from 0 to 512 [ 143.361200][T12050] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #12: comm syz.0.3643: corrupted inode contents [ 143.375812][T12084] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 143.377810][T12079] System zones: 0-1, 3-12 [ 143.388763][T12084] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.3658: invalid block [ 143.388939][T12084] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.3658: invalid indirect mapped block 4294967295 (level 1) [ 143.415474][T12050] EXT4-fs error (device loop0) in ext4_orphan_del:301: Corrupt filesystem [ 143.416320][T12079] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.446349][T12050] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #12: comm syz.0.3643: corrupted inode contents [ 143.477706][T12050] EXT4-fs error (device loop0): ext4_truncate:4637: inode #12: comm syz.0.3643: mark_inode_dirty error [ 143.488845][T12084] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.3658: invalid indirect mapped block 4294967295 (level 1) [ 143.505491][T12050] EXT4-fs error (device loop0) in ext4_process_orphan:343: Corrupt filesystem [ 143.511525][T12079] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3656: bg 0: block 88: padding at end of block bitmap is not set [ 143.514694][T12084] EXT4-fs (loop2): 2 truncates cleaned up [ 143.535483][T12050] EXT4-fs (loop0): 1 truncate cleaned up [ 143.541994][T12050] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.542236][T12084] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.595579][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.606371][T12100] __nla_validate_parse: 10 callbacks suppressed [ 143.606446][T12100] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3664'. [ 143.636669][ T5243] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.668567][ T8311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.731526][T12116] xt_hashlimit: max too large, truncated to 1048576 [ 143.795531][T12127] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3677'. [ 143.795943][T12123] loop4: detected capacity change from 0 to 1764 [ 143.880037][T12139] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3683'. [ 143.889436][T12139] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3683'. [ 143.898769][T12139] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3683'. [ 144.037854][T12164] loop0: detected capacity change from 0 to 512 [ 144.082954][T12164] EXT4-fs warning (device loop0): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 144.111132][T12164] EXT4-fs (loop0): mount failed [ 144.335106][T12226] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3721'. [ 144.345097][T12227] loop0: detected capacity change from 0 to 512 [ 144.367291][T12227] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 144.376919][T12227] EXT4-fs (loop0): orphan cleanup on readonly fs [ 144.386187][T12227] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.3723: corrupted inode contents [ 144.398848][T12227] EXT4-fs (loop0): Remounting filesystem read-only [ 144.406975][T12227] EXT4-fs (loop0): 1 truncate cleaned up [ 144.415145][ T406] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 144.426335][ T406] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 144.437590][ T406] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 144.449054][T12227] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 144.484924][ T5243] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.543108][T12250] loop2: detected capacity change from 0 to 512 [ 144.556296][T12250] EXT4-fs: Ignoring removed orlov option [ 144.562602][T12250] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 144.575602][T12250] EXT4-fs error (device loop2): ext4_iget_extra_inode:5075: inode #15: comm syz.2.3733: corrupted in-inode xattr: e_value size too large [ 144.590684][T12254] loop1: detected capacity change from 0 to 512 [ 144.597336][T12250] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.3733: couldn't read orphan inode 15 (err -117) [ 144.610237][T12254] EXT4-fs: Ignoring removed nomblk_io_submit option [ 144.635536][T12250] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.695549][ T8311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.714471][T12274] macvtap0: entered promiscuous mode [ 144.717862][T12272] loop3: detected capacity change from 0 to 764 [ 144.722337][T12274] macvtap0: left promiscuous mode [ 144.731735][T12272] rock: directory entry would overflow storage [ 144.738086][T12272] rock: sig=0x4654, size=5, remaining=4 [ 144.745688][T12272] isofs: Unable to find the ".." directory for NFS. [ 144.768971][T12278] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3746'. [ 144.778090][T12278] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3746'. [ 144.850475][T12293] af_packet: tpacket_rcv: packet too big, clamped from 108 to 4294967272. macoff=96 [ 144.947955][T12309] loop2: detected capacity change from 0 to 164 [ 144.986433][T12309] Unable to read rock-ridge attributes [ 144.993916][T12309] Unable to read rock-ridge attributes [ 145.025631][T12315] loop3: detected capacity change from 0 to 512 [ 145.044494][T12315] EXT4-fs (loop3): failed to initialize system zone (-117) [ 145.055149][T12315] EXT4-fs (loop3): mount failed [ 145.145738][T12320] loop1: detected capacity change from 0 to 1024 [ 145.161667][T12327] loop3: detected capacity change from 0 to 512 [ 145.186978][T12330] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3770'. [ 145.243213][T12327] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.265075][T12327] ext4 filesystem being mounted at /804/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.317586][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.803552][T12387] loop3: detected capacity change from 0 to 512 [ 145.812700][T12387] EXT4-fs warning (device loop3): ext4_xattr_inode_get:546: inode #11: comm syz.3.3796: ea_inode file size=0 entry size=6 [ 145.825914][T12387] ------------[ cut here ]------------ [ 145.831433][T12387] EA inode 11 i_nlink=2 [ 145.831894][T12387] WARNING: CPU: 0 PID: 12387 at fs/ext4/xattr.c:1058 ext4_xattr_inode_update_ref+0x36a/0x380 [ 145.846551][T12387] Modules linked in: [ 145.850607][T12387] CPU: 0 UID: 0 PID: 12387 Comm: syz.3.3796 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 145.862436][T12387] Tainted: [W]=WARN [ 145.866444][T12387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 145.877179][T12387] RIP: 0010:ext4_xattr_inode_update_ref+0x36a/0x380 [ 145.884010][T12387] Code: 90 49 8d 7e 40 e8 66 00 b9 ff 4d 8b 6e 40 4c 89 e7 e8 7a fb b8 ff 41 8b 56 48 48 c7 c7 df 4d 55 86 4c 89 ee e8 c7 07 68 ff 90 <0f> 0b 90 90 e9 ff fe ff ff e8 08 76 b0 03 0f 1f 84 00 00 00 00 00 [ 145.903771][T12387] RSP: 0018:ffffc90008b7f778 EFLAGS: 00010246 [ 145.910101][T12387] RAX: 9d8260c40172b300 RBX: ffff88811a5475c8 RCX: 0000000000080000 [ 145.918743][T12387] RDX: ffffc90004f3b000 RSI: 00000000000042eb RDI: 00000000000042ec [ 145.926977][T12387] RBP: 0000000000000002 R08: 0001c90008b7f5f7 R09: 0000000000000000 [ 145.935647][T12387] R10: 00000000ffffffff R11: 0000000000000002 R12: ffff88811a547578 [ 145.943910][T12387] R13: 000000000000000b R14: ffff88811a547530 R15: 0000000000000001 [ 145.952149][T12387] FS: 00007f3f724f76c0(0000) GS:ffff8882aee3a000(0000) knlGS:0000000000000000 [ 145.961476][T12387] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 145.968133][T12387] CR2: 00007f3f73a721e0 CR3: 0000000112ec4000 CR4: 00000000003506f0 [ 145.976478][T12387] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 145.984723][T12387] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 145.992966][T12387] Call Trace: [ 145.996425][T12387] [ 145.999377][T12387] ext4_xattr_inode_dec_ref_all+0x579/0x830 [ 146.005455][T12387] ? errseq_check+0x2c/0x50 [ 146.010078][T12387] ext4_xattr_delete_inode+0x6b7/0x790 [ 146.015784][T12387] ? ext4_truncate+0x92e/0xae0 [ 146.020579][T12387] ext4_evict_inode+0xa6a/0xd90 [ 146.025594][T12387] ? __pfx_ext4_evict_inode+0x10/0x10 [ 146.031052][T12387] evict+0x2e3/0x550 [ 146.035142][T12387] ? __dquot_initialize+0x146/0x7c0 [ 146.040438][T12387] iput+0x4ed/0x650 [ 146.044355][T12387] ext4_process_orphan+0x1a9/0x1c0 [ 146.049780][T12387] ext4_orphan_cleanup+0x6a8/0xa00 [ 146.055036][T12387] ext4_fill_super+0x3483/0x3810 [ 146.060075][T12387] ? snprintf+0x86/0xb0 [ 146.064278][T12387] ? set_blocksize+0x1a8/0x310 [ 146.069119][T12387] ? sb_set_blocksize+0xe3/0x100 [ 146.074200][T12387] ? setup_bdev_super+0x30e/0x370 [ 146.079309][T12387] ? __pfx_ext4_fill_super+0x10/0x10 [ 146.084694][T12387] get_tree_bdev_flags+0x291/0x300 [ 146.090229][T12387] ? __pfx_ext4_fill_super+0x10/0x10 [ 146.096096][T12387] get_tree_bdev+0x1f/0x30 [ 146.100709][T12387] ext4_get_tree+0x1c/0x30 [ 146.105263][T12387] vfs_get_tree+0x57/0x1d0 [ 146.109723][T12387] do_new_mount+0x24d/0x660 [ 146.114331][T12387] path_mount+0x4a5/0xb70 [ 146.118737][T12387] ? user_path_at+0x109/0x130 [ 146.123557][T12387] __se_sys_mount+0x28c/0x2e0 [ 146.128314][T12387] __x64_sys_mount+0x67/0x80 [ 146.133038][T12387] x64_sys_call+0x2b51/0x3000 [ 146.137888][T12387] do_syscall_64+0xd2/0x200 [ 146.142630][T12387] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 146.148888][T12387] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 146.154657][T12387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.160603][T12387] RIP: 0033:0x7f3f73a9066a [ 146.165226][T12387] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.185060][T12387] RSP: 002b:00007f3f724f6e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 146.193888][T12387] RAX: ffffffffffffffda RBX: 00007f3f724f6ef0 RCX: 00007f3f73a9066a [ 146.202046][T12387] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f3f724f6eb0 [ 146.210138][T12387] RBP: 0000200000000180 R08: 00007f3f724f6ef0 R09: 0000000000800700 [ 146.218180][T12387] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 146.226252][T12387] R13: 00007f3f724f6eb0 R14: 0000000000000473 R15: 0000200000000680 [ 146.234391][T12387] [ 146.237437][T12387] ---[ end trace 0000000000000000 ]--- [ 146.252345][T12387] EXT4-fs (loop3): 1 orphan inode deleted [ 146.299162][T12407] loop2: detected capacity change from 0 to 512 [ 146.315889][T12407] EXT4-fs (loop2): too many log groups per flexible block group [ 146.336881][T12407] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 146.347063][T12407] EXT4-fs (loop2): mount failed [ 146.691610][T12480] program syz.2.3833 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 146.738495][T12481] vcan0 speed is unknown, defaulting to 1000 [ 146.899756][T12502] loop0: detected capacity change from 0 to 128 [ 146.919599][T12502] FAT-fs (loop0): Directory bread(block 32) failed [ 146.926881][T12502] FAT-fs (loop0): Directory bread(block 33) failed [ 146.933601][T12502] FAT-fs (loop0): Directory bread(block 34) failed [ 146.950975][T12507] loop3: detected capacity change from 0 to 1024 [ 146.954428][T12502] FAT-fs (loop0): Directory bread(block 35) failed [ 146.972499][T12507] EXT4-fs: Ignoring removed nobh option [ 146.978270][T12507] EXT4-fs: Ignoring removed bh option [ 146.979132][T12502] FAT-fs (loop0): Directory bread(block 36) failed [ 146.995357][T12507] EXT4-fs (loop3): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 146.997016][ T29] kauditd_printk_skb: 158 callbacks suppressed [ 146.997036][ T29] audit: type=1326 audit(1760594699.249:2993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12511 comm="syz.2.3848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f0eaaeec9 code=0x7ffc0000 [ 147.035291][ T29] audit: type=1326 audit(1760594699.249:2994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12511 comm="syz.2.3848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f0eaaeec9 code=0x7ffc0000 [ 147.045071][T12502] FAT-fs (loop0): Directory bread(block 37) failed [ 147.067049][T12502] FAT-fs (loop0): Directory bread(block 38) failed [ 147.073704][T12502] FAT-fs (loop0): Directory bread(block 39) failed [ 147.080546][T12502] FAT-fs (loop0): Directory bread(block 40) failed [ 147.111311][ T29] audit: type=1326 audit(1760594699.269:2995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12511 comm="syz.2.3848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f0eaaeec9 code=0x7ffc0000 [ 147.118207][T12502] FAT-fs (loop0): Directory bread(block 41) failed [ 147.135361][ T29] audit: type=1326 audit(1760594699.269:2996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12511 comm="syz.2.3848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f0eaaeec9 code=0x7ffc0000 [ 147.165500][ T29] audit: type=1326 audit(1760594699.319:2997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12511 comm="syz.2.3848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1f0eaaeec9 code=0x7ffc0000 [ 147.189489][ T29] audit: type=1326 audit(1760594699.319:2998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12511 comm="syz.2.3848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f0eaaeec9 code=0x7ffc0000 [ 147.214040][ T29] audit: type=1326 audit(1760594699.319:2999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12511 comm="syz.2.3848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f0eaaeec9 code=0x7ffc0000 [ 147.237857][ T29] audit: type=1326 audit(1760594699.319:3000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12511 comm="syz.2.3848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f0eaaeec9 code=0x7ffc0000 [ 147.261752][ T29] audit: type=1326 audit(1760594699.319:3001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12511 comm="syz.2.3848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f0eaaeec9 code=0x7ffc0000 [ 147.285500][ T29] audit: type=1326 audit(1760594699.329:3002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12511 comm="syz.2.3848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1f0eaaeec9 code=0x7ffc0000 [ 147.407377][T12502] bio_check_eod: 74 callbacks suppressed [ 147.407397][T12502] syz.0.3843: attempt to access beyond end of device [ 147.407397][T12502] loop0: rw=0, sector=4108, nr_sectors = 4 limit=128 [ 147.443956][T12502] FAT-fs (loop0): Filesystem has been set read-only [ 147.454881][T12502] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 147.471304][T12535] loop3: detected capacity change from 0 to 8192 [ 147.493275][T12535] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000ff00) [ 147.512045][T12535] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000ff00) [ 147.658967][T12569] loop0: detected capacity change from 0 to 512 [ 147.735354][T12569] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 147.748140][T12569] EXT4-fs (loop0): orphan cleanup on readonly fs [ 147.758737][T12578] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3877'. [ 147.770724][T12578] 0{X: renamed from gretap0 (while UP) [ 147.772313][T12569] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.3874: corrupted inode contents [ 147.789634][T12569] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #16: comm syz.0.3874: mark_inode_dirty error [ 147.816029][T12569] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.3874: corrupted inode contents [ 147.839147][T12569] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.3874: mark_inode_dirty error [ 147.840650][T12578] 0{X: entered allmulticast mode [ 147.858124][T12578] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 147.895371][T12569] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.3874: corrupted inode contents [ 147.927970][T12569] EXT4-fs error (device loop0) in ext4_orphan_del:301: Corrupt filesystem [ 147.936982][T12569] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.3874: corrupted inode contents [ 147.949891][T12569] EXT4-fs error (device loop0): ext4_truncate:4637: inode #16: comm syz.0.3874: mark_inode_dirty error [ 147.968212][T12569] EXT4-fs error (device loop0) in ext4_process_orphan:343: Corrupt filesystem [ 147.991579][T12569] EXT4-fs (loop0): 1 truncate cleaned up [ 148.000023][ T12] EXT4-fs error (device loop0): ext4_release_dquot:6981: comm kworker/u8:0: Failed to release dquot type 1 [ 148.081312][T12596] loop3: detected capacity change from 0 to 8192 [ 148.196966][T12624] ip6t_srh: unknown srh match flags 4000 [ 148.369094][T12647] loop4: detected capacity change from 0 to 128 [ 148.376088][T12647] vfat: Unknown parameter '017777777777777777777770000000000000000000000018446744073709551615{i:A- yWn8v4blb_;5 93dAU]^LtDxJ' [ 148.486013][T12660] loop0: detected capacity change from 0 to 512 [ 148.495035][T12660] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 148.512085][T12660] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 148.521278][T12660] System zones: 1-12 [ 148.525607][T12660] EXT4-fs (loop0): orphan cleanup on readonly fs [ 148.534313][T12660] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.3915: bg 0: block 361: padding at end of block bitmap is not set [ 148.587135][T12660] EXT4-fs (loop0): Remounting filesystem read-only [ 148.593962][T12660] EXT4-fs (loop0): 1 truncate cleaned up [ 148.708151][T12693] loop2: detected capacity change from 0 to 2048 [ 148.727202][T12693] EXT4-fs (loop2): failed to initialize system zone (-117) [ 148.734629][T12693] EXT4-fs (loop2): mount failed [ 148.830506][T12716] loop4: detected capacity change from 0 to 512 [ 148.847288][T12716] ext4 filesystem being mounted at /358/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.908311][T12722] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 148.960050][T12731] random: crng reseeded on system resumption [ 149.046609][T12738] program syz.2.3948 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 149.268435][T12757] loop2: detected capacity change from 0 to 1024 [ 149.275402][T12757] EXT4-fs: Ignoring removed nobh option [ 149.281213][T12757] EXT4-fs: inline encryption not supported [ 149.348449][T12757] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3957: bg 0: block 312: padding at end of block bitmap is not set [ 149.388489][T12767] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 149.516269][T12782] loop2: detected capacity change from 0 to 512 [ 149.644624][T12792] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 149.658659][T12794] ip6t_srh: unknown srh match flags 4000 [ 149.743135][T12807] vcan0 speed is unknown, defaulting to 1000 [ 149.856242][T12822] ip6t_srh: unknown srh match flags 4000 [ 150.077534][T12846] random: crng reseeded on system resumption [ 150.087771][T12844] loop2: detected capacity change from 0 to 512 [ 150.108393][T12844] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 150.125795][T12844] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 150.137627][T12844] System zones: 1-12 [ 150.141647][T12844] EXT4-fs (loop2): orphan cleanup on readonly fs [ 150.161029][T12844] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3998: bg 0: block 361: padding at end of block bitmap is not set [ 150.177107][T12844] EXT4-fs (loop2): Remounting filesystem read-only [ 150.183934][T12844] EXT4-fs (loop2): 1 truncate cleaned up [ 150.365454][T12878] loop0: detected capacity change from 0 to 1024 [ 150.375981][T12878] EXT4-fs: Ignoring removed nomblk_io_submit option [ 150.387879][T12878] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0003] [ 150.396281][T12878] System zones: 0-1, 3-36 [ 150.503718][T12886] loop0: detected capacity change from 0 to 1024 [ 150.513909][T12888] loop3: detected capacity change from 0 to 512 [ 150.521153][T12886] EXT4-fs: Ignoring removed nobh option [ 150.526935][T12886] EXT4-fs: inline encryption not supported [ 150.533776][T12888] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 150.549495][T12886] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.4027: bg 0: block 312: padding at end of block bitmap is not set [ 150.555098][T12888] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 150.576623][T12888] System zones: 1-12 [ 150.580962][T12888] EXT4-fs (loop3): orphan cleanup on readonly fs [ 150.594043][T12888] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.4016: bg 0: block 361: padding at end of block bitmap is not set [ 150.622206][T12888] EXT4-fs (loop3): Remounting filesystem read-only [ 150.629431][T12888] EXT4-fs (loop3): 1 truncate cleaned up [ 150.729408][T12911] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 150.737735][T12911] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 150.822413][T12925] loop3: detected capacity change from 0 to 512 [ 150.830016][T12925] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 150.840844][T12925] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.4033: invalid block [ 150.855121][T12925] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.4033: invalid indirect mapped block 4294967295 (level 1) [ 150.869991][T12928] loop2: detected capacity change from 0 to 512 [ 150.876994][T12925] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.4033: invalid indirect mapped block 4294967295 (level 1) [ 150.891954][T12925] EXT4-fs (loop3): 2 truncates cleaned up [ 150.899972][T12928] ext4 filesystem being mounted at /431/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.986253][T12938] loop2: detected capacity change from 0 to 1764 [ 151.051654][T12948] loop4: detected capacity change from 0 to 512 [ 151.059225][T12947] loop2: detected capacity change from 0 to 1024 [ 151.080293][T12947] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.4052: Allocating blocks 497-513 which overlap fs metadata [ 151.095458][T12947] EXT4-fs (loop2): pa ffff888106a23d90: logic 256, phys. 369, len 9 [ 151.103751][T12947] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 1 [ 151.114258][T12947] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 18: block 129:freeing already freed block (bit 8); block bitmap corrupt. [ 151.120776][T12956] loop4: detected capacity change from 0 to 1764 [ 151.192478][T12962] loop4: detected capacity change from 0 to 512 [ 151.199803][T12960] loop2: detected capacity change from 0 to 2048 [ 151.206970][T12962] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 151.217217][T12962] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.4047: invalid block [ 151.230551][T12962] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.4047: invalid indirect mapped block 4294967295 (level 1) [ 151.245155][T12962] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.4047: invalid indirect mapped block 4294967295 (level 1) [ 151.260245][T12962] EXT4-fs (loop4): 2 truncates cleaned up [ 151.575410][T12991] vcan0 speed is unknown, defaulting to 1000 [ 151.595035][T12960] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 151.616480][T12960] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 151.629218][T12960] EXT4-fs (loop2): This should not happen!! Data will be lost [ 151.629218][T12960] [ 151.639009][T12960] EXT4-fs (loop2): Total free blocks count 0 [ 151.645189][T12960] EXT4-fs (loop2): Free/Dirty block details [ 151.651291][T12960] EXT4-fs (loop2): free_blocks=2415919104 [ 151.657068][T12960] EXT4-fs (loop2): dirty_blocks=8208 [ 151.662431][T12960] EXT4-fs (loop2): Block reservation details [ 151.668563][T12960] EXT4-fs (loop2): i_reserved_data_blocks=513 [ 151.688706][T13008] loop0: detected capacity change from 0 to 512 [ 151.712833][T13008] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.4070: bg 0: block 248: padding at end of block bitmap is not set [ 151.735853][T13008] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.4070: Failed to acquire dquot type 1 [ 151.756713][T13008] EXT4-fs (loop0): 1 truncate cleaned up [ 151.764364][ T3417] kernel read not supported for file /sg0 (pid: 3417 comm: kworker/0:5) [ 151.788807][T13008] ext4 filesystem being mounted at /660/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.818650][ T406] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 151.831649][ T406] EXT4-fs (loop2): This should not happen!! Data will be lost [ 151.831649][ T406] [ 151.927210][T13020] loop0: detected capacity change from 0 to 512 [ 152.007378][ T29] kauditd_printk_skb: 242 callbacks suppressed [ 152.007396][ T29] audit: type=1400 audit(1760594704.259:3242): avc: denied { ioctl } for pid=13015 comm="syz.4.4073" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 152.007745][T13016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.047798][T13016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.583111][ T29] audit: type=1400 audit(1760594704.829:3243): avc: denied { watch watch_reads } for pid=13028 comm="syz.0.4089" path="/664" dev="tmpfs" ino=3471 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 152.589988][T13030] loop4: detected capacity change from 0 to 512 [ 152.627770][T13030] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 152.642300][ T29] audit: type=1400 audit(1760594704.829:3244): avc: denied { create } for pid=13032 comm="syz.2.4090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 152.662533][ T29] audit: type=1400 audit(1760594704.839:3245): avc: denied { bind } for pid=13032 comm="syz.2.4090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 152.682055][ T29] audit: type=1400 audit(1760594704.869:3246): avc: denied { connect } for pid=13032 comm="syz.2.4090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 152.694796][T13039] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4080'. [ 152.702102][ T29] audit: type=1400 audit(1760594704.869:3247): avc: denied { listen } for pid=13032 comm="syz.2.4090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 152.731129][T13039] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4080'. [ 152.740144][T13039] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4080'. [ 152.760971][T13030] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 152.774241][T13030] System zones: 1-12 [ 152.783571][T13030] EXT4-fs (loop4): orphan cleanup on readonly fs [ 152.801770][T13030] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.4078: bg 0: block 361: padding at end of block bitmap is not set [ 152.822252][T13030] EXT4-fs (loop4): Remounting filesystem read-only [ 152.831222][T13030] EXT4-fs (loop4): 1 truncate cleaned up [ 152.857745][T13046] loop3: detected capacity change from 0 to 512 [ 152.879922][ T29] audit: type=1400 audit(1760594705.119:3248): avc: denied { create } for pid=13047 comm="syz.1.4085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 152.899848][ T29] audit: type=1400 audit(1760594705.119:3249): avc: denied { setopt } for pid=13047 comm="syz.1.4085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 152.919796][ T29] audit: type=1400 audit(1760594705.119:3250): avc: denied { read } for pid=13047 comm="syz.1.4085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 152.945218][ T29] audit: type=1400 audit(1760594705.199:3251): avc: denied { write } for pid=13047 comm="syz.1.4085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 153.019543][T13065] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4094'. [ 153.187236][T13061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.196706][T13061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.267532][T13109] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 153.273262][T13109] dvmrp1: linktype set to 780 [ 153.416429][T13118] syz.2.4102: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 153.431160][T13118] CPU: 0 UID: 0 PID: 13118 Comm: syz.2.4102 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 153.431203][T13118] Tainted: [W]=WARN [ 153.431214][T13118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 153.431232][T13118] Call Trace: [ 153.431241][T13118] [ 153.431251][T13118] __dump_stack+0x1d/0x30 [ 153.431354][T13118] dump_stack_lvl+0xe8/0x140 [ 153.431384][T13118] dump_stack+0x15/0x1b [ 153.431400][T13118] warn_alloc+0x12b/0x1a0 [ 153.431468][T13118] ? __rcu_read_unlock+0x4f/0x70 [ 153.431570][T13118] __vmalloc_node_range_noprof+0x9d/0xed0 [ 153.431613][T13118] ? __futex_wait+0x1fa/0x260 [ 153.431636][T13118] ? __pfx_futex_wake_mark+0x10/0x10 [ 153.431676][T13118] ? __rcu_read_unlock+0x4f/0x70 [ 153.431711][T13118] ? avc_has_perm_noaudit+0x1b1/0x200 [ 153.431789][T13118] ? should_fail_ex+0x30/0x280 [ 153.431835][T13118] ? xskq_create+0x36/0xe0 [ 153.431900][T13118] vmalloc_user_noprof+0x7d/0xb0 [ 153.431932][T13118] ? xskq_create+0x80/0xe0 [ 153.431967][T13118] xskq_create+0x80/0xe0 [ 153.432064][T13118] xsk_init_queue+0x95/0xf0 [ 153.432101][T13118] xsk_setsockopt+0x3f5/0x640 [ 153.432134][T13118] ? __pfx_xsk_setsockopt+0x10/0x10 [ 153.432169][T13118] __sys_setsockopt+0x184/0x200 [ 153.432246][T13118] __x64_sys_setsockopt+0x64/0x80 [ 153.432280][T13118] x64_sys_call+0x20ec/0x3000 [ 153.432311][T13118] do_syscall_64+0xd2/0x200 [ 153.432337][T13118] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 153.432411][T13118] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 153.432441][T13118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.432471][T13118] RIP: 0033:0x7f1f0eaaeec9 [ 153.432492][T13118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.432592][T13118] RSP: 002b:00007f1f0d517038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 153.432617][T13118] RAX: ffffffffffffffda RBX: 00007f1f0ed05fa0 RCX: 00007f1f0eaaeec9 [ 153.432634][T13118] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 153.432648][T13118] RBP: 00007f1f0eb31f91 R08: 0000000000000004 R09: 0000000000000000 [ 153.432667][T13118] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 153.432699][T13118] R13: 00007f1f0ed06038 R14: 00007f1f0ed05fa0 R15: 00007ffc561ab568 [ 153.432722][T13118] [ 153.432739][T13118] Mem-Info: [ 153.671160][T13118] active_anon:40840 inactive_anon:7 isolated_anon:0 [ 153.671160][T13118] active_file:20676 inactive_file:2516 isolated_file:0 [ 153.671160][T13118] unevictable:0 dirty:303 writeback:0 [ 153.671160][T13118] slab_reclaimable:3492 slab_unreclaimable:48349 [ 153.671160][T13118] mapped:30331 shmem:36330 pagetables:1236 [ 153.671160][T13118] sec_pagetables:0 bounce:0 [ 153.671160][T13118] kernel_misc_reclaimable:0 [ 153.671160][T13118] free:1774126 free_pcp:1226 free_cma:0 [ 153.717002][T13118] Node 0 active_anon:163360kB inactive_anon:28kB active_file:82704kB inactive_file:10064kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:120976kB dirty:1212kB writeback:0kB shmem:145204kB kernel_stack:4624kB pagetables:4944kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 153.745141][T13118] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 153.775629][T13118] lowmem_reserve[]: 0 2883 7862 7862 [ 153.781737][T13118] Node 0 DMA32 free:2949056kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2952688kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:100kB free_cma:0kB [ 153.813855][T13118] lowmem_reserve[]: 0 0 4978 4978 [ 153.819186][T13118] Node 0 Normal free:4113412kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:157212kB inactive_anon:28kB active_file:82704kB inactive_file:10064kB unevictable:0kB writepending:1212kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:7496kB local_pcp:668kB free_cma:0kB [ 153.819355][T13118] lowmem_reserve[]: 0 0 0 0 [ 153.819407][T13118] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 153.871475][T13118] Node 0 DMA32: 2*4kB (M) 3*8kB (M) 4*16kB (M) 1*32kB (M) 3*64kB (M) 3*128kB (M) 3*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949056kB [ 153.888089][T13118] Node 0 Normal: 190*4kB (UE) 388*8kB (UME) 11*16kB (ME) 86*32kB (UME) 86*64kB (ME) 56*128kB (UME) 25*256kB (UME) 20*512kB (ME) 7*1024kB (UM) 5*2048kB (UM) 990*4096kB (M) = 4108552kB [ 153.907062][T13118] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 153.917015][T13118] 58433 total pagecache pages [ 153.922055][T13118] 487 pages in swap cache [ 153.922067][T13118] Free swap = 123048kB [ 153.922075][T13118] Total swap = 124996kB [ 153.922083][T13118] 2097051 pages RAM [ 153.922090][T13118] 0 pages HighMem/MovableOnly [ 153.922096][T13118] 80479 pages reserved [ 153.975012][ C0] ================================================================== [ 153.975052][ C0] BUG: KCSAN: data-race in wq_worker_tick / wq_worker_tick [ 153.975096][ C0] [ 153.975102][ C0] read-write to 0xffff88810122cab8 of 8 bytes by interrupt on cpu 1: [ 153.975118][ C0] wq_worker_tick+0x60/0x230 [ 153.975145][ C0] sched_tick+0x11a/0x270 [ 153.975165][ C0] update_process_times+0x15f/0x190 [ 153.975183][ C0] tick_nohz_handler+0x249/0x2d0 [ 153.975209][ C0] __hrtimer_run_queues+0x20f/0x5a0 [ 153.975236][ C0] hrtimer_interrupt+0x21a/0x460 [ 153.975267][ C0] __sysvec_apic_timer_interrupt+0x5f/0x1d0 [ 153.975306][ C0] sysvec_apic_timer_interrupt+0x6f/0x80 [ 153.975349][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 153.975371][ C0] __sanitizer_cov_trace_cmp8+0x37/0x90 [ 153.975397][ C0] is_vmalloc_addr+0x2d/0x90 [ 153.975425][ C0] kvfree+0xd/0x20 [ 153.975460][ C0] io_free_region+0xa3/0x160 [ 153.975490][ C0] io_ring_ctx_free+0x1de/0x3a0 [ 153.975524][ C0] io_ring_exit_work+0x529/0x560 [ 153.975553][ C0] process_scheduled_works+0x4ce/0x9d0 [ 153.975584][ C0] worker_thread+0x582/0x770 [ 153.975610][ C0] kthread+0x489/0x510 [ 153.975635][ C0] ret_from_fork+0x122/0x1b0 [ 153.975661][ C0] ret_from_fork_asm+0x1a/0x30 [ 153.975689][ C0] [ 153.975695][ C0] read-write to 0xffff88810122cab8 of 8 bytes by interrupt on cpu 0: [ 153.975716][ C0] wq_worker_tick+0x60/0x230 [ 153.975742][ C0] sched_tick+0x11a/0x270 [ 153.975763][ C0] update_process_times+0x15f/0x190 [ 153.975780][ C0] tick_nohz_handler+0x249/0x2d0 [ 153.975808][ C0] __hrtimer_run_queues+0x20f/0x5a0 [ 153.975839][ C0] hrtimer_interrupt+0x21a/0x460 [ 153.975865][ C0] __sysvec_apic_timer_interrupt+0x5f/0x1d0 [ 153.975895][ C0] sysvec_apic_timer_interrupt+0x6f/0x80 [ 153.975941][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 153.975966][ C0] _raw_spin_unlock_irq+0x2f/0x50 [ 153.975997][ C0] process_scheduled_works+0x486/0x9d0 [ 153.976056][ C0] worker_thread+0x582/0x770 [ 153.976084][ C0] kthread+0x489/0x510 [ 153.976111][ C0] ret_from_fork+0x122/0x1b0 [ 153.976137][ C0] ret_from_fork_asm+0x1a/0x30 [ 153.976165][ C0] [ 153.976170][ C0] value changed: 0x000000000001adb0 -> 0x000000000001d4c0 [ 153.976182][ C0] [ 153.976185][ C0] Reported by Kernel Concurrency Sanitizer on: [ 153.976199][ C0] CPU: 0 UID: 0 PID: 13135 Comm: kworker/u8:43 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 153.976229][ C0] Tainted: [W]=WARN [ 153.976235][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 153.976249][ C0] Workqueue: iou_exit io_ring_exit_work [ 153.976282][ C0] ================================================================== [ 154.000233][T13142] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4109'.