last executing test programs: 41.168405988s ago: executing program 4 (id=3154): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)={0x198, r1, 0xe701ac47a3d23ecd, 0x0, 0x2, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_DOMAIN={0x15e, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x00\x00\x00od\xe6\xbees0\xad\xc6\xbf6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=E0\xf8\xb51O\xd3$\xb4j=\x11d\xf0\xcey\n\xe3\xa5\x03/\x1f@V\xe4\x8f\x03\xd9\xd6\xbb\x04\xa3H?\xf2\xff$%\xe2\xf5\xf7y\x03K\xbf\xcfGxU\xbf\xbb\xb8;Cd)\x14\xbc\x11\x89\xfd\'\xe0b\x99\xbf5#t\xd8\xca$:w\xa3\t\xfd\xef`!\xa3\x9b\xf79!\xbd\xaa\xbd>F\x14.s\xad\xa9\x80\x9e\xb9\xb2\xf9m\x81\xdc\x1d&,w\xe2fxy6\xb3\x99\xc0_S\x1a\xe4\xffM\xa9\x920\x0e\xb4\xa4\'l\x00'/346}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x198}}, 0x8800) 41.109257903s ago: executing program 4 (id=3159): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x7fffffff, 0x60005, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe00}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) nanosleep(&(0x7f0000000080), 0x0) 41.081068887s ago: executing program 4 (id=3164): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x44) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r0, 0x0) 41.032307641s ago: executing program 4 (id=3166): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000100)) 40.974362127s ago: executing program 4 (id=3170): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 40.874086197s ago: executing program 4 (id=3175): syz_mount_image$vfat(&(0x7f0000000200), &(0x7f00000002c0)='./bus\x00', 0x101c08a, &(0x7f0000000a00)=ANY=[@ANYRES32=0x0], 0x6, 0x2cf, &(0x7f0000000c40)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x1a0) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x4) 26.566335789s ago: executing program 32 (id=3175): syz_mount_image$vfat(&(0x7f0000000200), &(0x7f00000002c0)='./bus\x00', 0x101c08a, &(0x7f0000000a00)=ANY=[@ANYRES32=0x0], 0x6, 0x2cf, &(0x7f0000000c40)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x1a0) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x4) 909.826571ms ago: executing program 5 (id=5151): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x4ee97ffd, 0x8e00) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000080)={0x11, 0x0, 0x0}) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x11, 0x9, &(0x7f0000000bc0)="352ee6c5e96dc12870"}) 873.616484ms ago: executing program 5 (id=5153): setresuid(0x0, 0xee01, 0x0) r0 = shmget$private(0x0, 0x1000, 0x800, &(0x7f0000ffb000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) 837.519588ms ago: executing program 2 (id=5157): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois', 0x8) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f0000000100)) 780.226684ms ago: executing program 5 (id=5159): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000018c0), r0) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000001ac0)={0x0, 0xfeff, &(0x7f0000001a80)={&(0x7f00000004c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000ffdbdf25090000006400038008000100010000000800030004000000140002007665744e315f6d616376746170000000060004000200000008000500e0000000140002006970766c616e31"], 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 780.032494ms ago: executing program 2 (id=5161): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0xfffffffb}, 0x48) r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00f\x00'], 0xfe33) 779.963664ms ago: executing program 2 (id=5162): timer_create(0x2, 0x0, &(0x7f0000000000)=0x0) timer_settime(r0, 0x1, &(0x7f0000000880)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_settime(r0, 0x0, &(0x7f0000000100)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000140)) 761.402685ms ago: executing program 1 (id=5164): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x19, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0x2a}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3ff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40efe, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 741.014128ms ago: executing program 5 (id=5165): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) 740.633588ms ago: executing program 2 (id=5166): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="01000000080010000400000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000001940), 0x2000cc0, r0}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r0}, 0x38) 707.990431ms ago: executing program 1 (id=5168): sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0xc2c, [{0x4, 0x4, 0x1}]}]}, {0x0, [0x61, 0x0, 0x0]}}, &(0x7f0000000f40)=""/4074, 0x35, 0xfea, 0x8}, 0x28) 463.258514ms ago: executing program 1 (id=5174): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4090, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) 462.783885ms ago: executing program 3 (id=5175): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=@base={0x9, 0x9, 0x2, 0x9, 0x42, 0xffffffffffffffff, 0x3}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%-010d \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000800)={{r1}, &(0x7f0000000780)=0x40000000, &(0x7f00000007c0)='%pS \x00', 0x2}, 0x20) 384.648432ms ago: executing program 3 (id=5177): bpf$MAP_CREATE(0x0, &(0x7f0000001000)=@base={0xb, 0x5, 0x4, 0xa932, 0x9, 0xffffffffffffffff, 0x800008}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r0, r0, 0x33, 0x0, @val=@netfilter={0x3, 0x1, 0x46e}}, 0x20) 376.519253ms ago: executing program 5 (id=5178): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6e}}, {@user_xattr}, {@lazytime}, {@quota}]}, 0x3, 0x441, &(0x7f0000000440)="$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") syz_open_dev$usbmon(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) 359.659825ms ago: executing program 3 (id=5179): unshare(0x22020600) r0 = socket(0x10, 0x803, 0x0) bind$inet(r0, &(0x7f0000002e80)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10) 276.307723ms ago: executing program 0 (id=5181): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0x0, @dev}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0xe00}}], 0x1, 0x0) close(0x3) 276.124463ms ago: executing program 3 (id=5182): bpf$PROG_LOAD(0x5, 0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x4, 0x0, 0x81, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 276.038443ms ago: executing program 0 (id=5183): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 275.931283ms ago: executing program 1 (id=5184): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x84, &(0x7f00000008c0)={0x0, @in={{0x2, 0x4e22, @multicast1}}, 0x100, 0xd}, 0x90) 266.812274ms ago: executing program 3 (id=5185): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000004c0)='mm_page_free\x00', r0, 0x0, 0x178}, 0x18) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) 242.127387ms ago: executing program 1 (id=5186): r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fcntl$setlease(r0, 0x400, 0x0) fremovexattr(r0, &(0x7f0000000040)=@known='system.posix_acl_default\x00') 176.233973ms ago: executing program 3 (id=5187): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_usbip_server_init(0x1) 157.101875ms ago: executing program 0 (id=5188): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000480)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000080)='sys_enter\x00', r0}, 0x10) rseq(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x7}, 0x20, 0x0, 0x0) 156.987995ms ago: executing program 1 (id=5189): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x18, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000008f00000000000000da41000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000fcff00008500000086000000bf0900000000000055090100000000809500000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffcf02000008000000b70300000800000085000000060000002500f4fff0ffffffbf91000000000000b7020000070000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0xa, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94) 120.615198ms ago: executing program 0 (id=5190): mprotect(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000002100), &(0x7f0000000000)=0x30) 93.634941ms ago: executing program 2 (id=5191): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)={0x3c, r1, 0x205, 0xfffffffc, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x1}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x3}]}, 0x3c}}, 0x0) 62.193855ms ago: executing program 0 (id=5192): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100, 0xe, 0x0, 0x3}, 0x1c) ppoll(&(0x7f0000003580)=[{r0, 0x8444}], 0x1, 0x0, 0x0, 0x0) 62.051414ms ago: executing program 2 (id=5193): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000040)={[{@norecovery}, {@grpquota}, {@debug}, {@discard}]}, 0xee, 0x498, &(0x7f0000001b40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f00000000c0)) 219.941µs ago: executing program 5 (id=5194): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) mount$9p_fd(0x0, &(0x7f0000000400)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000040), 0x800048, &(0x7f0000000a40)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}}) 0s ago: executing program 0 (id=5195): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) kernel console output (not intermixed with test programs): orker/u8:6: Failed to release dquot type 0 [ 81.678067][ T9743] EXT4-fs error (device loop4): __ext4_get_inode_loc:4832: comm syz.4.2834: Invalid inode table block 1 in block_group 0 [ 81.695391][ T9771] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 81.700613][ T9743] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 81.728666][ T9743] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #2: comm syz.4.2834: mark_inode_dirty error [ 81.772313][ T37] EXT4-fs error (device loop4): __ext4_get_inode_loc:4832: comm kworker/u8:2: Invalid inode table block 1 in block_group 0 [ 81.780321][ T9771] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.2845: invalid block [ 81.813546][ T3320] EXT4-fs error (device loop4): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 81.831732][ T9786] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 81.846880][ T9771] EXT4-fs (loop3): Remounting filesystem read-only [ 81.853690][ T9771] EXT4-fs (loop3): 2 truncates cleaned up [ 81.874620][ T3320] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 81.899440][ T3320] EXT4-fs error (device loop4): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 81.964749][ T9795] loop4: detected capacity change from 0 to 1024 [ 81.981655][ T9795] EXT4-fs: Ignoring removed nobh option [ 81.987441][ T9795] EXT4-fs: inline encryption not supported [ 82.006566][ T9771] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 82.035928][ T9795] EXT4-fs (loop4): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 82.173540][ T9812] loop0: detected capacity change from 0 to 8192 [ 82.243263][ T9842] RDS: rds_bind could not find a transport for ::c00d:0:20:0, load rds_tcp or rds_rdma? [ 82.312627][ T9851] random: crng reseeded on system resumption [ 82.313251][ T9853] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2883'. [ 82.351038][ T9854] tipc: Invalid UDP bearer configuration [ 82.351053][ T9854] tipc: Enabling of bearer rejected, failed to enable media [ 82.402735][ T9865] loop1: detected capacity change from 0 to 512 [ 82.444927][ T9872] 9pnet_fd: Insufficient options for proto=fd [ 82.475846][ T9865] EXT4-fs (loop1): 1 truncate cleaned up [ 82.671285][ T9906] tipc: Started in network mode [ 82.676319][ T9906] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711 [ 82.683487][ T9906] tipc: Enabled bearer , priority 10 [ 82.705674][ T9912] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2916'. [ 82.739185][ T9912] bond_slave_0: entered promiscuous mode [ 82.744894][ T9912] bond_slave_1: entered promiscuous mode [ 82.750715][ T9912] syz_tun: entered promiscuous mode [ 82.761625][ T9912] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 82.770675][ T9912] bond_slave_0: left promiscuous mode [ 82.776191][ T9912] bond_slave_1: left promiscuous mode [ 82.781625][ T9912] syz_tun: left promiscuous mode [ 82.789226][ T9919] loop4: detected capacity change from 0 to 128 [ 82.904280][ T9929] loop1: detected capacity change from 0 to 2048 [ 82.940517][ T9929] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 83.021475][ T9929] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 22 with error 28 [ 83.034018][ T9929] EXT4-fs (loop1): This should not happen!! Data will be lost [ 83.034018][ T9929] [ 83.043773][ T9929] EXT4-fs (loop1): Total free blocks count 0 [ 83.049842][ T9929] EXT4-fs (loop1): Free/Dirty block details [ 83.055784][ T9929] EXT4-fs (loop1): free_blocks=2415919504 [ 83.061518][ T9929] EXT4-fs (loop1): dirty_blocks=32 [ 83.066707][ T9929] EXT4-fs (loop1): Block reservation details [ 83.069865][ T9950] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2933'. [ 83.072690][ T9929] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 83.199645][ T37] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 83.211989][ T37] EXT4-fs (loop1): This should not happen!! Data will be lost [ 83.211989][ T37] [ 83.270056][ T29] kauditd_printk_skb: 181 callbacks suppressed [ 83.270072][ T29] audit: type=1400 audit(1760693636.902:853): avc: denied { ioctl } for pid=9975 comm="syz.4.2946" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 83.353300][ T9992] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2954'. [ 83.373223][ T9994] loop2: detected capacity change from 0 to 1024 [ 83.442524][T10006] loop4: detected capacity change from 0 to 512 [ 83.450219][T10006] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 83.479280][T10006] EXT4-fs (loop4): 1 truncate cleaned up [ 83.495746][T10014] 8021q: adding VLAN 0 to HW filter on device bond1 [ 83.508130][T10017] loop2: detected capacity change from 0 to 2048 [ 83.515326][T10006] EXT4-fs error (device loop4): ext4_lookup:1787: inode #16: comm syz.4.2961: iget: bad i_size value: 5497558147880 [ 83.516565][T10014] bond1: entered promiscuous mode [ 83.528705][T10006] EXT4-fs (loop4): Remounting filesystem read-only [ 83.542810][T10014] team0: Port device bond1 added [ 83.574767][ T29] audit: type=1400 audit(1760693637.227:854): avc: denied { relabelto } for pid=10023 comm="syz.3.2969" name="cgroup.procs" dev="cgroup" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object" [ 83.609248][T10017] Alternate GPT is invalid, using primary GPT. [ 83.610550][ T29] audit: type=1400 audit(1760693637.227:855): avc: denied { associate } for pid=10023 comm="syz.3.2969" name="cgroup.procs" dev="cgroup" ino=102 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object" [ 83.615533][T10017] loop2: p1 p2 p3 [ 83.645688][T10017] loop2: partition table partially beyond EOD, truncated [ 83.656473][ T1032] tipc: Node number set to 8432298 [ 83.916592][T10078] loop3: detected capacity change from 0 to 512 [ 83.929087][T10080] loop2: detected capacity change from 0 to 512 [ 83.929637][T10078] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 83.949947][T10085] netlink: 'syz.4.2997': attribute type 5 has an invalid length. [ 83.960955][T10078] EXT4-fs (loop3): 1 truncate cleaned up [ 83.967180][T10080] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.2994: inode has both inline data and extents flags [ 83.992280][T10080] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.2994: couldn't read orphan inode 15 (err -117) [ 84.043882][ T29] audit: type=1400 audit(1760693637.710:856): avc: denied { read write open } for pid=10077 comm="syz.2.2994" path="/610/file0/file1" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 84.099916][T10099] loop3: detected capacity change from 0 to 128 [ 84.128164][ T29] audit: type=1400 audit(1760693637.710:857): avc: denied { ioctl } for pid=10077 comm="syz.2.2994" path="/610/file0/file1" dev="loop2" ino=18 ioctlcmd=0x6611 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 84.173134][T10102] loop2: detected capacity change from 0 to 1024 [ 84.354282][ T29] audit: type=1400 audit(1760693638.046:858): avc: denied { wake_alarm } for pid=10132 comm="syz.1.3017" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 84.448628][T10145] can0: slcan on ptm0. [ 84.501352][ T29] audit: type=1400 audit(1760693638.193:859): avc: denied { bind } for pid=10148 comm="syz.3.3025" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 84.522565][ T29] audit: type=1400 audit(1760693638.193:860): avc: denied { name_bind } for pid=10148 comm="syz.3.3025" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 84.544368][ T29] audit: type=1400 audit(1760693638.193:861): avc: denied { node_bind } for pid=10148 comm="syz.3.3025" saddr=2001::2 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 84.579398][T10144] can0 (unregistered): slcan off ptm0. [ 84.679091][T10163] loop2: detected capacity change from 0 to 512 [ 84.701018][T10163] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.3032: error while reading EA inode 32 err=-116 [ 84.768810][T10163] EXT4-fs (loop2): Remounting filesystem read-only [ 84.787939][T10163] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 84.831270][T10163] EXT4-fs (loop2): 1 orphan inode deleted [ 84.904477][T10186] __nla_validate_parse: 24 callbacks suppressed [ 84.904491][T10186] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3041'. [ 84.949281][ T29] audit: type=1400 audit(1760693638.666:862): avc: denied { connect } for pid=10187 comm="syz.1.3043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 85.074020][T10216] loop1: detected capacity change from 0 to 512 [ 85.091933][T10216] EXT4-fs: Ignoring removed i_version option [ 85.095707][T10215] netlink: 'syz.0.3056': attribute type 5 has an invalid length. [ 85.098304][T10216] EXT4-fs: Ignoring removed bh option [ 85.128911][T10216] ext4 filesystem being mounted at /614/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 85.185071][T10234] netlink: 'syz.3.3065': attribute type 6 has an invalid length. [ 85.199741][T10236] tipc: Enabling not permitted [ 85.205415][T10236] tipc: Enabling of bearer rejected, failed to enable media [ 85.301490][T10252] macsec1: entered allmulticast mode [ 85.307197][T10252] macvlan0: entered allmulticast mode [ 85.312652][T10252] veth1_vlan: entered allmulticast mode [ 85.324681][T10252] macvlan0: left allmulticast mode [ 85.329869][T10252] veth1_vlan: left allmulticast mode [ 85.336696][T10262] loop0: detected capacity change from 0 to 512 [ 85.355721][T10260] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3077'. [ 85.366700][T10262] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.3078: bad orphan inode 11862016 [ 85.437927][T10262] ext4 filesystem being mounted at /625/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.454110][T10283] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3086'. [ 85.580856][T10307] loop0: detected capacity change from 0 to 256 [ 85.663040][ T12] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.674987][T10323] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3107'. [ 85.693212][ T12] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.714697][ T12] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.723803][T10323] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3107'. [ 85.751010][ T12] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.878681][T10359] loop1: detected capacity change from 0 to 128 [ 85.892461][T10362] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3127'. [ 85.955741][T10373] loop3: detected capacity change from 0 to 512 [ 86.166951][T10416] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3153'. [ 86.186536][T10420] loop1: detected capacity change from 0 to 128 [ 86.285006][T10441] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3165'. [ 86.303686][T10436] syz.2.3161: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 86.318359][T10436] CPU: 1 UID: 0 PID: 10436 Comm: syz.2.3161 Not tainted syzkaller #0 PREEMPT(voluntary) [ 86.318464][T10436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 86.318483][T10436] Call Trace: [ 86.318531][T10436] [ 86.318539][T10436] __dump_stack+0x1d/0x30 [ 86.318566][T10436] dump_stack_lvl+0xe8/0x140 [ 86.318638][T10436] dump_stack+0x15/0x1b [ 86.318660][T10436] warn_alloc+0x12b/0x1a0 [ 86.318699][T10436] ? __rcu_read_unlock+0x4f/0x70 [ 86.318779][T10436] __vmalloc_node_range_noprof+0x9d/0xed0 [ 86.318872][T10436] ? __futex_wait+0x1fa/0x260 [ 86.318893][T10436] ? __pfx_futex_wake_mark+0x10/0x10 [ 86.318947][T10436] ? __rcu_read_unlock+0x4f/0x70 [ 86.318981][T10436] ? avc_has_perm_noaudit+0x1b1/0x200 [ 86.319078][T10436] ? should_fail_ex+0x30/0x280 [ 86.319125][T10436] ? xskq_create+0x36/0xe0 [ 86.319173][T10436] vmalloc_user_noprof+0x7d/0xb0 [ 86.319247][T10436] ? xskq_create+0x80/0xe0 [ 86.319317][T10436] xskq_create+0x80/0xe0 [ 86.319422][T10436] xsk_init_queue+0x95/0xf0 [ 86.319450][T10436] xsk_setsockopt+0x3f5/0x640 [ 86.319476][T10436] ? __pfx_xsk_setsockopt+0x10/0x10 [ 86.319510][T10436] __sys_setsockopt+0x184/0x200 [ 86.319593][T10436] __x64_sys_setsockopt+0x64/0x80 [ 86.319632][T10436] x64_sys_call+0x20ec/0x3000 [ 86.319680][T10436] do_syscall_64+0xd2/0x200 [ 86.319713][T10436] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 86.319795][T10436] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 86.319823][T10436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.319845][T10436] RIP: 0033:0x7f4ce4faefc9 [ 86.319944][T10436] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.319969][T10436] RSP: 002b:00007f4ce3a17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 86.320002][T10436] RAX: ffffffffffffffda RBX: 00007f4ce5205fa0 RCX: 00007f4ce4faefc9 [ 86.320015][T10436] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 86.320027][T10436] RBP: 00007f4ce5031f91 R08: 0000000000000004 R09: 0000000000000000 [ 86.320039][T10436] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.320051][T10436] R13: 00007f4ce5206038 R14: 00007f4ce5205fa0 R15: 00007ffdb1e36c28 [ 86.320073][T10436] [ 86.320090][T10436] Mem-Info: [ 86.548502][T10436] active_anon:4367 inactive_anon:3 isolated_anon:0 [ 86.548502][T10436] active_file:20382 inactive_file:2420 isolated_file:0 [ 86.548502][T10436] unevictable:0 dirty:343 writeback:2 [ 86.548502][T10436] slab_reclaimable:3222 slab_unreclaimable:15349 [ 86.548502][T10436] mapped:28872 shmem:174 pagetables:1675 [ 86.548502][T10436] sec_pagetables:0 bounce:0 [ 86.548502][T10436] kernel_misc_reclaimable:0 [ 86.548502][T10436] free:1879136 free_pcp:18341 free_cma:0 [ 86.593570][T10436] Node 0 active_anon:17468kB inactive_anon:12kB active_file:81528kB inactive_file:9680kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:115488kB dirty:1372kB writeback:8kB shmem:696kB kernel_stack:3520kB pagetables:6700kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 86.620905][T10436] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 86.650573][T10436] lowmem_reserve[]: 0 2883 7862 7862 [ 86.655997][T10436] Node 0 DMA32 free:2949156kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2952688kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:0kB free_cma:0kB [ 86.656450][T10449] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 86.687184][T10436] lowmem_reserve[]: 0 0 4978 4978 [ 86.693732][T10449] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 86.693680][T10436] [ 86.699678][T10449] vhci_hcd vhci_hcd.0: Device attached [ 86.706362][T10436] Node 0 Normal free:4552028kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:17468kB inactive_anon:12kB active_file:81528kB inactive_file:9680kB unevictable:0kB writepending:1380kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:69468kB local_pcp:33444kB free_cma:0kB [ 86.747322][T10436] lowmem_reserve[]: 0 0 0 0 [ 86.751904][T10436] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 86.764786][T10436] Node 0 DMA32: 3*4kB (M) 3*8kB (M) 6*16kB (M) 3*32kB (M) 3*64kB (M) 3*128kB (M) 3*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949156kB [ 86.768301][T10450] vhci_hcd: connection closed [ 86.781028][T10436] Node 0 Normal: 1390*4kB (UM) 779*8kB (UME) 436*16kB (UME) 275*32kB (UME) 201*64kB (UME) 151*128kB (UME) 96*256kB (UM) 66*512kB (UME) 42*1024kB (UME) 28*2048kB (UM) 1058*4096kB (UM) = 4552048kB [ 86.781299][T10436] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 86.781385][T10436] 22966 total pagecache pages [ 86.781392][T10436] 3 pages in swap cache [ 86.781437][T10436] Free swap = 124968kB [ 86.781444][T10436] Total swap = 124996kB [ 86.781451][T10436] 2097051 pages RAM [ 86.781457][T10436] 0 pages HighMem/MovableOnly [ 86.781465][T10436] 80479 pages reserved [ 86.851493][ T12] vhci_hcd: stop threads [ 86.855902][ T12] vhci_hcd: release socket [ 86.860354][ T12] vhci_hcd: disconnect device [ 86.996208][T10488] loop3: detected capacity change from 0 to 1024 [ 87.060426][T10496] loop3: detected capacity change from 0 to 128 [ 87.105165][T10496] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 87.113138][T10496] FAT-fs (loop3): Filesystem has been set read-only [ 87.131688][T10499] loop0: detected capacity change from 0 to 8192 [ 87.138353][T10496] syz.3.3191: attempt to access beyond end of device [ 87.138353][T10496] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 87.165694][T10496] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 87.173699][T10496] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 87.201250][T10496] syz.3.3191: attempt to access beyond end of device [ 87.201250][T10496] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 87.227300][T10496] syz.3.3191: attempt to access beyond end of device [ 87.227300][T10496] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 87.242600][T10496] syz.3.3191: attempt to access beyond end of device [ 87.242600][T10496] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 87.258185][T10496] syz.3.3191: attempt to access beyond end of device [ 87.258185][T10496] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 87.280893][T10496] syz.3.3191: attempt to access beyond end of device [ 87.280893][T10496] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 87.296194][T10496] syz.3.3191: attempt to access beyond end of device [ 87.296194][T10496] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 87.321398][T10496] syz.3.3191: attempt to access beyond end of device [ 87.321398][T10496] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 87.339987][T10496] syz.3.3191: attempt to access beyond end of device [ 87.339987][T10496] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 87.361651][T10496] syz.3.3191: attempt to access beyond end of device [ 87.361651][T10496] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 87.498218][T10532] tmpfs: Bad value for 'mpol' [ 87.522450][T10536] loop0: detected capacity change from 0 to 512 [ 87.542974][T10536] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 87.581086][T10540] netlink: 7 bytes leftover after parsing attributes in process `syz.1.3213'. [ 87.593418][T10536] EXT4-fs (loop0): 1 truncate cleaned up [ 87.623696][T10540] netlink: 7 bytes leftover after parsing attributes in process `syz.1.3213'. [ 87.919344][T10569] loop2: detected capacity change from 0 to 512 [ 88.220447][T10598] loop2: detected capacity change from 0 to 128 [ 88.274037][T10605] loop2: detected capacity change from 0 to 512 [ 88.299692][T10605] EXT4-fs: Ignoring removed mblk_io_submit option [ 88.319087][T10605] EXT4-fs: Ignoring removed nomblk_io_submit option [ 88.342201][T10605] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 88.350728][T10605] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 88.401902][ T29] kauditd_printk_skb: 59 callbacks suppressed [ 88.401920][ T29] audit: type=1400 audit(1760693642.288:922): avc: denied { setopt } for pid=10619 comm="syz.3.3250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 88.447541][T10605] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.3244: Allocating blocks 41-42 which overlap fs metadata [ 88.462826][T10626] loop0: detected capacity change from 0 to 164 [ 88.480865][T10605] Quota error (device loop2): write_blk: dquota write failed [ 88.488417][T10605] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5 [ 88.504175][T10626] Unsupported NM flag settings (8) [ 88.551447][T10605] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.3244: Allocating blocks 41-42 which overlap fs metadata [ 88.583998][T10632] loop0: detected capacity change from 0 to 512 [ 88.606169][T10605] Quota error (device loop2): write_blk: dquota write failed [ 88.613935][T10632] EXT4-fs: Ignoring removed oldalloc option [ 88.631733][T10632] EXT4-fs (loop0): 1 truncate cleaned up [ 88.637588][T10605] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 88.647687][T10605] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.3244: Failed to acquire dquot type 1 [ 88.665503][T10605] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 88.680872][T10605] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #12: comm syz.2.3244: corrupted inode contents [ 88.711498][T10605] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #12: comm syz.2.3244: mark_inode_dirty error [ 88.729011][T10605] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #12: comm syz.2.3244: corrupted inode contents [ 88.741647][T10605] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #12: comm syz.2.3244: mark_inode_dirty error [ 88.766469][ T29] audit: type=1400 audit(1760693642.676:923): avc: denied { name_bind } for pid=10641 comm="syz.3.3261" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 88.788372][T10605] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #12: comm syz.2.3244: corrupted inode contents [ 88.818117][T10605] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem [ 88.824633][ T29] audit: type=1400 audit(1760693642.676:924): avc: denied { node_bind } for pid=10641 comm="syz.3.3261" saddr=224.0.0.2 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 88.837236][T10605] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #12: comm syz.2.3244: corrupted inode contents [ 88.885400][T10605] EXT4-fs error (device loop2): ext4_truncate:4637: inode #12: comm syz.2.3244: mark_inode_dirty error [ 88.903732][T10605] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem [ 88.928036][T10605] EXT4-fs (loop2): 1 truncate cleaned up [ 88.971193][T10654] loop1: detected capacity change from 0 to 4096 [ 89.065050][T10656] loop3: detected capacity change from 0 to 8192 [ 89.144681][T10669] loop1: detected capacity change from 0 to 512 [ 89.152093][T10669] EXT4-fs: Ignoring removed orlov option [ 89.181530][T10669] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c119, mo2=0002] [ 89.197019][T10669] EXT4-fs error (device loop1): ext4_iget_extra_inode:5075: inode #15: comm syz.1.3274: corrupted in-inode xattr: e_value size too large [ 89.212922][T10669] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.3274: couldn't read orphan inode 15 (err -117) [ 89.462024][T10705] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 89.595800][T10724] lo speed is unknown, defaulting to 1000 [ 89.601708][T10724] lo speed is unknown, defaulting to 1000 [ 89.638690][ T29] audit: type=1400 audit(1760693643.590:925): avc: denied { setopt } for pid=10727 comm="syz.3.3302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 89.658579][T10724] lo speed is unknown, defaulting to 1000 [ 89.658922][T10724] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 89.702654][T10724] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 89.751153][T10724] lo speed is unknown, defaulting to 1000 [ 89.761962][T10724] lo speed is unknown, defaulting to 1000 [ 89.768241][T10724] lo speed is unknown, defaulting to 1000 [ 89.775302][T10737] __nla_validate_parse: 7 callbacks suppressed [ 89.775319][T10737] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3305'. [ 89.792523][T10724] lo speed is unknown, defaulting to 1000 [ 89.799325][T10724] lo speed is unknown, defaulting to 1000 [ 89.807853][ T29] audit: type=1326 audit(1760693643.758:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10740 comm="syz.3.3307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2759eefc9 code=0x7ffc0000 [ 89.831920][ T29] audit: type=1326 audit(1760693643.758:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10740 comm="syz.3.3307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2759eefc9 code=0x7ffc0000 [ 89.863991][T10745] netlink: 'syz.2.3317': attribute type 13 has an invalid length. [ 89.954626][T10752] loop1: detected capacity change from 0 to 128 [ 89.973500][T10755] loop0: detected capacity change from 0 to 128 [ 89.980317][T10755] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 90.011197][T10755] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 92.261946][T10799] syz.1.3333 (10799) used greatest stack depth: 8200 bytes left [ 92.391978][T10813] SELinux: security_context_str_to_sid (r) failed with errno=-22 [ 92.433017][ T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.456137][ T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.479247][ T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.490630][T10817] loop1: detected capacity change from 0 to 512 [ 92.491281][ T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.528432][T10817] EXT4-fs: Ignoring removed oldalloc option [ 92.569239][T10817] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 92.576934][T10828] loop3: detected capacity change from 0 to 128 [ 92.585545][T10825] loop2: detected capacity change from 0 to 8192 [ 92.600016][T10825] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 92.623512][T10817] EXT4-fs (loop1): 1 truncate cleaned up [ 92.631123][T10828] ext4 filesystem being mounted at /625/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.646626][T10825] FAT-fs (loop2): error, clusters badly computed (1 != 0) [ 92.653860][T10825] FAT-fs (loop2): Filesystem has been set read-only [ 92.672223][T10828] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:375: inode #2: comm syz.3.3345: No space for directory leaf checksum. Please run e2fsck -D. [ 92.688552][T10828] EXT4-fs error (device loop3): htree_dirblock_to_tree:1051: inode #2: comm syz.3.3345: Directory block failed checksum [ 92.715518][T10825] FAT-fs (loop2): error, clusters badly computed (2 != 1) [ 92.757069][T10825] FAT-fs (loop2): error, clusters badly computed (3 != 2) [ 92.780918][T10825] FAT-fs (loop2): error, clusters badly computed (4 != 3) [ 92.862750][T10847] loop2: detected capacity change from 0 to 512 [ 92.900941][T10847] ------------[ cut here ]------------ [ 92.907239][T10847] EA inode 11 i_nlink=2 [ 92.907685][T10847] WARNING: CPU: 0 PID: 10847 at fs/ext4/xattr.c:1058 ext4_xattr_inode_update_ref+0x36a/0x380 [ 92.922063][T10847] Modules linked in: [ 92.926672][T10847] CPU: 0 UID: 0 PID: 10847 Comm: syz.2.3353 Not tainted syzkaller #0 PREEMPT(voluntary) [ 92.936563][T10847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 92.947506][T10847] RIP: 0010:ext4_xattr_inode_update_ref+0x36a/0x380 [ 92.954189][T10847] Code: 90 49 8d 7e 40 e8 66 00 b9 ff 4d 8b 6e 40 4c 89 e7 e8 7a fb b8 ff 41 8b 56 48 48 c7 c7 59 4e 55 86 4c 89 ee e8 c7 07 68 ff 90 <0f> 0b 90 90 e9 ff fe ff ff e8 08 76 b0 03 0f 1f 84 00 00 00 00 00 [ 92.974518][T10847] RSP: 0018:ffffc90001bef778 EFLAGS: 00010246 [ 92.980615][T10847] RAX: d72d0fd311bb8c00 RBX: ffff888103858600 RCX: 0000000000080000 [ 92.988695][T10847] RDX: ffffc90003a98000 RSI: 00000000000026ff RDI: 0000000000002700 [ 92.997471][T10847] RBP: 0000000000000002 R08: 0001c90001bef5f7 R09: 0000000000000000 [ 93.005567][T10847] R10: 00000000ffffffff R11: 0000000000000002 R12: ffff8881038585b0 [ 93.014231][T10847] R13: 000000000000000b R14: ffff888103858568 R15: 0000000000000001 [ 93.022291][T10847] FS: 00007f4ce3a176c0(0000) GS:ffff8882aee3a000(0000) knlGS:0000000000000000 [ 93.032101][T10847] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 93.038783][T10847] CR2: 00007ff2758bf470 CR3: 000000011d286000 CR4: 00000000003506f0 [ 93.047505][T10847] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 93.055561][T10847] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 93.063599][T10847] Call Trace: [ 93.067652][T10847] [ 93.070620][T10847] ext4_xattr_inode_dec_ref_all+0x579/0x830 [ 93.076807][T10847] ? errseq_check+0x2c/0x50 [ 93.081433][T10847] ext4_xattr_delete_inode+0x6b7/0x790 [ 93.087761][T10847] ext4_evict_inode+0xa6a/0xd90 [ 93.092732][T10847] ? __pfx_ext4_evict_inode+0x10/0x10 [ 93.098182][T10847] evict+0x2e3/0x550 [ 93.102132][T10847] ? __dquot_initialize+0x146/0x7c0 [ 93.108085][T10847] iput+0x4ed/0x650 [ 93.112059][T10847] ext4_process_orphan+0x1a9/0x1c0 [ 93.117262][T10847] ext4_orphan_cleanup+0x6a8/0xa00 [ 93.122431][T10847] ext4_fill_super+0x3483/0x3810 [ 93.128157][T10847] ? snprintf+0x86/0xb0 [ 93.132438][T10847] ? set_blocksize+0x1a8/0x310 [ 93.137231][T10847] ? sb_set_blocksize+0xe3/0x100 [ 93.143012][T10847] ? setup_bdev_super+0x30e/0x370 [ 93.148142][T10847] ? __pfx_ext4_fill_super+0x10/0x10 [ 93.153551][T10847] get_tree_bdev_flags+0x291/0x300 [ 93.158698][T10847] ? __pfx_ext4_fill_super+0x10/0x10 [ 93.164730][T10847] get_tree_bdev+0x1f/0x30 [ 93.169236][T10847] ext4_get_tree+0x1c/0x30 [ 93.173709][T10847] vfs_get_tree+0x57/0x1d0 [ 93.178236][T10847] do_new_mount+0x24d/0x660 [ 93.183576][T10847] path_mount+0x4a5/0xb70 [ 93.188120][T10847] ? user_path_at+0x109/0x130 [ 93.192893][T10847] __se_sys_mount+0x28c/0x2e0 [ 93.197620][T10847] __x64_sys_mount+0x67/0x80 [ 93.203034][T10847] x64_sys_call+0x2b51/0x3000 [ 93.207744][T10847] do_syscall_64+0xd2/0x200 [ 93.212458][T10847] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 93.219385][T10847] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 93.225147][T10847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.231089][T10847] RIP: 0033:0x7f4ce4fb076a [ 93.235518][T10847] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.256484][T10847] RSP: 002b:00007f4ce3a16e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 93.265389][T10847] RAX: ffffffffffffffda RBX: 00007f4ce3a16ef0 RCX: 00007f4ce4fb076a [ 93.273502][T10847] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f4ce3a16eb0 [ 93.282169][T10847] RBP: 0000200000000180 R08: 00007f4ce3a16ef0 R09: 0000000000800700 [ 93.290197][T10847] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 93.298894][T10847] R13: 00007f4ce3a16eb0 R14: 000000000000046c R15: 0000200000000740 [ 93.307175][T10847] [ 93.310305][T10847] ---[ end trace 0000000000000000 ]--- [ 93.319804][T10847] EXT4-fs (loop2): 1 orphan inode deleted [ 93.321473][T10857] netlink: 352 bytes leftover after parsing attributes in process `syz.0.3356'. [ 93.334780][T10857] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3356'. [ 93.344286][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 93.344304][ T29] audit: type=1326 audit(1760693647.474:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10845 comm="syz.2.3353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ce4faefc9 code=0x7ffc0000 [ 93.373954][ T29] audit: type=1326 audit(1760693647.474:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10845 comm="syz.2.3353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ce4faefc9 code=0x7ffc0000 [ 93.397422][ T29] audit: type=1326 audit(1760693647.474:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10845 comm="syz.2.3353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f4ce4faefc9 code=0x7ffc0000 [ 93.420874][ T29] audit: type=1326 audit(1760693647.474:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10845 comm="syz.2.3353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ce4faefc9 code=0x7ffc0000 [ 93.669677][T10883] netlink: 332 bytes leftover after parsing attributes in process `syz.3.3369'. [ 93.700480][T10886] bridge0: entered promiscuous mode [ 93.732570][T10886] macsec1: entered promiscuous mode [ 93.739307][T10887] tipc: MTU too low for tipc bearer [ 93.777177][T10893] loop3: detected capacity change from 0 to 512 [ 93.811508][ T29] audit: type=1326 audit(1760693647.968:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10898 comm="syz.0.3377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96890fefc9 code=0x7ffc0000 [ 93.834995][ T29] audit: type=1326 audit(1760693647.968:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10898 comm="syz.0.3377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96890fefc9 code=0x7ffc0000 [ 93.868027][T10893] ext4 filesystem being mounted at /634/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.940882][ T29] audit: type=1326 audit(1760693648.020:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10898 comm="syz.0.3377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f96890fefc9 code=0x7ffc0000 [ 93.965168][ T29] audit: type=1326 audit(1760693648.020:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10898 comm="syz.0.3377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96890fefc9 code=0x7ffc0000 [ 93.989504][ T29] audit: type=1326 audit(1760693648.020:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10898 comm="syz.0.3377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96890fefc9 code=0x7ffc0000 [ 94.061225][T10917] lo speed is unknown, defaulting to 1000 [ 94.135850][ T29] audit: type=1400 audit(1760693648.314:948): avc: denied { block_suspend } for pid=10925 comm="syz.3.3388" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 94.350647][T10933] loop3: detected capacity change from 0 to 8192 [ 94.427952][T10933] loop3: p1 p2 < > p3 p4 < p5 > [ 94.432961][T10933] loop3: partition table partially beyond EOD, truncated [ 94.447141][T10933] loop3: p1 size 100663296 extends beyond EOD, truncated [ 94.467003][T10933] loop3: p2 start 591104 is beyond EOD, truncated [ 94.473528][T10933] loop3: p3 start 33572980 is beyond EOD, truncated [ 94.485036][T10933] loop3: p5 size 100663296 extends beyond EOD, truncated [ 94.524739][T10959] loop2: detected capacity change from 0 to 512 [ 94.531477][T10959] EXT4-fs: Ignoring removed mblk_io_submit option [ 94.538673][T10959] EXT4-fs: Ignoring removed oldalloc option [ 94.547582][T10961] loop0: detected capacity change from 0 to 1024 [ 94.560595][T10959] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 94.569477][T10959] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 94.581788][T10959] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 94.589824][T10959] EXT4-fs (loop2): orphan cleanup on readonly fs [ 94.597503][T10959] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.3404: Invalid block bitmap block 0 in block_group 0 [ 94.625070][T10959] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.3404: Invalid block bitmap block 0 in block_group 0 [ 94.645571][T10968] loop1: detected capacity change from 0 to 256 [ 94.691599][T10959] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.3404: Invalid block bitmap block 0 in block_group 0 [ 94.732958][T10959] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.3404: Failed to acquire dquot type 1 [ 94.746878][T10959] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.3404: Failed to acquire dquot type 1 [ 94.756715][T10976] loop3: detected capacity change from 0 to 1024 [ 94.759745][T10959] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.3404: Failed to acquire dquot type 1 [ 94.776449][T10976] EXT4-fs: Ignoring removed orlov option [ 94.777134][T10959] EXT4-fs (loop2): 1 orphan inode deleted [ 94.782877][T10976] EXT4-fs: Ignoring removed nomblk_io_submit option [ 94.869796][T10990] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3417'. [ 94.875677][T10988] netlink: 'syz.1.3416': attribute type 1 has an invalid length. [ 94.904985][T10993] netlink: 136 bytes leftover after parsing attributes in process `syz.2.3418'. [ 94.918719][T10990] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3417'. [ 95.089997][T11015] loop0: detected capacity change from 0 to 736 [ 95.123976][T11019] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3431'. [ 95.133124][T11019] tc_dump_action: action bad kind [ 95.602479][T11072] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3456'. [ 95.700559][T11084] loop3: detected capacity change from 0 to 512 [ 95.726242][T11084] EXT4-fs: Ignoring removed mblk_io_submit option [ 95.743758][T11084] EXT4-fs: Ignoring removed nomblk_io_submit option [ 95.772645][T11084] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 95.781229][T11084] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 95.807371][T11101] random: crng reseeded on system resumption [ 95.864699][T11107] loop1: detected capacity change from 0 to 128 [ 95.871575][T11084] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4193: comm syz.3.3461: Allocating blocks 41-42 which overlap fs metadata [ 95.891707][T11084] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4193: comm syz.3.3461: Allocating blocks 41-42 which overlap fs metadata [ 95.904867][T11107] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 95.906789][T11109] loop0: detected capacity change from 0 to 512 [ 95.924855][T11084] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.3461: Failed to acquire dquot type 1 [ 95.937843][T11084] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 95.953088][T11084] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #12: comm syz.3.3461: corrupted inode contents [ 95.974314][T11084] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #12: comm syz.3.3461: mark_inode_dirty error [ 95.988468][T11107] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 95.997594][T11084] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #12: comm syz.3.3461: corrupted inode contents [ 96.011081][T11084] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #12: comm syz.3.3461: mark_inode_dirty error [ 96.044721][T11084] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #12: comm syz.3.3461: corrupted inode contents [ 96.062584][ T12] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 96.075406][T11084] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem [ 96.091586][T11118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.100531][T11118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.104319][T11122] netlink: 'syz.1.3478': attribute type 13 has an invalid length. [ 96.120233][T11084] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #12: comm syz.3.3461: corrupted inode contents [ 96.144516][T11084] EXT4-fs error (device loop3): ext4_truncate:4637: inode #12: comm syz.3.3461: mark_inode_dirty error [ 96.156158][T11084] EXT4-fs error (device loop3) in ext4_process_orphan:343: Corrupt filesystem [ 96.165415][T11084] EXT4-fs (loop3): 1 truncate cleaned up [ 96.192203][T11122] tipc: Resetting bearer [ 96.281342][T11132] macvtap0: refused to change device tx_queue_len [ 96.288505][ T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.311497][ T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.330934][ T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.361528][ T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.572420][T11158] tipc: Enabling of bearer rejected, failed to enable media [ 96.824743][T11163] netlink: 'syz.3.3498': attribute type 13 has an invalid length. [ 96.852812][T11167] loop2: detected capacity change from 0 to 2048 [ 96.890528][T11167] EXT4-fs mount: 54 callbacks suppressed [ 96.890548][T11167] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.916772][T11167] EXT4-fs error (device loop2): ext4_lookup:1787: inode #16: comm syz.2.3499: iget: bad i_size value: 8796093031208 [ 96.933769][T11163] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.940951][T11163] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.964274][T11167] EXT4-fs (loop2): Remounting filesystem read-only [ 97.013277][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.055196][T11163] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.078636][T11163] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.160453][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.185670][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.203737][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.226419][ T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.255047][T11189] 9pnet_fd: Insufficient options for proto=fd [ 97.461128][T11206] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=64 sclass=netlink_tcpdiag_socket pid=11206 comm=syz.2.3516 [ 97.474097][T11206] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=44 sclass=netlink_tcpdiag_socket pid=11206 comm=syz.2.3516 [ 97.835319][T11234] loop2: detected capacity change from 0 to 128 [ 97.862006][T11234] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 97.920521][T11239] bridge0: port 3(veth0_to_bridge) entered blocking state [ 97.927746][T11239] bridge0: port 3(veth0_to_bridge) entered disabled state [ 97.980532][T11239] veth0_to_bridge: entered allmulticast mode [ 98.001674][T11239] veth0_to_bridge: entered promiscuous mode [ 98.291586][T11266] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3545'. [ 98.326266][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 98.326280][ T29] audit: type=1400 audit(1760693652.714:955): avc: denied { connect } for pid=11267 comm="syz.1.3546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 98.393383][ T36] hid-generic 0003:0003:0000.0005: unknown main item tag 0x0 [ 98.400888][ T36] hid-generic 0003:0003:0000.0005: unknown main item tag 0x0 [ 98.408392][ T36] hid-generic 0003:0003:0000.0005: unknown main item tag 0x0 [ 98.415839][ T36] hid-generic 0003:0003:0000.0005: unknown main item tag 0x0 [ 98.423272][ T36] hid-generic 0003:0003:0000.0005: unknown main item tag 0x0 [ 98.430702][ T36] hid-generic 0003:0003:0000.0005: unknown main item tag 0x0 [ 98.438116][ T36] hid-generic 0003:0003:0000.0005: unknown main item tag 0x0 [ 98.445618][ T36] hid-generic 0003:0003:0000.0005: unknown main item tag 0x0 [ 98.453114][ T36] hid-generic 0003:0003:0000.0005: unknown main item tag 0x0 [ 98.460626][ T36] hid-generic 0003:0003:0000.0005: unknown main item tag 0x0 [ 98.468575][ T36] hid-generic 0003:0003:0000.0005: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 98.513103][T11278] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3551'. [ 98.616406][ T29] audit: type=1400 audit(1760693653.008:956): avc: denied { connect } for pid=11288 comm="syz.1.3556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 98.636345][ T29] audit: type=1400 audit(1760693653.008:957): avc: denied { ioctl } for pid=11288 comm="syz.1.3556" path="socket:[29292]" dev="sockfs" ino=29292 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 98.677401][ T29] audit: type=1400 audit(1760693653.081:958): avc: denied { append } for pid=11290 comm="syz.2.3557" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 98.809647][ T29] audit: type=1400 audit(1760693653.218:959): avc: denied { write } for pid=11292 comm="syz.1.3558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 98.898664][ T29] audit: type=1400 audit(1760693653.312:960): avc: denied { bind } for pid=11311 comm="syz.0.3567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 98.944559][T11316] loop0: detected capacity change from 0 to 512 [ 98.962421][T11316] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 98.975706][T11316] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.3569: Invalid block bitmap block 0 in block_group 0 [ 98.999462][T11316] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 99.008422][T11316] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #11: comm syz.0.3569: attempt to clear invalid blocks 983261 len 1 [ 99.029911][T11316] EXT4-fs error (device loop0): __ext4_get_inode_loc:4832: comm syz.0.3569: Invalid inode table block 0 in block_group 0 [ 99.070894][ T29] audit: type=1400 audit(1760693653.490:961): avc: denied { create } for pid=11324 comm="syz.3.3573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 99.118195][T11316] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 99.135421][ T29] audit: type=1400 audit(1760693653.522:962): avc: denied { write } for pid=11324 comm="syz.3.3573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 99.163481][T11316] EXT4-fs error (device loop0) in ext4_orphan_del:301: Corrupt filesystem [ 99.178283][T11316] EXT4-fs error (device loop0): __ext4_get_inode_loc:4832: comm syz.0.3569: Invalid inode table block 0 in block_group 0 [ 99.196535][T11316] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 99.206267][T11316] EXT4-fs error (device loop0): ext4_truncate:4637: inode #11: comm syz.0.3569: mark_inode_dirty error [ 99.217782][T11316] EXT4-fs error (device loop0) in ext4_process_orphan:343: Corrupt filesystem [ 99.226797][T11316] EXT4-fs error (device loop0): __ext4_get_inode_loc:4832: comm syz.0.3569: Invalid inode table block 0 in block_group 0 [ 99.264643][T11316] EXT4-fs (loop0): 1 truncate cleaned up [ 99.272598][T11316] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.320589][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.347908][ T29] audit: type=1400 audit(1760693653.784:963): avc: denied { mount } for pid=11344 comm="syz.2.3584" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 99.391681][ T29] audit: type=1400 audit(1760693653.816:964): avc: denied { remount } for pid=11344 comm="syz.2.3584" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 99.412445][T11351] ref_ctr_offset mismatch. inode: 0xf12 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x20 [ 99.604758][T11366] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3594'. [ 99.817959][T11387] lo speed is unknown, defaulting to 1000 [ 99.920816][T11401] netlink: 'syz.0.3611': attribute type 3 has an invalid length. [ 99.994488][T11409] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3613'. [ 100.003607][T11409] tipc: Started in network mode [ 100.008473][T11409] tipc: Node identity fff50000000000000000000000000001, cluster identity 4711 [ 100.017377][T11409] tipc: Enabling of bearer rejected, failed to enable media [ 100.095261][T11421] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3619'. [ 100.200203][T11434] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3626'. [ 100.323006][T11445] sch_tbf: burst 3 is lower than device geneve1 mtu (1514) ! [ 100.346988][T11451] hugetlbfs: Bad value 'k' for mount option 'nr_inodes' [ 100.346988][T11451] [ 100.417070][T11459] loop0: detected capacity change from 0 to 512 [ 100.430689][T11461] loop1: detected capacity change from 0 to 512 [ 100.447801][T11461] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 100.458064][T11459] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 100.476498][T11461] EXT4-fs (loop1): 1 truncate cleaned up [ 100.483535][T11459] EXT4-fs (loop0): 1 truncate cleaned up [ 100.490004][T11461] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.492591][T11459] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.571599][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.590349][T11467] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3642'. [ 100.591896][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.688835][T11477] loop2: detected capacity change from 0 to 2048 [ 100.731642][T11479] loop3: detected capacity change from 0 to 1764 [ 100.798396][T11477] loop2: p2 p3 p7 [ 100.999953][T11488] lo speed is unknown, defaulting to 1000 [ 101.098161][T11488] chnl_net:caif_netlink_parms(): no params data found [ 101.179510][T11488] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.186688][T11488] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.226700][T11488] bridge_slave_0: entered allmulticast mode [ 101.252153][T11488] bridge_slave_0: entered promiscuous mode [ 101.261899][T11488] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.269095][T11488] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.333682][T11488] bridge_slave_1: entered allmulticast mode [ 101.340138][T11488] bridge_slave_1: entered promiscuous mode [ 101.396226][T11488] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.449877][T11488] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.503729][T11488] team0: Port device team_slave_0 added [ 101.559133][T11488] team0: Port device team_slave_1 added [ 101.621776][T11488] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.628932][T11488] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.655085][T11488] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.667262][T11538] netlink: 'syz.0.3668': attribute type 46 has an invalid length. [ 101.675653][T11488] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.682683][T11488] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.708645][T11488] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.764345][T11488] hsr_slave_0: entered promiscuous mode [ 101.780854][T11488] hsr_slave_1: entered promiscuous mode [ 101.789081][T11488] debugfs: 'hsr0' already exists in 'hsr' [ 101.794893][T11488] Cannot create hsr debugfs directory [ 102.025344][T11488] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 102.044180][T11488] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 102.068955][T11488] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 102.092188][T11488] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 102.113669][T11557] loop2: detected capacity change from 0 to 128 [ 102.147934][T11568] loop3: detected capacity change from 0 to 512 [ 102.180018][T11488] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.198421][T11488] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.219939][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.227006][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.239647][T11573] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3682'. [ 102.258919][ T792] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.265989][ T792] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.317213][T11584] loop3: detected capacity change from 0 to 512 [ 102.358883][T11584] EXT4-fs (loop3): orphan cleanup on readonly fs [ 102.366126][T11584] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 102.396687][T11584] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 102.418657][T11584] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.3686: attempt to clear invalid blocks 2 len 1 [ 102.433150][T11584] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.3686: invalid indirect mapped block 1819239214 (level 0) [ 102.435270][T11488] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.454390][T11584] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.3686: invalid indirect mapped block 1819239214 (level 1) [ 102.480079][T11584] EXT4-fs (loop3): 1 truncate cleaned up [ 102.497319][T11584] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 102.514065][T11584] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 102.533708][T11584] EXT4-fs error (device loop3): __ext4_remount:6748: comm syz.3.3686: Abort forced by user [ 102.557841][T11584] EXT4-fs (loop3): Remounting filesystem read-only [ 102.564459][T11584] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 102.643155][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.692662][T11488] veth0_vlan: entered promiscuous mode [ 102.703865][T11488] veth1_vlan: entered promiscuous mode [ 102.713603][T11630] lo speed is unknown, defaulting to 1000 [ 102.738601][T11641] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3705'. [ 102.748732][T11488] veth0_macvtap: entered promiscuous mode [ 102.789000][T11488] veth1_macvtap: entered promiscuous mode [ 102.828123][T11488] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.844357][T11488] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.859535][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.869569][T11653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.889326][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.904630][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.917381][T11653] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.926526][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.107433][T11694] loop3: detected capacity change from 0 to 1024 [ 103.125627][T11694] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.196970][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.274155][T11722] loop5: detected capacity change from 0 to 512 [ 103.283804][T11722] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 103.296429][T11724] loop3: detected capacity change from 0 to 256 [ 103.317462][T11724] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 103.330607][T11722] EXT4-fs (loop5): 1 truncate cleaned up [ 103.337563][T11722] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.353993][T11729] loop1: detected capacity change from 0 to 256 [ 103.441411][T11488] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.490534][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 103.490549][ T29] audit: type=1400 audit(1760693658.131:990): avc: denied { mounton } for pid=11741 comm="syz.5.3751" path="/proc/22" dev="proc" ino=31139 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 103.559251][ T29] audit: type=1400 audit(1760693658.184:991): avc: denied { nlmsg_read } for pid=11745 comm="syz.0.3755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 103.590300][T11754] tipc: Started in network mode [ 103.596142][T11754] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 103.603456][T11754] tipc: Enabled bearer , priority 0 [ 103.648337][ T29] audit: type=1400 audit(1760693658.289:992): avc: denied { ioctl } for pid=11763 comm="syz.3.3763" path="socket:[31165]" dev="sockfs" ino=31165 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 103.725859][T11774] loop1: detected capacity change from 0 to 512 [ 103.731389][ T29] audit: type=1400 audit(1760693658.373:993): avc: denied { setopt } for pid=11768 comm="syz.5.3766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 103.760635][T11774] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 103.813826][T11784] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3773'. [ 103.826430][T11774] EXT4-fs (loop1): 1 truncate cleaned up [ 103.832807][T11774] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.908532][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.037006][T11802] loop5: detected capacity change from 0 to 1764 [ 104.300186][ T29] audit: type=1400 audit(1760693658.982:994): avc: denied { append } for pid=11827 comm="syz.0.3793" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 104.356611][T11831] lo speed is unknown, defaulting to 1000 [ 104.561557][T11856] loop1: detected capacity change from 0 to 512 [ 104.569318][ T3391] tipc: Node number set to 11578026 [ 104.590134][T11856] EXT4-fs (loop1): 1 orphan inode deleted [ 104.601303][T11856] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.660125][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.714394][T11872] loop3: detected capacity change from 0 to 512 [ 104.741723][T11872] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 104.748467][ T29] audit: type=1400 audit(1760693659.444:995): avc: denied { setopt } for pid=11877 comm="syz.2.3815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 104.785727][T11872] System zones: 1-12 [ 104.812826][T11872] EXT4-fs error (device loop3): ext4_iget_extra_inode:5075: inode #15: comm syz.3.3814: corrupted in-inode xattr: e_value size too large [ 104.856916][ T29] audit: type=1400 audit(1760693659.559:996): avc: denied { create } for pid=11889 comm="syz.2.3821" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1 [ 104.877953][T11892] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3822'. [ 104.887641][T11872] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.3814: couldn't read orphan inode 15 (err -117) [ 104.900616][T11872] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.924069][T11895] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3823'. [ 104.949486][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.975531][T11901] loop5: detected capacity change from 0 to 256 [ 104.994410][T11901] vfat: Bad value for 'utf8' [ 105.131701][T11928] mmap: syz.3.3840 (11928): VmData 29069312 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 105.133382][T11925] loop2: detected capacity change from 0 to 1024 [ 105.203264][T11936] usb usb1: check_ctrlrecip: process 11936 (syz.3.3844) requesting ep 01 but needs 81 [ 105.215283][T11925] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 105.226070][T11936] vhci_hcd: default hub control req: 020f v0004 i0001 l0 [ 105.269897][T11945] loop3: detected capacity change from 0 to 256 [ 105.304934][T11925] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.3837: Invalid block bitmap block 0 in block_group 0 [ 105.333747][T11925] Quota error (device loop2): write_blk: dquota write failed [ 105.341281][T11925] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 105.417554][T11963] loop5: detected capacity change from 0 to 512 [ 105.455810][T11925] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.3837: Failed to acquire dquot type 0 [ 105.490338][T11925] EXT4-fs error (device loop2): ext4_free_blocks:6706: comm syz.2.3837: Freeing blocks not in datazone - block = 0, count = 4096 [ 105.515721][T11963] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.522012][T11979] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3864'. [ 105.532128][T11925] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.3837: Invalid inode bitmap blk 0 in block_group 0 [ 105.548113][T11963] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.552321][ T792] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-7 [ 105.569783][ T792] EXT4-fs error (device loop2): ext4_release_dquot:6981: comm kworker/u8:6: Failed to release dquot type 0 [ 105.581988][T11925] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 105.618616][T11925] EXT4-fs (loop2): 1 orphan inode deleted [ 105.625038][T11925] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.657213][T11488] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.706865][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.767440][T12011] loop1: detected capacity change from 0 to 128 [ 105.793889][T12015] pim6reg: entered allmulticast mode [ 105.888696][T12032] loop2: detected capacity change from 0 to 512 [ 105.902856][T12032] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.3889: error while reading EA inode 32 err=-116 [ 105.906121][T12034] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3890'. [ 105.924852][T12034] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3890'. [ 105.940088][T12032] EXT4-fs (loop2): Remounting filesystem read-only [ 105.956668][T12032] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 105.987599][T12041] loop0: detected capacity change from 0 to 128 [ 105.994556][T12032] EXT4-fs (loop2): 1 orphan inode deleted [ 105.995038][T12032] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.045542][T12047] loop1: detected capacity change from 0 to 512 [ 106.079249][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.097985][T12047] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.3896: inode has both inline data and extents flags [ 106.114448][T12041] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 106.156986][ T12] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 106.167392][T12047] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.3896: couldn't read orphan inode 15 (err -117) [ 106.209315][T12060] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 106.218723][T12047] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.261552][T12060] SELinux: failed to load policy [ 106.282284][T12066] loop5: detected capacity change from 0 to 128 [ 106.348167][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.431140][T12089] tipc: Enabling of bearer rejected, failed to enable media [ 106.477119][T12099] loop5: detected capacity change from 0 to 256 [ 106.540727][T12111] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 106.589813][T12119] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3931'. [ 106.619950][T12126] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.3934'. [ 106.635407][T12122] netlink: 'syz.3.3932': attribute type 3 has an invalid length. [ 106.735794][T12140] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3941'. [ 106.779743][T12143] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3943'. [ 106.806544][T12147] loop5: detected capacity change from 0 to 512 [ 106.807258][T12147] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 106.811706][T12147] EXT4-fs (loop5): orphan cleanup on readonly fs [ 106.821973][T12147] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3945: bg 0: block 248: padding at end of block bitmap is not set [ 106.822272][T12147] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.3945: Failed to acquire dquot type 1 [ 106.822771][T12147] EXT4-fs (loop5): 1 truncate cleaned up [ 106.823583][T12147] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 106.858412][T11488] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.865862][T12157] random: crng reseeded on system resumption [ 106.942848][T12169] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3954'. [ 107.140562][T12184] loop0: detected capacity change from 0 to 256 [ 107.244263][T12197] loop0: detected capacity change from 0 to 256 [ 107.256466][T12198] loop3: detected capacity change from 0 to 512 [ 107.278720][T12198] EXT4-fs (loop3): too many log groups per flexible block group [ 107.298797][T12198] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 107.307750][T12197] FAT-fs (loop0): Directory bread(block 64) failed [ 107.314990][T12198] EXT4-fs (loop3): mount failed [ 107.324602][T12197] FAT-fs (loop0): Directory bread(block 65) failed [ 107.344072][T12197] FAT-fs (loop0): Directory bread(block 66) failed [ 107.350848][T12197] FAT-fs (loop0): Directory bread(block 67) failed [ 107.357680][T12197] FAT-fs (loop0): Directory bread(block 68) failed [ 107.364964][T12197] FAT-fs (loop0): Directory bread(block 69) failed [ 107.371625][T12197] FAT-fs (loop0): Directory bread(block 70) failed [ 107.371896][T12206] bond1: (slave bond_slave_1): Device is not our slave [ 107.379268][T12197] FAT-fs (loop0): Directory bread(block 71) failed [ 107.385916][T12206] bond1: option active_slave: invalid value (bond_slave_1) [ 107.392548][T12197] FAT-fs (loop0): Directory bread(block 72) failed [ 107.408745][T12206] bond1 (unregistering): Released all slaves [ 107.421496][T12197] FAT-fs (loop0): Directory bread(block 73) failed [ 107.506819][T12215] loop3: detected capacity change from 0 to 2048 [ 107.524226][T12215] EXT4-fs: Ignoring removed bh option [ 107.554061][T12215] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.583584][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.616432][T12231] loop3: detected capacity change from 0 to 512 [ 107.624075][T12231] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 107.657656][T12231] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 107.666422][T12231] FAT-fs (loop3): Filesystem has been set read-only [ 107.710561][T12245] loop5: detected capacity change from 0 to 128 [ 107.718882][T12245] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 107.732100][T12245] ext4 filesystem being mounted at /72/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 107.812774][T11488] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 107.834594][T12248] loop1: detected capacity change from 0 to 4096 [ 107.852823][T12248] EXT4-fs: Ignoring removed nomblk_io_submit option [ 107.865941][T12248] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.891108][T12263] loop5: detected capacity change from 0 to 512 [ 107.902014][T12248] SELinux: Context @|0AWiSѱ4$ EtڍygBEEA2zLp{c|^;tݾHRן臟g is not valid (left unmapped). [ 107.935115][T12263] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.949123][T12263] ext4 filesystem being mounted at /73/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.973230][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.013837][T11488] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.180253][T12310] netlink: 'syz.3.4018': attribute type 101 has an invalid length. [ 108.188296][T12310] netlink: 'syz.3.4018': attribute type 7 has an invalid length. [ 108.272397][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 108.272412][ T29] audit: type=1400 audit(1760693663.150:1011): avc: denied { getopt } for pid=12328 comm="syz.3.4028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 108.354694][ T29] audit: type=1326 audit(1760693663.244:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12342 comm="syz.1.4035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a5a59efc9 code=0x7ffc0000 [ 108.378366][ T29] audit: type=1326 audit(1760693663.244:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12342 comm="syz.1.4035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a5a59efc9 code=0x7ffc0000 [ 108.418793][ T29] audit: type=1326 audit(1760693663.297:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12342 comm="syz.1.4035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5a5a5a0ee7 code=0x7ffc0000 [ 108.443087][ T29] audit: type=1326 audit(1760693663.297:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12342 comm="syz.1.4035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a5a59efc9 code=0x7ffc0000 [ 108.467383][ T29] audit: type=1326 audit(1760693663.297:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12342 comm="syz.1.4035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a5a59efc9 code=0x7ffc0000 [ 108.491023][ T29] audit: type=1326 audit(1760693663.297:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12342 comm="syz.1.4035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7f5a5a59efc9 code=0x7ffc0000 [ 108.515223][ T29] audit: type=1326 audit(1760693663.297:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12342 comm="syz.1.4035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a5a59efc9 code=0x7ffc0000 [ 108.538754][ T29] audit: type=1326 audit(1760693663.297:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12342 comm="syz.1.4035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a5a59efc9 code=0x7ffc0000 [ 108.568898][ T29] audit: type=1400 audit(1760693663.465:1020): avc: denied { bind } for pid=12347 comm="syz.5.4039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 108.720109][ T3391] IPVS: starting estimator thread 0... [ 108.739268][T12374] loop2: detected capacity change from 0 to 1764 [ 108.743927][T12380] netlink: 'syz.1.4053': attribute type 2 has an invalid length. [ 108.786577][T12382] macvtap1: entered promiscuous mode [ 108.792099][T12382] syz_tun: entered promiscuous mode [ 108.809910][T12378] IPVS: using max 2304 ests per chain, 115200 per kthread [ 108.817542][T12382] syz_tun: left promiscuous mode [ 108.920207][T12405] loop2: detected capacity change from 0 to 1024 [ 108.927555][T12405] EXT4-fs: Ignoring removed orlov option [ 108.934077][T12405] EXT4-fs: Ignoring removed nomblk_io_submit option [ 108.954579][T12405] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.956849][T12413] loop5: detected capacity change from 0 to 512 [ 108.994899][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.172772][T12442] loop2: detected capacity change from 0 to 256 [ 109.230079][T12442] FAT-fs (loop2): Directory bread(block 64) failed [ 109.233382][T12450] loop0: detected capacity change from 0 to 512 [ 109.241095][T12442] FAT-fs (loop2): Directory bread(block 65) failed [ 109.251882][T12442] FAT-fs (loop2): Directory bread(block 66) failed [ 109.269442][T12442] FAT-fs (loop2): Directory bread(block 67) failed [ 109.272612][T12450] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.277165][T12442] FAT-fs (loop2): Directory bread(block 68) failed [ 109.305377][T12450] ext4 filesystem being mounted at /885/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 109.315790][T12442] FAT-fs (loop2): Directory bread(block 69) failed [ 109.315849][T12442] FAT-fs (loop2): Directory bread(block 70) failed [ 109.315924][T12442] FAT-fs (loop2): Directory bread(block 71) failed [ 109.315953][T12442] FAT-fs (loop2): Directory bread(block 72) failed [ 109.315977][T12442] FAT-fs (loop2): Directory bread(block 73) failed [ 109.379660][T12450] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #2: comm syz.0.4086: corrupted inode contents [ 109.409957][T12450] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #2: comm syz.0.4086: mark_inode_dirty error [ 109.423770][T12469] netlink: 'syz.5.4094': attribute type 2 has an invalid length. [ 109.440840][T12450] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #2: comm syz.0.4086: corrupted inode contents [ 109.453670][T12450] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.4086: mark_inode_dirty error [ 109.483463][T12467] loop2: detected capacity change from 0 to 4096 [ 109.493825][T12467] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.525778][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.535579][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.574135][T12486] netlink: 'syz.0.4098': attribute type 3 has an invalid length. [ 109.647371][T12498] tipc: Started in network mode [ 109.652342][T12498] tipc: Node identity fe800000000000000000000000000016, cluster identity 4711 [ 109.662072][T12498] tipc: Enabling of bearer rejected, failed to enable media [ 109.713110][T12508] __nla_validate_parse: 6 callbacks suppressed [ 109.713130][T12508] netlink: 19 bytes leftover after parsing attributes in process `syz.0.4111'. [ 109.733743][T12510] netlink: 256 bytes leftover after parsing attributes in process `syz.5.4113'. [ 109.865044][T12530] tipc: Enabling of bearer rejected, failed to enable media [ 109.873564][T12528] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.881012][T12528] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.905401][T12528] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.912888][T12528] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.148314][T12572] loop5: detected capacity change from 0 to 512 [ 110.164852][T12572] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.4143: bg 0: block 248: padding at end of block bitmap is not set [ 110.182487][T12572] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.4143: Failed to acquire dquot type 1 [ 110.208380][T12581] loop2: detected capacity change from 0 to 128 [ 110.222478][T12572] EXT4-fs (loop5): 1 truncate cleaned up [ 110.229382][T12572] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.242974][T12572] ext4 filesystem being mounted at /111/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.277711][T12589] loop2: detected capacity change from 0 to 136 [ 110.284876][T11488] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.311027][T12593] netlink: 4652 bytes leftover after parsing attributes in process `syz.5.4151'. [ 110.368607][T12601] program syz.0.4156 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 110.532223][T12614] loop2: detected capacity change from 0 to 8192 [ 110.594880][T12628] tipc: Enabling of bearer rejected, failed to enable media [ 110.618975][T12632] loop5: detected capacity change from 0 to 128 [ 110.629731][T12632] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 110.656790][T12632] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 110.747491][T12655] loop3: detected capacity change from 0 to 512 [ 110.754431][T12655] journal_path: Non-blockdev passed as './bus' [ 110.760623][T12655] EXT4-fs: error: could not find journal device path [ 110.791882][T12659] loop5: detected capacity change from 0 to 1024 [ 110.810040][T12659] EXT4-fs: inline encryption not supported [ 110.822571][T12659] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.852155][T12659] EXT4-fs (loop5): changing journal_checksum during remount not supported; ignoring [ 110.859333][T12674] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4190'. [ 110.861592][T12659] EXT4-fs (loop5): can't disable delalloc during remount [ 110.939648][T11488] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.055404][T12700] loop3: detected capacity change from 0 to 512 [ 111.095762][T12700] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.117691][T12700] ext4 filesystem being mounted at /796/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 111.153130][T12700] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #2: block 3: comm syz.3.4203: lblock 8 mapped to illegal pblock 3 (length 26) [ 111.171789][T12700] EXT4-fs (loop3): Remounting filesystem read-only [ 111.198054][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.215584][T12725] tmpfs: Invalid uid '0x00000000ffffffff' [ 111.284715][T12735] netlink: 'syz.0.4219': attribute type 16 has an invalid length. [ 111.536563][T12780] xt_l2tp: invalid flags combination: 8 [ 111.547899][T12782] devtmpfs: Cannot retroactively limit inodes [ 111.575864][T12784] loop1: detected capacity change from 0 to 764 [ 111.611053][T12784] rock: directory entry would overflow storage [ 111.617259][T12784] rock: sig=0x4654, size=5, remaining=4 [ 111.638213][T12795] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=12795 comm=syz.3.4248 [ 111.650941][T12795] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=12795 comm=syz.3.4248 [ 111.693584][T12798] netlink: 277 bytes leftover after parsing attributes in process `syz.1.4250'. [ 111.714786][T12802] tipc: Enabling of bearer rejected, failed to enable media [ 111.848347][T12830] xt_l2tp: unknown flags: 51 [ 111.885353][T12840] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4270'. [ 111.899694][T12842] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4272'. [ 111.939289][T12850] macsec1: entered allmulticast mode [ 111.945472][T12850] hsr0: entered allmulticast mode [ 111.950596][T12850] hsr_slave_0: entered allmulticast mode [ 111.956383][T12850] hsr_slave_1: entered allmulticast mode [ 112.092594][T12879] loop0: detected capacity change from 0 to 1024 [ 112.109071][T12879] EXT4-fs: Ignoring removed oldalloc option [ 112.115168][T12879] EXT4-fs: Ignoring removed bh option [ 112.127383][T12884] loop1: detected capacity change from 0 to 512 [ 112.132326][T12885] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4293'. [ 112.142783][T12885] netlink: 55 bytes leftover after parsing attributes in process `syz.5.4293'. [ 112.155546][T12884] EXT4-fs warning (device loop1): ext4_xattr_inode_get:560: inode #11: comm syz.1.4292: EA inode hash validation failed [ 112.176615][T12884] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #15: comm syz.1.4292: corrupted inode contents [ 112.177543][T12879] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.203015][T12884] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #15: comm syz.1.4292: mark_inode_dirty error [ 112.230338][T12884] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #15: comm syz.1.4292: corrupted inode contents [ 112.251228][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.263138][T12884] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2996: inode #15: comm syz.1.4292: mark_inode_dirty error [ 112.275642][T12884] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2999: inode #15: comm syz.1.4292: mark inode dirty (error -117) [ 112.289217][T12884] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 112.298743][T12884] EXT4-fs (loop1): 1 orphan inode deleted [ 112.306043][T12884] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.339186][T12908] 9pnet_fd: Insufficient options for proto=fd [ 112.367913][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.389748][T12916] xt_hashlimit: max too large, truncated to 1048576 [ 112.509913][T12929] loop2: detected capacity change from 0 to 512 [ 112.529699][T12929] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 112.538841][T12929] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 112.549819][T12929] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 112.558112][T12929] System zones: 0-2, 18-18, 34-34 [ 112.564360][T12929] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.4311: iget: bad i_size value: 360287970189639680 [ 112.578550][T12929] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.4311: couldn't read orphan inode 15 (err -117) [ 112.591190][T12929] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.623398][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.911497][T12971] netlink: 92 bytes leftover after parsing attributes in process `syz.2.4332'. [ 112.985183][T12980] program syz.5.4337 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 113.312244][ T3318] block device autoloading is deprecated and will be removed. [ 113.347339][ T29] kauditd_printk_skb: 69 callbacks suppressed [ 113.347364][ T29] audit: type=1400 audit(1760693668.483:1088): avc: denied { mount } for pid=13000 comm="syz.1.4347" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 113.384145][ T29] audit: type=1400 audit(1760693668.525:1089): avc: denied { remount } for pid=13000 comm="syz.1.4347" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 113.412773][ T29] audit: type=1400 audit(1760693668.557:1090): avc: denied { unmount } for pid=3310 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 113.450206][ T3391] kernel read not supported for file /vcs (pid: 3391 comm: kworker/0:3) [ 113.506260][T13028] loop1: detected capacity change from 0 to 256 [ 113.705658][T13066] loop3: detected capacity change from 0 to 512 [ 113.724615][T13066] EXT4-fs (loop3): failed to initialize system zone (-117) [ 113.731949][T13066] EXT4-fs (loop3): mount failed [ 113.819873][T13087] program syz.3.4388 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 113.833698][T13084] lo speed is unknown, defaulting to 1000 [ 113.846354][ T29] audit: type=1400 audit(1760693669.008:1091): avc: denied { map } for pid=13092 comm="syz.2.4391" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 113.945185][T13091] loop1: detected capacity change from 0 to 256 [ 113.960706][T13091] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 113.985485][ T3418] hid_parser_main: 8 callbacks suppressed [ 113.985509][ T3418] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x4 [ 113.991407][T13091] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 113.998937][ T3418] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x2 [ 114.029295][ T3418] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x3 [ 114.042156][T13091] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 114.051427][ T3418] hid-generic 0000:3000000:0000.0006: hidraw0: HID v0.00 Device [sy] on syz0 [ 114.217002][ T36] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 114.224539][ T36] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 114.232697][ T36] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 114.240278][ T36] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 114.247705][ T36] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 114.255163][ T36] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 114.263287][ T36] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 114.281633][ T36] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [sy] on syz0 [ 114.413694][T13170] loop3: detected capacity change from 0 to 1764 [ 114.483756][ T29] audit: type=1400 audit(1760693669.670:1092): avc: denied { getopt } for pid=13185 comm="syz.2.4418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 114.638112][T13161] loop0: detected capacity change from 0 to 32768 [ 114.684532][ T29] audit: type=1400 audit(1760693669.880:1093): avc: denied { setattr } for pid=13220 comm="syz.3.4428" name="NETLINK" dev="sockfs" ino=35544 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 114.688872][T13161] loop0: p1 p2 p3 < p5 p6 > [ 114.776962][T13161] loop0: p2 size 16775168 extends beyond EOD, truncated [ 114.809597][T13161] loop0: p5 start 4294970168 is beyond EOD, truncated [ 114.869930][T13254] tc_dump_action: action bad kind [ 114.989913][T13275] netlink: 'syz.1.4446': attribute type 1 has an invalid length. [ 114.997709][T13275] netlink: 'syz.1.4446': attribute type 2 has an invalid length. [ 115.006333][T13275] __nla_validate_parse: 1 callbacks suppressed [ 115.006352][T13275] netlink: 16134 bytes leftover after parsing attributes in process `syz.1.4446'. [ 115.029284][ T29] audit: type=1400 audit(1760693670.247:1094): avc: denied { setcurrent } for pid=13276 comm="syz.2.4447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 115.250221][T13329] loop3: detected capacity change from 0 to 512 [ 115.269955][T13329] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.291461][T13329] ext4 filesystem being mounted at /850/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 115.352234][T13340] loop2: detected capacity change from 0 to 2048 [ 115.363358][T13329] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.4463: corrupted xattr block 33: invalid ea_ino [ 115.364030][T13351] netlink: 168 bytes leftover after parsing attributes in process `syz.1.4466'. [ 115.377801][T13340] EXT4-fs (loop2): failed to initialize system zone (-117) [ 115.385663][T13351] openvswitch: netlink: Message has 5 unknown bytes. [ 115.399837][T13340] EXT4-fs (loop2): mount failed [ 115.400092][T13329] EXT4-fs (loop3): Remounting filesystem read-only [ 115.412156][T13329] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 115.421368][T13329] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 115.431589][ T29] audit: type=1400 audit(1760693676.668:1095): avc: denied { write } for pid=13326 comm="syz.3.4463" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 115.460910][T13329] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 115.488224][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.498171][ T29] audit: type=1400 audit(1760693676.710:1096): avc: denied { open } for pid=13326 comm="syz.3.4463" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 115.551044][T13367] loop2: detected capacity change from 0 to 512 [ 115.574869][T13374] loop1: detected capacity change from 0 to 128 [ 115.583181][T13367] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.595869][T13367] ext4 filesystem being mounted at /942/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.662501][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.882580][ T29] audit: type=1400 audit(1760693677.140:1097): avc: denied { write } for pid=13435 comm="syz.0.4491" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 115.890951][T13438] loop2: detected capacity change from 0 to 1024 [ 115.912672][T13438] EXT4-fs: inline encryption not supported [ 115.936196][T13438] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.977195][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.980481][T13440] lo speed is unknown, defaulting to 1000 [ 116.065712][T13459] loop3: detected capacity change from 0 to 512 [ 116.073774][T13459] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 116.238340][T13473] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4507'. [ 116.412495][T13498] netlink: 16255 bytes leftover after parsing attributes in process `syz.5.4519'. [ 116.439901][T13501] loop5: detected capacity change from 0 to 164 [ 116.491266][T13503] loop0: detected capacity change from 0 to 512 [ 116.513693][T13503] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002] [ 116.524082][T13503] System zones: 1-12 [ 116.528278][T13503] EXT4-fs error (device loop0): dx_probe:791: inode #2: comm syz.0.4522: Directory hole found for htree index block 0 [ 116.541009][T13503] EXT4-fs (loop0): Remounting filesystem read-only [ 116.548165][T13503] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -117 [ 116.558534][T13503] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 116.567344][T13503] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.593629][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.714030][T13541] loop3: detected capacity change from 0 to 764 [ 116.722045][T13541] rock: directory entry would overflow storage [ 116.728861][T13541] rock: sig=0x4654, size=5, remaining=4 [ 116.752652][T13545] loop5: detected capacity change from 0 to 512 [ 116.774355][T13545] EXT4-fs (loop5): too many log groups per flexible block group [ 116.782860][T13548] loop3: detected capacity change from 0 to 1024 [ 116.785102][T13545] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 116.789598][T13548] EXT4-fs: Ignoring removed orlov option [ 116.797056][T13545] EXT4-fs (loop5): mount failed [ 116.802423][T13548] EXT4-fs: Ignoring removed orlov option [ 116.812269][T13548] EXT4-fs: Ignoring removed nomblk_io_submit option [ 116.818888][T13548] EXT4-fs: Ignoring removed nomblk_io_submit option [ 116.991079][T13578] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4556'. [ 117.039264][T13589] netlink: 340 bytes leftover after parsing attributes in process `syz.0.4561'. [ 117.171471][T13616] loop3: detected capacity change from 0 to 256 [ 117.196786][T13616] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 117.206348][T13616] FAT-fs (loop3): Filesystem has been set read-only [ 117.244017][T13626] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4579'. [ 117.498367][T13667] loop3: detected capacity change from 0 to 512 [ 117.654770][T13692] loop3: detected capacity change from 0 to 512 [ 117.673142][T13696] loop1: detected capacity change from 0 to 1024 [ 117.690196][T13692] msdos: Unknown parameter 'allow_uime' [ 117.705744][T13699] loop2: detected capacity change from 0 to 512 [ 117.707739][T13700] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4613'. [ 117.760449][T13699] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #3: comm syz.2.4614: corrupted inode contents [ 117.777480][T13710] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4618'. [ 117.783685][T13699] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #3: comm syz.2.4614: mark_inode_dirty error [ 117.805401][T13699] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4614: bg 0: block 112: padding at end of block bitmap is not set [ 117.828196][T13699] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.4614: Failed to acquire dquot type 0 [ 117.846251][T13713] loop0: detected capacity change from 0 to 2048 [ 117.854953][T13718] loop3: detected capacity change from 0 to 512 [ 117.862596][T13699] EXT4-fs (loop2): 1 truncate cleaned up [ 117.868851][T13699] ext4 filesystem being mounted at /966/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.910619][T13723] loop1: detected capacity change from 0 to 128 [ 117.913971][T13728] loop5: detected capacity change from 0 to 164 [ 117.918777][T13718] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.4621: bad orphan inode 11862016 [ 117.935663][T13713] Alternate GPT is invalid, using primary GPT. [ 117.942085][T13713] loop0: p1 p2 p3 [ 117.946543][T13713] loop0: partition table partially beyond EOD, truncated [ 117.957654][T13728] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 117.967416][T13718] ext4 filesystem being mounted at /900/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.990453][T13728] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 118.003301][T13723] ext4 filesystem being mounted at /940/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.020542][T13728] Symlink component flag not implemented [ 118.026212][T13728] Symlink component flag not implemented [ 118.035164][T13723] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:375: inode #2: comm syz.1.4625: No space for directory leaf checksum. Please run e2fsck -D. [ 118.050770][T13723] EXT4-fs error (device loop1): htree_dirblock_to_tree:1051: inode #2: comm syz.1.4625: Directory block failed checksum [ 118.063596][T13728] Symlink component flag not implemented (7) [ 118.063610][T13728] Symlink component flag not implemented (116) [ 118.105302][T13742] loop0: detected capacity change from 0 to 512 [ 118.129058][T13744] netlink: 7 bytes leftover after parsing attributes in process `syz.1.4633'. [ 118.146019][T13742] ext4 filesystem being mounted at /993/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 118.165510][T13751] loop5: detected capacity change from 0 to 512 [ 118.181239][T13751] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 118.307779][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 118.307796][ T29] audit: type=1400 audit(2000000001.217:1118): avc: denied { nlmsg_read } for pid=13772 comm="syz.2.4647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 118.343603][ T29] audit: type=1400 audit(2000000001.249:1119): avc: denied { nlmsg_write } for pid=13772 comm="syz.2.4647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 118.451547][ T29] audit: type=1400 audit(2000000001.375:1120): avc: denied { remount } for pid=13799 comm="syz.1.4658" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 118.486839][ T29] audit: type=1400 audit(2000000001.406:1121): avc: denied { mounton } for pid=13801 comm="syz.1.4659" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 118.684044][ T29] audit: type=1400 audit(2000000001.616:1122): avc: denied { accept } for pid=13834 comm="syz.1.4676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 118.833354][T13859] tipc: Started in network mode [ 118.838326][T13859] tipc: Node identity 0800000000000000faffffffffffffff, cluster identity 4711 [ 118.982174][ T29] audit: type=1400 audit(2000000001.921:1123): avc: denied { read } for pid=13879 comm="syz.0.4696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 119.042975][ T29] audit: type=1400 audit(2000000001.994:1124): avc: denied { bind } for pid=13892 comm="syz.1.4705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 119.065463][T13896] loop5: detected capacity change from 0 to 256 [ 119.074638][T13896] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000007f) [ 119.120443][ T29] audit: type=1400 audit(2000000002.068:1125): avc: denied { bind } for pid=13903 comm="syz.5.4710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 119.138786][T13906] lo speed is unknown, defaulting to 1000 [ 119.187671][ T29] audit: type=1400 audit(2000000002.141:1126): avc: denied { ioctl } for pid=13908 comm="syz.3.4711" path="/dev/usbmon7" dev="devtmpfs" ino=163 ioctlcmd=0x920a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 119.323875][ T29] audit: type=1400 audit(2000000002.173:1127): avc: denied { name_bind } for pid=13905 comm="syz.0.4709" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 119.466679][T13950] loop2: detected capacity change from 0 to 1024 [ 119.503797][T13950] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 119.540556][T13964] program syz.1.4736 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 119.556297][T13950] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.4729: Invalid block bitmap block 0 in block_group 0 [ 119.583132][T13964] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 119.593348][T13950] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.4729: Failed to acquire dquot type 0 [ 119.631709][T13950] EXT4-fs error (device loop2): ext4_free_blocks:6706: comm syz.2.4729: Freeing blocks not in datazone - block = 0, count = 4096 [ 119.670609][T13972] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 119.694257][T13950] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.4729: Invalid inode bitmap blk 0 in block_group 0 [ 119.711975][ T12] EXT4-fs error (device loop2): ext4_release_dquot:6981: comm kworker/u8:0: Failed to release dquot type 0 [ 119.735693][T13972] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 119.744418][T13950] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 119.762535][T13950] EXT4-fs (loop2): 1 orphan inode deleted [ 119.865219][T13993] loop1: detected capacity change from 0 to 1024 [ 119.872378][T13993] EXT4-fs: Ignoring removed orlov option [ 119.878211][T13993] EXT4-fs: Ignoring removed nomblk_io_submit option [ 119.879153][T13991] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 119.893700][T13991] vhci_hcd: invalid port number 96 [ 119.898955][T13991] vhci_hcd: default hub control req: 0311 v0005 i0060 l7 [ 119.935820][T14001] __nla_validate_parse: 6 callbacks suppressed [ 119.935911][T14001] netlink: 536 bytes leftover after parsing attributes in process `syz.1.4752'. [ 119.954629][T14001] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4752'. [ 120.190225][T14039] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4772'. [ 120.199984][T14039] netlink: 7 bytes leftover after parsing attributes in process `syz.2.4772'. [ 120.200135][T14041] loop3: detected capacity change from 0 to 2048 [ 120.209055][T14039] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4772'. [ 120.209073][T14039] netlink: 7 bytes leftover after parsing attributes in process `syz.2.4772'. [ 120.209090][T14039] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4772'. [ 120.262380][T14041] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4774'. [ 120.359632][T14068] can0: slcan on ptm0. [ 120.576436][T14075] lo speed is unknown, defaulting to 1000 [ 120.699363][T14093] devpts: Bad value for 'gid' [ 120.704186][T14093] devpts: Bad value for 'gid' [ 120.761833][T14080] loop1: detected capacity change from 0 to 32768 [ 120.802026][T14080] loop1: p1 p2 p3 < p5 p6 > [ 120.807085][T14080] loop1: p2 size 16775168 extends beyond EOD, truncated [ 120.818115][T14080] loop1: p5 start 4294970168 is beyond EOD, truncated [ 120.889652][T14111] loop0: detected capacity change from 0 to 512 [ 120.918974][T14111] ext4 filesystem being mounted at /1038/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.981406][T14125] loop5: detected capacity change from 0 to 512 [ 120.988365][T14125] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 121.006118][T14125] EXT4-fs (loop5): 1 truncate cleaned up [ 121.007836][T14128] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 121.045447][T14130] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4813'. [ 121.082467][T14138] tipc: Enabling of bearer rejected, failed to enable media [ 121.145826][T14152] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4824'. [ 121.154790][T14057] can0 (unregistered): slcan off ptm0. [ 121.199332][T14160] loop2: detected capacity change from 0 to 164 [ 121.213484][T14160] Unable to read rock-ridge attributes [ 121.223613][T14165] loop1: detected capacity change from 0 to 128 [ 121.306130][T14179] bond1: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 121.318993][T14179] bond1 (unregistering): Released all slaves [ 121.455776][T14202] loop5: detected capacity change from 0 to 512 [ 121.498940][T14202] ext4 filesystem being mounted at /220/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.758393][T14245] loop5: detected capacity change from 0 to 512 [ 121.767337][T14245] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 121.782087][T14245] EXT4-fs (loop5): 1 truncate cleaned up [ 121.829003][T14254] macsec1: entered promiscuous mode [ 121.834411][T14254] bridge0: entered promiscuous mode [ 121.843681][T14254] bridge0: port 1(macsec1) entered blocking state [ 121.850916][T14254] bridge0: port 1(macsec1) entered disabled state [ 121.857634][T14254] macsec1: entered allmulticast mode [ 121.862972][T14254] bridge0: entered allmulticast mode [ 121.870102][T14254] macsec1: left allmulticast mode [ 121.875143][T14254] bridge0: left allmulticast mode [ 121.907485][T14254] bridge0: left promiscuous mode [ 122.246180][T14313] loop1: detected capacity change from 0 to 512 [ 122.269493][T14313] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 122.299496][T14313] EXT4-fs (loop1): 1 truncate cleaned up [ 122.597101][T14362] loop2: detected capacity change from 0 to 256 [ 122.622731][T14362] FAT-fs (loop2): Directory bread(block 1285) failed [ 122.629473][T14362] FAT-fs (loop2): Directory bread(block 1286) failed [ 122.644411][T14362] FAT-fs (loop2): Directory bread(block 1287) failed [ 122.669234][T14362] FAT-fs (loop2): Directory bread(block 1288) failed [ 122.680804][T14362] FAT-fs (loop2): Directory bread(block 1285) failed [ 122.687546][T14362] FAT-fs (loop2): Directory bread(block 1286) failed [ 122.698807][T14362] FAT-fs (loop2): Directory bread(block 1287) failed [ 122.705658][T14362] FAT-fs (loop2): Directory bread(block 1288) failed [ 122.715770][T14362] FAT-fs (loop2): FAT read failed (blocknr 1281) [ 122.722375][T14362] FAT-fs (loop2): Directory bread(block 1285) failed [ 122.729890][T14381] loop1: detected capacity change from 0 to 512 [ 122.772193][T14387] loop3: detected capacity change from 0 to 128 [ 122.794147][T14381] ext4 filesystem being mounted at /1010/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.852890][T14404] loop2: detected capacity change from 0 to 128 [ 122.982495][T14429] bond1: option ad_user_port_key: invalid value (1136) [ 122.989440][T14429] bond1: option ad_user_port_key: allowed values 0 - 1023 [ 123.008365][T14429] bond1 (unregistering): Released all slaves [ 123.041223][T14435] netlink: 'syz.2.4957': attribute type 1 has an invalid length. [ 123.158740][T14449] loop0: detected capacity change from 0 to 512 [ 123.185488][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 123.185506][ T29] audit: type=1326 audit(2000000006.340:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14452 comm="syz.5.4967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bb4eaefc9 code=0x7ffc0000 [ 123.228745][ T29] audit: type=1326 audit(2000000006.340:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14452 comm="syz.5.4967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bb4eaefc9 code=0x7ffc0000 [ 123.253103][ T29] audit: type=1326 audit(2000000006.340:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14452 comm="syz.5.4967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bb4eaefc9 code=0x7ffc0000 [ 123.276774][ T29] audit: type=1326 audit(2000000006.340:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14452 comm="syz.5.4967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7f2bb4eaefc9 code=0x7ffc0000 [ 123.300273][ T29] audit: type=1326 audit(2000000006.340:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14452 comm="syz.5.4967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bb4eaefc9 code=0x7ffc0000 [ 123.324473][ T29] audit: type=1326 audit(2000000006.340:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14452 comm="syz.5.4967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bb4eaefc9 code=0x7ffc0000 [ 123.348735][ T29] audit: type=1326 audit(2000000006.340:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14452 comm="syz.5.4967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bb4eaefc9 code=0x7ffc0000 [ 123.353884][T14465] macsec1: entered promiscuous mode [ 123.372238][ T29] audit: type=1326 audit(2000000006.340:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14452 comm="syz.5.4967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f2bb4eaefc9 code=0x7ffc0000 [ 123.402341][T14465] bridge0: entered promiscuous mode [ 123.408923][ T29] audit: type=1326 audit(2000000006.571:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14452 comm="syz.5.4967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f2bb4eaefc9 code=0x7ffc0000 [ 123.447747][T14465] bridge0: port 4(macsec1) entered blocking state [ 123.454482][T14465] bridge0: port 4(macsec1) entered disabled state [ 123.463679][T14465] macsec1: entered allmulticast mode [ 123.469116][T14465] bridge0: entered allmulticast mode [ 123.477194][T14449] ext4 filesystem being mounted at /1079/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 123.512783][T14465] macsec1: left allmulticast mode [ 123.518685][T14465] bridge0: left allmulticast mode [ 123.519875][T14449] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #4: comm syz.0.4964: corrupted inode contents [ 123.536828][T14465] bridge0: left promiscuous mode [ 123.542147][T14449] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #4: comm syz.0.4964: mark_inode_dirty error [ 123.555797][T14449] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #4: comm syz.0.4964: corrupted inode contents [ 123.574510][T14449] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #4: comm syz.0.4964: mark_inode_dirty error [ 123.586011][T14449] Quota error (device loop0): write_blk: dquota write failed [ 123.593523][T14449] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.4964: Failed to acquire dquot type 1 [ 123.604546][T14491] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #4: comm syz.0.4964: corrupted inode contents [ 123.629161][T14491] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #4: comm syz.0.4964: mark_inode_dirty error [ 123.642191][T14491] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #4: comm syz.0.4964: corrupted inode contents [ 123.661703][T14491] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #4: comm syz.0.4964: mark_inode_dirty error [ 123.661843][T14491] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.4964: Failed to acquire dquot type 1 [ 123.775715][T14511] loop1: detected capacity change from 0 to 512 [ 123.805873][T14515] bond1: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 123.817833][T14511] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.4990: bad orphan inode 11862016 [ 123.817841][T14515] bond1 (unregistering): Released all slaves [ 123.836424][T14519] netlink: 'syz.2.4997': attribute type 6 has an invalid length. [ 123.844986][T14511] ext4 filesystem being mounted at /1023/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.952159][T14540] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 124.159219][T14576] loop5: detected capacity change from 0 to 1024 [ 124.174126][T14576] EXT4-fs: Ignoring removed bh option [ 124.179569][T14576] EXT4-fs: inline encryption not supported [ 124.192708][T14576] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 124.204290][T14576] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 124.214255][T14576] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 2: comm syz.5.5024: lblock 2 mapped to illegal pblock 2 (length 1) [ 124.228400][T14576] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 48: comm syz.5.5024: lblock 0 mapped to illegal pblock 48 (length 1) [ 124.243667][T14576] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.5024: Failed to acquire dquot type 0 [ 124.252689][T14588] loop0: detected capacity change from 0 to 1024 [ 124.261282][T14576] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 124.271519][T14576] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #11: comm syz.5.5024: mark_inode_dirty error [ 124.282867][T14576] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 124.293152][T14576] EXT4-fs (loop5): 1 orphan inode deleted [ 124.308252][ T792] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 124.330222][ T792] EXT4-fs error (device loop5): ext4_release_dquot:6981: comm kworker/u8:6: Failed to release dquot type 0 [ 124.352608][T14588] EXT4-fs error (device loop0): ext4_generic_delete_entry:2668: inode #12: block 7: comm syz.0.5029: bad entry in directory: inode out of bounds - offset=0, inode=150994957, rec_len=16, size=56 fake=0 [ 124.396729][T11488] EXT4-fs error (device loop5): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 124.403691][T14588] EXT4-fs (loop0): Remounting filesystem read-only [ 124.413734][T14602] tracefs: Bad value for 'uid' [ 124.418998][T11488] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 124.420788][T14602] tracefs: Bad value for 'uid' [ 124.440379][T11488] EXT4-fs error (device loop5): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 124.749710][T14650] lo speed is unknown, defaulting to 1000 [ 124.805515][T14667] 9pnet: Could not find request transport: a [ 124.865835][T14679] __nla_validate_parse: 17 callbacks suppressed [ 124.865850][T14679] netlink: 160 bytes leftover after parsing attributes in process `syz.5.5070'. [ 124.891431][T14676] lo speed is unknown, defaulting to 1000 [ 125.135568][T14711] loop0: detected capacity change from 0 to 128 [ 125.226705][T14723] ------------[ cut here ]------------ [ 125.232342][T14723] verifier bug: REG INVARIANTS VIOLATION (false_reg1): range bounds violation u64=[0x4000000, 0x0] s64=[0x4000000, 0x0] u32=[0x4000000, 0x0] s32=[0x4000000, 0x0] var_off=(0x0, 0x0) [ 125.250433][T14723] WARNING: CPU: 0 PID: 14723 at kernel/bpf/verifier.c:2721 reg_bounds_sanity_check+0x673/0x680 [ 125.260844][T14723] Modules linked in: [ 125.264770][T14723] CPU: 0 UID: 0 PID: 14723 Comm: syz.0.5090 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 125.276267][T14723] Tainted: [W]=WARN [ 125.280325][T14723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 125.290447][T14723] RIP: 0010:reg_bounds_sanity_check+0x673/0x680 [ 125.296730][T14723] Code: 7c 24 18 41 ff 74 24 20 55 41 56 4d 89 ee 53 48 8b 5c 24 30 ff 74 24 40 ff 74 24 50 ff 74 24 30 e8 72 02 bb ff 48 83 c4 38 90 <0f> 0b 90 90 e9 02 fb ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 [ 125.316638][T14723] RSP: 0018:ffffc900057eb408 EFLAGS: 00010282 [ 125.322930][T14723] RAX: c2013ab9da4b5c00 RBX: ffff8881033b42e0 RCX: 0000000000080000 [ 125.331035][T14723] RDX: ffffc900020da000 RSI: 0000000000006702 RDI: 0000000000006703 [ 125.333598][T14705] loop3: detected capacity change from 0 to 32768 [ 125.339111][T14723] RBP: 0000000000000000 R08: 0001c900057eb257 R09: 0000000000000000 [ 125.353502][T14723] R10: 00000000ffffffff R11: 0000000000000002 R12: ffff8881033b42a0 [ 125.361555][T14723] R13: ffff888109688000 R14: ffff888109688000 R15: ffff8881033b42d8 [ 125.369601][T14723] FS: 00007f9687b5f6c0(0000) GS:ffff8882aee3a000(0000) knlGS:0000000000000000 [ 125.378574][T14723] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 125.385230][T14723] CR2: 00000000ffffffff CR3: 000000013a3d2000 CR4: 00000000003506f0 [ 125.393256][T14723] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 125.401237][T14723] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 125.409347][T14723] Call Trace: [ 125.412784][T14723] [ 125.415814][T14723] reg_set_min_max+0x215/0x260 [ 125.420600][T14723] check_cond_jmp_op+0x130d/0x19e0 [ 125.425780][T14723] do_check+0x3363/0x8460 [ 125.430321][T14723] do_check_common+0xc5e/0x12b0 [ 125.435232][T14723] bpf_check+0xaaae/0xd9d0 [ 125.439750][T14723] ? __alloc_frozen_pages_noprof+0x188/0x360 [ 125.445783][T14723] ? __vmap_pages_range_noflush+0xbc4/0xcf0 [ 125.451764][T14723] ? css_rstat_updated+0xb7/0x240 [ 125.456875][T14723] ? try_charge_memcg+0x215/0xa10 [ 125.462003][T14723] ? pcpu_block_refresh_hint+0x10b/0x170 [ 125.467862][T14723] ? pcpu_block_update_hint_alloc+0x63d/0x660 [ 125.474098][T14723] ? pcpu_block_update_hint_alloc+0x63d/0x660 [ 125.480295][T14723] ? css_rstat_updated+0xb7/0x240 [ 125.485433][T14723] ? __rcu_read_unlock+0x4f/0x70 [ 125.490511][T14723] ? pcpu_memcg_post_alloc_hook+0xf1/0x150 [ 125.496352][T14723] ? bpf_prog_alloc+0x5b/0x150 [ 125.501256][T14723] ? pcpu_alloc_noprof+0xd29/0x1250 [ 125.506495][T14723] ? should_fail_ex+0x30/0x280 [ 125.511448][T14723] ? should_failslab+0x8c/0xb0 [ 125.516367][T14723] ? __kmalloc_noprof+0x2a2/0x570 [ 125.521454][T14723] ? security_bpf_prog_load+0x60/0x140 [ 125.526963][T14723] ? selinux_bpf_prog_load+0xad/0xd0 [ 125.532337][T14723] ? security_bpf_prog_load+0x9e/0x140 [ 125.537837][T14723] bpf_prog_load+0xf6e/0x1100 [ 125.542541][T14723] ? security_bpf+0x2b/0x90 [ 125.547098][T14723] __sys_bpf+0x469/0x7c0 [ 125.551405][T14723] __x64_sys_bpf+0x41/0x50 [ 125.555884][T14723] x64_sys_call+0x2aee/0x3000 [ 125.560803][T14723] do_syscall_64+0xd2/0x200 [ 125.565402][T14723] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 125.571555][T14723] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 125.577417][T14723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.583451][T14723] RIP: 0033:0x7f96890fefc9 [ 125.588014][T14723] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.607721][T14723] RSP: 002b:00007f9687b5f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 125.616354][T14723] RAX: ffffffffffffffda RBX: 00007f9689355fa0 RCX: 00007f96890fefc9 [ 125.624360][T14723] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 125.632380][T14723] RBP: 00007f9689181f91 R08: 0000000000000000 R09: 0000000000000000 [ 125.638458][T14743] loop2: detected capacity change from 0 to 2048 [ 125.640362][T14723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 125.640379][T14723] R13: 00007f9689356038 R14: 00007f9689355fa0 R15: 00007ffef5a5fe28 [ 125.662812][T14723] [ 125.665842][T14723] ---[ end trace 0000000000000000 ]--- [ 125.681998][T14743] EXT4-fs mount: 40 callbacks suppressed [ 125.682010][T14743] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.712998][T14705] loop3: p1 p2 p3 < p5 p6 > [ 125.718847][T14705] loop3: p2 size 16775168 extends beyond EOD, truncated [ 125.736862][T14705] loop3: p5 start 4294970168 is beyond EOD, truncated [ 125.763826][T14743] EXT4-fs error (device loop2): ext4_find_extent:939: inode #2: comm syz.2.5101: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 125.853050][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.921864][T14767] loop0: detected capacity change from 0 to 512 [ 125.937433][T14770] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.5111'. [ 125.946922][T14770] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 125.955933][T14770] openvswitch: netlink: Message has 5 unknown bytes. [ 125.976122][T14767] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.998332][T14767] ext4 filesystem being mounted at /1109/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.036738][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.053491][T14783] loop5: detected capacity change from 0 to 164 [ 126.060904][T14783] ISOFS: unable to read i-node block [ 126.067148][T14783] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 126.153534][T14801] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5127'. [ 126.162959][T14801] netlink: del zone limit has 4 unknown bytes [ 126.234340][T14815] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5133'. [ 126.243461][T14815] netlink: 'syz.2.5133': attribute type 2 has an invalid length. [ 126.272366][T14820] loop2: detected capacity change from 0 to 164 [ 126.316897][T14826] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5136'. [ 126.325915][T14826] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5136'. [ 126.496834][T14864] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 126.506095][T14864] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 126.542077][T14872] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5159'. [ 126.565513][T14872] IPVS: Error connecting to the multicast addr [ 127.015616][T14914] random: crng reseeded on system resumption [ 127.061950][T14920] gretap0: entered promiscuous mode [ 127.067416][T14920] vlan3: entered promiscuous mode [ 127.111920][T14925] loop5: detected capacity change from 0 to 512 [ 127.136270][T14925] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 127.155592][T14930] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 127.162139][T14930] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 127.169639][T14930] vhci_hcd vhci_hcd.0: Device attached [ 127.176157][T14931] vhci_hcd: connection closed [ 127.178591][ T792] vhci_hcd: stop threads [ 127.187800][ T792] vhci_hcd: release socket [ 127.192224][ T792] vhci_hcd: disconnect device [ 127.219422][T14925] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 127.238453][T14925] EXT4-fs (loop5): 1 truncate cleaned up [ 127.248443][T14925] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.314208][T11488] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.329622][T11488] ================================================================== [ 127.337737][T11488] BUG: KCSAN: data-race in __lru_add_drain_all / folio_add_lru [ 127.345315][T11488] [ 127.347660][T11488] read-write to 0xffff888237c25ee8 of 1 bytes by task 14934 on cpu 0: [ 127.355819][T11488] folio_add_lru+0xa5/0x1f0 [ 127.360340][T11488] folio_add_lru_vma+0x49/0x70 [ 127.365112][T11488] do_wp_page+0x1550/0x2510 [ 127.369623][T11488] handle_mm_fault+0x77d/0x2be0 [ 127.374477][T11488] do_user_addr_fault+0x630/0x1080 [ 127.379587][T11488] exc_page_fault+0x62/0xa0 [ 127.384084][T11488] asm_exc_page_fault+0x26/0x30 [ 127.388945][T11488] [ 127.391270][T11488] read to 0xffff888237c25ee8 of 1 bytes by task 11488 on cpu 1: [ 127.398897][T11488] __lru_add_drain_all+0x17e/0x450 [ 127.404029][T11488] lru_add_drain_all+0x10/0x20 [ 127.408806][T11488] invalidate_bdev+0x47/0x70 [ 127.413409][T11488] ext4_put_super+0x624/0x7d0 [ 127.418092][T11488] generic_shutdown_super+0xe6/0x210 [ 127.423389][T11488] kill_block_super+0x2a/0x70 [ 127.428084][T11488] ext4_kill_sb+0x42/0x80 [ 127.432425][T11488] deactivate_locked_super+0x75/0x1c0 [ 127.437805][T11488] deactivate_super+0x97/0xa0 [ 127.442476][T11488] cleanup_mnt+0x269/0x2e0 [ 127.446900][T11488] __cleanup_mnt+0x19/0x20 [ 127.451317][T11488] task_work_run+0x131/0x1a0 [ 127.455909][T11488] exit_to_user_mode_loop+0xed/0x110 [ 127.461199][T11488] do_syscall_64+0x1d6/0x200 [ 127.465793][T11488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.471699][T11488] [ 127.474027][T11488] value changed: 0x02 -> 0x05 [ 127.478698][T11488] [ 127.481020][T11488] Reported by Kernel Concurrency Sanitizer on: [ 127.487172][T11488] CPU: 1 UID: 0 PID: 11488 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 127.498725][T11488] Tainted: [W]=WARN [ 127.502523][T11488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 127.512577][T11488] ================================================================== [ 127.523706][T14945] loop2: detected capacity change from 0 to 512 [ 127.531371][T14945] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 127.540193][T14945] EXT4-fs (loop2): invalid journal inode [ 127.545934][T14945] EXT4-fs (loop2): can't get journal size [ 127.559142][T14945] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e056c118, mo2=0002] [ 127.567898][T14945] System zones: 1-12, 13-13 [ 127.573414][T14945] EXT4-fs (loop2): 1 truncate cleaned up [ 127.580397][T14951] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 127.591205][T14945] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.615489][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.