last executing test programs: 2m10.849425206s ago: executing program 1 (id=1417): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080001400000001708000240000000010900010073797a30000000000900020073797a320000000014000000110001"], 0x78}}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @address_reply={0x12, 0x0, 0x0, 0x40}}}}}, 0x0) 2m10.767176767s ago: executing program 1 (id=1422): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 2m9.778312111s ago: executing program 1 (id=1454): syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000640)='./bus\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x4, 0x1268, &(0x7f0000002500)="$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") syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f0000000280)='./bus\x00', 0x444, 0x0, 0x1, 0x0, &(0x7f0000000080)) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 2m9.600417963s ago: executing program 1 (id=1465): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@newtaction={0x2c4, 0x30, 0x300, 0x71bd2a, 0x25dfdbff, {}, [{0x2b0, 0x1, [@m_gact={0x280, 0x110, 0x0, 0x0, {{0x9}, {0x4}, {0x251, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_bpf={0x2c, 0xa, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x2c4}}, 0x20040800) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 2m9.490647965s ago: executing program 1 (id=1475): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x7fffffe, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) 2m9.440575425s ago: executing program 1 (id=1476): ptrace(0x10, 0x1) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x6, 0x0, 0x0, 0x0, 0x8000000009917, 0x400000000000fffd}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0xffffffffffffffff}, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x1}, 0x0) 1m53.974476439s ago: executing program 32 (id=1476): ptrace(0x10, 0x1) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x6, 0x0, 0x0, 0x0, 0x8000000009917, 0x400000000000fffd}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0xffffffffffffffff}, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x1}, 0x0) 1.259055852s ago: executing program 3 (id=6303): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x1008002, &(0x7f00000003c0)={[{@errors_remount}, {@sysvgroups}, {@resuid}, {@jqfmt_vfsold}, {@data_ordered}, {@resuid={'resuid', 0x3d, 0xee00}}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x0, 0x5ee, &(0x7f0000000600)="$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") mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0x4000001) lsetxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x0) 1.175646744s ago: executing program 3 (id=6305): syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./bus\x00', 0x0, &(0x7f0000002480)=ANY=[], 0x1, 0x11f4, &(0x7f0000001280)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x105042, 0x1db) writev(r1, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1) 552.395722ms ago: executing program 2 (id=6336): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000f2ffffff850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003900)=ANY=[@ANYBLOB="240000001600010a00ffffffffffffff81000000040000000c0003"], 0x24}}, 0x0) 505.803473ms ago: executing program 2 (id=6337): creat(&(0x7f0000000240)='./bus\x00', 0xc2) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000680)={[{@nolazytime}, {@lazytime}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@bsdgroups}, {@lazytime}, {@noload}]}, 0x3, 0x45c, &(0x7f0000002400)="$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") 387.534494ms ago: executing program 5 (id=6344): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newlink={0x34, 0x10, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x28000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x2}, 0x0) 382.667115ms ago: executing program 0 (id=6345): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0, 0x0, 0x7}, 0x18) r1 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5\x00\x00\x00\x00\x00\x00\x00\x80\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x86<\a\xf5\xdcJ\xbd\x18\xa3\x06b\xc2\xf3\x9e\xf1\x00>\xfb\x91>!\x9fY\xc23\x90\x96\x9d\xf2F\xda\x99W\xa9?[\xe8\xe4*e}\x18\x89TLZl6qf\xdec\xd0\xa4\xa8\xb95\xe9\x10\xd5\x8e\xe1k\x8d\xa1\xc85p\xe9\f\x91K\x946B\x19\xfd\x92\'\x10\xab\xf2\x95\xdd@\b\xfb\x13|\xda\xa2%\xeb/\x1d\xd1HD\x9fjI\xc4MT_v\xe8W\xf7R\x03\x10^Vr\xb7\b7\x00\\n\x91\xc8\xde\xaa;$\xeb\x87\x9f\xb52\xc8_\xcd\x9a\xbc\xe73(\x94\x80\x9b\x01\xf0\x05\x00\x00\x00\x00\x00\x00\x00\xb2Qw\x1b\x04\x96\x84\xbf\x13\xae\x83yk\x8c\xd3\x9e\xbe\xcc\r\x9da9\v\xd4\x91\x9aW\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\xd7\x1d\x9e\xd4\xf5L\x88\xff\x11\x93~d\xc1\x86rO\x8e4\xd5\b\xd9\x8fb\x96\x9atOpC}{\xc7\xcf\x94\xd2S\x8a\x1f\xecc\xc1= %^p\x91P\x9c\xee\x8ev^\x85\x15&\xc5L?j[K\xeb\xaa\xef\x02\xe5\x82*\b\xcc\"\x89w\x92\x17\xe8\x94=\xe6Q\xa7\x9d^\xb8\xee\xe5\x8aN3\x05\xeaH\xfe\x16\x06f\nW\xb0A\xc1G\x14\xcf\xe0\x9dw\xc1\xddr]N', 0x2) write$binfmt_script(r1, &(0x7f00000196c0)={'#! ', './file0'}, 0xb) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 351.128435ms ago: executing program 4 (id=6346): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x80a, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB="2c756e616d653dd0"]) 339.285395ms ago: executing program 5 (id=6347): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001d00000008000300", @ANYRES32=r3, @ANYBLOB="24002f800c00038008000100830000000c0002000203aaaaaaaaaaaa080001"], 0x40}, 0x1, 0x0, 0x0, 0x5396ebcfacd913b0}, 0x44040010) 302.495566ms ago: executing program 0 (id=6348): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) 301.802236ms ago: executing program 3 (id=6349): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000200)=r1}, 0x20) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) 275.842496ms ago: executing program 5 (id=6350): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000010280)={0x1, 0x0, 0x3, 0x1, 0x5, "90897f000003000000000000001e277fffffeb"}) r1 = dup(r0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000080)={0x9, 0x2, 0x0, 0x82fa, 0x1a, "e8540000808000"}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0xff) 260.574946ms ago: executing program 4 (id=6351): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0x10, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000000c0)=ANY=[]) 258.848756ms ago: executing program 0 (id=6352): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='9p_protocol_dump\x00', r0}, 0x10) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 250.497506ms ago: executing program 2 (id=6353): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x5707b563827c8365, 0x0, 0x0, {{}, {@void, @val={0x8, 0x12a}, @void}}}, 0x1c}}, 0x0) 227.179237ms ago: executing program 5 (id=6354): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) lsm_get_self_attr(0x67, &(0x7f0000000580)={0x0, 0x0, 0xad, 0x8d, ""/141}, &(0x7f0000000080)=0xad, 0x0) 221.639377ms ago: executing program 3 (id=6355): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8923, &(0x7f0000000040)={'bond0\x00', 0x1001}) 204.695057ms ago: executing program 5 (id=6356): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x80, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/anycast6\x00') close_range(r1, 0xffffffffffffffff, 0x0) 181.412068ms ago: executing program 0 (id=6357): r0 = gettid() r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f0000000ec0)=[{&(0x7f0000001380)=""/4096, 0x1000}], 0x1) rt_sigqueueinfo(r0, 0x21, &(0x7f0000000180)={0x33, 0x40000020, 0xfffffffb}) 176.532887ms ago: executing program 4 (id=6358): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000040)=@id, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) shutdown(r0, 0x2) 168.564558ms ago: executing program 2 (id=6359): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r1, 0x0, 0xf7}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000300)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffd}]}) getpgid(0x0) 140.685868ms ago: executing program 5 (id=6360): syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./bus\x00', 0x0, &(0x7f0000002480)=ANY=[], 0x1, 0x11f4, &(0x7f0000001280)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x105042, 0x1db) writev(r1, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1) 140.585398ms ago: executing program 3 (id=6361): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000080)={@val={0x0, 0x6003}, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x4000, 0x0, 0xfc, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0xa000, 0x4e24, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0x9, 0x0, @void}}}}}}}}, 0x32) 140.501428ms ago: executing program 4 (id=6362): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ff01000000000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = memfd_secret(0x80000) fcntl$setlease(r1, 0x400, 0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000000380)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) 92.404778ms ago: executing program 2 (id=6363): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001c40)={0x0, &(0x7f0000000000)=""/254, 0x0, 0xfe, 0x9, 0x1000, 0x0, @void, @value}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x18) r1 = io_uring_setup(0x2c4c, &(0x7f00000000c0)={0x0, 0xffffffff, 0x10, 0x1000000, 0x4}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x18, &(0x7f0000000000), 0x1) 91.918838ms ago: executing program 2 (id=6373): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r2) 91.470658ms ago: executing program 4 (id=6374): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00034000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f3000000000080001"], 0xd4}, 0x1, 0x0, 0x0, 0x20000041}, 0x0) 46.963489ms ago: executing program 3 (id=6364): creat(&(0x7f0000000240)='./bus\x00', 0xc2) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000680)={[{@nolazytime}, {@lazytime}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@bsdgroups}, {@lazytime}, {@noload}]}, 0x3, 0x45c, &(0x7f0000002400)="$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") 46.854449ms ago: executing program 4 (id=6365): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0), 0xfc, 0x574, &(0x7f0000001980)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$nci(r1, 0x0, 0xfffffeea) 44.751119ms ago: executing program 0 (id=6376): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='security.selinux\x00', 0x0, 0x0) 0s ago: executing program 0 (id=6366): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) lsm_get_self_attr(0x67, &(0x7f0000000580)={0x0, 0x0, 0xad, 0x8d, ""/141}, &(0x7f0000000080)=0xad, 0x0) kernel console output (not intermixed with test programs): m interface [ 133.522812][T12296] team0: left allmulticast mode [ 133.527716][T12296] team_slave_0: left allmulticast mode [ 133.533333][T12296] team_slave_1: left allmulticast mode [ 133.538885][T12296] team0: left promiscuous mode [ 133.544091][T12296] team_slave_0: left promiscuous mode [ 133.549501][T12296] team_slave_1: left promiscuous mode [ 133.799298][T12351] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3921'. [ 133.889638][T12368] loop5: detected capacity change from 0 to 512 [ 133.899335][T12368] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.3928: casefold flag without casefold feature [ 133.917876][T12368] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.3928: couldn't read orphan inode 15 (err -117) [ 133.931110][T12368] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.966187][ T7645] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.013182][T12384] ALSA: seq fatal error: cannot create timer (-22) [ 134.042302][T12388] SELinux: ebitmap start bit (2147614744) is not a multiple of the map unit size (64) [ 134.052530][T12388] SELinux: failed to load policy [ 134.080697][T12394] netlink: 'syz.0.3933': attribute type 29 has an invalid length. [ 134.090882][T12394] netlink: 'syz.0.3933': attribute type 29 has an invalid length. [ 134.115337][T12398] netlink: 'syz.4.3937': attribute type 1 has an invalid length. [ 134.126963][T12394] netlink: 500 bytes leftover after parsing attributes in process `syz.0.3933'. [ 134.437804][T12440] loop5: detected capacity change from 0 to 1024 [ 134.448247][T12441] loop2: detected capacity change from 0 to 256 [ 134.466297][T12440] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.497124][ T7645] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.566019][T12453] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3956'. [ 134.575061][T12453] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3956'. [ 134.857768][T12473] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3963'. [ 134.867427][T12473] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3963'. [ 135.052851][T12484] loop0: detected capacity change from 0 to 512 [ 135.060242][T12484] EXT4-fs: Ignoring removed orlov option [ 135.066495][T12484] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 135.078122][T12484] EXT4-fs (loop0): 1 orphan inode deleted [ 135.083955][T12484] EXT4-fs (loop0): 1 truncate cleaned up [ 135.090094][T12484] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.107413][T12484] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 135.122003][T12484] EXT4-fs (loop0): Remounting filesystem read-only [ 135.138717][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.574409][T12509] vhci_hcd: invalid port number 94 [ 135.718564][T12530] loop0: detected capacity change from 0 to 1024 [ 135.735978][T12530] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.784394][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.850701][T12543] loop2: detected capacity change from 0 to 512 [ 135.862587][ T29] kauditd_printk_skb: 212 callbacks suppressed [ 135.862604][ T29] audit: type=1326 audit(1746850617.772:3519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12539 comm="syz.0.3991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d2ad5e969 code=0x7ffc0000 [ 135.892777][ T29] audit: type=1326 audit(1746850617.772:3520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12539 comm="syz.0.3991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1d2ad5e969 code=0x7ffc0000 [ 135.916535][ T29] audit: type=1326 audit(1746850617.772:3521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12539 comm="syz.0.3991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d2ad5e969 code=0x7ffc0000 [ 135.940576][ T29] audit: type=1326 audit(1746850617.772:3522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12539 comm="syz.0.3991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f1d2ad5e969 code=0x7ffc0000 [ 135.964272][ T29] audit: type=1326 audit(1746850617.772:3523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12539 comm="syz.0.3991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d2ad5e969 code=0x7ffc0000 [ 135.988893][ T29] audit: type=1326 audit(1746850617.912:3524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12539 comm="syz.0.3991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d2ad5e969 code=0x7ffc0000 [ 136.027276][ T29] audit: type=1326 audit(1746850617.942:3525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12547 comm="syz.5.3999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadb088e969 code=0x7ffc0000 [ 136.050958][ T29] audit: type=1326 audit(1746850617.942:3526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12547 comm="syz.5.3999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadb088e969 code=0x7ffc0000 [ 136.081188][ T29] audit: type=1326 audit(1746850617.962:3527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12547 comm="syz.5.3999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7fadb088e969 code=0x7ffc0000 [ 136.104937][ T29] audit: type=1326 audit(1746850617.962:3528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12547 comm="syz.5.3999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadb088e969 code=0x7ffc0000 [ 136.120416][T12543] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.156243][T12543] ext4 filesystem being mounted at /796/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 136.227848][T12565] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 136.255081][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.880244][T12677] Cannot find del_set index 0 as target [ 137.061988][T12705] netlink: 'syz.4.4079': attribute type 1 has an invalid length. [ 137.075977][T12675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.100381][T12675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.612550][T12723] usb usb1: usbfs: process 12723 (syz.0.4087) did not claim interface 0 before use [ 137.634593][T12726] loop5: detected capacity change from 0 to 128 [ 137.655961][T12726] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 137.669935][T12726] ext4 filesystem being mounted at /425/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.716802][ T7645] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 137.735319][T12739] gretap0: entered promiscuous mode [ 137.744497][T12739] 0ªX¹¦D: renamed from gretap0 [ 137.751587][T12739] 0ªX¹¦D: left promiscuous mode [ 137.756607][T12739] 0ªX¹¦D: entered allmulticast mode [ 137.776736][T12745] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 137.780932][T12739] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 138.230199][T12793] loop4: detected capacity change from 0 to 512 [ 138.245432][T12793] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.258289][T12793] ext4 filesystem being mounted at /815/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 138.283057][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.757511][T12808] loop4: detected capacity change from 0 to 512 [ 138.787340][T12808] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.4113: iget: bad extended attribute block 1 [ 138.802431][T12808] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.4113: couldn't read orphan inode 15 (err -117) [ 138.824638][T12808] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.869683][T12808] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters [ 138.903288][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.018356][T12832] netlink: 'syz.3.4127': attribute type 13 has an invalid length. [ 139.029958][T12836] __nla_validate_parse: 14 callbacks suppressed [ 139.030022][T12836] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4126'. [ 139.046404][T12836] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4126'. [ 139.055494][T12836] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4126'. [ 139.077496][T12836] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4126'. [ 139.086488][T12836] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4126'. [ 139.095627][T12836] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4126'. [ 139.100782][T12832] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.131284][T12836] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4126'. [ 139.140424][T12836] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4126'. [ 139.151968][T12836] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4126'. [ 139.194931][T12832] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.206127][T12832] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.243969][T12832] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.253126][T12832] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.262151][T12832] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.271104][T12832] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.377449][T12853] loop0: detected capacity change from 0 to 256 [ 139.651996][T12873] loop0: detected capacity change from 0 to 512 [ 139.660229][T12873] EXT4-fs error (device loop0): ext4_iget_extra_inode:4693: inode #15: comm syz.0.4142: corrupted in-inode xattr: invalid ea_ino [ 139.673954][T12873] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.4142: couldn't read orphan inode 15 (err -117) [ 139.686811][T12873] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.714612][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.721263][T12877] loop3: detected capacity change from 0 to 512 [ 139.735453][T12877] EXT4-fs (loop3): 1 orphan inode deleted [ 139.741553][T12877] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.743251][T12881] netlink: 'syz.0.4143': attribute type 13 has an invalid length. [ 139.755178][ T6977] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:47: Failed to release dquot type 1 [ 139.763529][T12877] ext4 filesystem being mounted at /818/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.809736][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.024868][T12888] loop5: detected capacity change from 0 to 512 [ 140.047090][T12888] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.063071][T12888] ext4 filesystem being mounted at /429/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.082424][T12892] loop3: detected capacity change from 0 to 764 [ 140.090835][T12892] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 140.136936][T12881] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.210654][ T7645] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.293798][T12907] loop3: detected capacity change from 0 to 512 [ 140.300793][T12907] journal_path: Non-blockdev passed as './bus' [ 140.307860][T12907] EXT4-fs: error: could not find journal device path [ 140.332393][T12909] loop5: detected capacity change from 0 to 256 [ 140.388476][T12911] loop2: detected capacity change from 0 to 2048 [ 140.408072][T12911] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.602487][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.615511][T12881] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.647989][T12881] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.699220][T12927] loop3: detected capacity change from 0 to 164 [ 140.780528][T12937] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 140.796781][T12935] netlink: 100 bytes leftover after parsing attributes in process `syz.3.4165'. [ 140.860850][T12881] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.869938][T12881] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.879718][T12881] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.889084][T12881] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.976420][T12946] netlink: 'syz.3.4173': attribute type 5 has an invalid length. [ 141.122407][ T29] kauditd_printk_skb: 51 callbacks suppressed [ 141.122436][ T29] audit: type=1400 audit(1746850623.032:3579): avc: denied { read write } for pid=12964 comm="syz.3.4179" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 141.154127][ T29] audit: type=1400 audit(1746850623.032:3580): avc: denied { open } for pid=12964 comm="syz.3.4179" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 141.271824][T12985] loop0: detected capacity change from 0 to 128 [ 141.301297][T12985] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 141.313977][T12985] ext4 filesystem being mounted at /944/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.363575][ T3320] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 141.703194][T13004] loop4: detected capacity change from 0 to 256 [ 141.734977][T13002] 0ªX¹¦D: renamed from gretap0 [ 141.758045][T13002] 0ªX¹¦D: entered allmulticast mode [ 141.764208][T13007] SELinux: +}[@ (13007) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 141.776555][T13002] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 141.860805][ T29] audit: type=1326 audit(1746850623.772:3581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13017 comm="syz.2.4201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1272975927 code=0x7ffc0000 [ 141.885889][ T29] audit: type=1326 audit(1746850623.772:3582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13017 comm="syz.2.4201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f127291ab39 code=0x7ffc0000 [ 141.910353][ T29] audit: type=1326 audit(1746850623.772:3583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13017 comm="syz.2.4201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1272975927 code=0x7ffc0000 [ 141.935188][ T29] audit: type=1326 audit(1746850623.772:3584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13017 comm="syz.2.4201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f127291ab39 code=0x7ffc0000 [ 141.960498][ T29] audit: type=1326 audit(1746850623.772:3585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13017 comm="syz.2.4201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127297e969 code=0x7ffc0000 [ 141.985712][ T29] audit: type=1326 audit(1746850623.772:3586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13017 comm="syz.2.4201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f127297e969 code=0x7ffc0000 [ 142.009299][ T29] audit: type=1326 audit(1746850623.772:3587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13017 comm="syz.2.4201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127297e969 code=0x7ffc0000 [ 142.074886][ T29] audit: type=1326 audit(1746850623.822:3588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13017 comm="syz.2.4201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f127297e969 code=0x7ffc0000 [ 142.146160][T13032] loop4: detected capacity change from 0 to 128 [ 142.152299][T13034] IPv6: Can't replace route, no match found [ 142.162368][T13032] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 142.185153][T13032] ext4 filesystem being mounted at /826/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.236439][T13039] SELinux: +}[@ (13039) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 142.285673][T13041] gretap0: entered promiscuous mode [ 142.296428][T13041] 0ªX¹¦D: renamed from gretap0 [ 142.308175][T13041] 0ªX¹¦D: left promiscuous mode [ 142.313862][T13041] 0ªX¹¦D: entered allmulticast mode [ 142.320128][T13041] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 142.361037][ T3315] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 142.430295][T13052] lo: left promiscuous mode [ 142.533459][T11754] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 142.566044][T11754] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 142.660613][T13068] tipc: Started in network mode [ 142.665590][T13068] tipc: Node identity ac14140f, cluster identity 4711 [ 142.683722][T13068] tipc: New replicast peer: 255.255.255.255 [ 142.690020][T13068] tipc: Enabled bearer , priority 10 [ 142.713734][T13072] program syz.2.4225 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 142.916069][T13100] loop4: detected capacity change from 0 to 512 [ 142.933084][T13100] ext4: Unknown parameter 'nouser_xattr' [ 142.958110][T13103] loop3: detected capacity change from 0 to 1024 [ 142.975319][T13103] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 142.991638][T13103] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 143.015471][T13103] jbd2_journal_init_inode: Cannot locate journal superblock [ 143.022896][T13103] EXT4-fs (loop3): Could not load journal inode [ 143.044638][T13107] loop0: detected capacity change from 0 to 256 [ 143.364328][T13104] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.428082][T13104] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.440147][T13104] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.481703][T13104] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.490840][T13104] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.500723][T13104] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.510007][T13104] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.527505][T13104] hsr0: left allmulticast mode [ 143.532391][T13104] hsr_slave_0: left allmulticast mode [ 143.538207][T13104] hsr_slave_1: left allmulticast mode [ 143.547496][T13104] macvlan2: left promiscuous mode [ 143.559364][T13125] netlink: 'syz.0.4247': attribute type 30 has an invalid length. [ 143.575986][T13125] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.585646][T13125] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.594478][T13125] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.603350][T13125] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.641168][T13125] netlink: 'syz.0.4247': attribute type 30 has an invalid length. [ 143.654256][T13135] loop5: detected capacity change from 0 to 512 [ 143.664142][T13135] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 143.716015][T13135] EXT4-fs error (device loop5): ext4_get_branch:178: inode #11: block 4294967295: comm syz.5.4251: invalid block [ 143.738555][T13135] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.4251: invalid indirect mapped block 4294967295 (level 1) [ 143.793318][T13135] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.4251: invalid indirect mapped block 4294967295 (level 1) [ 143.805892][T13147] loop3: detected capacity change from 0 to 256 [ 143.821107][T11749] tipc: Node number set to 2886997007 [ 143.829753][T13135] EXT4-fs (loop5): 2 truncates cleaned up [ 143.848278][T13135] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.878584][T13135] EXT4-fs (loop5): shut down requested (2) [ 143.900185][ T7645] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.977355][T13170] macvlan2: left promiscuous mode [ 144.017849][T13170] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 144.026898][T13170] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 144.035894][T13170] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 144.045481][T13170] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 144.140608][T13179] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 144.202604][T13189] __nla_validate_parse: 11 callbacks suppressed [ 144.209014][T13189] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4274'. [ 144.218331][T13189] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4274'. [ 144.235639][T13189] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4274'. [ 144.246690][T13189] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4274'. [ 144.255982][T13189] netlink: 84 bytes leftover after parsing attributes in process `syz.2.4274'. [ 144.274172][T13194] vhci_hcd: invalid port number 96 [ 144.279380][T13194] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 144.652162][T13248] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4304'. [ 144.702781][T13251] SELinux: ebitmap: truncated map [ 144.708846][T13251] SELinux: failed to load policy [ 144.998914][T13261] loop0: detected capacity change from 0 to 512 [ 145.006141][T13261] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 145.017128][T13261] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.4309: invalid block [ 145.029418][T13261] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.4309: invalid indirect mapped block 4294967295 (level 1) [ 145.043658][T13261] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.4309: invalid indirect mapped block 4294967295 (level 1) [ 145.058179][T13261] EXT4-fs (loop0): 2 truncates cleaned up [ 145.064540][T13261] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.081860][T13261] EXT4-fs (loop0): shut down requested (2) [ 145.097311][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.268838][T13291] loop4: detected capacity change from 0 to 512 [ 145.283930][T13291] EXT4-fs (loop4): too many log groups per flexible block group [ 145.291688][T13291] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 145.299203][T13291] EXT4-fs (loop4): mount failed [ 145.308931][T13291] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4322'. [ 145.702592][T13343] loop2: detected capacity change from 0 to 1024 [ 145.716332][T13343] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.743315][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.866843][T13354] netlink: 'syz.2.4350': attribute type 1 has an invalid length. [ 145.963122][T13364] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4355'. [ 145.986951][T13364] IPVS: Error joining to the multicast group [ 146.127431][ T29] kauditd_printk_skb: 163 callbacks suppressed [ 146.127448][ T29] audit: type=1400 audit(1746850628.042:3752): avc: denied { create } for pid=13384 comm="syz.2.4365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 146.159849][T13388] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 146.178114][ T29] audit: type=1400 audit(1746850628.082:3753): avc: denied { ioctl } for pid=13384 comm="syz.2.4365" path="socket:[34607]" dev="sockfs" ino=34607 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 146.262870][ T29] audit: type=1400 audit(1746850628.172:3754): avc: denied { getopt } for pid=13393 comm="syz.0.4370" lport=51 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 146.332696][ T29] audit: type=1400 audit(1746850628.242:3755): avc: denied { map } for pid=13395 comm="syz.0.4372" path="socket:[34634]" dev="sockfs" ino=34634 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 146.357484][ T29] audit: type=1400 audit(1746850628.242:3756): avc: denied { execmem } for pid=13395 comm="syz.0.4372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 146.401282][T13398] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 146.447086][T13409] Cannot find del_set index 1 as target [ 146.511729][ T29] audit: type=1400 audit(1746850628.422:3757): avc: denied { mount } for pid=13412 comm="syz.5.4379" name="/" dev="ramfs" ino=35583 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 146.565917][ T29] audit: type=1400 audit(1746850628.462:3758): avc: denied { unmount } for pid=7645 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 146.586234][ T29] audit: type=1400 audit(1746850628.472:3759): avc: denied { ioctl } for pid=13418 comm="syz.0.4382" path="socket:[35587]" dev="sockfs" ino=35587 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 146.614824][T13417] IPv6: NLM_F_CREATE should be specified when creating new route [ 146.646524][T13427] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4386'. [ 146.685888][T13425] netlink: 64535 bytes leftover after parsing attributes in process `syz.0.4385'. [ 146.697375][ T29] audit: type=1400 audit(1746850628.612:3760): avc: denied { create } for pid=13430 comm="syz.5.4388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 146.732322][ T29] audit: type=1400 audit(1746850628.642:3761): avc: denied { setopt } for pid=13430 comm="syz.5.4388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 147.279384][T13504] loop3: detected capacity change from 0 to 128 [ 147.327837][T13510] batadv_slave_0: entered promiscuous mode [ 147.334637][T13509] batadv_slave_0: left promiscuous mode [ 147.474670][T13521] loop4: detected capacity change from 0 to 1024 [ 147.513201][T13526] loop5: detected capacity change from 0 to 512 [ 147.521588][T13521] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.544055][T13526] EXT4-fs: Mount option(s) incompatible with ext2 [ 147.616211][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.633200][T13532] loop0: detected capacity change from 0 to 256 [ 147.735021][T13549] loop2: detected capacity change from 0 to 128 [ 147.842143][T13565] loop3: detected capacity change from 0 to 1024 [ 147.850245][T13556] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 147.863589][T11752] IPVS: starting estimator thread 0... [ 147.874167][T13565] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.941717][T13579] bond1: entered promiscuous mode [ 147.947024][T13579] bond1: entered allmulticast mode [ 147.963582][T13579] 8021q: adding VLAN 0 to HW filter on device bond1 [ 147.971348][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.973103][T13568] IPVS: using max 1920 ests per chain, 96000 per kthread [ 148.121988][T13595] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2816 sclass=netlink_route_socket pid=13595 comm=syz.2.4458 [ 148.153416][T13597] loop3: detected capacity change from 0 to 164 [ 148.410522][T13623] wg1: entered promiscuous mode [ 148.415498][T13623] wg1: entered allmulticast mode [ 148.875357][T13632] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 149.093913][T13643] loop0: detected capacity change from 0 to 1024 [ 149.115104][T13643] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.144504][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.164296][T13653] tipc: Started in network mode [ 149.169418][T13653] tipc: Node identity -:, cluster identity 4711 [ 149.176385][T13653] tipc: Enabling of bearer rejected, failed to enable media [ 149.266133][T13670] atomic_op ffff88811d53b128 conn xmit_atomic 0000000000000000 [ 149.392086][T13689] __nla_validate_parse: 4 callbacks suppressed [ 149.392103][T13689] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4500'. [ 149.578258][T13725] wg1: entered promiscuous mode [ 149.583924][T13725] wg1: entered allmulticast mode [ 149.654430][T13730] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4519'. [ 149.767332][T13747] loop3: detected capacity change from 0 to 512 [ 149.781685][T13747] EXT4-fs: Ignoring removed i_version option [ 149.797944][T13747] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 149.883954][T13747] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.941219][T13747] ext4 filesystem being mounted at /918/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.969408][T13747] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #2: comm syz.3.4527: corrupted inode contents [ 149.990153][T13747] EXT4-fs (loop3): Remounting filesystem read-only [ 150.027674][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.129439][T13775] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4540'. [ 150.139345][T13775] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4540'. [ 150.148639][T13775] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4540'. [ 150.206826][T13784] loop0: detected capacity change from 0 to 512 [ 150.235724][T13775] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4540'. [ 150.244762][T13775] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4540'. [ 150.253891][T13775] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4540'. [ 150.266579][T13784] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.293559][T13784] ext4 filesystem being mounted at /1005/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.325981][T13775] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4540'. [ 150.335057][T13775] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4540'. [ 150.355150][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.519792][T13797] netlink: 'syz.2.4548': attribute type 1 has an invalid length. [ 150.989544][T13849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.998182][T13849] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.129670][T13865] loop5: detected capacity change from 0 to 512 [ 151.136417][T13865] EXT4-fs: Ignoring removed i_version option [ 151.143387][T13865] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 151.154349][T13865] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.167010][T13865] ext4 filesystem being mounted at /516/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.180264][T13865] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #2: comm syz.5.4576: corrupted inode contents [ 151.182024][ T29] kauditd_printk_skb: 144 callbacks suppressed [ 151.182130][ T29] audit: type=1400 audit(1746850862.099:3906): avc: denied { write } for pid=13866 comm="syz.2.4577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 151.192427][T13865] EXT4-fs (loop5): Remounting filesystem read-only [ 151.226065][ T7645] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.264003][ T29] audit: type=1400 audit(1746850862.179:3907): avc: denied { kexec_image_load } for pid=13875 comm="syz.2.4580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 151.344401][ T29] audit: type=1400 audit(1746850862.259:3908): avc: denied { ioctl } for pid=13887 comm="syz.5.4598" path="socket:[37416]" dev="sockfs" ino=37416 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 151.474219][ T29] audit: type=1326 audit(1746850862.389:3909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13902 comm="syz.2.4604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127297e969 code=0x7ffc0000 [ 151.498700][ T29] audit: type=1326 audit(1746850862.389:3910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13902 comm="syz.2.4604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127297e969 code=0x7ffc0000 [ 151.522485][ T29] audit: type=1326 audit(1746850862.389:3911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13902 comm="syz.2.4604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f127297e969 code=0x7ffc0000 [ 151.547354][ T29] audit: type=1326 audit(1746850862.389:3912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13902 comm="syz.2.4604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127297e969 code=0x7ffc0000 [ 151.571267][ T29] audit: type=1326 audit(1746850862.389:3913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13902 comm="syz.2.4604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127297e969 code=0x7ffc0000 [ 151.597112][ T29] audit: type=1326 audit(1746850862.439:3914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13902 comm="syz.2.4604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f127297e969 code=0x7ffc0000 [ 151.620803][ T29] audit: type=1326 audit(1746850862.479:3915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13902 comm="syz.2.4604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127297e969 code=0x7ffc0000 [ 151.702913][T13911] loop2: detected capacity change from 0 to 512 [ 151.727310][T13911] EXT4-fs: Ignoring removed i_version option [ 151.737095][T13911] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 151.767644][T13911] ext4 filesystem being mounted at /921/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.785247][T13911] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #2: comm syz.2.4592: corrupted inode contents [ 151.799495][T13911] EXT4-fs (loop2): Remounting filesystem read-only [ 152.729157][T14021] SELinux: failed to load policy [ 152.755776][T14028] loop3: detected capacity change from 0 to 512 [ 152.841094][T14033] random: crng reseeded on system resumption [ 152.868881][T14045] netlink: 'syz.0.4657': attribute type 21 has an invalid length. [ 152.979822][T14062] loop5: detected capacity change from 0 to 512 [ 153.130586][T14080] delete_channel: no stack [ 153.157574][T14085] loop2: detected capacity change from 0 to 512 [ 153.165361][T14085] EXT4-fs: Ignoring removed oldalloc option [ 153.174530][T14085] EXT4-fs error (device loop2): ext4_xattr_inode_iget:433: comm syz.2.4674: Parent and EA inode have the same ino 15 [ 153.187297][T14085] EXT4-fs (loop2): Remounting filesystem read-only [ 153.193950][T14085] EXT4-fs warning (device loop2): ext4_evict_inode:262: couldn't mark inode dirty (err -30) [ 153.205040][T14085] EXT4-fs (loop2): 1 orphan inode deleted [ 153.580277][T14127] sch_fq: defrate 2048 ignored. [ 153.625302][T14131] Non-string source [ 153.676131][T14135] loop4: detected capacity change from 0 to 2048 [ 153.698878][T14137] sd 0:0:1:0: device reset [ 153.723283][T14135] loop4: p1 < > p4 [ 153.729481][T14135] loop4: p4 size 8388608 extends beyond EOD, truncated [ 153.789254][T14140] SELinux: failed to load policy [ 154.096922][T14174] vhci_hcd: invalid port number 96 [ 154.102222][T14174] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 154.456791][T14193] No such timeout policy "syz0" [ 154.608622][T14206] loop3: detected capacity change from 0 to 2048 [ 154.617416][T14207] sctp: [Deprecated]: syz.5.4727 (pid 14207) Use of int in maxseg socket option. [ 154.617416][T14207] Use struct sctp_assoc_value instead [ 154.849806][T14239] loop3: detected capacity change from 0 to 2048 [ 154.866464][T14241] xt_CT: You must specify a L4 protocol and not use inversions on it [ 154.904200][T14239] loop3: p1 < > p4 [ 154.908778][T14239] loop3: p4 size 8388608 extends beyond EOD, truncated [ 155.076930][T14274] loop0: detected capacity change from 0 to 512 [ 155.085127][T14275] serio: Serial port ptm0 [ 155.101817][T14274] EXT4-fs (loop0): failed to initialize system zone (-117) [ 155.109296][T14274] EXT4-fs (loop0): mount failed [ 155.162218][T14291] __nla_validate_parse: 19 callbacks suppressed [ 155.162239][T14291] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4768'. [ 155.206590][T14295] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4770'. [ 155.268020][T14307] loop3: detected capacity change from 0 to 1024 [ 155.301780][T14315] loop4: detected capacity change from 0 to 164 [ 155.328973][T14319] loop0: detected capacity change from 0 to 512 [ 155.346177][T11752] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 155.357838][T14319] EXT4-fs warning (device loop0): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 155.393761][T11752] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 155.425198][T14319] EXT4-fs (loop0): mount failed [ 155.552016][T14342] loop0: detected capacity change from 0 to 2048 [ 155.653287][T14342] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 155.719638][T14342] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 30 with max blocks 34 with error 28 [ 155.732779][T14342] EXT4-fs (loop0): This should not happen!! Data will be lost [ 155.732779][T14342] [ 155.742664][T14342] EXT4-fs (loop0): Total free blocks count 0 [ 155.748896][T14342] EXT4-fs (loop0): Free/Dirty block details [ 155.755155][T14342] EXT4-fs (loop0): free_blocks=4096 [ 155.760521][T14342] EXT4-fs (loop0): dirty_blocks=816 [ 155.765938][T14342] EXT4-fs (loop0): Block reservation details [ 155.772659][T14342] EXT4-fs (loop0): i_reserved_data_blocks=51 [ 155.804691][T14363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.813522][T14363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.826343][ T6956] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 155.838839][ T6956] EXT4-fs (loop0): This should not happen!! Data will be lost [ 155.838839][ T6956] [ 155.961198][T14387] program syz.4.4811 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 156.038847][T14398] loop0: detected capacity change from 0 to 1024 [ 156.053026][T14398] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 156.064017][T14398] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 156.075034][T14398] JBD2: no valid journal superblock found [ 156.080792][T14398] EXT4-fs (loop0): Could not load journal inode [ 156.225730][T14417] loop0: detected capacity change from 0 to 512 [ 156.263011][T14417] EXT4-fs: Ignoring removed orlov option [ 156.268733][T14417] EXT4-fs: Ignoring removed nomblk_io_submit option [ 156.275421][T14417] EXT4-fs: Ignoring removed orlov option [ 156.288743][T14417] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846c01c, mo2=0002] [ 156.297614][T14417] System zones: 1-12 [ 156.301920][T14417] EXT4-fs error (device loop0): ext4_init_orphan_info:586: comm syz.0.4825: inode #0: comm syz.0.4825: iget: illegal inode # [ 156.360247][T14417] EXT4-fs (loop0): get orphan inode failed [ 156.370694][T14417] EXT4-fs (loop0): mount failed [ 156.400882][T14425] loop4: detected capacity change from 0 to 2048 [ 156.416243][ T29] kauditd_printk_skb: 166 callbacks suppressed [ 156.416262][ T29] audit: type=1400 audit(1746850867.329:4081): avc: denied { unlink } for pid=7645 comm="syz-executor" name="file0" dev="tmpfs" ino=2863 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 156.452888][T14427] loop2: detected capacity change from 0 to 512 [ 156.460981][T14425] loop4: p1 < > p4 [ 156.465082][T14431] loop5: detected capacity change from 0 to 164 [ 156.467363][T14425] loop4: p4 size 8388608 extends beyond EOD, truncated [ 156.490100][T14427] ext4 filesystem being mounted at /982/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 156.491864][ T29] audit: type=1326 audit(1746850867.369:4082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14430 comm="syz.5.4832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadb088e969 code=0x7ffc0000 [ 156.524834][ T29] audit: type=1326 audit(1746850867.369:4083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14430 comm="syz.5.4832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadb088e969 code=0x7ffc0000 [ 156.548652][ T29] audit: type=1326 audit(1746850867.369:4084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14430 comm="syz.5.4832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fadb088e969 code=0x7ffc0000 [ 156.553764][T14427] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #2: comm syz.2.4829: corrupted inode contents [ 156.572949][ T29] audit: type=1326 audit(1746850867.369:4085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14430 comm="syz.5.4832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fadb088e9a3 code=0x7ffc0000 [ 156.585804][T14431] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 156.608400][ T29] audit: type=1326 audit(1746850867.369:4086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14430 comm="syz.5.4832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fadb088d41f code=0x7ffc0000 [ 156.639789][ T29] audit: type=1326 audit(1746850867.379:4087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14430 comm="syz.5.4832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fadb088e9f7 code=0x7ffc0000 [ 156.643179][T14427] EXT4-fs error (device loop2): ext4_dirty_inode:6103: inode #2: comm syz.2.4829: mark_inode_dirty error [ 156.664274][ T29] audit: type=1326 audit(1746850867.379:4088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14430 comm="syz.5.4832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fadb088d2d0 code=0x7ffc0000 [ 156.698910][ T29] audit: type=1326 audit(1746850867.379:4089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14430 comm="syz.5.4832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fadb088e56b code=0x7ffc0000 [ 156.703005][T14427] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #2: comm syz.2.4829: corrupted inode contents [ 156.722359][ T29] audit: type=1326 audit(1746850867.379:4090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14430 comm="syz.5.4832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fadb088d5ca code=0x7ffc0000 [ 156.751889][T14431] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 156.772860][T14431] Symlink component flag not implemented [ 156.778564][T14431] Symlink component flag not implemented [ 156.796901][T14427] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #2: comm syz.2.4829: mark_inode_dirty error [ 156.797346][T14431] Symlink component flag not implemented (7) [ 156.814492][T14431] Symlink component flag not implemented (116) [ 156.856116][T14446] rdma_op ffff88813a51b980 conn xmit_rdma 0000000000000000 [ 157.087438][T14485] IPv6: NLM_F_CREATE should be specified when creating new route [ 157.088601][T14486] loop5: detected capacity change from 0 to 256 [ 157.220437][T14507] loop0: detected capacity change from 0 to 512 [ 157.237789][T14507] ext4 filesystem being mounted at /1063/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.304044][T14507] EXT4-fs error (device loop0): ext4_empty_dir:3080: inode #12: comm wg1: Directory hole found for htree leaf block 0 [ 157.385698][T14534] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4880'. [ 157.416688][T14540] loop2: detected capacity change from 0 to 1024 [ 157.434078][T14540] journal_path: Lookup failure for './file0' [ 157.440329][T14540] EXT4-fs: error: could not find journal device path [ 157.474980][T14548] loop2: detected capacity change from 0 to 1024 [ 157.482486][T14548] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 157.493643][T14548] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 157.505434][T14548] JBD2: no valid journal superblock found [ 157.511245][T14548] EXT4-fs (loop2): Could not load journal inode [ 157.588319][T14556] loop4: detected capacity change from 0 to 512 [ 157.599969][T14556] journal_path: Non-blockdev passed as './bus' [ 157.606330][T14556] EXT4-fs: error: could not find journal device path [ 157.794568][T14583] xt_connbytes: Forcing CT accounting to be enabled [ 157.801659][T14583] Cannot find add_set index 0 as target [ 158.755698][T14638] SELinux: syz.5.4928 (14638) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 158.901518][T14668] loop3: detected capacity change from 0 to 1024 [ 158.909394][T14668] ext4: Unknown parameter 'nombca' [ 158.966371][T14681] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 158.966371][T14681] The task syz.4.4937 (14681) triggered the difference, watch for misbehavior. [ 159.011674][T14685] @ÿ: renamed from bond_slave_0 [ 159.079901][T14691] loop0: detected capacity change from 0 to 1024 [ 159.101281][T14691] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.4951: Failed to acquire dquot type 0 [ 159.117506][T14691] EXT4-fs (loop0): 1 truncate cleaned up [ 159.132336][T14691] EXT4-fs mount: 14 callbacks suppressed [ 159.132357][T14691] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.156148][T14691] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.470183][T14754] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4981'. [ 159.493826][T14754] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4981'. [ 159.715645][T14770] loop3: detected capacity change from 0 to 164 [ 159.744918][T14770] iso9660: Corrupted directory entry in block 0 of inode 1920 [ 159.802884][T14780] loop0: detected capacity change from 0 to 164 [ 159.822464][T14780] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 159.842553][T14780] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 159.854807][T14780] Symlink component flag not implemented [ 159.860540][T14780] Symlink component flag not implemented [ 159.866863][T14780] Symlink component flag not implemented (7) [ 159.872935][T14780] Symlink component flag not implemented (116) [ 160.257881][T14798] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 160.275269][T14800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.295472][T14800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.311169][T14804] xt_hashlimit: max too large, truncated to 1048576 [ 160.378444][T14808] syzkaller1: entered promiscuous mode [ 160.384285][T14808] syzkaller1: entered allmulticast mode [ 161.242923][T14849] loop2: detected capacity change from 0 to 2048 [ 161.258296][T14854] sctp: [Deprecated]: syz.4.5023 (pid 14854) Use of int in maxseg socket option. [ 161.258296][T14854] Use struct sctp_assoc_value instead [ 161.276873][T14849] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.350785][T14849] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 161.366457][T14849] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 30 with max blocks 34 with error 28 [ 161.379492][T14849] EXT4-fs (loop2): This should not happen!! Data will be lost [ 161.379492][T14849] [ 161.389375][T14849] EXT4-fs (loop2): Total free blocks count 0 [ 161.395440][T14849] EXT4-fs (loop2): Free/Dirty block details [ 161.401374][T14849] EXT4-fs (loop2): free_blocks=4096 [ 161.406713][T14849] EXT4-fs (loop2): dirty_blocks=512 [ 161.412069][T14849] EXT4-fs (loop2): Block reservation details [ 161.418138][T14849] EXT4-fs (loop2): i_reserved_data_blocks=32 [ 161.437916][ T29] kauditd_printk_skb: 233 callbacks suppressed [ 161.437986][ T29] audit: type=1400 audit(1746850872.349:4322): avc: denied { unmount } for pid=3324 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 161.467681][ T6936] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 161.507484][ T29] audit: type=1400 audit(1746850872.419:4323): avc: denied { create } for pid=14869 comm="syz.5.5033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 161.567246][T14887] loop3: detected capacity change from 0 to 512 [ 161.574751][ T29] audit: type=1400 audit(1746850872.489:4324): avc: denied { setopt } for pid=14884 comm="syz.0.5049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 161.596010][ T29] audit: type=1400 audit(1746850872.509:4325): avc: denied { bind } for pid=14884 comm="syz.0.5049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 161.605411][T14887] EXT4-fs (loop3): failed to initialize system zone (-117) [ 161.625268][T14887] EXT4-fs (loop3): mount failed [ 161.655364][ T29] audit: type=1400 audit(1746850872.569:4326): avc: denied { create } for pid=14891 comm="syz.5.5041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 161.681424][ T29] audit: type=1326 audit(1746850872.589:4327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14895 comm="syz.3.5043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f065ae969 code=0x7ffc0000 [ 161.705063][ T29] audit: type=1326 audit(1746850872.589:4328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14895 comm="syz.3.5043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f065ae969 code=0x7ffc0000 [ 161.729025][ T29] audit: type=1326 audit(1746850872.639:4329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14895 comm="syz.3.5043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7f1f065ae969 code=0x7ffc0000 [ 161.752661][ T29] audit: type=1326 audit(1746850872.639:4330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14895 comm="syz.3.5043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f065ae969 code=0x7ffc0000 [ 161.776435][ T29] audit: type=1326 audit(1746850872.639:4331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14895 comm="syz.3.5043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f065ae969 code=0x7ffc0000 [ 161.781546][T14898] smc: net device bond0 applied user defined pnetid SYZ2 [ 161.819192][T14900] loop3: detected capacity change from 0 to 164 [ 161.827249][T14900] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 161.829106][T14898] smc: net device bond0 erased user defined pnetid SYZ2 [ 161.837017][T14900] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 161.851004][T14900] Symlink component flag not implemented [ 161.857364][T14900] Symlink component flag not implemented [ 161.863321][T14900] Symlink component flag not implemented (7) [ 161.869503][T14900] Symlink component flag not implemented (116) [ 161.891720][T14902] loop0: detected capacity change from 0 to 512 [ 161.907461][T14906] loop3: detected capacity change from 0 to 512 [ 161.927475][T14906] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.5048: invalid indirect mapped block 256 (level 2) [ 161.929140][T14902] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.954353][T14902] ext4 filesystem being mounted at /1107/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 161.967936][T14911] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 161.978381][T14902] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #2: comm syz.0.5046: corrupted inode contents [ 161.978459][T14906] EXT4-fs (loop3): 2 truncates cleaned up [ 161.997414][T14906] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.015853][T14902] EXT4-fs error (device loop0): ext4_dirty_inode:6103: inode #2: comm syz.0.5046: mark_inode_dirty error [ 162.030079][T14902] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #2: comm syz.0.5046: corrupted inode contents [ 162.097141][T14905] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.5048: bg 0: block 5: invalid block bitmap [ 162.097488][T14902] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #2: comm syz.0.5046: mark_inode_dirty error [ 162.126565][T14922] loop5: detected capacity change from 0 to 512 [ 162.146226][T14922] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 162.158479][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.170272][T14922] EXT4-fs (loop5): 1 truncate cleaned up [ 162.176171][T14906] EXT4-fs warning (device loop3): ext4_block_to_path:107: block 209748232 > max in inode 15 [ 162.187891][T14922] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.203446][T14906] EXT4-fs warning (device loop3): ext4_block_to_path:107: block 209748236 > max in inode 15 [ 162.228965][T14906] EXT4-fs warning (device loop3): ext4_block_to_path:107: block 209748240 > max in inode 15 [ 162.239432][T14906] EXT4-fs warning (device loop3): ext4_block_to_path:107: block 209748244 > max in inode 15 [ 162.249762][T14906] EXT4-fs warning (device loop3): ext4_block_to_path:107: block 209748248 > max in inode 15 [ 162.261030][T14906] EXT4-fs warning (device loop3): ext4_block_to_path:107: block 209748252 > max in inode 15 [ 162.273814][T14934] smc: net device bond0 applied user defined pnetid SYZ2 [ 162.274516][T14906] EXT4-fs warning (device loop3): ext4_block_to_path:107: block 209748256 > max in inode 15 [ 162.291207][T14906] EXT4-fs warning (device loop3): ext4_block_to_path:107: block 209748260 > max in inode 15 [ 162.292543][ T7645] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.301522][T14906] EXT4-fs warning (device loop3): ext4_block_to_path:107: block 209748264 > max in inode 15 [ 162.320663][T14906] EXT4-fs warning (device loop3): ext4_block_to_path:107: block 209748268 > max in inode 15 [ 162.321385][T14934] smc: net device bond0 erased user defined pnetid SYZ2 [ 162.369044][T14939] loop2: detected capacity change from 0 to 512 [ 162.381645][T14939] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 162.390155][T14939] EXT4-fs (loop2): 1 truncate cleaned up [ 162.396441][T14939] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.430283][T14939] EXT4-fs error (device loop2): ext4_append:79: inode #2: comm syz.2.5061: Logical block already allocated [ 162.452607][T14939] EXT4-fs (loop2): Remounting filesystem read-only [ 162.535535][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.596915][T14963] loop4: detected capacity change from 0 to 256 [ 162.662838][T14969] loop5: detected capacity change from 0 to 1024 [ 162.712479][T14969] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.835271][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.108876][T15006] netlink: 'syz.2.5091': attribute type 3 has an invalid length. [ 163.149486][ T7645] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.182875][T15013] syz.2.5092: attempt to access beyond end of device [ 163.182875][T15013] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 163.219870][T15019] loop5: detected capacity change from 0 to 128 [ 163.252032][T15021] loop5: detected capacity change from 0 to 1024 [ 163.259149][T15021] EXT4-fs: Ignoring removed nomblk_io_submit option [ 163.276404][T15021] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.291999][T15021] EXT4-fs (loop5): shut down requested (0) [ 163.299752][T15021] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=15 [ 163.308698][T15021] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=15 [ 163.317754][T15021] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=15 [ 163.337120][ T7645] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.751045][T15037] loop4: detected capacity change from 0 to 512 [ 163.778430][T15037] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.791436][T15037] ext4 filesystem being mounted at /1002/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 163.806287][T15037] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #2: comm syz.4.5103: corrupted inode contents [ 163.819168][T15037] EXT4-fs error (device loop4): ext4_dirty_inode:6103: inode #2: comm syz.4.5103: mark_inode_dirty error [ 163.831964][T15037] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #2: comm syz.4.5103: corrupted inode contents [ 163.835662][T15045] syz.3.5106: attempt to access beyond end of device [ 163.835662][T15045] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 163.872582][T15037] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #2: comm syz.4.5103: mark_inode_dirty error [ 163.906185][T15054] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5110'. [ 163.930672][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.942067][T15056] loop0: detected capacity change from 0 to 256 [ 164.034962][T15075] loop4: detected capacity change from 0 to 128 [ 164.043738][T15075] EXT4-fs: Ignoring removed nobh option [ 164.051536][T15075] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 164.079122][T15075] ext4 filesystem being mounted at /1006/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 164.097540][T15075] EXT4-fs (loop4): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 164.119162][ T3315] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 164.133114][T15087] loop2: detected capacity change from 0 to 1024 [ 164.139993][T15087] EXT4-fs: Ignoring removed nomblk_io_submit option [ 164.155908][T15087] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.182045][T15087] EXT4-fs (loop2): shut down requested (0) [ 164.196082][T15087] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=15 [ 164.230512][T15087] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=15 [ 164.248641][T15087] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=15 [ 164.285851][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.350650][T15101] loop5: detected capacity change from 0 to 1024 [ 164.383586][T15101] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.397068][T15101] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 164.426101][ T7645] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.764162][T15142] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5149'. [ 164.843877][T15153] loop0: detected capacity change from 0 to 128 [ 164.870912][T15153] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 164.928762][T15164] loop3: detected capacity change from 0 to 512 [ 164.936905][T15153] ext4 filesystem being mounted at /1127/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 164.968244][T15164] EXT4-fs: Ignoring removed orlov option [ 164.995512][T15164] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 165.034979][ T3320] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 165.042023][T15164] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 165.065148][T15164] EXT4-fs error (device loop3): ext4_iget_extra_inode:4693: inode #15: comm syz.3.5159: corrupted in-inode xattr: e_value size too large [ 165.114072][T15164] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.5159: couldn't read orphan inode 15 (err -117) [ 165.137800][T15164] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.145432][T15176] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 165.194957][T15178] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 165.218676][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.305475][T15188] loop0: detected capacity change from 0 to 2048 [ 165.332436][T15188] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.477436][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.493700][T15218] netlink: 'syz.5.5184': attribute type 2 has an invalid length. [ 165.501535][T15218] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5184'. [ 165.863477][T15247] netlink: 596 bytes leftover after parsing attributes in process `syz.0.5190'. [ 166.072843][T15259] netlink: 'syz.2.5196': attribute type 4 has an invalid length. [ 166.080688][T15259] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.5196'. [ 166.098990][T15261] loop0: detected capacity change from 0 to 128 [ 166.498978][T15282] loop2: detected capacity change from 0 to 1024 [ 166.528762][T15282] EXT4-fs: Ignoring removed orlov option [ 166.551628][T15282] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 166.585134][ T29] kauditd_printk_skb: 185 callbacks suppressed [ 166.585149][ T29] audit: type=1400 audit(1746851645.743:4517): avc: denied { create } for pid=15286 comm="syz.3.5209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 166.635224][T15282] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.666871][ T29] audit: type=1400 audit(1746851645.753:4518): avc: denied { sys_admin } for pid=15286 comm="syz.3.5209" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 166.726357][T15282] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 166.761210][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.774555][ T29] audit: type=1400 audit(1746851645.880:4519): avc: denied { mount } for pid=15281 comm="syz.2.5207" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 166.797298][ T29] audit: type=1400 audit(1746851645.891:4520): avc: denied { remount } for pid=15281 comm="syz.2.5207" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 166.817164][ T29] audit: type=1400 audit(1746851645.943:4521): avc: denied { setopt } for pid=15293 comm="syz.0.5211" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 166.849687][ T29] audit: type=1400 audit(1746851645.975:4522): avc: denied { mounton } for pid=15295 comm="syz.4.5212" path="/1016/file0" dev="tmpfs" ino=5246 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 166.909924][ T29] audit: type=1400 audit(1746851646.091:4523): avc: denied { write } for pid=15304 comm="syz.4.5214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 166.936793][T15303] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5216'. [ 167.011928][ T29] audit: type=1400 audit(1746851646.134:4524): avc: denied { setopt } for pid=15304 comm="syz.4.5214" lport=51586 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 167.032797][ T29] audit: type=1400 audit(1746851646.134:4525): avc: denied { shutdown } for pid=15304 comm="syz.4.5214" lport=51586 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 167.036260][T15314] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 167.053728][ T29] audit: type=1400 audit(1746851646.144:4526): avc: denied { read } for pid=15304 comm="syz.4.5214" lport=51586 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 167.116946][T15317] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5220'. [ 167.124427][T15314] SELinux: failed to load policy [ 167.834164][T15384] loop3: detected capacity change from 0 to 1024 [ 167.867490][T15384] EXT4-fs: Ignoring removed orlov option [ 167.900836][T15384] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 167.914324][T15395] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5255'. [ 167.923589][T15395] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5255'. [ 167.967521][T15384] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.028286][T15384] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 168.053328][T15413] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5262'. [ 168.097275][T15416] loop4: detected capacity change from 0 to 512 [ 168.121044][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.153761][T15416] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.5266: invalid indirect mapped block 256 (level 2) [ 168.210692][T15416] EXT4-fs (loop4): 2 truncates cleaned up [ 168.231923][T15416] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.298130][T15433] netlink: 'syz.0.5273': attribute type 2 has an invalid length. [ 168.305928][T15433] netlink: 'syz.0.5273': attribute type 1 has an invalid length. [ 168.373835][T15415] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.5266: bg 0: block 5: invalid block bitmap [ 168.415251][T15416] EXT4-fs warning (device loop4): ext4_block_to_path:107: block 209748100 > max in inode 15 [ 168.427784][T15416] EXT4-fs warning (device loop4): ext4_block_to_path:107: block 209748104 > max in inode 15 [ 168.439049][T15416] EXT4-fs warning (device loop4): ext4_block_to_path:107: block 209748108 > max in inode 15 [ 168.449944][T15416] EXT4-fs warning (device loop4): ext4_block_to_path:107: block 209748112 > max in inode 15 [ 168.460818][T15416] EXT4-fs warning (device loop4): ext4_block_to_path:107: block 209748116 > max in inode 15 [ 168.471005][T15416] EXT4-fs warning (device loop4): ext4_block_to_path:107: block 209748120 > max in inode 15 [ 168.481241][T15416] EXT4-fs warning (device loop4): ext4_block_to_path:107: block 209748124 > max in inode 15 [ 168.509188][T15416] EXT4-fs warning (device loop4): ext4_block_to_path:107: block 209748128 > max in inode 15 [ 168.554048][T15416] EXT4-fs warning (device loop4): ext4_block_to_path:107: block 209748132 > max in inode 15 [ 168.618522][T15416] EXT4-fs warning (device loop4): ext4_block_to_path:107: block 209748136 > max in inode 15 [ 168.767612][T15463] futex_wake_op: syz.3.5286 tries to shift op by -1; fix this program [ 168.947456][T15478] sd 0:0:1:0: device reset [ 168.956090][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.029149][T15488] loop5: detected capacity change from 0 to 128 [ 169.106345][T15488] syz.5.5298: attempt to access beyond end of device [ 169.106345][T15488] loop5: rw=0, sector=121, nr_sectors = 120 limit=128 [ 169.193937][ T6978] kworker/u8:48: attempt to access beyond end of device [ 169.193937][ T6978] loop5: rw=1, sector=241, nr_sectors = 800 limit=128 [ 169.453490][T15514] __nla_validate_parse: 2 callbacks suppressed [ 169.453512][T15514] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5309'. [ 169.491279][T15514] vlan0: entered promiscuous mode [ 169.496376][T15514] hsr0: entered promiscuous mode [ 169.556416][T15534] loop2: detected capacity change from 0 to 512 [ 169.582766][T15534] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.5317: invalid indirect mapped block 256 (level 2) [ 169.598928][T15534] EXT4-fs (loop2): 2 truncates cleaned up [ 169.606507][T15534] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.683864][T15533] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.5317: bg 0: block 5: invalid block bitmap [ 169.707455][T15534] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 209748376 > max in inode 15 [ 169.768894][T15534] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 209748380 > max in inode 15 [ 169.808865][T15534] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 209748384 > max in inode 15 [ 169.825497][T15534] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 209748388 > max in inode 15 [ 169.841158][T15534] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 209748392 > max in inode 15 [ 169.854171][T15534] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 209748396 > max in inode 15 [ 169.878256][T15534] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 209748400 > max in inode 15 [ 169.908481][T15534] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 209748404 > max in inode 15 [ 169.924698][T15534] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 209748408 > max in inode 15 [ 169.945225][T15534] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 209748412 > max in inode 15 [ 170.388386][T15617] loop5: detected capacity change from 0 to 256 [ 170.399429][T15617] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000001) [ 170.407470][T15617] FAT-fs (loop5): Filesystem has been set read-only [ 170.506103][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.564087][T15634] loop5: detected capacity change from 0 to 512 [ 170.599172][T15634] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.614231][T15634] ext4 filesystem being mounted at /666/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 170.643883][ T7645] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.725977][T15661] loop2: detected capacity change from 0 to 128 [ 170.756678][T15664] Invalid ELF header magic: != ELF [ 170.763584][T15665] netlink: 'syz.0.5376': attribute type 1 has an invalid length. [ 170.771647][T15665] netlink: 'syz.0.5376': attribute type 2 has an invalid length. [ 170.772953][T15661] syz.2.5375: attempt to access beyond end of device [ 170.772953][T15661] loop2: rw=0, sector=121, nr_sectors = 120 limit=128 [ 170.796476][T15667] loop5: detected capacity change from 0 to 512 [ 170.809048][T15667] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 170.827264][T15669] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5379'. [ 170.836277][T15669] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5379'. [ 170.847191][ T6972] kworker/u8:44: attempt to access beyond end of device [ 170.847191][ T6972] loop2: rw=1, sector=241, nr_sectors = 800 limit=128 [ 170.873682][T15667] EXT4-fs (loop5): 1 truncate cleaned up [ 170.879816][T15667] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.892828][T15669] wireguard0: entered promiscuous mode [ 170.898454][T15669] wireguard0: entered allmulticast mode [ 170.913128][T15667] EXT4-fs error (device loop5): ext4_generic_delete_entry:2670: inode #2: block 13: comm syz.5.5378: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 170.934949][T15667] EXT4-fs (loop5): Remounting filesystem read-only [ 170.941592][T15667] EXT4-fs warning (device loop5): ext4_rename_delete:3728: inode #2: comm syz.5.5378: Deleting old file: nlink 5, error=-117 [ 170.969758][ T7645] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.000239][T15686] program syz.5.5385 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 171.027841][T15687] loop3: detected capacity change from 0 to 512 [ 171.053068][T15687] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 171.073995][T15687] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.5387: invalid indirect mapped block 2683928664 (level 1) [ 171.104081][T15687] EXT4-fs (loop3): Remounting filesystem read-only [ 171.110880][T15687] EXT4-fs (loop3): 1 truncate cleaned up [ 171.118093][T15687] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.147975][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.183622][T15709] vlan0: entered promiscuous mode [ 171.188773][T15709] bond0: entered promiscuous mode [ 171.193929][T15709] bond_slave_0: entered promiscuous mode [ 171.199802][T15709] bond_slave_1: entered promiscuous mode [ 171.206029][T15699] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 171.224435][T15709] bond0: (slave vlan0): Opening slave failed [ 171.248188][T15713] syzkaller1: entered promiscuous mode [ 171.253786][T15713] syzkaller1: entered allmulticast mode [ 171.428204][T15730] loop4: detected capacity change from 0 to 2048 [ 171.492754][ T29] kauditd_printk_skb: 195 callbacks suppressed [ 171.492769][ T29] audit: type=1400 audit(1746851650.932:4722): avc: denied { write } for pid=15745 comm="syz.5.5414" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 171.549288][T15748] loop5: detected capacity change from 0 to 512 [ 171.569732][ T29] audit: type=1400 audit(1746851651.017:4723): avc: denied { recv } for pid=15752 comm="syz.2.5418" saddr=10.128.0.163 src=30030 daddr=10.128.0.91 dest=53604 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 171.595344][ T29] audit: type=1400 audit(1746851651.017:4724): avc: denied { ioctl } for pid=15751 comm="syz.0.5415" path="socket:[43634]" dev="sockfs" ino=43634 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 171.620408][ T29] audit: type=1400 audit(1746851651.017:4725): avc: denied { module_request } for pid=15751 comm="syz.0.5415" kmod="netdev-syz_tun" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 171.647936][ T29] audit: type=1400 audit(1746851651.017:4726): avc: denied { read write } for pid=3315 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 171.672419][ T29] audit: type=1400 audit(1746851651.017:4727): avc: denied { open } for pid=3315 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 171.696798][ T29] audit: type=1400 audit(1746851651.017:4728): avc: denied { ioctl } for pid=3315 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 171.722556][ T29] audit: type=1400 audit(1746851651.069:4729): avc: denied { prog_load } for pid=15751 comm="syz.0.5415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 171.741755][ T29] audit: type=1400 audit(1746851651.069:4730): avc: denied { bpf } for pid=15751 comm="syz.0.5415" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 171.753964][T15748] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.762399][ T29] audit: type=1400 audit(1746851651.069:4731): avc: denied { perfmon } for pid=15751 comm="syz.0.5415" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 171.798407][T15748] ext4 filesystem being mounted at /679/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 171.856218][ T7645] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.910867][T15788] xt_CT: You must specify a L4 protocol and not use inversions on it [ 172.096224][T15807] netlink: 'syz.5.5439': attribute type 12 has an invalid length. [ 172.112395][T15807] netlink: 'syz.5.5439': attribute type 29 has an invalid length. [ 172.120263][T15807] netlink: 148 bytes leftover after parsing attributes in process `syz.5.5439'. [ 172.129429][T15807] netlink: 59 bytes leftover after parsing attributes in process `syz.5.5439'. [ 172.140176][T15807] netlink: 'syz.5.5439': attribute type 12 has an invalid length. [ 172.148043][T15807] netlink: 'syz.5.5439': attribute type 29 has an invalid length. [ 172.155968][T15807] netlink: 148 bytes leftover after parsing attributes in process `syz.5.5439'. [ 172.165116][T15807] netlink: 59 bytes leftover after parsing attributes in process `syz.5.5439'. [ 172.226925][T15817] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5443'. [ 172.395305][T15836] program syz.4.5452 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 172.742666][T15863] syzkaller1: entered promiscuous mode [ 172.748238][T15863] syzkaller1: entered allmulticast mode [ 172.804993][T15874] loop3: detected capacity change from 0 to 128 [ 172.814064][T15874] FAT-fs (loop3): bogus number of reserved sectors [ 172.820727][T15874] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 172.830089][T15874] FAT-fs (loop3): Can't find a valid FAT filesystem [ 172.860536][T15881] netlink: 'syz.3.5473': attribute type 4 has an invalid length. [ 173.047229][T15889] binfmt_misc: register: failed to install interpreter file ./file2 [ 173.525112][T15934] netlink: 64535 bytes leftover after parsing attributes in process `syz.4.5498'. [ 173.980456][T15985] netlink: 'syz.4.5521': attribute type 6 has an invalid length. [ 174.083427][T15997] loop5: detected capacity change from 0 to 2048 [ 174.102237][T15997] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.146033][ T7645] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.375909][T16043] netlink: 9286 bytes leftover after parsing attributes in process `syz.5.5548'. [ 174.401086][T16047] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5549'. [ 174.410075][T16047] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5549'. [ 174.720757][T16088] bond1: entered promiscuous mode [ 174.726150][T16088] bond1: entered allmulticast mode [ 174.738206][T16088] 8021q: adding VLAN 0 to HW filter on device bond1 [ 174.759421][T16087] loop2: detected capacity change from 0 to 2050 [ 174.768675][T16087] EXT4-fs warning (device loop2): read_mmp_block:115: Error -117 while reading MMP block 64 [ 174.781015][T16088] bond1 (unregistering): Released all slaves [ 174.862759][T16096] loop5: detected capacity change from 0 to 512 [ 174.870615][T16096] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 174.885325][T16097] loop3: detected capacity change from 0 to 256 [ 174.919863][T16096] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.5573: Failed to acquire dquot type 0 [ 174.944666][T16096] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 174.965782][T16096] EXT4-fs (loop5): 1 truncate cleaned up [ 174.972883][T16096] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.993032][T16096] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.5573: corrupted xattr block 19: bad e_name length [ 175.016976][T16096] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 175.033448][T16096] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.5573: corrupted xattr block 19: bad e_name length [ 175.084725][T16096] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 175.101111][T16096] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.5573: Failed to acquire dquot type 0 [ 175.117999][T16112] loop3: detected capacity change from 0 to 1024 [ 175.125649][T16108] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.5573: Failed to acquire dquot type 0 [ 175.153262][T16112] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.166066][ T7645] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.496699][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.531197][T16148] netlink: 288 bytes leftover after parsing attributes in process `syz.2.5596'. [ 175.651858][T16166] netdevsim netdevsim4 netdevsim0: Unsupported IPsec algorithm [ 175.753875][T16183] loop3: detected capacity change from 0 to 1024 [ 175.762686][T16183] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 175.774375][T16183] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 175.794134][T16183] JBD2: no valid journal superblock found [ 175.799964][T16183] EXT4-fs (loop3): Could not load journal inode [ 176.115741][T16204] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.5619'. [ 176.127527][T16203] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.5619'. [ 176.159264][T16206] netlink: 596 bytes leftover after parsing attributes in process `syz.4.5620'. [ 176.241275][ T29] kauditd_printk_skb: 498 callbacks suppressed [ 176.241290][ T29] audit: type=1400 audit(1746851655.950:5224): avc: denied { create } for pid=16215 comm="syz.0.5625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 176.267741][ T29] audit: type=1400 audit(1746851655.950:5225): avc: denied { setopt } for pid=16215 comm="syz.0.5625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 176.306823][T16220] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5627'. [ 176.316333][T16220] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5627'. [ 176.325396][T16220] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5627'. [ 176.340450][ T29] audit: type=1400 audit(1746851656.055:5226): avc: denied { append } for pid=16221 comm="syz.0.5628" name="001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 176.372625][T16222] usb usb6: usbfs: process 16222 (syz.0.5628) did not claim interface 0 before use [ 176.407785][T16226] syzkaller1: entered promiscuous mode [ 176.413438][T16226] syzkaller1: entered allmulticast mode [ 176.439156][ T29] audit: type=1400 audit(1746851656.161:5227): avc: denied { write } for pid=16231 comm="syz.5.5633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 176.683730][ T29] audit: type=1400 audit(1746851656.425:5228): avc: denied { bind } for pid=16248 comm="syz.5.5641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 176.749090][T16260] loop4: detected capacity change from 0 to 2048 [ 176.916676][ T29] audit: type=1400 audit(1746851656.657:5229): avc: denied { setopt } for pid=16269 comm="syz.4.5650" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 176.955198][T16274] loop3: detected capacity change from 0 to 512 [ 176.981398][ T29] audit: type=1326 audit(1746851656.731:5230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16276 comm="syz.4.5653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f851414e969 code=0x7ffc0000 [ 177.006554][T16274] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.5652: bg 0: block 5: invalid block bitmap [ 177.028411][T16274] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 177.067745][T16274] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.5652: invalid indirect mapped block 3 (level 2) [ 177.100365][ T29] audit: type=1326 audit(1746851656.763:5231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16276 comm="syz.4.5653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f851414e969 code=0x7ffc0000 [ 177.125211][ T29] audit: type=1326 audit(1746851656.763:5232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16276 comm="syz.4.5653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f851414e969 code=0x7ffc0000 [ 177.149820][ T29] audit: type=1326 audit(1746851656.763:5233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16276 comm="syz.4.5653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f851414e969 code=0x7ffc0000 [ 177.177593][T16285] batadv_slave_1: entered promiscuous mode [ 177.186375][T16284] batadv_slave_1: left promiscuous mode [ 177.192456][T16274] EXT4-fs (loop3): 2 truncates cleaned up [ 177.198737][T16274] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.303913][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.480011][T16325] vhci_hcd: invalid port number 96 [ 177.485233][T16325] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 177.553248][T16337] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 177.774413][T16370] SELinux: Context system_u:object_r:iptables_initrc_exec_t:s0 is not valid (left unmapped). [ 177.824770][T16377] netlink: 'syz.2.5697': attribute type 21 has an invalid length. [ 177.883999][T16387] netlink: 'syz.3.5701': attribute type 32 has an invalid length. [ 177.952880][T16399] random: crng reseeded on system resumption [ 178.140775][T16425] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.149183][T16425] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.157502][T16425] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.166504][T16425] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.179032][T16425] geneve2: entered promiscuous mode [ 178.184403][T16425] geneve2: entered allmulticast mode [ 178.192188][T16425] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.201375][T16425] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.209843][T16425] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.218356][T16425] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.334958][T16449] loop5: detected capacity change from 0 to 128 [ 178.341870][T16449] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 178.464673][T16472] loop5: detected capacity change from 0 to 512 [ 178.478589][T16472] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 178.505654][T16472] EXT4-fs (loop5): 1 truncate cleaned up [ 178.511757][T16472] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.563958][ T7645] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.575445][T16490] tracefs: Invalid gid '0x00000000ffffffff' [ 178.892931][T16525] loop2: detected capacity change from 0 to 256 [ 179.457114][T16574] __nla_validate_parse: 13 callbacks suppressed [ 179.457133][T16574] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5788'. [ 179.506564][T16580] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5791'. [ 179.506593][T16580] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5791'. [ 179.784222][T16602] loop5: detected capacity change from 0 to 512 [ 179.784707][T16602] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 179.796789][T16602] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.796889][T16602] ext4 filesystem being mounted at /788/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.867532][ T7645] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.098114][T16638] netlink: 61211 bytes leftover after parsing attributes in process `syz.5.5818'. [ 180.276422][T16660] binfmt_misc: register: failed to install interpreter file ./file2 [ 180.386354][T16678] loop5: detected capacity change from 0 to 512 [ 180.397201][T16678] EXT4-fs: quotafile must be on filesystem root [ 180.418685][T16682] loop3: detected capacity change from 0 to 256 [ 180.457806][T16686] loop2: detected capacity change from 0 to 2048 [ 180.473313][T16686] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.488426][T16689] loop4: detected capacity change from 0 to 512 [ 180.497295][T16689] EXT4-fs (loop4): orphan cleanup on readonly fs [ 180.516767][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.527209][T16689] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.5833: bg 0: block 248: padding at end of block bitmap is not set [ 180.543347][T16689] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.5833: Failed to acquire dquot type 1 [ 180.557914][T16689] EXT4-fs (loop4): 1 truncate cleaned up [ 180.564331][T16689] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 180.758924][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.783868][T16721] hub 9-0:1.0: USB hub found [ 180.788610][T16721] hub 9-0:1.0: 8 ports detected [ 180.856092][T16736] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 180.890129][T16738] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 180.896746][T16738] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 180.904290][T16738] vhci_hcd vhci_hcd.0: Device attached [ 180.914234][T16743] openvswitch: netlink: Message has 6 unknown bytes. [ 180.920142][T16742] vhci_hcd: connection closed [ 180.921639][ T6956] vhci_hcd: stop threads [ 180.930671][ T6956] vhci_hcd: release socket [ 180.935330][ T6956] vhci_hcd: disconnect device [ 180.988059][ T29] kauditd_printk_skb: 218 callbacks suppressed [ 180.988074][ T29] audit: type=1326 audit(1746851660.965:5450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16755 comm="syz.5.5873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadb088e969 code=0x7ffc0000 [ 181.018095][ T29] audit: type=1326 audit(1746851660.965:5451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16755 comm="syz.5.5873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadb088e969 code=0x7ffc0000 [ 181.044248][ T29] audit: type=1326 audit(1746851661.029:5452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16755 comm="syz.5.5873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fadb088e969 code=0x7ffc0000 [ 181.068169][ T29] audit: type=1326 audit(1746851661.029:5453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16755 comm="syz.5.5873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadb088e969 code=0x7ffc0000 [ 181.091898][ T29] audit: type=1326 audit(1746851661.029:5454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16755 comm="syz.5.5873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadb088e969 code=0x7ffc0000 [ 181.115606][ T29] audit: type=1326 audit(1746851661.029:5455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16755 comm="syz.5.5873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fadb088e969 code=0x7ffc0000 [ 181.121522][T16762] 9pnet_fd: Insufficient options for proto=fd [ 181.139261][ T29] audit: type=1326 audit(1746851661.029:5456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16755 comm="syz.5.5873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadb088e969 code=0x7ffc0000 [ 181.139366][ T29] audit: type=1326 audit(1746851661.029:5457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16755 comm="syz.5.5873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadb088e969 code=0x7ffc0000 [ 181.139400][ T29] audit: type=1326 audit(1746851661.029:5458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16755 comm="syz.5.5873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fadb088e969 code=0x7ffc0000 [ 181.139500][ T29] audit: type=1326 audit(1746851661.029:5459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16755 comm="syz.5.5873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadb088e969 code=0x7ffc0000 [ 181.150543][T16764] netlink: 'syz.2.5877': attribute type 13 has an invalid length. [ 181.248229][T16764] netlink: 24859 bytes leftover after parsing attributes in process `syz.2.5877'. [ 181.294673][T16770] netlink: 'syz.4.5880': attribute type 3 has an invalid length. [ 181.405200][T16789] netlink: 208 bytes leftover after parsing attributes in process `syz.0.5890'. [ 181.471459][T16795] hub 2-0:1.0: USB hub found [ 181.490975][T16795] hub 2-0:1.0: 8 ports detected [ 181.547167][T16814] netlink: 'syz.5.5901': attribute type 1 has an invalid length. [ 181.554876][T16812] loop3: detected capacity change from 0 to 4096 [ 181.572960][T16812] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.598277][T16819] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 181.624748][T16812] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 181.689677][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.714279][T16839] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16839 comm=syz.4.5914 [ 181.951296][T16850] wireguard1: entered promiscuous mode [ 181.951317][T16850] wireguard1: entered allmulticast mode [ 182.307833][T16867] loop3: detected capacity change from 0 to 2049 [ 182.315574][T16867] EXT4-fs warning (device loop3): read_mmp_block:115: Error -117 while reading MMP block 64 [ 182.371701][T16873] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5928'. [ 182.446348][T16883] sd 0:0:1:0: device reset [ 182.556763][T16889] loop2: detected capacity change from 0 to 512 [ 182.574253][T16889] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 182.583437][T16889] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 182.607322][T16889] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 182.608506][T16889] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 182.608534][T16889] System zones: 0-2, 18-18, 34-34 [ 182.610067][T16889] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 182.629074][T16889] EXT4-fs (loop2): 1 truncate cleaned up [ 182.662447][T16889] EXT4-fs (loop2): shut down requested (1) [ 182.860458][T16926] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.5949'. [ 182.870298][T16918] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.5949'. [ 182.942899][T16930] wireguard0: entered promiscuous mode [ 182.948525][T16930] wireguard0: entered allmulticast mode [ 183.103926][T16945] loop2: detected capacity change from 0 to 2048 [ 183.126225][T16947] netlink: 'syz.0.5970': attribute type 21 has an invalid length. [ 183.137292][T16945] loop2: p2 p3 p7 [ 183.207184][T16957] loop2: detected capacity change from 0 to 256 [ 183.440218][T16984] openvswitch: netlink: Message has 6 unknown bytes. [ 183.490434][T16991] loop2: detected capacity change from 0 to 512 [ 183.503017][T16991] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.5982: bg 0: block 5: invalid block bitmap [ 183.517017][T16996] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.5980'. [ 183.527586][T16991] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 183.537498][T16991] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.5982: invalid indirect mapped block 3 (level 2) [ 183.554037][T16991] EXT4-fs (loop2): 2 truncates cleaned up [ 183.623761][T17006] netlink: 'syz.3.5988': attribute type 1 has an invalid length. [ 183.778879][T17018] loop4: detected capacity change from 0 to 1024 [ 183.818554][T17018] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.5994: Allocating blocks 385-513 which overlap fs metadata [ 183.852345][T17018] EXT4-fs (loop4): pa ffff88810662e5b0: logic 16, phys. 129, len 24 [ 183.860505][T17018] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 184.148989][T17058] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.149140][T17060] netlink: 'syz.2.6011': attribute type 4 has an invalid length. [ 184.157802][T17058] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.157844][T17058] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.157923][T17058] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.158011][T17058] geneve2: entered promiscuous mode [ 184.158026][T17058] geneve2: entered allmulticast mode [ 184.204140][T17060] __nla_validate_parse: 3 callbacks suppressed [ 184.204153][T17060] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.6011'. [ 184.220468][T17058] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.229663][T17058] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.238678][T17058] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.247677][T17058] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.363960][T17076] loop2: detected capacity change from 0 to 512 [ 184.370971][T17076] EXT4-fs: Ignoring removed nobh option [ 184.378763][T17076] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.6019: invalid indirect mapped block 256 (level 2) [ 184.394812][T17076] EXT4-fs (loop2): 2 truncates cleaned up [ 184.525250][T17094] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.534376][T17094] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.542619][T17094] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.550975][T17094] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.569510][T17094] geneve2: entered promiscuous mode [ 184.574856][T17094] geneve2: entered allmulticast mode [ 184.585233][T17094] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.593750][T17094] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.603654][T17094] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.612766][T17094] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.757565][ T6957] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm kworker/u8:31: bg 0: block 5: invalid block bitmap [ 184.777697][ T6957] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 184.790316][ T6957] EXT4-fs (loop2): This should not happen!! Data will be lost [ 184.790316][ T6957] [ 184.800094][ T6957] EXT4-fs (loop2): Total free blocks count 0 [ 184.806128][ T6957] EXT4-fs (loop2): Free/Dirty block details [ 184.812086][ T6957] EXT4-fs (loop2): free_blocks=0 [ 184.817090][ T6957] EXT4-fs (loop2): dirty_blocks=16008 [ 184.822527][ T6957] EXT4-fs (loop2): Block reservation details [ 184.828537][ T6957] EXT4-fs (loop2): i_reserved_data_blocks=16008 [ 184.845674][T17106] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6033'. [ 184.860810][T17108] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=17108 comm=syz.5.6034 [ 184.866553][ T6936] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 184.886893][ T6936] EXT4-fs (loop2): This should not happen!! Data will be lost [ 184.886893][ T6936] [ 184.932096][T17114] batadv_slave_1: entered promiscuous mode [ 184.942222][T17113] batadv_slave_1: left promiscuous mode [ 185.328233][T17157] SELinux: syz.2.6056 (17157) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 185.470702][T17175] loop2: detected capacity change from 0 to 128 [ 185.508474][T17175] ext4 filesystem being mounted at /1204/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.557092][T17182] serio: Serial port ptm0 [ 185.712878][T17194] loop2: detected capacity change from 0 to 128 [ 185.754602][T17194] ext4 filesystem being mounted at /1208/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 185.800309][T17204] loop3: detected capacity change from 0 to 128 [ 185.836694][T17204] ext4 filesystem being mounted at /1229/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.895533][ T29] kauditd_printk_skb: 167 callbacks suppressed [ 185.895547][ T29] audit: type=1326 audit(1746851666.137:5627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17215 comm="syz.3.6081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f065ae969 code=0x7ffc0000 [ 185.940538][ T29] audit: type=1326 audit(1746851666.168:5628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17215 comm="syz.3.6081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1f065ae969 code=0x7ffc0000 [ 185.964768][ T29] audit: type=1326 audit(1746851666.168:5629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17215 comm="syz.3.6081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f065ae969 code=0x7ffc0000 [ 185.989026][ T29] audit: type=1326 audit(1746851666.168:5630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17215 comm="syz.3.6081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f065ae969 code=0x7ffc0000 [ 186.012690][ T29] audit: type=1326 audit(1746851666.168:5631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17215 comm="syz.3.6081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1f065ae969 code=0x7ffc0000 [ 186.037068][ T29] audit: type=1326 audit(1746851666.179:5632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17215 comm="syz.3.6081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f065ae969 code=0x7ffc0000 [ 186.060571][ T29] audit: type=1326 audit(1746851666.179:5633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17215 comm="syz.3.6081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f065ae969 code=0x7ffc0000 [ 186.084767][ T29] audit: type=1326 audit(1746851666.179:5634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17215 comm="syz.3.6081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1f065ae969 code=0x7ffc0000 [ 186.108489][ T29] audit: type=1326 audit(1746851666.179:5635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17215 comm="syz.3.6081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f065ae969 code=0x7ffc0000 [ 186.132703][ T29] audit: type=1326 audit(1746851666.179:5636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17215 comm="syz.3.6081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=86 compat=0 ip=0x7f1f065ae969 code=0x7ffc0000 [ 186.181128][T17222] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 186.336599][T17237] loop2: detected capacity change from 0 to 512 [ 186.347115][T17237] ext4 filesystem being mounted at /1211/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 186.376897][T17242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.386429][T17242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.461524][T17249] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.469988][T17249] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.478239][T17249] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.486516][T17249] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.495017][T17249] geneve2: entered promiscuous mode [ 186.500353][T17249] geneve2: entered allmulticast mode [ 186.506295][T17249] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.514880][T17249] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.523950][T17249] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.532339][T17249] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.603227][T17251] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6094'. [ 186.624679][T17253] loop2: detected capacity change from 0 to 512 [ 186.632598][T17253] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 186.644972][T17253] EXT4-fs (loop2): 1 truncate cleaned up [ 187.006901][T17274] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17274 comm=syz.0.6105 [ 187.168142][T17280] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.177003][T17280] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.186011][T17280] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.194845][T17280] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.206038][T17280] geneve2: entered promiscuous mode [ 187.211368][T17280] geneve2: entered allmulticast mode [ 187.219165][T17280] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.228176][T17280] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.237201][T17280] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.246307][T17280] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.268663][T17282] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6108'. [ 187.308722][T17287] loop2: detected capacity change from 0 to 512 [ 187.350809][T17287] EXT4-fs (loop2): orphan cleanup on readonly fs [ 187.359448][T17287] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.6106: bg 0: block 248: padding at end of block bitmap is not set [ 187.383250][T17287] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.6106: Failed to acquire dquot type 1 [ 187.398867][T17293] netlink: 288 bytes leftover after parsing attributes in process `syz.0.6123'. [ 187.416544][T17287] EXT4-fs (loop2): 1 truncate cleaned up [ 187.626190][T17317] serio: Serial port ptm0 [ 187.725597][T17326] loop2: detected capacity change from 0 to 8192 [ 187.750821][T17336] netlink: 288 bytes leftover after parsing attributes in process `syz.4.6130'. [ 188.025053][T17363] loop3: detected capacity change from 0 to 512 [ 188.033470][T17363] EXT4-fs (loop3): orphan cleanup on readonly fs [ 188.040706][T17363] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.6134: bg 0: block 248: padding at end of block bitmap is not set [ 188.061305][T17363] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.6134: Failed to acquire dquot type 1 [ 188.086010][T17363] EXT4-fs (loop3): 1 truncate cleaned up [ 188.093975][T17363] EXT4-fs mount: 20 callbacks suppressed [ 188.093993][T17363] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 188.132795][T17370] serio: Serial port ptm0 [ 188.228672][T17374] loop2: detected capacity change from 0 to 8192 [ 188.239697][T17381] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=17381 comm=syz.4.6151 [ 188.276737][T17383] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17383 comm=syz.5.6152 [ 188.458797][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.533710][T17401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.542410][T17401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.781044][T17418] loop4: detected capacity change from 0 to 512 [ 188.788483][T17418] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 188.801584][T17418] EXT4-fs (loop4): 1 truncate cleaned up [ 188.807812][T17418] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.824872][T17418] EXT4-fs error (device loop4): __ext4_iget:5025: inode #12: block 2: comm syz.4.6169: invalid block [ 188.836171][T17418] EXT4-fs (loop4): Remounting filesystem read-only [ 188.854483][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.894417][T17428] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.905082][T17428] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.913870][T17428] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.922736][T17428] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.931748][T17428] geneve2: entered promiscuous mode [ 188.937018][T17428] geneve2: entered allmulticast mode [ 188.943333][T17428] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.952310][T17428] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.961282][T17428] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.970409][T17428] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.988839][T17432] program syz.2.6175 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 189.117671][T17444] loop4: detected capacity change from 0 to 8192 [ 189.344903][T17460] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.353855][T17460] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.362089][T17460] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.370447][T17460] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.391140][T17460] geneve2: entered promiscuous mode [ 189.396398][T17460] geneve2: entered allmulticast mode [ 189.429569][T17460] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.438104][T17460] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.446495][T17460] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.454985][T17460] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.595548][T17471] loop5: detected capacity change from 0 to 2048 [ 189.601936][T17473] vxcan1: entered promiscuous mode [ 189.636178][T17471] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.648657][T17471] ext4 filesystem being mounted at /860/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.693526][ T7645] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.782162][T17495] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.791107][T17495] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.800039][T17495] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.808917][T17495] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.835729][T17495] geneve2: entered promiscuous mode [ 189.841058][T17495] geneve2: entered allmulticast mode [ 189.848865][T17495] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.857908][T17495] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.867744][T17495] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.876769][T17495] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.894286][T17498] loop5: detected capacity change from 0 to 512 [ 189.924192][T17498] EXT4-fs (loop5): orphan cleanup on readonly fs [ 189.946924][T17498] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.6196: bg 0: block 248: padding at end of block bitmap is not set [ 189.962388][T17498] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.6196: Failed to acquire dquot type 1 [ 189.975448][T17498] EXT4-fs (loop5): 1 truncate cleaned up [ 189.981515][T17505] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6208'. [ 189.991211][T17505] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6208'. [ 190.000660][T17505] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6208'. [ 190.010013][T17498] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 190.172543][T17526] loop4: detected capacity change from 0 to 1024 [ 190.180933][T17526] EXT4-fs: Ignoring removed nomblk_io_submit option [ 190.188185][ T7645] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.198409][T17526] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 190.213950][T17529] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6219'. [ 190.229326][T17526] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.290239][T17543] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6224'. [ 190.299310][T17543] netlink: 'syz.5.6224': attribute type 21 has an invalid length. [ 190.310646][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.341649][T17549] loop2: detected capacity change from 0 to 512 [ 190.348519][T17549] EXT4-fs: Ignoring removed oldalloc option [ 190.359737][T17549] EXT4-fs error (device loop2): ext4_xattr_inode_iget:433: comm syz.2.6229: Parent and EA inode have the same ino 15 [ 190.375285][T17549] EXT4-fs error (device loop2): ext4_xattr_inode_iget:433: comm syz.2.6229: Parent and EA inode have the same ino 15 [ 190.390204][T17549] EXT4-fs (loop2): 1 orphan inode deleted [ 190.398910][T17549] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.424731][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.456167][T17560] loop2: detected capacity change from 0 to 512 [ 190.510344][T17560] EXT4-fs (loop2): 1 orphan inode deleted [ 190.516719][T17560] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.530536][ T6978] EXT4-fs error (device loop2): ext4_release_dquot:6971: comm kworker/u8:48: Failed to release dquot type 1 [ 190.551804][T17574] loop4: detected capacity change from 0 to 512 [ 190.559759][T17560] ext4 filesystem being mounted at /1255/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 190.591583][T17580] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6241'. [ 190.632306][T17584] SELinux: security_context_str_to_sid (ùÿ) failed with errno=-22 [ 190.653185][T17586] vxcan1: entered promiscuous mode [ 190.657975][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.667490][ T29] kauditd_printk_skb: 250 callbacks suppressed [ 190.667506][ T29] audit: type=1400 audit(1746851671.158:5880): avc: denied { create } for pid=17587 comm="syz.5.6246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 190.693313][ T29] audit: type=1400 audit(1746851671.158:5881): avc: denied { setopt } for pid=17587 comm="syz.5.6246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 190.712866][ T29] audit: type=1400 audit(1746851671.158:5882): avc: denied { connect } for pid=17587 comm="syz.5.6246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 190.844513][ T29] audit: type=1400 audit(1746851671.338:5883): avc: denied { connect } for pid=17601 comm="syz.0.6251" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 191.009593][ T29] audit: type=1326 audit(1746851671.538:5884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17625 comm="syz.0.6264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d2ad5e969 code=0x7ffc0000 [ 191.033177][ T29] audit: type=1326 audit(1746851671.538:5885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17625 comm="syz.0.6264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d2ad5e969 code=0x7ffc0000 [ 191.075850][ T29] audit: type=1326 audit(1746851671.591:5886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17625 comm="syz.0.6264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1d2ad5e969 code=0x7ffc0000 [ 191.099597][ T29] audit: type=1326 audit(1746851671.591:5887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17625 comm="syz.0.6264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d2ad5e969 code=0x7ffc0000 [ 191.123167][ T29] audit: type=1326 audit(1746851671.591:5888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17625 comm="syz.0.6264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d2ad5e969 code=0x7ffc0000 [ 191.146819][ T29] audit: type=1326 audit(1746851671.591:5889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17625 comm="syz.0.6264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1d2ad5e969 code=0x7ffc0000 [ 191.150447][T17631] vxcan1: entered promiscuous mode [ 191.177712][T17632] SELinux: security_context_str_to_sid (ùÿ) failed with errno=-22 [ 191.657167][T17666] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6282'. [ 192.203005][T17715] loop3: detected capacity change from 0 to 1024 [ 192.211119][T17715] EXT4-fs: Ignoring removed nomblk_io_submit option [ 192.219309][T17715] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 192.233490][T17715] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.267730][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.355291][T17730] loop4: detected capacity change from 0 to 512 [ 192.373320][T17730] EXT4-fs: Ignoring removed oldalloc option [ 192.388735][T17730] EXT4-fs error (device loop4): ext4_xattr_inode_iget:433: comm syz.4.6307: Parent and EA inode have the same ino 15 [ 192.401481][T17726] loop3: detected capacity change from 0 to 8192 [ 192.407535][T17733] hub 9-0:1.0: USB hub found [ 192.414127][T17730] EXT4-fs error (device loop4): ext4_xattr_inode_iget:433: comm syz.4.6307: Parent and EA inode have the same ino 15 [ 192.414225][T17733] hub 9-0:1.0: 8 ports detected [ 192.443572][T17730] EXT4-fs (loop4): 1 orphan inode deleted [ 192.456402][T17730] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.484832][T17595] syz.2.6255 (17595) used greatest stack depth: 5456 bytes left [ 192.529179][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.586875][T17745] loop4: detected capacity change from 0 to 512 [ 192.606396][T17745] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 192.640593][T17745] EXT4-fs (loop4): 1 truncate cleaned up [ 192.661041][T17745] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.680950][T17745] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.748590][T17760] netlink: 'syz.2.6323': attribute type 6 has an invalid length. [ 193.040158][T17799] loop2: detected capacity change from 0 to 512 [ 193.058679][T17799] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 193.105682][T17799] EXT4-fs (loop2): 1 truncate cleaned up [ 193.111782][T17799] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.135749][T17799] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.200691][T17821] program syz.4.6351 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 193.226424][T17825] netlink: 'syz.2.6353': attribute type 298 has an invalid length. [ 193.237058][T17827] : renamed from bond0 [ 193.363168][T17843] loop5: detected capacity change from 0 to 8192 [ 193.403672][T17852] loop3: detected capacity change from 0 to 512 [ 193.415814][T17852] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 193.421216][T17850] loop4: detected capacity change from 0 to 1024 [ 193.442286][T17855] ================================================================== [ 193.450418][T17855] BUG: KCSAN: data-race in fat16_ent_put / fat_mirror_bhs [ 193.457563][T17855] [ 193.459886][T17855] write to 0xffff888148fcea2a of 2 bytes by task 17843 on cpu 1: [ 193.467604][T17855] fat16_ent_put+0x28/0x60 [ 193.472034][T17855] fat_ent_write+0x69/0xe0 [ 193.476463][T17855] fat_chain_add+0x15b/0x3f0 [ 193.481059][T17855] fat_get_block+0x46c/0x5e0 [ 193.485667][T17855] __block_write_begin_int+0x419/0xf70 [ 193.491147][T17855] cont_write_begin+0x5a3/0x8e0 [ 193.496012][T17855] fat_write_begin+0x4f/0xe0 [ 193.500606][T17855] cont_write_begin+0x198/0x8e0 [ 193.505470][T17855] fat_write_begin+0x4f/0xe0 [ 193.510067][T17855] generic_cont_expand_simple+0xad/0x150 [ 193.515716][T17855] fat_cont_expand+0x3e/0x170 [ 193.520410][T17855] fat_fallocate+0x177/0x1c0 [ 193.525017][T17855] vfs_fallocate+0x410/0x450 [ 193.529620][T17855] __x64_sys_fallocate+0x7a/0xd0 [ 193.534578][T17855] x64_sys_call+0x2b88/0x2fb0 [ 193.539271][T17855] do_syscall_64+0xd0/0x1a0 [ 193.543789][T17855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.549693][T17855] [ 193.552022][T17855] read to 0xffff888148fcea00 of 512 bytes by task 17855 on cpu 0: [ 193.559829][T17855] fat_mirror_bhs+0x1df/0x320 [ 193.564531][T17855] fat_alloc_clusters+0x98b/0xa80 [ 193.569594][T17855] fat_get_block+0x258/0x5e0 [ 193.574205][T17855] __block_write_begin_int+0x419/0xf70 [ 193.579683][T17855] cont_write_begin+0x5a3/0x8e0 [ 193.584558][T17855] fat_write_begin+0x4f/0xe0 [ 193.589155][T17855] generic_perform_write+0x181/0x490 [ 193.594461][T17855] __generic_file_write_iter+0xec/0x120 [ 193.600026][T17855] generic_file_write_iter+0x8d/0x2f0 [ 193.605424][T17855] do_iter_readv_writev+0x41e/0x4c0 [ 193.610639][T17855] vfs_writev+0x2c9/0x870 [ 193.615011][T17855] do_writev+0xe7/0x210 [ 193.619189][T17855] __x64_sys_writev+0x45/0x50 [ 193.623880][T17855] x64_sys_call+0x2006/0x2fb0 [ 193.628567][T17855] do_syscall_64+0xd0/0x1a0 [ 193.633088][T17855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.638992][T17855] [ 193.641315][T17855] Reported by Kernel Concurrency Sanitizer on: [ 193.647505][T17855] CPU: 0 UID: 0 PID: 17855 Comm: syz.5.6360 Not tainted 6.15.0-rc5-syzkaller-00204-g0e1329d4045c #0 PREEMPT(voluntary) [ 193.660020][T17855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 193.670086][T17855] ================================================================== [ 193.691122][T17850] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.718925][T17852] EXT4-fs (loop3): 1 truncate cleaned up [ 193.725086][T17852] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.749487][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.771718][T17852] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.