last executing test programs: 1.433871664s ago: executing program 4 (id=2353): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10040, &(0x7f0000000380)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@discard}]}, 0xfd, 0x269, &(0x7f0000000a00)="$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") r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) truncate(&(0x7f0000000200)='./bus\x00', 0x4) dup3(r1, r0, 0x0) finit_module(r1, 0x0, 0x6) 1.346477851s ago: executing program 4 (id=2358): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000180)='mm_page_free\x00', r1, 0x0, 0x1000000}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 1.11186822s ago: executing program 0 (id=2365): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x9) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000001580)={'vcan0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000080)="18", 0x10, 0x0, &(0x7f00000000c0)={0x11, 0xe, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.11108721s ago: executing program 4 (id=2366): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r1, 0x0, 0x8, &(0x7f00000000c0)=0x9, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.093096942s ago: executing program 0 (id=2377): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10) syz_io_uring_setup(0x499, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f0000000080)={[{@barrier}, {@noblock_validity}, {@mblk_io_submit}, {@data_err_ignore}, {@errors_remount}, {@inlinecrypt}]}, 0x6, 0x615, &(0x7f0000000c00)="$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") brk(0x8e0) 854.709411ms ago: executing program 0 (id=2369): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x14, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000340)='sys_enter\x00', r2}, 0x18) mlockall(0x7) 840.294192ms ago: executing program 4 (id=2370): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='signal_generate\x00', r0}, 0x10) r1 = gettid() tkill(r1, 0x21) 771.489798ms ago: executing program 4 (id=2372): syz_mount_image$iso9660(&(0x7f00000003c0), &(0x7f0000000180)='./file1\x00', 0x1004001, &(0x7f0000000380)=ANY=[], 0x2, 0x81c, &(0x7f0000000d00)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket(0x1d, 0x2, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) 721.525562ms ago: executing program 0 (id=2374): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x400) 596.636952ms ago: executing program 0 (id=2375): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_usb_connect(0x4, 0x24, &(0x7f0000000480)=ANY=[], 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 570.433444ms ago: executing program 4 (id=2378): sched_setscheduler(0x0, 0x1, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedreceive(r2, &(0x7f0000004600)=""/102381, 0xfffffceb, 0x0, 0x0) 483.351901ms ago: executing program 2 (id=2381): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x141000, 0xa2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000004700008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x18) finit_module(r0, 0x0, 0x3) 437.746285ms ago: executing program 2 (id=2385): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdde, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r2}}, 0x10) close(r1) 373.23836ms ago: executing program 3 (id=2387): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'macvlan1\x00'}) setxattr$security_selinux(&(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000000), &(0x7f0000000400)='system_u:object_r:ldconfig_cache_t:s0\x00', 0x26, 0x1) 365.613871ms ago: executing program 1 (id=2388): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b0000000500000008040000cd00000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) uname(0x0) 299.383806ms ago: executing program 3 (id=2389): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x9) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r1, &(0x7f0000000140)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0080dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46c4e4132f96e4241955608eb8627f856d87696cbf9e67c99a02e8690e53789a551bed180cf887a72ab57b7201d5f9990a997b1822b6d2f180e3dab7986b4307b9c93ad0053280120c6250d021b2b2b70018871a0738e362f134f180c267ced95dead76ecb6bef48b1b96560817e6d", 0xffffffffffffff2c, 0x0, &(0x7f00000000c0)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 293.321257ms ago: executing program 2 (id=2390): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x4}, 0x18) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @private=0xa010100}, 0x1, 0x0, 0x2}}, 0x2e) 250.69297ms ago: executing program 1 (id=2391): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000095"], &(0x7f0000000280)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='percpu_alloc_percpu\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xa, 0x7, 0x6, 0x8c}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 250.06333ms ago: executing program 3 (id=2392): r0 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000080)={0x0, 0xec21, 0x80, 0x1, 0x40000333}, &(0x7f0000000340)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r1, 0x847ba, 0x2000, 0xe, 0x0, 0x0) 234.252712ms ago: executing program 1 (id=2393): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x7, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0xa}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a0079"], 0x44}}, 0x0) 200.416704ms ago: executing program 2 (id=2394): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000841}, 0x4000000) renameat(0xffffffffffffffff, &(0x7f0000000480)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000740)='./file0\x00') 179.359856ms ago: executing program 2 (id=2395): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000580)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000380), &(0x7f0000000280)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fffe}, 0x94) 108.843641ms ago: executing program 2 (id=2396): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340), 0x0) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 108.376521ms ago: executing program 3 (id=2397): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1f075, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02004000000000010000000080218d09", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)) ptrace$getregset(0x4205, r0, 0x1, &(0x7f0000000080)={&(0x7f00000000c0)=""/120, 0x78}) 108.024742ms ago: executing program 3 (id=2398): r0 = syz_io_uring_setup(0x16fb, &(0x7f0000000400)={0x0, 0xb38d, 0x80, 0xfffffffe, 0x34b}, &(0x7f00000001c0)=0x0, &(0x7f00000005c0)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x37, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x33, '\x00', 0x0, @fallback=0xd}, 0x94) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd, 0x8, 0x0, 0x8}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 93.269593ms ago: executing program 1 (id=2399): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x3804, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0) 67.629355ms ago: executing program 1 (id=2400): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) signalfd4(r0, &(0x7f0000000580)={[0x3]}, 0x8, 0x800) 30.820628ms ago: executing program 3 (id=2401): eventfd(0xffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = openat$random(0xffffffffffffff9c, &(0x7f00000003c0), 0x40202, 0x0) sendfile(r2, r2, 0x0, 0x4800000009) 30.065508ms ago: executing program 1 (id=2402): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/anycast6\x00') close_range(r2, 0xffffffffffffffff, 0x0) 0s ago: executing program 0 (id=2403): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)={'#! ', '', [{0x20, 'memo\xfe\v\x12\xacry.e\xffentsg'}]}, 0x17) perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x7, 0x0, 0x0, 0x3, 0x82, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xf}, 0x8080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10000000000007}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) kernel console output (not intermixed with test programs): l_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 47.608656][ T4267] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.643705][ T4271] loop2: detected capacity change from 0 to 1024 [ 47.651748][ T4271] EXT4-fs: Ignoring removed bh option [ 47.658025][ T4271] EXT4-fs: inline encryption not supported [ 47.666649][ T4271] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 47.679272][ T4271] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 47.696642][ T4267] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.716656][ T4271] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 2: comm syz.2.342: lblock 2 mapped to illegal pblock 2 (length 1) [ 47.732517][ T4271] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 47.740959][ T4271] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.342: lblock 0 mapped to illegal pblock 48 (length 1) [ 47.749911][ T4277] loop4: detected capacity change from 0 to 1024 [ 47.757327][ T4271] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 47.765167][ T4277] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.771313][ T4271] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.342: Failed to acquire dquot type 0 [ 47.795888][ T29] audit: type=1400 audit(1754524252.356:623): avc: denied { create } for pid=4276 comm="syz.4.344" name=22050820 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 47.817096][ T4271] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 47.826932][ T4271] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.342: mark_inode_dirty error [ 47.838864][ T4271] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 47.839470][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.849802][ T4271] EXT4-fs (loop2): 1 orphan inode deleted [ 47.864499][ T1786] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 47.865525][ T4271] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.891854][ T1786] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 47.900532][ T1786] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 0 [ 47.913289][ T4267] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.924243][ T4271] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 47.954236][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.968624][ T4267] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.073023][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.099972][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.117290][ T378] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.136171][ T378] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.207480][ T29] audit: type=1400 audit(1754524252.776:624): avc: denied { ioctl } for pid=4294 comm="syz.1.353" path="socket:[8621]" dev="sockfs" ino=8621 ioctlcmd=0x48d4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 48.314513][ T4311] loop4: detected capacity change from 0 to 1024 [ 48.323606][ T4311] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 48.333798][ T4311] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 48.346197][ T4311] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 48.359279][ T4311] EXT4-fs error (device loop4): ext4_get_journal_inode:5796: inode #5: comm ,&#^%: unexpected bad inode w/o EXT4_IGET_BAD [ 48.375582][ T4311] EXT4-fs (loop4): no journal found [ 48.380911][ T4311] EXT4-fs (loop4): can't get journal size [ 48.392719][ T4311] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 48.410594][ T4311] EXT4-fs error (device loop4): ext4_inlinedir_to_tree:1314: inode #12: block 16: comm ,&#^%: path /82/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=20, inode=13, rec_len=16, size=60 fake=0 [ 48.459929][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.482456][ T4318] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.546177][ T4318] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.568204][ T4334] netlink: 'syz.1.372': attribute type 30 has an invalid length. [ 48.649909][ T4318] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.738422][ T4318] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.815361][ T51] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.831867][ T51] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.843454][ T378] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.863929][ T378] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.919517][ T4372] __nla_validate_parse: 6 callbacks suppressed [ 48.919539][ T4372] netlink: 4 bytes leftover after parsing attributes in process `syz.3.390'. [ 48.939728][ T4371] loop4: detected capacity change from 0 to 512 [ 48.956906][ T4371] EXT4-fs (loop4): too many log groups per flexible block group [ 48.965607][ T4371] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 48.969135][ T4379] netlink: 'syz.3.392': attribute type 30 has an invalid length. [ 48.987913][ T4371] EXT4-fs (loop4): mount failed [ 49.000982][ T4371] loop4: detected capacity change from 0 to 512 [ 49.026332][ T4371] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 288: padding at end of block bitmap is not set [ 49.069721][ T4371] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 49.081954][ T4371] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm +}[@: attempt to clear invalid blocks 1024 len 1 [ 49.097428][ T4371] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm +}[@: invalid indirect mapped block 1819239214 (level 0) [ 49.112430][ T4371] EXT4-fs (loop4): 1 truncate cleaned up [ 49.120644][ T4371] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.120976][ T23] kernel write not supported for file bpf-prog (pid: 23 comm: kworker/1:0) [ 49.169053][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.201536][ T4401] netlink: 76 bytes leftover after parsing attributes in process `syz.4.402'. [ 49.291605][ T4409] netlink: 76 bytes leftover after parsing attributes in process `syz.1.414'. [ 49.368906][ T4421] loop4: detected capacity change from 0 to 512 [ 49.430264][ T4421] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #3: comm syz.4.410: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 49.455545][ T4421] EXT4-fs error (device loop4): ext4_quota_enable:7127: comm syz.4.410: Bad quota inode: 3, type: 0 [ 49.488858][ T4421] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 49.505064][ T4421] EXT4-fs (loop4): mount failed [ 49.542149][ T4429] loop1: detected capacity change from 0 to 512 [ 49.580058][ T4429] EXT4-fs (loop1): too many log groups per flexible block group [ 49.588263][ T4429] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 49.600267][ T4429] EXT4-fs (loop1): mount failed [ 49.613465][ T4429] loop1: detected capacity change from 0 to 512 [ 49.644306][ T4429] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 288: padding at end of block bitmap is not set [ 49.669016][ T4429] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 49.690255][ T4429] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm +}[@: attempt to clear invalid blocks 1024 len 1 [ 49.710688][ T4429] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm +}[@: invalid indirect mapped block 1819239214 (level 0) [ 49.726448][ T4429] EXT4-fs (loop1): 1 truncate cleaned up [ 49.732727][ T4429] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.760494][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.993338][ T4474] netlink: 28 bytes leftover after parsing attributes in process `syz.2.434'. [ 50.003099][ T4474] netlink: 28 bytes leftover after parsing attributes in process `syz.2.434'. [ 50.041458][ T4479] process 'syz.2.436' launched '/dev/fd/5' with NULL argv: empty string added [ 50.166060][ T4487] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.216991][ T4487] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.307792][ T4487] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.366360][ T4487] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.424541][ T378] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.443983][ T378] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.456316][ T378] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.466166][ T378] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.662503][ T4517] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 51.698670][ T29] kauditd_printk_skb: 151 callbacks suppressed [ 51.698684][ T29] audit: type=1326 audit(1754524256.266:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4521 comm="syz.2.455" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f46b10bebe9 code=0x0 [ 51.758313][ T4527] serio: Serial port ptm0 [ 51.838023][ T29] audit: type=1326 audit(1754524256.406:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4534 comm="syz.4.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f858a57ebe9 code=0x7ffc0000 [ 51.875168][ T29] audit: type=1326 audit(1754524256.406:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4534 comm="syz.4.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f858a57ebe9 code=0x7ffc0000 [ 51.899646][ T29] audit: type=1326 audit(1754524256.406:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4534 comm="syz.4.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f858a57ebe9 code=0x7ffc0000 [ 51.925175][ T29] audit: type=1326 audit(1754524256.406:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4534 comm="syz.4.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f858a57ebe9 code=0x7ffc0000 [ 51.950682][ T29] audit: type=1326 audit(1754524256.406:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4534 comm="syz.4.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f858a57ebe9 code=0x7ffc0000 [ 51.976210][ T29] audit: type=1326 audit(1754524256.406:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4534 comm="syz.4.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f858a57ebe9 code=0x7ffc0000 [ 51.999949][ T29] audit: type=1326 audit(1754524256.406:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4534 comm="syz.4.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f858a57ebe9 code=0x7ffc0000 [ 52.023894][ T29] audit: type=1326 audit(1754524256.406:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4534 comm="syz.4.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f858a57ebe9 code=0x7ffc0000 [ 52.048738][ T29] audit: type=1326 audit(1754524256.406:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4534 comm="syz.4.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f858a57ebe9 code=0x7ffc0000 [ 52.082456][ T4545] netlink: 'syz.1.463': attribute type 1 has an invalid length. [ 52.095542][ T4547] loop4: detected capacity change from 0 to 256 [ 52.319788][ T4564] loop3: detected capacity change from 0 to 164 [ 52.364311][ T4564] iso9660: Unknown parameter '18446744073709551615' [ 52.495279][ T4574] loop3: detected capacity change from 0 to 128 [ 52.511524][ T4574] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 52.524287][ T4574] ext4 filesystem being mounted at /99/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 52.554249][ T4574] EXT4-fs (loop3): shut down requested (1) [ 52.571396][ T3308] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 52.775763][ T3589] hid_parser_main: 67 callbacks suppressed [ 52.775786][ T3589] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 52.827502][ T3589] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 52.827648][ T4596] loop2: detected capacity change from 0 to 512 [ 52.892334][ T4596] EXT4-fs (loop2): too many log groups per flexible block group [ 52.900543][ T4596] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 52.944746][ T4596] EXT4-fs (loop2): mount failed [ 52.983946][ T4596] loop2: detected capacity change from 0 to 512 [ 52.990925][ T4604] bond1: entered promiscuous mode [ 52.996446][ T4604] bond1: entered allmulticast mode [ 53.018730][ T4604] 8021q: adding VLAN 0 to HW filter on device bond1 [ 53.031072][ T4596] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 288: padding at end of block bitmap is not set [ 53.063175][ T4604] bond1 (unregistering): Released all slaves [ 53.077984][ T4596] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 53.116953][ T4596] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm +}[@: attempt to clear invalid blocks 1024 len 1 [ 53.154716][ T4596] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm +}[@: invalid indirect mapped block 1819239214 (level 0) [ 53.179473][ T4596] EXT4-fs (loop2): 1 truncate cleaned up [ 53.187342][ T4596] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.223411][ T4628] loop4: detected capacity change from 0 to 512 [ 53.236983][ T4628] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 53.253703][ T4628] EXT4-fs (loop4): mount failed [ 53.258223][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.386818][ T4647] netlink: 92 bytes leftover after parsing attributes in process `syz.0.509'. [ 53.419081][ T4657] loop2: detected capacity change from 0 to 512 [ 53.497253][ T4657] EXT4-fs (loop2): too many log groups per flexible block group [ 53.505138][ T4657] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 53.537432][ T4657] EXT4-fs (loop2): mount failed [ 53.579046][ T4657] loop2: detected capacity change from 0 to 512 [ 53.608066][ T4657] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 288: padding at end of block bitmap is not set [ 53.628012][ T4657] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 53.679038][ T4657] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm +}[@: attempt to clear invalid blocks 1024 len 1 [ 53.699952][ T4657] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm +}[@: invalid indirect mapped block 1819239214 (level 0) [ 53.714604][ T4657] EXT4-fs (loop2): 1 truncate cleaned up [ 53.721734][ T4657] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.775785][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.835021][ T4710] netlink: 'syz.3.532': attribute type 22 has an invalid length. [ 53.843085][ T4710] netlink: 4 bytes leftover after parsing attributes in process `syz.3.532'. [ 53.887925][ T12] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 53.888202][ T4710] netlink: 'syz.3.532': attribute type 22 has an invalid length. [ 53.904110][ T4710] netlink: 4 bytes leftover after parsing attributes in process `syz.3.532'. [ 53.913622][ T12] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 53.940975][ T12] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 53.964649][ T12] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 54.062996][ T4740] mmap: syz.2.542 (4740) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 54.116111][ T4748] netlink: 92 bytes leftover after parsing attributes in process `syz.1.547'. [ 54.224903][ T4769] loop1: detected capacity change from 0 to 164 [ 54.264332][ T4769] rock: directory entry would overflow storage [ 54.270669][ T4769] rock: sig=0x4f50, size=4, remaining=3 [ 54.276343][ T4769] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 54.344234][ T4777] syzkaller0: entered promiscuous mode [ 54.349991][ T4777] syzkaller0: entered allmulticast mode [ 54.600427][ T4814] netlink: 'syz.4.578': attribute type 22 has an invalid length. [ 54.608408][ T4814] netlink: 4 bytes leftover after parsing attributes in process `syz.4.578'. [ 54.627099][ T4814] netlink: 'syz.4.578': attribute type 22 has an invalid length. [ 54.628219][ T1786] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 54.635264][ T4814] netlink: 4 bytes leftover after parsing attributes in process `syz.4.578'. [ 54.668084][ T1786] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 54.695669][ T1786] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 54.728234][ T1786] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 55.049844][ T4865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.071177][ T4865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.084054][ T4865] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 55.093750][ T4865] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 55.416855][ T4911] loop0: detected capacity change from 0 to 1024 [ 55.424407][ T4911] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 55.435666][ T4911] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 55.448135][ T4911] JBD2: no valid journal superblock found [ 55.453983][ T4911] EXT4-fs (loop0): Could not load journal inode [ 55.465883][ T4911] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 55.496743][ T4915] netlink: 7 bytes leftover after parsing attributes in process `syz.0.614'. [ 55.512047][ T4915] netlink: 7 bytes leftover after parsing attributes in process `syz.0.614'. [ 55.543618][ T4920] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 55.595505][ T4927] loop4: detected capacity change from 0 to 164 [ 55.604571][ T4927] rock: directory entry would overflow storage [ 55.610817][ T4927] rock: sig=0x4f50, size=4, remaining=3 [ 55.616582][ T4927] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 56.029087][ T4960] bond_slave_1: entered promiscuous mode [ 56.055127][ T4960] netlink: 4 bytes leftover after parsing attributes in process `syz.1.637'. [ 56.077882][ T4960] bond0: (slave bond_slave_1): Releasing backup interface [ 56.092466][ T4960] bond_slave_1 (unregistering): left promiscuous mode [ 56.196908][ T4977] netlink: 20 bytes leftover after parsing attributes in process `syz.1.645'. [ 56.224859][ T4977] x_tables: ip_tables: udp match: only valid for protocol 17 [ 56.695691][ T5011] syzkaller0: entered promiscuous mode [ 56.701289][ T5011] syzkaller0: entered allmulticast mode [ 56.765842][ T29] kauditd_printk_skb: 342 callbacks suppressed [ 56.765859][ T29] audit: type=1400 audit(1754524261.336:1127): avc: denied { create } for pid=5015 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 56.843883][ T29] audit: type=1400 audit(1754524261.386:1128): avc: denied { setopt } for pid=5019 comm="syz.3.663" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 56.875797][ T5024] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.673'. [ 56.895128][ T29] audit: type=1400 audit(1754524261.406:1129): avc: denied { execmem } for pid=5021 comm="syz.3.664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 56.957718][ T29] audit: type=1400 audit(1754524261.496:1130): avc: denied { allowed } for pid=5025 comm="syz.4.665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 56.977836][ T29] audit: type=1400 audit(1754524261.506:1131): avc: denied { create } for pid=5025 comm="syz.4.665" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 57.038670][ T29] audit: type=1400 audit(1754524261.606:1132): avc: denied { read } for pid=5034 comm="syz.0.669" dev="nsfs" ino=4026532556 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 57.070285][ T29] audit: type=1400 audit(1754524261.606:1133): avc: denied { open } for pid=5034 comm="syz.0.669" path="net:[4026532556]" dev="nsfs" ino=4026532556 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 57.155643][ T5039] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5039 comm=syz.0.671 [ 57.198336][ T29] audit: type=1400 audit(1754524261.726:1134): avc: denied { map } for pid=5042 comm="syz.4.683" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=10132 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 57.222837][ T29] audit: type=1400 audit(1754524261.726:1135): avc: denied { read write } for pid=5042 comm="syz.4.683" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=10132 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 57.298753][ T5057] netlink: 7 bytes leftover after parsing attributes in process `syz.1.677'. [ 57.309402][ T5057] netlink: 7 bytes leftover after parsing attributes in process `syz.1.677'. [ 57.330600][ T5059] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 57.330694][ T5052] IPVS: stopping backup sync thread 5059 ... [ 57.357673][ T29] audit: type=1400 audit(1754524261.836:1136): avc: denied { write } for pid=5049 comm="syz.2.676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 57.501217][ T5073] loop4: detected capacity change from 0 to 1024 [ 57.522071][ T5073] EXT4-fs: Ignoring removed orlov option [ 57.666819][ T5073] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.943733][ T5107] openvswitch: netlink: Message has 6 unknown bytes. [ 58.026461][ T5111] syzkaller0: entered promiscuous mode [ 58.032133][ T5111] syzkaller0: entered allmulticast mode [ 58.043016][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.292476][ T5142] x_tables: ip_tables: udp match: only valid for protocol 17 [ 58.379399][ T5148] openvswitch: netlink: Message has 6 unknown bytes. [ 58.433858][ T5150] syzkaller0: entered promiscuous mode [ 58.439453][ T5150] syzkaller0: entered allmulticast mode [ 58.618259][ T5176] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 58.633906][ T5172] IPVS: stopping backup sync thread 5176 ... [ 58.704656][ T5178] loop4: detected capacity change from 0 to 1024 [ 58.714181][ T5178] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 58.725383][ T5178] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 58.736057][ T5178] JBD2: no valid journal superblock found [ 58.741863][ T5178] EXT4-fs (loop4): Could not load journal inode [ 58.811190][ T5190] syzkaller0: entered promiscuous mode [ 58.816790][ T5190] syzkaller0: entered allmulticast mode [ 58.844396][ T5200] tipc: Started in network mode [ 58.849437][ T5200] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 58.856827][ T5200] tipc: Enabled bearer , priority 10 [ 58.873965][ T5200] tipc: Resetting bearer [ 58.885880][ T5200] tipc: Disabling bearer [ 58.906286][ T5204] loop4: detected capacity change from 0 to 512 [ 58.913222][ T5204] EXT4-fs: Ignoring removed nobh option [ 58.927422][ T5204] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.743: corrupted inode contents [ 58.941839][ T5204] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #3: comm syz.4.743: mark_inode_dirty error [ 58.956476][ T5204] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.743: corrupted inode contents [ 58.969487][ T5204] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #3: comm syz.4.743: mark_inode_dirty error [ 58.981621][ T5204] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.743: Failed to acquire dquot type 0 [ 58.995698][ T5204] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.743: corrupted inode contents [ 59.018908][ T5204] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #16: comm syz.4.743: mark_inode_dirty error [ 59.031042][ T5204] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.743: corrupted inode contents [ 59.047607][ T5204] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.743: mark_inode_dirty error [ 59.063472][ T23] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 59.071338][ T23] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 59.079232][ T23] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 59.087098][ T23] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 59.095033][ T23] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 59.102797][ T23] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 59.104111][ T5204] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.743: corrupted inode contents [ 59.110725][ T23] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 59.130691][ T23] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 59.138712][ T23] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 59.138986][ T5204] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 59.147085][ T23] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 59.180126][ T5204] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.743: corrupted inode contents [ 59.192375][ T23] hid-generic 0000:007F:FFFFFFFE.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 59.203923][ T5204] EXT4-fs error (device loop4): ext4_truncate:4666: inode #16: comm syz.4.743: mark_inode_dirty error [ 59.216227][ T5204] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 59.225954][ T5204] EXT4-fs (loop4): 1 truncate cleaned up [ 59.232100][ T5204] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.246171][ T5204] ext4 filesystem being mounted at /181/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.279806][ T5204] syz.4.743 (5204) used greatest stack depth: 9760 bytes left [ 59.290159][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.406295][ T5247] Driver unsupported XDP return value 0 on prog (id 565) dev N/A, expect packet loss! [ 59.516571][ T5256] loop2: detected capacity change from 0 to 1024 [ 59.533591][ T5256] EXT4-fs: Ignoring removed orlov option [ 59.543573][ T5256] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.729389][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.781070][ T5264] loop3: detected capacity change from 0 to 1024 [ 59.795904][ T5264] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 59.806990][ T5264] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 59.830245][ T5264] JBD2: no valid journal superblock found [ 59.836049][ T5264] EXT4-fs (loop3): Could not load journal inode [ 59.856985][ T5270] netlink: 'syz.2.771': attribute type 3 has an invalid length. [ 59.973990][ T5284] bond_slave_1: entered promiscuous mode [ 59.980561][ T5284] __nla_validate_parse: 6 callbacks suppressed [ 59.980577][ T5284] netlink: 4 bytes leftover after parsing attributes in process `syz.2.779'. [ 59.999707][ T5284] bond0: (slave bond_slave_1): Releasing backup interface [ 60.008866][ T5284] bond_slave_1 (unregistering): left promiscuous mode [ 60.268642][ T5302] syz.2.786 (5302) used greatest stack depth: 9424 bytes left [ 60.355917][ T5317] tipc: New replicast peer: 255.255.255.83 [ 60.362269][ T5317] tipc: Enabled bearer , priority 10 [ 60.702368][ T5337] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 60.702528][ T5338] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 60.740595][ T5342] sd 0:0:1:0: device reset [ 60.825511][ T5352] netlink: 4 bytes leftover after parsing attributes in process `syz.2.809'. [ 60.841696][ T5352] netlink: 4 bytes leftover after parsing attributes in process `syz.2.809'. [ 60.960313][ T5372] netlink: 4 bytes leftover after parsing attributes in process `syz.1.818'. [ 61.063498][ T5382] netlink: 20 bytes leftover after parsing attributes in process `syz.0.823'. [ 61.274574][ T5405] loop2: detected capacity change from 0 to 512 [ 61.295944][ T5405] EXT4-fs: inline encryption not supported [ 61.302198][ T5405] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 61.303154][ T5407] loop1: detected capacity change from 0 to 1024 [ 61.313460][ T5405] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 61.328786][ T5407] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 61.332033][ T5405] EXT4-fs (loop2): 1 truncate cleaned up [ 61.342671][ T5407] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 61.348879][ T5405] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.376117][ T5407] JBD2: no valid journal superblock found [ 61.381996][ T5407] EXT4-fs (loop1): Could not load journal inode [ 61.402095][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.710816][ T5447] netem: change failed [ 61.860986][ T29] kauditd_printk_skb: 329 callbacks suppressed [ 61.861009][ T29] audit: type=1400 audit(1754524266.426:1464): avc: denied { read write } for pid=5463 comm="syz.0.856" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 61.891807][ T29] audit: type=1400 audit(1754524266.426:1465): avc: denied { open } for pid=5463 comm="syz.0.856" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 61.938305][ T29] audit: type=1326 audit(1754524266.506:1466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5467 comm="syz.3.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c61eaebe9 code=0x7ffc0000 [ 61.963090][ T29] audit: type=1326 audit(1754524266.506:1467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5467 comm="syz.3.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c61eaebe9 code=0x7ffc0000 [ 61.986550][ T29] audit: type=1326 audit(1754524266.506:1468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5467 comm="syz.3.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7c61eaebe9 code=0x7ffc0000 [ 62.010355][ T29] audit: type=1326 audit(1754524266.506:1469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5467 comm="syz.3.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c61eaebe9 code=0x7ffc0000 [ 62.048574][ T5473] loop0: detected capacity change from 0 to 512 [ 62.049262][ T29] audit: type=1326 audit(1754524266.506:1470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5467 comm="syz.3.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7f7c61eaebe9 code=0x7ffc0000 [ 62.078414][ T29] audit: type=1326 audit(1754524266.506:1471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5467 comm="syz.3.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c61eaebe9 code=0x7ffc0000 [ 62.101887][ T29] audit: type=1400 audit(1754524266.616:1472): avc: denied { create } for pid=5470 comm="syz.3.861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 62.125912][ T5473] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.140289][ T5473] ext4 filesystem being mounted at /155/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 62.163564][ T29] audit: type=1400 audit(1754524266.726:1473): avc: denied { kexec_image_load } for pid=5479 comm="syz.2.864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 62.203983][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.266273][ T5491] loop3: detected capacity change from 0 to 512 [ 62.287811][ T5491] EXT4-fs: Ignoring removed nobh option [ 62.320723][ T5491] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.870: corrupted inode contents [ 62.339388][ T5491] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #3: comm syz.3.870: mark_inode_dirty error [ 62.372312][ T5510] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 62.377869][ T5491] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.870: corrupted inode contents [ 62.404070][ T5491] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #3: comm syz.3.870: mark_inode_dirty error [ 62.419441][ T5491] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.870: Failed to acquire dquot type 0 [ 62.431087][ T5514] loop4: detected capacity change from 0 to 1024 [ 62.438431][ T5514] EXT4-fs: Ignoring removed mblk_io_submit option [ 62.445196][ T5514] EXT4-fs: Ignoring removed bh option [ 62.447090][ T5491] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.870: corrupted inode contents [ 62.463412][ T5491] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #16: comm syz.3.870: mark_inode_dirty error [ 62.476601][ T5491] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.870: corrupted inode contents [ 62.485792][ T5514] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.501925][ T5516] loop2: detected capacity change from 0 to 2048 [ 62.510947][ T5491] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.870: mark_inode_dirty error [ 62.522745][ T5491] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.870: corrupted inode contents [ 62.535678][ T5516] loop2: p1 < > p3 p4 [ 62.540853][ T5516] loop2: p3 size 54016 extends beyond EOD, truncated [ 62.547983][ T5491] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 62.548534][ T5514] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 15: [ 62.556693][ T5516] loop2: p4 start 4294967295 is beyond EOD, [ 62.556644][ T5514] block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 62.565602][ T5516] truncated [ 62.587664][ T5491] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.870: corrupted inode contents [ 62.604395][ T5491] EXT4-fs error (device loop3): ext4_truncate:4666: inode #16: comm syz.3.870: mark_inode_dirty error [ 62.622305][ T5491] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 62.671283][ T5491] EXT4-fs (loop3): 1 truncate cleaned up [ 62.681880][ T5524] netlink: 16 bytes leftover after parsing attributes in process `syz.0.884'. [ 62.691464][ T5491] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.710482][ T5491] ext4 filesystem being mounted at /163/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.725197][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.763610][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.774374][ T5532] loop4: detected capacity change from 0 to 256 [ 62.945274][ T5559] loop1: detected capacity change from 0 to 1024 [ 62.964419][ T5559] EXT4-fs: Ignoring removed mblk_io_submit option [ 62.971033][ T5559] EXT4-fs: Ignoring removed bh option [ 63.005918][ T5559] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.047530][ T5559] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 63.101232][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.181061][ T5588] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 63.198954][ T5593] netlink: 16 bytes leftover after parsing attributes in process `syz.2.913'. [ 63.315183][ T5605] SELinux: failed to load policy [ 63.347602][ T5607] loop2: detected capacity change from 0 to 512 [ 63.379329][ T5607] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.394453][ T5607] ext4 filesystem being mounted at /203/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 63.428201][ T5620] loop3: detected capacity change from 0 to 256 [ 63.437819][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.497877][ T5627] loop2: detected capacity change from 0 to 512 [ 63.541854][ T5627] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.556916][ T5627] ext4 filesystem being mounted at /205/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 63.634107][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.636651][ T5642] loop3: detected capacity change from 0 to 512 [ 63.652450][ T5645] netlink: 52 bytes leftover after parsing attributes in process `syz.1.937'. [ 63.663026][ T5642] EXT4-fs: Ignoring removed i_version option [ 63.686201][ T5642] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=e000c018, mo2=0002] [ 63.694672][ T5642] System zones: 0-2, 18-18, 34-35 [ 63.702461][ T5642] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.715656][ T5642] ext4 filesystem being mounted at /172/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.730906][ T5655] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.940'. [ 63.741009][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.918365][ T5683] loop0: detected capacity change from 0 to 2048 [ 64.019143][ T5683] loop0: p1 < > p3 p4 [ 64.022088][ T5695] batadv_slave_0: entered promiscuous mode [ 64.030504][ T5694] batadv_slave_0: left promiscuous mode [ 64.032557][ T5683] loop0: p3 size 54016 extends beyond EOD, truncated [ 64.046476][ T5697] loop4: detected capacity change from 0 to 128 [ 64.053999][ T5683] loop0: p4 start 4294967295 is beyond EOD, truncated [ 64.118340][ T5705] SELinux: failed to load policy [ 64.169844][ T5713] netlink: 3 bytes leftover after parsing attributes in process `syz.3.967'. [ 64.183900][ T5713] batadv1: entered promiscuous mode [ 64.189196][ T5713] batadv1: entered allmulticast mode [ 64.238628][ T5719] bond1: entered promiscuous mode [ 64.243704][ T5719] bond1: entered allmulticast mode [ 64.249936][ T5719] 8021q: adding VLAN 0 to HW filter on device bond1 [ 64.261705][ T5719] bond1 (unregistering): Released all slaves [ 64.476340][ T5742] loop3: detected capacity change from 0 to 2048 [ 64.535491][ T5742] loop3: p1 < > p3 p4 [ 64.540451][ T5742] loop3: p3 size 54016 extends beyond EOD, truncated [ 64.548382][ T5742] loop3: p4 start 4294967295 is beyond EOD, truncated [ 64.989839][ T5802] __nla_validate_parse: 3 callbacks suppressed [ 64.989860][ T5802] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1003'. [ 65.002381][ T5803] loop3: detected capacity change from 0 to 512 [ 65.009882][ T5802] batadv1: entered promiscuous mode [ 65.016842][ T5802] batadv1: entered allmulticast mode [ 65.028203][ T5803] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.1004: corrupted in-inode xattr: invalid ea_ino [ 65.042278][ T5803] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.1004: couldn't read orphan inode 15 (err -117) [ 65.057777][ T5803] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.070894][ T5803] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.303477][ T5834] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1023'. [ 65.313244][ T5834] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1023'. [ 65.413509][ T5849] macvtap0: refused to change device tx_queue_len [ 65.577492][ T5871] program syz.2.1039 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 65.856263][ T5904] loop1: detected capacity change from 0 to 2048 [ 65.895165][ T5909] bond1: entered promiscuous mode [ 65.900312][ T5909] bond1: entered allmulticast mode [ 65.907536][ T5909] 8021q: adding VLAN 0 to HW filter on device bond1 [ 65.915164][ T5904] loop1: p1 < > p3 p4 [ 65.921638][ T5909] bond1 (unregistering): Released all slaves [ 65.930602][ T5904] loop1: p3 size 54016 extends beyond EOD, truncated [ 65.942811][ T5904] loop1: p4 start 4294967295 is beyond EOD, truncated [ 66.888068][ T29] kauditd_printk_skb: 274 callbacks suppressed [ 66.888085][ T29] audit: type=1400 audit(1754524271.456:1746): avc: denied { read } for pid=5969 comm="syz.1.1085" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 66.917946][ T29] audit: type=1400 audit(1754524271.456:1747): avc: denied { open } for pid=5969 comm="syz.1.1085" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 66.980992][ T5981] netlink: 'syz.4.1090': attribute type 1 has an invalid length. [ 66.997377][ T5981] 8021q: adding VLAN 0 to HW filter on device bond1 [ 67.005900][ T29] audit: type=1400 audit(1754524271.576:1748): avc: denied { create } for pid=5983 comm="syz.3.1091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 67.031818][ T29] audit: type=1400 audit(1754524271.576:1749): avc: denied { connect } for pid=5983 comm="syz.3.1091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 67.058993][ T5981] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 67.059143][ T29] audit: type=1326 audit(1754524271.626:1750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5985 comm="syz.3.1093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c61eaebe9 code=0x7ffc0000 [ 67.092009][ T29] audit: type=1326 audit(1754524271.626:1751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5985 comm="syz.3.1093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c61eaebe9 code=0x7ffc0000 [ 67.093467][ T5987] loop2: detected capacity change from 0 to 512 [ 67.127702][ T29] audit: type=1326 audit(1754524271.686:1752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5985 comm="syz.3.1093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f7c61eaebe9 code=0x7ffc0000 [ 67.151476][ T29] audit: type=1326 audit(1754524271.686:1753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5985 comm="syz.3.1093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c61eaebe9 code=0x7ffc0000 [ 67.175290][ T29] audit: type=1326 audit(1754524271.686:1754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5985 comm="syz.3.1093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c61eaebe9 code=0x7ffc0000 [ 67.199082][ T29] audit: type=1326 audit(1754524271.686:1755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5985 comm="syz.3.1093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f7c61eaebe9 code=0x7ffc0000 [ 67.230523][ T5987] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.1092: corrupted in-inode xattr: invalid ea_ino [ 67.254224][ T5987] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.1092: couldn't read orphan inode 15 (err -117) [ 67.272123][ T5987] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.286297][ T5987] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.383018][ T6009] loop3: detected capacity change from 0 to 512 [ 67.417729][ T6009] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 67.440028][ T6009] EXT4-fs (loop3): mount failed [ 67.508275][ T6018] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 67.512151][ T6020] netlink: 'syz.3.1106': attribute type 1 has an invalid length. [ 67.554905][ T6020] 8021q: adding VLAN 0 to HW filter on device bond1 [ 67.641229][ T6020] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 67.663692][ T6025] SELinux: failed to load policy [ 67.688698][ T6031] loop0: detected capacity change from 0 to 512 [ 67.729503][ T6031] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.757979][ T6031] ext4 filesystem being mounted at /201/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 67.792383][ T6031] EXT4-fs (loop0): shut down requested (1) [ 67.810847][ T6051] netlink: 'syz.1.1120': attribute type 1 has an invalid length. [ 67.838635][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.848560][ T6051] 8021q: adding VLAN 0 to HW filter on device bond1 [ 67.911174][ T6051] bond1: (slave bridge1): making interface the new active one [ 67.932384][ T6051] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 67.950189][ T6061] SELinux: failed to load policy [ 68.086399][ T6084] veth1_to_bridge: entered promiscuous mode [ 68.095197][ T6084] veth1_to_bridge: left promiscuous mode [ 68.211090][ T6095] loop2: detected capacity change from 0 to 4096 [ 68.285299][ T6105] netlink: 'syz.4.1141': attribute type 1 has an invalid length. [ 68.340342][ T6105] 8021q: adding VLAN 0 to HW filter on device bond2 [ 68.376119][ T6105] bond2: (slave bridge1): making interface the new active one [ 68.385629][ T6105] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 68.439951][ T6114] loop1: detected capacity change from 0 to 512 [ 68.485731][ T6114] ext4 filesystem being mounted at /200/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 68.528246][ T6127] netlink: 'syz.4.1151': attribute type 3 has an invalid length. [ 68.549648][ T6130] loop0: detected capacity change from 0 to 512 [ 68.556486][ T6114] EXT4-fs (loop1): shut down requested (1) [ 68.578331][ T6130] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #15: comm syz.0.1152: corrupted in-inode xattr: invalid ea_ino [ 68.593411][ T6130] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.1152: couldn't read orphan inode 15 (err -117) [ 68.644966][ T6133] loop4: detected capacity change from 0 to 8192 [ 68.655517][ T6133] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 68.827572][ T6173] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 69.006518][ T6182] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1176'. [ 69.042916][ T6182] netlink: 'syz.0.1176': attribute type 1 has an invalid length. [ 69.051036][ T6182] netlink: 'syz.0.1176': attribute type 2 has an invalid length. [ 69.058868][ T6182] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1176'. [ 69.126094][ T6188] bridge1: entered promiscuous mode [ 69.131374][ T6188] bridge1: entered allmulticast mode [ 69.193207][ T6192] loop0: detected capacity change from 0 to 512 [ 69.317140][ T6192] EXT4-fs mount: 6 callbacks suppressed [ 69.317156][ T6192] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.353802][ T6192] ext4 filesystem being mounted at /220/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.503286][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.562271][ T6222] loop3: detected capacity change from 0 to 512 [ 69.592165][ T6222] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 69.608917][ T6222] EXT4-fs (loop3): mount failed [ 69.750209][ T6249] netlink: 'syz.3.1205': attribute type 1 has an invalid length. [ 69.787456][ T6249] bond2: entered promiscuous mode [ 69.792685][ T6249] 8021q: adding VLAN 0 to HW filter on device bond2 [ 69.826074][ T6264] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 69.834978][ T6264] bond2: (slave batadv1): making interface the new active one [ 69.842494][ T6264] batadv1: entered promiscuous mode [ 69.849545][ T6264] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 69.872779][ T6271] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 69.922121][ T6277] netlink: 'syz.1.1216': attribute type 41 has an invalid length. [ 70.098563][ T6310] pimreg: entered allmulticast mode [ 70.110228][ T6310] pimreg: left allmulticast mode [ 70.269563][ T6333] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1243'. [ 70.301843][ T6333] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1243'. [ 70.311464][ T6333] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1243'. [ 70.323337][ T6333] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1243'. [ 70.402140][ T6347] pim6reg: entered allmulticast mode [ 70.410366][ T6347] pim6reg: left allmulticast mode [ 70.537253][ T6365] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 70.680679][ T6390] sch_tbf: burst 3 is lower than device geneve1 mtu (1514) ! [ 70.743500][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 70.767487][ T6394] loop4: detected capacity change from 0 to 8192 [ 71.359160][ T6449] hub 6-0:1.0: USB hub found [ 71.369360][ T6449] hub 6-0:1.0: 8 ports detected [ 71.464505][ T6465] bridge0: entered promiscuous mode [ 71.472715][ T6465] macsec1: entered promiscuous mode [ 71.479165][ T6465] bridge0: port 3(macsec1) entered blocking state [ 71.485926][ T6465] bridge0: port 3(macsec1) entered disabled state [ 71.492744][ T6465] macsec1: entered allmulticast mode [ 71.498155][ T6465] bridge0: entered allmulticast mode [ 71.505300][ T6465] macsec1: left allmulticast mode [ 71.510464][ T6465] bridge0: left allmulticast mode [ 71.516180][ T6465] bridge0: left promiscuous mode [ 71.518415][ T6471] loop3: detected capacity change from 0 to 2048 [ 71.543031][ T6471] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.572900][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.642759][ T6482] netlink: 'syz.2.1312': attribute type 1 has an invalid length. [ 71.989130][ T29] kauditd_printk_skb: 165 callbacks suppressed [ 71.989148][ T29] audit: type=1326 audit(1754524276.556:1919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6515 comm="syz.3.1327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c61eaebe9 code=0x7ffc0000 [ 72.046219][ T29] audit: type=1326 audit(1754524276.586:1920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6515 comm="syz.3.1327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c61eaebe9 code=0x7ffc0000 [ 72.069937][ T29] audit: type=1326 audit(1754524276.586:1921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6515 comm="syz.3.1327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7c61eaebe9 code=0x7ffc0000 [ 72.093690][ T29] audit: type=1326 audit(1754524276.586:1922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6515 comm="syz.3.1327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c61eaebe9 code=0x7ffc0000 [ 72.117425][ T29] audit: type=1326 audit(1754524276.586:1923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6515 comm="syz.3.1327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c61eaebe9 code=0x7ffc0000 [ 72.141771][ T29] audit: type=1326 audit(1754524276.586:1924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6515 comm="syz.3.1327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7c61eaebe9 code=0x7ffc0000 [ 72.165457][ T29] audit: type=1326 audit(1754524276.586:1925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6515 comm="syz.3.1327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c61eaebe9 code=0x7ffc0000 [ 72.189107][ T29] audit: type=1326 audit(1754524276.586:1926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6515 comm="syz.3.1327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c61eaebe9 code=0x7ffc0000 [ 72.212863][ T29] audit: type=1326 audit(1754524276.586:1927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6515 comm="syz.3.1327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7c61eaebe9 code=0x7ffc0000 [ 72.236711][ T29] audit: type=1326 audit(1754524276.586:1928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6515 comm="syz.3.1327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c61eaebe9 code=0x7ffc0000 [ 72.819694][ T6563] ALSA: seq fatal error: cannot create timer (-19) [ 73.494738][ T6575] hub 6-0:1.0: USB hub found [ 73.510543][ T6575] hub 6-0:1.0: 8 ports detected [ 73.597586][ T6589] netlink: 'syz.1.1357': attribute type 1 has an invalid length. [ 73.662280][ T6597] bridge0: entered promiscuous mode [ 73.673945][ T6597] macsec1: entered promiscuous mode [ 73.680361][ T6597] bridge0: port 3(macsec1) entered blocking state [ 73.686942][ T6597] bridge0: port 3(macsec1) entered disabled state [ 73.695429][ T6597] macsec1: entered allmulticast mode [ 73.700910][ T6597] bridge0: entered allmulticast mode [ 73.710351][ T6597] macsec1: left allmulticast mode [ 73.715492][ T6597] bridge0: left allmulticast mode [ 73.723143][ T6597] bridge0: left promiscuous mode [ 73.787406][ T6612] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1370'. [ 73.819572][ T6616] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1373'. [ 73.831304][ T6612] 8021q: adding VLAN 0 to HW filter on device bond1 [ 73.849470][ T6612] bond1: (slave batadv1): Opening slave failed [ 73.892715][ T6616] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1373'. [ 73.978794][ T1036] kernel write not supported for file /629/sched (pid: 1036 comm: kworker/0:2) [ 74.026333][ T6637] loop0: detected capacity change from 0 to 512 [ 74.064665][ T6637] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #15: comm syz.0.1381: corrupted in-inode xattr: invalid ea_ino [ 74.087401][ T6647] loop3: detected capacity change from 0 to 256 [ 74.093742][ T6637] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.1381: couldn't read orphan inode 15 (err -117) [ 74.107269][ T6637] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.120093][ T6647] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 74.129146][ T6647] FAT-fs (loop3): Filesystem has been set read-only [ 74.130390][ T6637] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.138133][ T6651] netlink: 165 bytes leftover after parsing attributes in process `syz.1.1388'. [ 74.226656][ T6659] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1391'. [ 74.235663][ T6659] netlink: 432 bytes leftover after parsing attributes in process `syz.3.1391'. [ 74.276371][ T6670] loop0: detected capacity change from 0 to 128 [ 74.295919][ T6670] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 74.317100][ T6670] ext4 filesystem being mounted at /261/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.333285][ T6669] loop1: detected capacity change from 0 to 8192 [ 74.368611][ T3307] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 74.592245][ T6720] vhci_hcd: default hub control req: 0007 v0f00 i0006 l0 [ 74.737325][ T6739] serio: Serial port ptm0 [ 74.910283][ T6752] hsr_slave_0: left promiscuous mode [ 74.929210][ T6752] hsr_slave_1: left promiscuous mode [ 74.949990][ T6751] loop3: detected capacity change from 0 to 8192 [ 74.960569][ T6754] loop4: detected capacity change from 0 to 2048 [ 74.969234][ T6754] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.017342][ T10] hid_parser_main: 33 callbacks suppressed [ 75.017364][ T10] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 75.046003][ T10] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 75.049214][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.099369][ T6766] loop4: detected capacity change from 0 to 512 [ 75.125921][ T6766] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.248020][ T6773] 8021q: adding VLAN 0 to HW filter on device bond2 [ 75.267848][ T6773] bond2: (slave batadv1): Opening slave failed [ 75.398937][ T6780] __nla_validate_parse: 7 callbacks suppressed [ 75.398956][ T6780] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1432'. [ 75.414636][ T6780] netlink: 432 bytes leftover after parsing attributes in process `syz.1.1432'. [ 75.429797][ T6780] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1432'. [ 75.496643][ T6793] loop1: detected capacity change from 0 to 128 [ 75.510496][ T6793] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 75.526284][ T6793] ext4 filesystem being mounted at /248/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.578690][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.588049][ T6800] openvswitch: netlink: Message has 6 unknown bytes. [ 75.618193][ T3302] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 75.660305][ T6805] hub 6-0:1.0: USB hub found [ 75.665277][ T6805] hub 6-0:1.0: 8 ports detected [ 75.701198][ T6818] loop0: detected capacity change from 0 to 2048 [ 75.717741][ T6818] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.818628][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.899384][ T6836] veth1_to_bridge: entered promiscuous mode [ 75.906048][ T6836] veth1_to_bridge: left promiscuous mode [ 76.023885][ T6854] loop2: detected capacity change from 0 to 512 [ 76.052117][ T6854] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.065904][ T6854] ext4 filesystem being mounted at /306/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 76.099875][ T6854] EXT4-fs (loop2): shut down requested (1) [ 76.119825][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.127419][ T6858] loop3: detected capacity change from 0 to 512 [ 76.140312][ T6858] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.1464: corrupted in-inode xattr: invalid ea_ino [ 76.154097][ T6858] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.1464: couldn't read orphan inode 15 (err -117) [ 76.167978][ T6858] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.194700][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.198825][ T6861] loop2: detected capacity change from 0 to 8192 [ 76.509674][ T6875] loop4: detected capacity change from 0 to 256 [ 76.520784][ T6875] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 76.529687][ T6875] FAT-fs (loop4): Filesystem has been set read-only [ 76.707228][ T6903] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1482'. [ 76.723193][ T6903] 8021q: adding VLAN 0 to HW filter on device bond3 [ 76.753571][ T6903] bond3: (slave batadv1): Opening slave failed [ 76.767479][ T6907] loop2: detected capacity change from 0 to 128 [ 76.782109][ T6907] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 76.813913][ T6907] ext4 filesystem being mounted at /314/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.878452][ T3304] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 76.911164][ T6918] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 76.913546][ T6916] loop0: detected capacity change from 0 to 8192 [ 76.939564][ T6916] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 77.248849][ T6943] loop0: detected capacity change from 0 to 512 [ 77.267464][ T6943] __quota_error: 94 callbacks suppressed [ 77.267478][ T6943] Quota error (device loop0): v2_read_file_info: Free block number 1 out of range (1, 6). [ 77.283709][ T6943] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 77.299603][ T6943] EXT4-fs (loop0): mount failed [ 77.361631][ T6956] loop3: detected capacity change from 0 to 512 [ 77.386898][ T6959] bridge1: entered promiscuous mode [ 77.392177][ T6959] bridge1: entered allmulticast mode [ 77.398146][ T6956] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.043798][ T6963] loop4: detected capacity change from 0 to 128 [ 78.098511][ T29] audit: type=1326 audit(1754524283.636:2023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6966 comm="syz.2.1507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46b10bebe9 code=0x7ffc0000 [ 78.122004][ T29] audit: type=1326 audit(1754524283.636:2024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6966 comm="syz.2.1507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f46b10bebe9 code=0x7ffc0000 [ 78.145448][ T29] audit: type=1326 audit(1754524283.646:2025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6966 comm="syz.2.1507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46b10bebe9 code=0x7ffc0000 [ 78.169159][ T29] audit: type=1326 audit(1754524283.646:2026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6966 comm="syz.2.1507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46b10bebe9 code=0x7ffc0000 [ 78.192773][ T29] audit: type=1326 audit(1754524283.646:2027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6966 comm="syz.2.1507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f46b10bebe9 code=0x7ffc0000 [ 78.216307][ T29] audit: type=1326 audit(1754524283.646:2028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6966 comm="syz.2.1507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46b10bebe9 code=0x7ffc0000 [ 78.239874][ T29] audit: type=1326 audit(1754524283.646:2029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6966 comm="syz.2.1507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46b10bebe9 code=0x7ffc0000 [ 78.263412][ T29] audit: type=1326 audit(1754524283.646:2030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6966 comm="syz.2.1507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f46b10bebe9 code=0x7ffc0000 [ 78.286899][ T29] audit: type=1326 audit(1754524283.646:2031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6966 comm="syz.2.1507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46b10bebe9 code=0x7ffc0000 [ 78.317046][ T6963] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 78.375036][ T6963] ext4 filesystem being mounted at /329/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.396897][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.426844][ T6986] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1510'. [ 78.436258][ T6986] netlink: 'syz.2.1510': attribute type 15 has an invalid length. [ 78.444186][ T6986] netlink: 'syz.2.1510': attribute type 18 has an invalid length. [ 78.459636][ T6986] vxlan0: entered promiscuous mode [ 78.474578][ T57] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.492055][ T57] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.504842][ T57] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.513120][ T57] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.513668][ T3303] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 78.559855][ T6999] loop1: detected capacity change from 0 to 128 [ 78.570878][ T6999] bio_check_eod: 102 callbacks suppressed [ 78.570899][ T6999] syz.1.1518: attempt to access beyond end of device [ 78.570899][ T6999] loop1: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 78.596567][ T6999] syz.1.1518: attempt to access beyond end of device [ 78.596567][ T6999] loop1: rw=2049, sector=144, nr_sectors = 2 limit=128 [ 78.610079][ T6999] Buffer I/O error on dev loop1, logical block 72, lost async page write [ 78.823077][ T7022] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1532'. [ 78.833372][ T7022] hsr_slave_0: left promiscuous mode [ 78.858993][ T7022] hsr_slave_1: left promiscuous mode [ 78.877713][ T7026] sch_tbf: burst 3 is lower than device geneve1 mtu (1514) ! [ 78.933836][ T7033] loop1: detected capacity change from 0 to 512 [ 78.991797][ T7033] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.004511][ T7033] ext4 filesystem being mounted at /259/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.018392][ T7044] loop4: detected capacity change from 0 to 512 [ 79.047970][ T7044] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 79.063381][ T7044] EXT4-fs (loop4): mount failed [ 79.087255][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.225278][ T7062] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 79.338991][ T7073] atomic_op ffff88811c9af128 conn xmit_atomic 0000000000000000 [ 79.366684][ T7078] loop2: detected capacity change from 0 to 512 [ 79.373672][ T7079] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1554'. [ 79.377296][ T7078] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.382838][ T7079] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1554'. [ 79.395463][ T7078] ext4 filesystem being mounted at /332/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.473461][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.957379][ T7088] loop2: detected capacity change from 0 to 512 [ 79.968627][ T7088] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.1558: corrupted in-inode xattr: invalid ea_ino [ 79.982922][ T7088] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.1558: couldn't read orphan inode 15 (err -117) [ 80.005377][ T7088] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.035424][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.046699][ T7091] loop0: detected capacity change from 0 to 8192 [ 80.154473][ T7111] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.1565'. [ 80.219271][ T7113] loop1: detected capacity change from 0 to 1024 [ 80.266828][ T7113] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.1566: Failed to acquire dquot type 0 [ 80.359172][ T7113] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 80.400233][ T7113] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #13: comm syz.1.1566: corrupted inode contents [ 80.413827][ T7113] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #13: comm syz.1.1566: mark_inode_dirty error [ 80.427764][ T7113] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #13: comm syz.1.1566: corrupted inode contents [ 80.440209][ T7113] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #13: comm syz.1.1566: mark_inode_dirty error [ 80.453260][ T7113] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #13: comm syz.1.1566: corrupted inode contents [ 80.467794][ T7113] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 80.482674][ T7113] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #13: comm syz.1.1566: corrupted inode contents [ 80.512584][ T7113] EXT4-fs error (device loop1): ext4_truncate:4666: inode #13: comm syz.1.1566: mark_inode_dirty error [ 80.529717][ T7113] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 80.540146][ T7113] EXT4-fs (loop1): 1 truncate cleaned up [ 80.561791][ T7113] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.598434][ T7139] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1579'. [ 80.642486][ T7143] netlink: 'syz.3.1581': attribute type 3 has an invalid length. [ 80.655025][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.798596][ T7168] loop3: detected capacity change from 0 to 2048 [ 80.826754][ T7168] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.962948][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.988506][ T7187] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1603'. [ 80.997719][ T7187] netlink: 'syz.2.1603': attribute type 1 has an invalid length. [ 81.005628][ T7187] netlink: 680 bytes leftover after parsing attributes in process `syz.2.1603'. [ 81.100494][ T7194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.109288][ T7194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.325852][ T7202] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1609'. [ 81.380750][ T7206] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1611'. [ 81.389880][ T7206] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1611'. [ 81.401795][ T7206] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1611'. [ 81.411042][ T7206] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1611'. [ 81.536844][ T7212] netlink: 'syz.4.1614': attribute type 3 has an invalid length. [ 81.562046][ T7214] loop4: detected capacity change from 0 to 128 [ 81.593268][ T3302] block device autoloading is deprecated and will be removed. [ 81.601567][ T7214] FAT-fs (loop4): error, invalid FAT chain (i_pos 548, last_block 8) [ 81.606148][ T3307] block device autoloading is deprecated and will be removed. [ 81.609913][ T7214] FAT-fs (loop4): Filesystem has been set read-only [ 81.624104][ T7214] FAT-fs (loop4): error, corrupted file size (i_pos 548, 522) [ 81.638172][ T7218] loop2: detected capacity change from 0 to 1024 [ 81.649710][ T7214] FAT-fs (loop4): error, corrupted file size (i_pos 548, 522) [ 81.665763][ T7218] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.679574][ T7222] netlink: 'syz.0.1619': attribute type 1 has an invalid length. [ 81.687470][ T7222] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.1619'. [ 81.699986][ T7226] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1620'. [ 81.713797][ T7218] ext4 filesystem being mounted at /356/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.749543][ T7218] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: block 1: comm syz.2.1618: lblock 1 mapped to illegal pblock 1 (length 15) [ 81.765893][ T7218] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 81.778404][ T7218] EXT4-fs (loop2): This should not happen!! Data will be lost [ 81.778404][ T7218] [ 81.811419][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.826531][ T7232] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 81.883381][ T7243] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 81.895221][ T7251] loop1: detected capacity change from 0 to 512 [ 81.913326][ T7251] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.952459][ T7249] loop0: detected capacity change from 0 to 8192 [ 82.148247][ T7273] loop4: detected capacity change from 0 to 1024 [ 82.167647][ T7273] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.1641: Failed to acquire dquot type 0 [ 82.222585][ T7273] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 82.255516][ T7273] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.1641: corrupted inode contents [ 82.272770][ T7273] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #13: comm syz.4.1641: mark_inode_dirty error [ 82.287934][ T7273] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.1641: corrupted inode contents [ 82.321051][ T7273] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #13: comm syz.4.1641: mark_inode_dirty error [ 82.353856][ T7273] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.1641: corrupted inode contents [ 82.393040][ T7273] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 82.431260][ T7273] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.1641: corrupted inode contents [ 82.473410][ T7273] EXT4-fs error (device loop4): ext4_truncate:4666: inode #13: comm syz.4.1641: mark_inode_dirty error [ 82.490659][ T7273] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 82.500832][ T7273] EXT4-fs (loop4): 1 truncate cleaned up [ 82.539046][ T7301] IPVS: Error connecting to the multicast addr [ 82.546055][ T7273] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.619808][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.648009][ T29] kauditd_printk_skb: 97 callbacks suppressed [ 82.648026][ T29] audit: type=1326 audit(1754524288.216:2124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7306 comm="syz.3.1658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c61eaebe9 code=0x7ffc0000 [ 82.706709][ T29] audit: type=1326 audit(1754524288.216:2125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7306 comm="syz.3.1658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c61eaebe9 code=0x7ffc0000 [ 82.730583][ T29] audit: type=1326 audit(1754524288.216:2126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7306 comm="syz.3.1658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7f7c61eaebe9 code=0x7ffc0000 [ 82.754304][ T29] audit: type=1326 audit(1754524288.216:2127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7306 comm="syz.3.1658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c61eaebe9 code=0x7ffc0000 [ 82.777875][ T29] audit: type=1326 audit(1754524288.226:2128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7306 comm="syz.3.1658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c61eaebe9 code=0x7ffc0000 [ 82.829918][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.878525][ T29] audit: type=1400 audit(1754524288.436:2129): avc: denied { unmount } for pid=3307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 82.880787][ T7329] loop1: detected capacity change from 0 to 512 [ 82.935161][ T29] audit: type=1326 audit(1754524288.506:2130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7333 comm="syz.0.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d1445ebe9 code=0x7ffc0000 [ 82.973058][ T7329] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.976061][ T29] audit: type=1326 audit(1754524288.506:2131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7333 comm="syz.0.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d1445ebe9 code=0x7ffc0000 [ 82.986179][ T7324] Falling back ldisc for ttyS3. [ 83.009304][ T29] audit: type=1326 audit(1754524288.506:2132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7333 comm="syz.0.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4d1445ebe9 code=0x7ffc0000 [ 83.009344][ T29] audit: type=1326 audit(1754524288.506:2133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7333 comm="syz.0.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d1445ebe9 code=0x7ffc0000 [ 83.073207][ T7329] ext4 filesystem being mounted at /275/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.131334][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.220920][ T7367] netlink: 'syz.2.1681': attribute type 29 has an invalid length. [ 83.255744][ T7367] netlink: 'syz.2.1681': attribute type 29 has an invalid length. [ 83.273960][ T7367] unsupported nla_type 58 [ 83.343816][ T7379] loop2: detected capacity change from 0 to 1024 [ 83.379990][ T7379] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.464968][ T7397] batman_adv: batadv0: Adding interface: dummy0 [ 83.471383][ T7397] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.501614][ T7379] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.1687: Allocating blocks 449-513 which overlap fs metadata [ 83.512566][ T7397] batman_adv: batadv0: Interface activated: dummy0 [ 83.523727][ T7399] smc: net device bond0 applied user defined pnetid SYZ0 [ 83.531148][ T7378] EXT4-fs (loop2): pa ffff888106c653f0: logic 48, phys. 177, len 21 [ 83.531854][ T7399] smc: net device bond0 erased user defined pnetid SYZ0 [ 83.539462][ T7378] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 83.567699][ T7400] batadv0: mtu less than device minimum [ 83.573740][ T7400] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 83.584872][ T7400] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 83.595803][ T7400] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 83.606681][ T7400] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 83.617922][ T7400] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 83.629095][ T7400] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 83.640345][ T7400] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 83.651121][ T7400] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 83.662828][ T7400] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 83.679814][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.051215][ T7456] loop1: detected capacity change from 0 to 512 [ 84.086499][ T7456] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 84.110664][ T7456] EXT4-fs (loop1): 1 truncate cleaned up [ 84.118216][ T7456] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.244943][ T7478] netlink: 'syz.4.1732': attribute type 1 has an invalid length. [ 84.261802][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.738104][ T7526] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7526 comm=syz.1.1755 [ 84.750862][ T7526] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7526 comm=syz.1.1755 [ 84.841666][ T7530] bridge0: port 3(macvlan4) entered blocking state [ 84.848575][ T7530] bridge0: port 3(macvlan4) entered disabled state [ 84.867179][ T7530] macvlan4: entered allmulticast mode [ 84.872629][ T7530] bridge0: entered allmulticast mode [ 84.887567][ T7530] macvlan4: left allmulticast mode [ 84.892796][ T7530] bridge0: left allmulticast mode [ 85.210303][ T7566] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 85.218453][ T7566] vhci_hcd: default hub control req: 1f07 v0017 i0001 l0 [ 85.798245][ T7647] __nla_validate_parse: 14 callbacks suppressed [ 85.798267][ T7647] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1812'. [ 85.947072][ T7660] loop3: detected capacity change from 0 to 764 [ 86.172760][ T7682] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1827'. [ 86.220208][ T7688] loop3: detected capacity change from 0 to 128 [ 86.269976][ T7693] loop3: detected capacity change from 0 to 512 [ 86.287044][ T7693] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.299890][ T7693] ext4 filesystem being mounted at /380/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.336243][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.353728][ T7697] batadv_slave_1: entered promiscuous mode [ 86.361639][ T7696] batadv_slave_1: left promiscuous mode [ 86.950397][ T7719] loop1: detected capacity change from 0 to 1024 [ 86.967099][ T7719] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.071240][ T7731] batadv_slave_1: entered promiscuous mode [ 87.078251][ T7730] batadv_slave_1: left promiscuous mode [ 87.084925][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.220206][ T7748] loop1: detected capacity change from 0 to 512 [ 87.227365][ T7748] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 87.239531][ T7748] EXT4-fs (loop1): 1 orphan inode deleted [ 87.245430][ T7748] EXT4-fs (loop1): 1 truncate cleaned up [ 87.251868][ T7748] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.287797][ T7748] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 87.317089][ T7748] EXT4-fs (loop1): Remounting filesystem read-only [ 87.323942][ T7748] EXT4-fs (loop1): error restoring inline_data for inode -- potential data loss! (inode 12, error -30) [ 87.368130][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.499565][ T7781] loop4: detected capacity change from 0 to 764 [ 87.536607][ T7787] loop4: detected capacity change from 0 to 1024 [ 87.543377][ T7787] EXT4-fs: Ignoring removed oldalloc option [ 87.549497][ T7787] EXT4-fs: Ignoring removed bh option [ 87.572270][ T7787] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.623170][ T7793] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1874'. [ 87.633863][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.650704][ T7795] blktrace: Concurrent blktraces are not allowed on sg0 [ 87.689075][ T29] kauditd_printk_skb: 363 callbacks suppressed [ 87.689095][ T29] audit: type=1400 audit(1754524293.236:2497): avc: denied { write } for pid=7796 comm="syz.2.1876" path="socket:[19647]" dev="sockfs" ino=19647 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 87.724506][ T29] audit: type=1400 audit(1754524293.286:2498): avc: denied { read } for pid=7798 comm="syz.0.1878" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 87.747993][ T29] audit: type=1400 audit(1754524293.286:2499): avc: denied { open } for pid=7798 comm="syz.0.1878" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 87.776781][ T29] audit: type=1400 audit(1754524293.346:2500): avc: denied { map } for pid=7798 comm="syz.0.1878" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 87.812932][ T7807] loop1: detected capacity change from 0 to 1024 [ 87.831638][ T29] audit: type=1400 audit(1754524293.346:2501): avc: denied { ioctl } for pid=7798 comm="syz.0.1878" path="/dev/usbmon0" dev="devtmpfs" ino=141 ioctlcmd=0x9204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 87.877698][ T7807] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.897851][ T29] audit: type=1400 audit(1754524293.466:2502): avc: denied { setattr } for pid=7804 comm="syz.1.1881" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 87.936899][ T29] audit: type=1400 audit(1754524293.506:2503): avc: denied { relabelfrom } for pid=7821 comm="syz.4.1884" name="" dev="pipefs" ino=20564 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 87.975182][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.024027][ T29] audit: type=1400 audit(1754524293.586:2504): avc: denied { ioctl } for pid=7832 comm="syz.4.1887" path="socket:[19707]" dev="sockfs" ino=19707 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 88.114963][ T29] audit: type=1400 audit(1754524293.676:2505): avc: denied { mounton } for pid=7839 comm="syz.4.1888" path="/proc/900/task" dev="proc" ino=20587 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 88.137780][ T29] audit: type=1400 audit(1754524293.676:2506): avc: denied { mount } for pid=7839 comm="syz.4.1888" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 88.226319][ T7858] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1892'. [ 88.256701][ T7858] 0: renamed from hsr0 (while UP) [ 88.282245][ T7858] 0: entered allmulticast mode [ 88.287231][ T7858] hsr_slave_0: entered allmulticast mode [ 88.292905][ T7858] hsr_slave_1: entered allmulticast mode [ 88.704000][ T7936] loop2: detected capacity change from 0 to 8192 [ 88.955163][ T7977] netlink: 'syz.2.1907': attribute type 3 has an invalid length. [ 88.963225][ T7977] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1907'. [ 89.027153][ T7998] loop9: detected capacity change from 0 to 7 [ 89.033530][ T7998] Buffer I/O error on dev loop9, logical block 0, async page read [ 89.041703][ T7998] Buffer I/O error on dev loop9, logical block 0, async page read [ 89.049603][ T7998] loop9: unable to read partition table [ 89.061147][ T7998] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 89.061147][ T7998] ) failed (rc=-5) [ 89.120559][ T8015] random: crng reseeded on system resumption [ 89.203593][ T8032] netem: change failed [ 89.356766][ T8048] loop1: detected capacity change from 0 to 1024 [ 89.371407][ T8048] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.403746][ T8048] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.1929: Allocating blocks 449-513 which overlap fs metadata [ 89.427527][ T8047] EXT4-fs (loop1): pa ffff888106c654d0: logic 48, phys. 177, len 21 [ 89.435908][ T8047] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 89.456799][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.497371][ T8057] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1933'. [ 89.646493][ T8072] loop1: detected capacity change from 0 to 512 [ 89.685342][ T8059] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1943'. [ 89.704432][ T8059] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1943'. [ 89.714002][ T8059] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1943'. [ 89.725256][ T8059] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1943'. [ 89.784141][ T8072] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.798827][ T8075] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 89.805424][ T8075] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 89.810831][ T8072] ext4 filesystem being mounted at /335/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.813241][ T8075] vhci_hcd vhci_hcd.0: Device attached [ 89.841752][ T8072] syz.1.1938 (8072) used greatest stack depth: 8960 bytes left [ 89.851693][ T3155] hid-generic 0000:0D17:0000.0006: item fetching failed at offset 0/2 [ 89.860290][ T3155] hid-generic 0000:0D17:0000.0006: probe with driver hid-generic failed with error -22 [ 89.868380][ T8078] vhci_hcd: connection closed [ 89.872044][ T12] vhci_hcd: stop threads [ 89.874592][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.876958][ T12] vhci_hcd: release socket [ 89.895556][ T12] vhci_hcd: disconnect device [ 89.921280][ T8088] SELinux: Context system_u:object_r:dhcpc_state_t:s0 is not valid (left unmapped). [ 90.197396][ T8114] netlink: 'syz.4.1956': attribute type 1 has an invalid length. [ 90.408232][ T8138] IPv6: NLM_F_CREATE should be specified when creating new route [ 90.543571][ T8146] SELinux: failed to load policy [ 90.581521][ T8158] loop1: detected capacity change from 0 to 512 [ 90.594830][ T8152] loop0: detected capacity change from 0 to 8192 [ 90.602318][ T8158] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 90.645171][ T8158] EXT4-fs (loop1): 1 truncate cleaned up [ 90.653844][ T8158] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.673715][ T8167] loop4: detected capacity change from 0 to 1024 [ 90.717160][ T8168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.717151][ T8167] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.725753][ T8168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.887901][ T8184] __nla_validate_parse: 4 callbacks suppressed [ 90.887916][ T8184] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1988'. [ 91.130138][ T8202] loop2: detected capacity change from 0 to 1024 [ 91.383868][ T8217] vhci_hcd: invalid port number 96 [ 91.389103][ T8217] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 91.629159][ T8242] loop0: detected capacity change from 0 to 512 [ 91.648420][ T8242] ext4 filesystem being mounted at /382/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 91.734878][ T8255] loop0: detected capacity change from 0 to 1024 [ 91.749583][ T8259] serio: Serial port ptm0 [ 91.772937][ T8255] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.2019: Allocating blocks 497-513 which overlap fs metadata [ 91.791008][ T8266] loop3: detected capacity change from 0 to 512 [ 91.801229][ T8255] EXT4-fs (loop0): pa ffff888106c65460: logic 256, phys. 369, len 9 [ 91.809410][ T8255] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1 [ 91.816349][ T8266] ext4 filesystem being mounted at /398/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.820281][ T8255] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 18: block 129:freeing already freed block (bit 8); block bitmap corrupt. [ 91.885829][ T8274] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2027'. [ 91.896733][ T8274] IPVS: Error connecting to the multicast addr [ 91.939494][ T8278] loop4: detected capacity change from 0 to 512 [ 91.939919][ T8276] bridge0: entered promiscuous mode [ 91.946858][ T8278] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 91.955056][ T8276] bridge0: port 3(macsec1) entered blocking state [ 91.966792][ T8278] EXT4-fs (loop4): 1 truncate cleaned up [ 91.968192][ T8276] bridge0: port 3(macsec1) entered disabled state [ 91.994315][ T8276] macsec1: entered allmulticast mode [ 91.999707][ T8276] bridge0: entered allmulticast mode [ 92.006990][ T8276] macsec1: left allmulticast mode [ 92.012128][ T8276] bridge0: left allmulticast mode [ 92.031105][ T8276] bridge0: left promiscuous mode [ 92.112115][ T8305] loop3: detected capacity change from 0 to 1024 [ 92.126402][ T8308] loop0: detected capacity change from 0 to 1024 [ 92.133457][ T8308] EXT4-fs: Ignoring removed orlov option [ 92.152487][ T8308] SELinux: policydb version -957581230 does not match my version range 15-35 [ 92.163576][ T8308] SELinux: failed to load policy [ 92.180142][ T8316] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2040'. [ 92.362917][ T8331] loop9: detected capacity change from 0 to 7 [ 92.369354][ T8331] Buffer I/O error on dev loop9, logical block 0, async page read [ 92.377483][ T8331] Buffer I/O error on dev loop9, logical block 0, async page read [ 92.385344][ T8331] loop9: unable to read partition table [ 92.395017][ T8331] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 92.395017][ T8331] ) failed (rc=-5) [ 92.418767][ T8336] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2050'. [ 92.431248][ T8338] loop0: detected capacity change from 0 to 512 [ 92.457290][ T8338] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.2051: corrupted inode contents [ 92.469656][ T8338] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #16: comm syz.0.2051: mark_inode_dirty error [ 92.486951][ T8338] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.2051: corrupted inode contents [ 92.499566][ T8344] netlink: 'syz.3.2053': attribute type 1 has an invalid length. [ 92.509329][ T8338] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.2051: mark_inode_dirty error [ 92.523243][ T8338] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.2051: corrupted inode contents [ 92.535946][ T8338] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 92.545056][ T8338] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.2051: corrupted inode contents [ 92.563444][ T8338] EXT4-fs error (device loop0): ext4_truncate:4666: inode #16: comm syz.0.2051: mark_inode_dirty error [ 92.584882][ T8338] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 92.596047][ T8338] EXT4-fs (loop0): 1 truncate cleaned up [ 92.602280][ T8338] ext4 filesystem being mounted at /390/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.613137][ T378] __quota_error: 118 callbacks suppressed [ 92.613156][ T378] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 92.628876][ T378] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 1 [ 92.646103][ T8350] loop2: detected capacity change from 0 to 2048 [ 92.681429][ T8358] loop4: detected capacity change from 0 to 512 [ 92.695179][ T8358] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0102] [ 92.703251][ T8358] System zones: 1-12 [ 92.708572][ T8358] EXT4-fs error (device loop4): ext4_xattr_inode_iget:442: comm syz.4.2060: error while reading EA inode 32 err=-116 [ 92.729824][ T29] audit: type=1400 audit(1754525066.527:2625): avc: denied { create } for pid=8364 comm="syz.3.2062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 92.751222][ T8358] EXT4-fs (loop4): Remounting filesystem read-only [ 92.757948][ T8358] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 92.770620][ T8358] EXT4-fs (loop4): 1 orphan inode deleted [ 92.837425][ T29] audit: type=1400 audit(1754525066.527:2626): avc: denied { bind } for pid=8364 comm="syz.3.2062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 92.856815][ T29] audit: type=1400 audit(1754525066.527:2627): avc: denied { write } for pid=8364 comm="syz.3.2062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 92.876393][ T29] audit: type=1326 audit(1754525066.611:2628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8372 comm="syz.0.2066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d1445ebe9 code=0x7ffc0000 [ 92.899958][ T29] audit: type=1326 audit(1754525066.611:2629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8372 comm="syz.0.2066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4d1445ebe9 code=0x7ffc0000 [ 92.923767][ T29] audit: type=1326 audit(1754525066.611:2630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8372 comm="syz.0.2066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d1445ebe9 code=0x7ffc0000 [ 92.948035][ T29] audit: type=1326 audit(1754525066.611:2631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8372 comm="syz.0.2066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d1445ebe9 code=0x7ffc0000 [ 92.971907][ T29] audit: type=1326 audit(1754525066.611:2632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8372 comm="syz.0.2066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4d1445ebe9 code=0x7ffc0000 [ 92.996338][ T29] audit: type=1326 audit(1754525066.611:2633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8372 comm="syz.0.2066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d1445ebe9 code=0x7ffc0000 [ 93.174415][ T8398] loop1: detected capacity change from 0 to 512 [ 93.181543][ T8398] EXT4-fs: Ignoring removed orlov option [ 93.258045][ T8398] ext4 filesystem being mounted at /363/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 93.433066][ T8433] serio: Serial port ptm0 [ 93.462661][ T8438] raw_sendmsg: syz.2.2091 forgot to set AF_INET. Fix it! [ 93.481548][ T8440] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2092'. [ 93.551609][ T8447] loop3: detected capacity change from 0 to 2048 [ 93.589716][ T8447] loop3: p2 p3 p7 [ 93.594896][ T8452] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 93.871379][ T8467] loop4: detected capacity change from 0 to 512 [ 93.878737][ T8467] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 93.937409][ T51] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 94.134287][ T8483] veth0: entered promiscuous mode [ 94.142348][ T8483] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2113'. [ 94.229262][ T8491] ALSA: seq fatal error: cannot create timer (-19) [ 94.286736][ T8500] sd 0:0:1:0: device reset [ 94.397378][ T8517] netlink: 'syz.4.2129': attribute type 11 has an invalid length. [ 94.404313][ T8519] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2130'. [ 94.405498][ T8517] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2129'. [ 94.428369][ T8517] netlink: 'syz.4.2129': attribute type 11 has an invalid length. [ 94.436428][ T8517] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2129'. [ 94.476329][ T8523] loop2: detected capacity change from 0 to 764 [ 94.505271][ T8523] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 94.591684][ T8541] loop2: detected capacity change from 0 to 1024 [ 94.599224][ T8541] EXT4-fs: Ignoring removed nobh option [ 94.605012][ T8541] EXT4-fs: Ignoring removed nobh option [ 94.669293][ T8541] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 94.685974][ T8541] EXT4-fs error (device loop2): ext4_get_journal_inode:5796: comm syz.2.2141: inode #4294967295: comm syz.2.2141: iget: illegal inode # [ 94.716982][ T8541] EXT4-fs (loop2): no journal found [ 94.722281][ T8541] EXT4-fs (loop2): can't get journal size [ 94.767008][ T8571] loop0: detected capacity change from 0 to 128 [ 94.767388][ T8541] EXT4-fs (loop2): failed to initialize system zone (-22) [ 94.807960][ T8541] EXT4-fs (loop2): mount failed [ 94.872757][ T8579] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2155'. [ 94.988777][ T8585] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.996222][ T8585] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.070728][ T8585] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.090271][ T8585] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.150531][ T8585] bridge1: left promiscuous mode [ 95.156491][ T8585] vxlan0: left promiscuous mode [ 95.164340][ T378] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 95.172959][ T378] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.206612][ T378] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 95.215108][ T378] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.241062][ T378] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 95.249715][ T378] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.288230][ T378] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 95.296929][ T378] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.481595][ T8589] loop4: detected capacity change from 0 to 2048 [ 96.045558][ T8613] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2170'. [ 96.062519][ T8613] bridge_slave_1: left allmulticast mode [ 96.068312][ T8613] bridge_slave_1: left promiscuous mode [ 96.074105][ T8613] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.094029][ T8613] bridge_slave_0: left allmulticast mode [ 96.099840][ T8613] bridge_slave_0: left promiscuous mode [ 96.105661][ T8613] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.523225][ T8638] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 97.042735][ T8680] SELinux: Context is not valid (left unmapped). [ 97.126856][ T8683] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2197'. [ 97.143713][ T8683] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2197'. [ 97.354054][ T29] kauditd_printk_skb: 234 callbacks suppressed [ 97.354071][ T29] audit: type=1400 audit(1754525071.410:2868): avc: denied { open } for pid=8703 comm="syz.2.2210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 97.380353][ T29] audit: type=1400 audit(1754525071.410:2869): avc: denied { kernel } for pid=8703 comm="syz.2.2210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 97.399997][ T29] audit: type=1400 audit(1754525071.410:2870): avc: denied { tracepoint } for pid=8703 comm="syz.2.2210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 97.470700][ T29] audit: type=1400 audit(1754525071.410:2871): avc: denied { create } for pid=8703 comm="syz.2.2210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 97.490663][ T29] audit: type=1400 audit(1754525071.410:2872): avc: denied { setopt } for pid=8703 comm="syz.2.2210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 97.510240][ T29] audit: type=1400 audit(1754525071.410:2873): avc: denied { write } for pid=8703 comm="syz.2.2210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 97.581741][ T29] audit: type=1400 audit(1754525071.632:2874): avc: denied { read write } for pid=8710 comm="syz.1.2213" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 97.606034][ T29] audit: type=1400 audit(1754525071.632:2875): avc: denied { open } for pid=8710 comm="syz.1.2213" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 97.629961][ T29] audit: type=1400 audit(1754525071.632:2876): avc: denied { create } for pid=8707 comm="syz.3.2212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 97.650063][ T29] audit: type=1400 audit(1754525071.632:2877): avc: denied { ioctl } for pid=8707 comm="syz.3.2212" path="socket:[23019]" dev="sockfs" ino=23019 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 98.190252][ T8768] binfmt_misc: register: failed to install interpreter file ./file0/file0 [ 98.215932][ T8770] loop3: detected capacity change from 0 to 1024 [ 98.228846][ T8770] EXT4-fs: Ignoring removed mblk_io_submit option [ 98.235715][ T8770] EXT4-fs: inline encryption not supported [ 98.251629][ T8770] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 98.276848][ T8770] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.2236: bad orphan inode 11 [ 98.289135][ T8770] EXT4-fs (loop3): Remounting filesystem read-only [ 98.295750][ T8770] ext4_test_bit(bit=10, block=4) = 1 [ 98.301612][ T8770] is_bad_inode(inode)=0 [ 98.305870][ T8770] NEXT_ORPHAN(inode)=3254779904 [ 98.310857][ T8770] max_ino=32 [ 98.314180][ T8770] i_nlink=0 [ 98.324013][ T8781] netlink: 368 bytes leftover after parsing attributes in process `syz.0.2240'. [ 98.357704][ T8786] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2243'. [ 98.366988][ T8786] bridge_slave_1: left allmulticast mode [ 98.372840][ T8786] bridge_slave_1: left promiscuous mode [ 98.378813][ T8786] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.389483][ T8786] bridge_slave_0: left allmulticast mode [ 98.395255][ T8786] bridge_slave_0: left promiscuous mode [ 98.401033][ T8786] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.506137][ T10] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x4 [ 98.506846][ T8804] loop1: detected capacity change from 0 to 512 [ 98.514003][ T10] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x2 [ 98.529888][ T10] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x3 [ 98.538593][ T10] hid-generic 0000:3000000:0000.0007: hidraw0: HID v0.00 Device [sy] on syz0 [ 98.556324][ T8804] ext4 filesystem being mounted at /401/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.607442][ T8804] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2250: bg 0: block 64: padding at end of block bitmap is not set [ 98.678461][ T8831] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2256'. [ 98.688383][ T8831] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2256'. [ 98.777753][ T8844] loop1: detected capacity change from 0 to 764 [ 98.894189][ T8865] rdma_op ffff888119bf7180 conn xmit_rdma 0000000000000000 [ 98.917193][ T8869] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 99.036946][ T8886] loop3: detected capacity change from 0 to 1024 [ 99.047473][ T8886] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 99.100789][ T8893] loop4: detected capacity change from 0 to 512 [ 99.144316][ T8900] loop7: detected capacity change from 0 to 16384 [ 99.178242][ T8893] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 99.208233][ T8900] I/O error, dev loop7, sector 3328 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 [ 99.238258][ T8900] I/O error, dev loop7, sector 3584 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 [ 99.256657][ T8900] I/O error, dev loop7, sector 3328 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 99.266160][ T8900] Buffer I/O error on dev loop7, logical block 416, async page read [ 99.303168][ T37] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 99.316223][ T8899] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 99.326201][ T8899] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 99.334675][ T8899] Buffer I/O error on dev loop7, logical block 1, lost async page write [ 99.343195][ T8899] Buffer I/O error on dev loop7, logical block 2, lost async page write [ 99.351584][ T8899] Buffer I/O error on dev loop7, logical block 3, lost async page write [ 99.360132][ T8899] Buffer I/O error on dev loop7, logical block 4, lost async page write [ 99.368513][ T8899] Buffer I/O error on dev loop7, logical block 5, lost async page write [ 99.377002][ T8899] Buffer I/O error on dev loop7, logical block 6, lost async page write [ 99.385505][ T8899] Buffer I/O error on dev loop7, logical block 7, lost async page write [ 99.393926][ T8899] Buffer I/O error on dev loop7, logical block 8, lost async page write [ 99.443187][ T8899] I/O error, dev loop7, sector 1024 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 99.483683][ T8899] I/O error, dev loop7, sector 2048 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 99.512608][ T8899] I/O error, dev loop7, sector 3072 op 0x1:(WRITE) flags 0x800 phys_seg 32 prio class 0 [ 99.794572][ T3307] block device autoloading is deprecated and will be removed. [ 99.807049][ T8976] netlink: 'syz.1.2291': attribute type 10 has an invalid length. [ 99.814976][ T8976] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2291'. [ 99.831699][ T8976] dummy0: entered promiscuous mode [ 99.846173][ T8976] bridge0: port 3(dummy0) entered blocking state [ 99.852854][ T8976] bridge0: port 3(dummy0) entered disabled state [ 99.861887][ T8976] dummy0: entered allmulticast mode [ 99.868174][ T8976] bridge0: port 3(dummy0) entered blocking state [ 99.874722][ T8976] bridge0: port 3(dummy0) entered forwarding state [ 100.696573][ T9095] hub 6-0:1.0: USB hub found [ 100.701768][ T9095] hub 6-0:1.0: 8 ports detected [ 100.725974][ T9100] netlink: 'syz.0.2312': attribute type 10 has an invalid length. [ 100.743872][ T9100] team0: Device hsr_slave_0 failed to register rx_handler [ 100.830600][ T9112] loop4: detected capacity change from 0 to 512 [ 100.840582][ T9112] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 100.853363][ T9112] EXT4-fs (loop4): invalid journal inode [ 100.859381][ T9112] EXT4-fs (loop4): can't get journal size [ 100.866843][ T9114] netlink: 'syz.0.2318': attribute type 21 has an invalid length. [ 100.875549][ T9114] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2318'. [ 100.876261][ T9112] EXT4-fs (loop4): 1 truncate cleaned up [ 100.892770][ T9112] EXT4-fs mount: 30 callbacks suppressed [ 100.898500][ T9112] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.923558][ T9112] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2317: bg 0: block 255: padding at end of block bitmap is not set [ 100.940376][ T9112] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 100.952336][ T9121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.975190][ T9121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.990863][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.018783][ T9125] bond1: entered promiscuous mode [ 101.023922][ T9125] bond1: entered allmulticast mode [ 101.029485][ T9125] 8021q: adding VLAN 0 to HW filter on device bond1 [ 101.050520][ T9125] bond1 (unregistering): Released all slaves [ 101.197418][ T9146] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2332'. [ 101.231571][ T9150] loop0: detected capacity change from 0 to 512 [ 101.238642][ T9150] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 101.247719][ T9150] EXT4-fs (loop0): invalid journal inode [ 101.254954][ T9150] EXT4-fs (loop0): can't get journal size [ 101.260873][ T9152] loop4: detected capacity change from 0 to 1024 [ 101.261610][ T9150] EXT4-fs (loop0): 1 truncate cleaned up [ 101.268836][ T9152] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 101.273693][ T9150] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.285922][ T9152] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 101.305844][ T9152] EXT4-fs (loop4): orphan cleanup on readonly fs [ 101.306870][ T9150] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2334: bg 0: block 255: padding at end of block bitmap is not set [ 101.312857][ T9152] EXT4-fs error (device loop4): __ext4_get_inode_loc:4861: comm syz.4.2336: Invalid inode table block 0 in block_group 0 [ 101.327750][ T9150] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 101.340159][ T9152] EXT4-fs (loop4): Remounting filesystem read-only [ 101.355099][ T9152] EXT4-fs (loop4): 1 truncate cleaned up [ 101.364064][ T9152] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 101.400039][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.410982][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.601121][ T9181] netem: change failed [ 101.635499][ T9188] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 101.647723][ T9187] IPVS: stopping master sync thread 9188 ... [ 101.664049][ T9192] loop4: detected capacity change from 0 to 128 [ 101.674726][ T9192] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 101.688003][ T9192] ext4 filesystem being mounted at /530/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.744477][ T3303] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 102.006930][ T9226] IPVS: Error connecting to the multicast addr [ 102.040053][ T9228] loop0: detected capacity change from 0 to 1024 [ 102.047260][ T9228] EXT4-fs: Ignoring removed mblk_io_submit option [ 102.056680][ T9228] EXT4-fs: inline encryption not supported [ 102.063473][ T9228] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 102.066014][ T9230] loop2: detected capacity change from 0 to 512 [ 102.085073][ T9230] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 102.086176][ T9228] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.2377: bad orphan inode 11 [ 102.095701][ T9230] EXT4-fs (loop2): invalid journal inode [ 102.109569][ T9230] EXT4-fs (loop2): can't get journal size [ 102.118238][ T9230] EXT4-fs (loop2): 1 truncate cleaned up [ 102.118282][ T9228] EXT4-fs (loop0): Remounting filesystem read-only [ 102.118296][ T9228] ext4_test_bit(bit=10, block=4) = 1 [ 102.118307][ T9228] is_bad_inode(inode)=0 [ 102.118314][ T9228] NEXT_ORPHAN(inode)=3254779904 [ 102.118321][ T9228] max_ino=32 [ 102.118327][ T9228] i_nlink=0 [ 102.125099][ T9230] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.147079][ T9228] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.198210][ T9230] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2368: bg 0: block 255: padding at end of block bitmap is not set [ 102.216567][ T9230] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 102.228656][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.277824][ T9236] loop1: detected capacity change from 0 to 1024 [ 102.286318][ T9239] loop4: detected capacity change from 0 to 764 [ 102.293574][ T9236] EXT4-fs: Ignoring removed bh option [ 102.303332][ T29] kauditd_printk_skb: 214 callbacks suppressed [ 102.303350][ T29] audit: type=1400 audit(1754525077.630:3090): avc: denied { create } for pid=9238 comm="syz.4.2372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 102.342386][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.352275][ T9239] Symlink component flag not implemented [ 102.359433][ T9236] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.372787][ T9239] Symlink component flag not implemented (7) [ 102.385829][ T29] audit: type=1326 audit(1754525077.714:3091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9243 comm="syz.0.2374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d1445ebe9 code=0x7ffc0000 [ 102.411242][ T29] audit: type=1326 audit(1754525077.745:3092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9243 comm="syz.0.2374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=265 compat=0 ip=0x7f4d1445ebe9 code=0x7ffc0000 [ 102.435519][ T29] audit: type=1326 audit(1754525077.745:3093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9243 comm="syz.0.2374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d1445ebe9 code=0x7ffc0000 [ 102.460226][ T29] audit: type=1326 audit(1754525077.745:3094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9243 comm="syz.0.2374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d1445ebe9 code=0x7ffc0000 [ 102.506333][ T9236] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.2371: Allocating blocks 497-513 which overlap fs metadata [ 102.522604][ T29] audit: type=1400 audit(1754525077.861:3095): avc: denied { connect } for pid=9249 comm=ACED scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 102.551021][ T9254] EXT4-fs (loop1): pa ffff888106e307e0: logic 1, phys. 321, len 12 [ 102.559147][ T9254] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 1, pa_free 2 [ 102.573024][ T9254] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 15: block 321:freeing already freed block (bit 20); block bitmap corrupt. [ 102.628019][ T29] audit: type=1400 audit(1754525077.976:3096): avc: denied { module_load } for pid=9261 comm="syz.2.2381" path="/sys/power/wakeup_count" dev="sysfs" ino=218 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 102.655605][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.725338][ T9276] SELinux: Context system_u:object_r:ldconfig_cache_t:s0 is not valid (left unmapped). [ 102.735588][ T29] audit: type=1400 audit(1754525078.081:3097): avc: denied { relabelto } for pid=9275 comm="syz.3.2387" name="cgroup.procs" dev="cgroup" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:ldconfig_cache_t:s0" [ 102.763385][ T29] audit: type=1400 audit(1754525078.081:3098): avc: denied { associate } for pid=9275 comm="syz.3.2387" name="cgroup.procs" dev="cgroup" ino=200 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:ldconfig_cache_t:s0" [ 102.799189][ T29] audit: type=1400 audit(1754525078.154:3099): avc: denied { setopt } for pid=9279 comm="syz.3.2389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 102.873982][ T9288] bond3: entered promiscuous mode [ 102.879072][ T9288] bond3: entered allmulticast mode [ 102.915917][ T9288] 8021q: adding VLAN 0 to HW filter on device bond3 [ 102.929208][ T9288] bond3 (unregistering): Released all slaves [ 103.093134][ C0] ================================================================== [ 103.101393][ C0] BUG: KCSAN: data-race in virtqueue_disable_cb / virtqueue_disable_cb [ 103.109674][ C0] [ 103.112028][ C0] read to 0xffff888102106e78 of 2 bytes by interrupt on cpu 1: [ 103.120058][ C0] virtqueue_disable_cb+0x58/0x150 [ 103.126185][ C0] skb_xmit_done+0x65/0x140 [ 103.130798][ C0] vring_interrupt+0x155/0x180 [ 103.135591][ C0] __handle_irq_event_percpu+0x90/0x440 [ 103.141151][ C0] handle_irq_event+0x64/0xf0 [ 103.146021][ C0] handle_edge_irq+0x154/0x470 [ 103.150890][ C0] __common_interrupt+0x63/0x100 [ 103.155848][ C0] common_interrupt+0x7e/0x90 [ 103.160557][ C0] asm_common_interrupt+0x26/0x40 [ 103.165617][ C0] do_syscall_64+0x9c/0x200 [ 103.170153][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.176072][ C0] [ 103.178398][ C0] write to 0xffff888102106e78 of 2 bytes by interrupt on cpu 0: [ 103.186065][ C0] virtqueue_disable_cb+0x7a/0x150 [ 103.191198][ C0] start_xmit+0x103/0x17a0 [ 103.195630][ C0] dev_hard_start_xmit+0x122/0x3e0 [ 103.200768][ C0] sch_direct_xmit+0x192/0x550 [ 103.205546][ C0] __dev_queue_xmit+0xe9a/0x2000 [ 103.210511][ C0] ip_finish_output2+0x77f/0x8b0 [ 103.215569][ C0] ip_finish_output+0x114/0x2a0 [ 103.220469][ C0] ip_output+0xad/0x170 [ 103.224890][ C0] __ip_queue_xmit+0xb4b/0xb80 [ 103.229660][ C0] ip_queue_xmit+0x39/0x50 [ 103.234085][ C0] __tcp_transmit_skb+0x1641/0x1a60 [ 103.239293][ C0] tcp_write_xmit+0x1210/0x2fd0 [ 103.244172][ C0] __tcp_push_pending_frames+0x6d/0x1b0 [ 103.249858][ C0] tcp_rcv_established+0xa7f/0xf50 [ 103.255014][ C0] tcp_v4_do_rcv+0x672/0x740 [ 103.259642][ C0] tcp_v4_rcv+0x1bd5/0x1f70 [ 103.264338][ C0] ip_protocol_deliver_rcu+0x397/0x780 [ 103.269973][ C0] ip_local_deliver_finish+0x1fc/0x2f0 [ 103.275545][ C0] ip_local_deliver+0xe8/0x1c0 [ 103.280354][ C0] ip_sublist_rcv+0x58e/0x670 [ 103.285053][ C0] ip_list_rcv+0x261/0x290 [ 103.289483][ C0] __netif_receive_skb_list_core+0x4dc/0x500 [ 103.295472][ C0] netif_receive_skb_list_internal+0x487/0x600 [ 103.301682][ C0] napi_complete_done+0x1a3/0x410 [ 103.307166][ C0] virtnet_poll+0x1843/0x1cb0 [ 103.312125][ C0] __napi_poll+0x63/0x310 [ 103.317006][ C0] net_rx_action+0x391/0x830 [ 103.321744][ C0] handle_softirqs+0xb7/0x290 [ 103.326531][ C0] __irq_exit_rcu+0x3a/0xc0 [ 103.331148][ C0] common_interrupt+0x83/0x90 [ 103.336118][ C0] asm_common_interrupt+0x26/0x40 [ 103.341329][ C0] kcsan_setup_watchpoint+0x415/0x430 [ 103.346823][ C0] try_to_unlazy+0x82/0x3a0 [ 103.351359][ C0] complete_walk+0xc2/0x200 [ 103.355906][ C0] __filename_parentat+0x17e/0x3f0 [ 103.361041][ C0] do_unlinkat+0x99/0x480 [ 103.365432][ C0] __x64_sys_unlink+0x2e/0x40 [ 103.370127][ C0] x64_sys_call+0x2dc0/0x2ff0 [ 103.374934][ C0] do_syscall_64+0xd2/0x200 [ 103.379694][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.385701][ C0] [ 103.388033][ C0] value changed: 0x0000 -> 0x0001 [ 103.393260][ C0] [ 103.395687][ C0] Reported by Kernel Concurrency Sanitizer on: [ 103.402018][ C0] CPU: 0 UID: 0 PID: 3302 Comm: syz-executor Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895 #0 PREEMPT(voluntary) [ 103.414444][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 103.425154][ C0] ==================================================================