last executing test programs: 1m35.936468065s ago: executing program 2 (id=754): mkdir(&(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracefs\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracefs/trace_options\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='raw\n', 0x4) 1m35.798716979s ago: executing program 2 (id=757): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0x401, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newtfilter={0x34, 0x2c, 0x401, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@deltfilter={0x34, 0x2d, 0x1, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}}, 0x0) 1m35.667646572s ago: executing program 2 (id=760): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x200000, &(0x7f0000000580)={[{@resgid}, {@mblk_io_submit}, {@orlov}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nobarrier}, {@nogrpid}, {@abort}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f0000000e40)="$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") setxattr$trusted_overlay_upper(&(0x7f00000013c0)='./file1\x00', &(0x7f0000001400), &(0x7f0000001440)=ANY=[], 0x835, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001480)='./file1\x00', 0x101242, 0x220) setxattr$trusted_overlay_upper(&(0x7f00000014c0)='./file1\x00', &(0x7f0000001500), &(0x7f0000001540)=ANY=[], 0x835, 0x2) 1m35.565059925s ago: executing program 2 (id=762): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000080), &(0x7f00000000c0)=0x8) 1m34.663001457s ago: executing program 2 (id=793): perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0xecc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10220, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8e20, 0xa2a}, 0x0, 0x3713, 0x2, 0x6, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180200000200000000000000000000008500000041000000850000000500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f00000003c0)="9979751a2a49c57448ddd613d2a3", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 1m34.53315872s ago: executing program 2 (id=796): ptrace(0x10, 0x1) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x6, 0x0, 0x0, 0x0, 0x8000000009917, 0x400000000000fffd}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0xffffffffffffffff}, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x1}, 0x0) 1m19.544014578s ago: executing program 32 (id=796): ptrace(0x10, 0x1) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x6, 0x0, 0x0, 0x0, 0x8000000009917, 0x400000000000fffd}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0xffffffffffffffff}, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x1}, 0x0) 2.458728879s ago: executing program 1 (id=2663): unshare(0x28000600) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='cgroup.controllers\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0) splice(r1, &(0x7f00000005c0)=0x8000000000000000, r0, 0x0, 0x5, 0x8) 2.181134477s ago: executing program 1 (id=2668): r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) fchown(r0, 0x0, 0xee01) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83) fchown(r1, 0x0, 0x0) 2.150262017s ago: executing program 1 (id=2672): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @remote}, 0x1c) syz_emit_ethernet(0x83, &(0x7f0000000300)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0400", 0x4d, 0x6, 0x1, @remote, @local, {[], {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x18, 0x1000}, {"1f7fc8372ae6f05f11f06c6e49eb5b62c55b7f738b61af934a855e2a006b51d64501506133ee1b95f49bc935ef77e66e6f3971bea272ee3172"}}}}}}}, 0x0) 1.941947163s ago: executing program 4 (id=2684): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000000)=0x8, 0x4d) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x7, @loopback, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x23, @empty, 0x23}, 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f00000000c0)) 1.803640155s ago: executing program 3 (id=2687): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000840)=@newchain={0x24, 0x64, 0x20, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x1}, {0x10, 0xf}, {0x5, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000007c0)=ANY=[@ANYBLOB="a0000000020000000000000004000000fc000000000000000000000000000001fc0200000000000000000000000000ff00000005000000020a000000ff000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="bf6b6e000000000050001100fe8000000000000000000000000000aaac1e00010000000000000000000000007f000001000000000000000000000000ac141404"], 0xa0}}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000500)=[{&(0x7f00000006c0)="27031c00160014000000002f1eafacf706e105400000894f00050004ee0b80558ddbba9b37242d37a518fc9c5be50eaf07c3650596", 0x26}], 0xf}, 0x4) 1.798410366s ago: executing program 5 (id=2688): r0 = socket$kcm(0x11, 0x2, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f0000000440)=r0, 0x8) r2 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0x12, &(0x7f0000000480)=r0, 0x4) 1.770152377s ago: executing program 3 (id=2689): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x200000, &(0x7f0000000380)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYRESHEX], 0x1, 0x392, &(0x7f00000003c0)="$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") statfs(&(0x7f00000007c0)='.\x00', 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000240)=ANY=[], 0x32600) 1.714499538s ago: executing program 5 (id=2690): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000180)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/thread-self/fail-nth\x00', 0x2, 0x2) write(r0, &(0x7f0000000280)='3', 0x4e) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000000)=[@ioring_restriction_register_op={0x0, 0x1e}], 0x1) 1.657158889s ago: executing program 5 (id=2691): syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x2004000, &(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYRESOCT, @ANYRES32, @ANYRES64, @ANYRES32, @ANYRES64], 0x1, 0x1259, &(0x7f0000001280)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./trace\x00', 0x42, 0x1ac) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x40080}, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 1.6501529s ago: executing program 3 (id=2692): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file1\x00', 0x2000c16, &(0x7f00000007c0)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000800)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file1\x00', 0x101042, 0x65) r1 = openat(0xffffffffffffff9c, &(0x7f0000000ac0)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000b00)='a', 0x200000c1, 0x9000) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000b40)) 1.356435157s ago: executing program 3 (id=2693): socket$nl_route(0x10, 0x3, 0x0) syz_clone3(&(0x7f0000000300)={0x100000, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) pause() syz_clone3(&(0x7f0000000380)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) getrandom(&(0x7f0000000600)=""/44, 0xfffffffffffffd49, 0x3) 1.307323648s ago: executing program 0 (id=2695): r0 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x80000000000000, 0x1113a, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000008, 0x1, @perf_config_ext={0x0, 0x200000000000f60e}, 0x808, 0x800000, 0x2, 0x2, 0x7, 0x2, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x4000000001, 0xffffffffffffffff, 0xb) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x5, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)='b', 0x1}], 0x100000000000020e, 0x1, 0x1f5) 1.293986448s ago: executing program 5 (id=2696): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e21, @empty}], 0x10) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000200)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x4000891) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300)) 1.285963688s ago: executing program 1 (id=2697): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000004c0)={0xa, 0x4e20, 0xfffffffd, @empty, 0x4000}, 0x1c) recvmmsg(r0, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)=""/191, 0xbf}, 0xffffffff}], 0x1, 0x3, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000e40)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000e80)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) 1.20584161s ago: executing program 0 (id=2698): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/usb/drivers/usbip-host\x00', 0x0, 0x0) r1 = openat(r0, &(0x7f0000000100)='match_busid\x00', 0x2, 0x0) write(r1, &(0x7f0000000140)='ad', 0x2) 1.204160961s ago: executing program 0 (id=2708): perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xb, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x9}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./trace\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)='bReq', 0x4) 1.093466463s ago: executing program 4 (id=2699): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYBLOB="5490f41e89db5c6987bb89944e3ce8a9d74aa557beeb12bf7bf4a19bec956b719f048f1e043475577b7adb3114dbb00a614a03808dfe14f5f5c2dd1b71c4d5a6a09435057b932b0b", @ANYRES32, @ANYRESDEC=0x0, @ANYRESOCT=0x0], 0x3, 0x251, &(0x7f0000000900)="$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") perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x6, 0x7}, 0x0, 0x0, 0x4, 0x6, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000003380)=[{{&(0x7f0000003400)={0x2, 0x4e20, @private=0xa018100}, 0x10, &(0x7f0000003440)=[{&(0x7f0000003480)="9c", 0x1}], 0x1}}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f00000035c0)=0x8) 1.092592103s ago: executing program 0 (id=2710): unshare(0x20000400) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x1000040, &(0x7f00000002c0), 0x1, 0x5a3, &(0x7f00000013c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000001980)='./file1\x00', 0x20242, 0x81) r0 = openat(0xffffffffffffff9c, &(0x7f0000001340)='.\x00', 0x100, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x40086610, &(0x7f0000001380)={@desc={0x1, 0x10000000, @desc2}}) 991.124296ms ago: executing program 4 (id=2700): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6d}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000001440)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 989.781336ms ago: executing program 0 (id=2701): socket$inet6(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001140)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001180)='./dev\x00', &(0x7f00000011c0)='devtmpfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='\x00', 0x89901) open_tree(r0, &(0x7f0000000100)='\x00', 0x81801) 724.710042ms ago: executing program 0 (id=2702): syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000380)='./file1\x00', 0x1800040, &(0x7f00000003c0)={[{@barrier}, {@nodioread_nolock}, {@grpquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@block_validity}, {@nodioread_nolock}, {@nodelalloc}, {@norecovery}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000000}}]}, 0x1, 0x59c, &(0x7f0000000480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000a40)='./file1\x00', 0x101042, 0x15) pwrite64(r0, &(0x7f0000000a80)='2', 0x1, 0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_mount_image$ext4(&(0x7f0000000d40)='ext2\x00', &(0x7f0000000d80)='./file1\x00', 0x20000, &(0x7f00000000c0)={[{@nojournal_checksum}, {@jqfmt_vfsold}, {@lazytime}, {@usrquota}, {@usrquota}], [{@pcr={'pcr', 0x3d, 0x10}}, {@mask={'mask', 0x3d, '^MAY_READ'}}]}, 0x3, 0x455, &(0x7f0000000dc0)="$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") 690.041573ms ago: executing program 4 (id=2703): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) bind$inet6(r0, &(0x7f0000000340)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}, 0x1ff}], 0x1, 0x10100, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)={0xa, 0x4e20, 0x2, @mcast1}, 0x1c) 517.482497ms ago: executing program 4 (id=2704): r0 = fsopen(&(0x7f0000000640)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0xa) fchdir(r1) rmdir(&(0x7f0000002980)='./bus\x00') 499.697238ms ago: executing program 4 (id=2705): mkdirat(0xffffffffffffff9c, &(0x7f00000193c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000019400)='./proc\x00', &(0x7f0000019440)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000019480)='./proc/thread-self/fail-nth\x00', 0x2, 0x10) write(r0, &(0x7f00000194c0)='27', 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 294.846583ms ago: executing program 1 (id=2706): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file1\x00', 0x2000c16, &(0x7f00000007c0)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000800)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file1\x00', 0x101042, 0x65) r1 = openat(0xffffffffffffff9c, &(0x7f0000000ac0)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000b00)='a', 0x200000c1, 0x9000) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000b40)) 294.612073ms ago: executing program 3 (id=2707): syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x2004000, &(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYRESOCT, @ANYRES32, @ANYRES64, @ANYRES32, @ANYRES64], 0x1, 0x1259, &(0x7f0000001280)="$eJzs3M9rI+UfB/BPf2/bb398dV1dQfbBvegltD14UZAiXRArirsVdgVh1qYaOiYlCYWIWD159eIf4FU8ehPEm17qwb/BWy8eFdSRJu1u0kbXLmZTltfrkifzPO/hMzNhYB7mycELn72/vdUobWXNGB15MUZ3Isb/SJFiNI59HM8+//0PT12/eWvkaMu11RvLz6WU5q98+9aHXz39XXP2za/nv5mK/cW3D35Z+Xn/0v7lgz9vvFdppEojVWvNlKXbtVozu52X02alsV1K6fW8nDXKqVJtlOs9/Vt5bWenlbLq5tzMTr3caKSs2krb5VZq1lKz3krZu1mlmkqlUpqbCc5ovPvLxpe/FkURURQTMRlFURTTMROj8b+Yi/lYiMX4fzwSj8bFeCwuxePxRFxujxpe+QAAAAAAAAAAAAAAAAAAAPAw6rf+f/bU+v/PI/qt/78y5OIBAAAAAAAAAAAAAAAAAADgIXH95q1XVtfX195I6UJE/unuxu5G57PTv7oVlcijHEuxEL9He/V/R6c9GetrS6ltMT7J947ye7vTJ/LL7b8TOJW/9vL62nInn3ryG1Mx051fiYW42D+/ciJ/tZ2/EM9c7cqXYiF+eidqkcdmHGbv5j9aTuml19bv5H/c79S+eepsFVMP8toAAADAf6WU7uh9ft8Y6/SX/q6/k7/X/MDh8/VSSodDTzzfj8eT40M9dCKi0fpgO8vzcn3ojeOKOlv2IuJ+dzhyHg5nO8tHI+IclPEPjYl7jpkdZBmL9eP5tJ6uL2YjugaPxNn2PNbzQ+o75tXJiIGf3unzcpXvr9F1kyj63TnGBnpf4sE4uuhnmNf+bZDlAAAAAAAAAAAA8C8N7C3Cibsv8A77GAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiLHTgWAAAAABDmb51GxwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8FUAAAD//3o0wGs=") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./trace\x00', 0x42, 0x1ac) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x40080}, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 288.221623ms ago: executing program 5 (id=2709): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0x520, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x4000000000000000, 0x2668}, 0x10eccc, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f00000001c0)=0x2, 0x4) bind$inet6(r0, &(0x7f0000000200)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0xd2, &(0x7f0000000240)={@link_local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x9c, 0x11, 0x0, @private1, @mcast2, {[], {0x0, 0xe22, 0x9c, 0x0, @wg=@initiation={0x1, 0x2, "1084a3696b9868c32d603c8030cce236c800024c3b1a4bf57b5397b6d9b5ea06", "0a43b0f6dd508916bcf5234da5967ee27f0d59ff12074ad742c64939a15a21458cd9058f80362f2074f596e36e45fa67", "2123d548a393a78cab85fd7380ed16deb9df58d67f425ef2a70ee437", {"931e798ab730196da16ba200000000c5", "4494e22135823d6603cff9637c6487be"}}}}}}}}, 0x0) 108.439237ms ago: executing program 5 (id=2711): perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/ip_vs_conn\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000700)=""/4096, 0x1000, 0xf000) 18.04297ms ago: executing program 3 (id=2712): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYBLOB="5490f41e89db5c6987bb89944e3ce8a9d74aa557beeb12bf7bf4a19bec956b719f048f1e043475577b7adb3114dbb00a614a03808dfe14f5f5c2dd1b71c4d5a6a09435057b932b0b", @ANYRES32, @ANYRESDEC=0x0, @ANYRESOCT=0x0], 0x3, 0x251, &(0x7f0000000900)="$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") perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x6, 0x7}, 0x0, 0x0, 0x4, 0x6, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000003380)=[{{&(0x7f0000003400)={0x2, 0x4e20, @private=0xa018100}, 0x10, &(0x7f0000003440)=[{&(0x7f0000003480)="9c", 0x1}], 0x1}}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f00000035c0)=0x8) 0s ago: executing program 1 (id=2713): sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x440c0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc013fd04, &(0x7f0000000200)="040000000000000000380100fc370100000000c42db0225c289d1ff7a07a84a87916bdc91100ed175b") kernel console output (not intermixed with test programs): 87.343036][ T6344] macsec0: entered promiscuous mode [ 87.354157][ T6344] veth1_macvtap: left promiscuous mode [ 87.382482][ T6344] macsec0 (unregistering): left promiscuous mode [ 87.512034][ T6363] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1082'. [ 87.547757][ T6369] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1085'. [ 87.548103][ T6369] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1085'. [ 87.578185][ T6373] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1084'. [ 87.592663][ T6373] vlan2: entered allmulticast mode [ 87.592989][ T6373] bridge0: port 3(vlan2) entered blocking state [ 87.593083][ T6373] bridge0: port 3(vlan2) entered disabled state [ 87.598359][ T6373] vlan2: entered promiscuous mode [ 87.634976][ T6379] macsec0: entered promiscuous mode [ 87.637471][ T6379] veth1_macvtap: left promiscuous mode [ 87.642489][ T6379] macsec0 (unregistering): left promiscuous mode [ 87.850405][ T6410] vlan2: entered allmulticast mode [ 87.852141][ T6410] bridge0: port 3(vlan2) entered blocking state [ 87.852180][ T6410] bridge0: port 3(vlan2) entered disabled state [ 87.852823][ T6410] vlan2: entered promiscuous mode [ 87.918237][ T6416] loop3: detected capacity change from 0 to 1024 [ 87.934479][ T6416] EXT4-fs: Ignoring removed bh option [ 87.952692][ T6418] loop5: detected capacity change from 0 to 512 [ 87.966540][ T6416] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 87.966692][ T6416] ext4 filesystem being mounted at /224/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.970175][ T6418] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.970325][ T6418] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.985265][ T6416] EXT4-fs error (device loop3): ext4_map_blocks:832: inode #15: block 3: comm syz.3.1109: lblock 3 mapped to illegal pblock 3 (length 3) [ 87.985811][ T6416] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 87.985895][ T6416] EXT4-fs (loop3): This should not happen!! Data will be lost [ 87.985895][ T6416] [ 87.990686][ T6416] EXT4-fs error (device loop3): ext4_map_blocks:832: inode #15: comm syz.3.1109: lblock 0 mapped to illegal pblock 0 (length 1) [ 87.991259][ T6416] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 87.991350][ T6416] EXT4-fs (loop3): This should not happen!! Data will be lost [ 87.991350][ T6416] [ 88.040572][ T364] EXT4-fs error (device loop3): ext4_map_blocks:832: inode #15: block 8: comm kworker/u8:6: lblock 8 mapped to illegal pblock 8 (length 8) [ 88.041178][ T364] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 88.041279][ T364] EXT4-fs (loop3): This should not happen!! Data will be lost [ 88.041279][ T364] [ 88.047044][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 88.166790][ T5979] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.167176][ T9] kernel read not supported for file /kmsg (pid: 9 comm: kworker/0:0) [ 88.397024][ T6450] cgroup: Invalid name [ 88.434546][ T6460] loop3: detected capacity change from 0 to 512 [ 88.447611][ T6460] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.447829][ T6460] ext4 filesystem being mounted at /230/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.459080][ T29] kauditd_printk_skb: 60 callbacks suppressed [ 88.459197][ T29] audit: type=1400 audit(1792496313.674:663): avc: denied { write } for pid=6459 comm="syz.3.1125" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 88.540332][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.549717][ T29] audit: type=1400 audit(1792496313.784:664): avc: denied { create } for pid=6466 comm="syz.4.1130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 88.551644][ T29] audit: type=1400 audit(1792496313.784:665): avc: denied { bind } for pid=6466 comm="syz.4.1130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 88.551820][ T29] audit: type=1400 audit(1792496313.784:666): avc: denied { connect } for pid=6466 comm="syz.4.1130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 88.557465][ T29] audit: type=1400 audit(1792496313.784:667): avc: denied { write } for pid=6466 comm="syz.4.1130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 88.804998][ T6483] vxcan2: entered allmulticast mode [ 88.897054][ T6488] cgroup: Invalid name [ 88.898456][ T6493] loop0: detected capacity change from 0 to 512 [ 88.933451][ T6493] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.933530][ T6493] ext4 filesystem being mounted at /249/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.941182][ T29] audit: type=1400 audit(1792496314.164:668): avc: denied { write } for pid=6492 comm="syz.0.1140" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 89.034020][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.044578][ T6509] ip_tables: iptables: counters copy to user failed while replacing table [ 89.094943][ T12] IPVS: starting estimator thread 0... [ 89.115218][ T6521] loop1: detected capacity change from 0 to 512 [ 89.127616][ T6521] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 89.127633][ T6521] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 89.127645][ T6521] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 89.128894][ T6521] EXT4-fs (loop1): 1 truncate cleaned up [ 89.129331][ T6521] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.130731][ T29] audit: type=1400 audit(1792496314.354:669): avc: denied { write } for pid=6520 comm="syz.1.1151" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 89.208241][ T6517] IPVS: using max 2208 ests per chain, 110400 per kthread [ 89.218155][ T29] audit: type=1400 audit(1792496314.454:670): avc: denied { setopt } for pid=6523 comm="syz.4.1152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 89.242395][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.272405][ T29] audit: type=1400 audit(1792496314.494:671): avc: denied { connect } for pid=6526 comm="syz.0.1165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 89.288687][ T29] audit: type=1400 audit(1792496314.504:672): avc: denied { write } for pid=6526 comm="syz.0.1165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 89.335113][ T6530] cgroup: Invalid name [ 89.400143][ T6543] loop4: detected capacity change from 0 to 512 [ 89.425609][ T6543] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.425770][ T6543] ext4 filesystem being mounted at /208/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.530375][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.855999][ T6562] cgroup: Invalid name [ 89.933482][ T6572] netlink: 'syz.5.1176': attribute type 10 has an invalid length. [ 89.952615][ T6572] bond0: (slave netdevsim2): Releasing backup interface [ 89.961714][ T6572] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.976724][ T6572] team0: Port device netdevsim2 added [ 89.989592][ T6572] netlink: 'syz.5.1176': attribute type 10 has an invalid length. [ 90.002513][ T6572] team0: Port device netdevsim2 removed [ 90.003588][ T6572] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.019378][ T6572] bond0: (slave netdevsim2): Enslaving as an active interface with an up link [ 90.074535][ T6580] __nla_validate_parse: 2 callbacks suppressed [ 90.074558][ T6580] netlink: 27 bytes leftover after parsing attributes in process `syz.0.1179'. [ 90.202207][ T6593] cgroup: Invalid name [ 90.506488][ T6624] Unsupported ieee802154 address type: 0 [ 90.514840][ T3662] kernel read not supported for file /kmsg (pid: 3662 comm: kworker/1:5) [ 90.521216][ T6626] cgroup: Invalid name [ 90.714164][ T6654] loop5: detected capacity change from 0 to 512 [ 90.722759][ T6654] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 90.722883][ T6654] EXT4-fs error (device loop5): ext4_iget_extra_inode:5210: inode #15: comm syz.5.1214: corrupted in-inode xattr: e_value size too large [ 90.722922][ T6654] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 90.723166][ T6654] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.1214: couldn't read orphan inode 15 (err -117) [ 90.723250][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 90.723270][ C0] EXT4-fs (loop5): initial error at time 1792496315: ext4_iget_extra_inode:5210: inode 15 [ 90.723311][ C0] EXT4-fs (loop5): last error at time 1792496315: ext4_iget_extra_inode:5210: inode 15 [ 90.723386][ T6654] loop5: lost filesystem error report for type 5 error -117 [ 90.778712][ T6654] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.856255][ T6661] tun0: tun_chr_ioctl cmd 1074025675 [ 90.856329][ T6661] tun0: persist enabled [ 90.856403][ T6661] tun0: tun_chr_ioctl cmd 1074025675 [ 90.856482][ T6661] tun0: persist enabled [ 90.887848][ T5979] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.953952][ T6668] loop5: detected capacity change from 0 to 1024 [ 90.971582][ T6668] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 90.998698][ T6668] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.039930][ T6670] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.1221'. [ 91.042179][ T5979] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.172735][ T6686] loop3: detected capacity change from 0 to 512 [ 91.181356][ T6686] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 91.181375][ T6686] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 91.199395][ T6686] EXT4-fs (loop3): 1 truncate cleaned up [ 91.200407][ T6686] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.234847][ T6687] rxe_eth0 speed is unknown, defaulting to 1000 [ 91.276642][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.300631][ T6690] rxe_eth0 speed is unknown, defaulting to 1000 [ 91.448591][ T6704] netlink: 168864 bytes leftover after parsing attributes in process `syz.5.1234'. [ 91.561007][ T6713] loop0: detected capacity change from 0 to 164 [ 91.577027][ T6713] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 91.581579][ T6716] loop5: detected capacity change from 0 to 256 [ 91.593813][ T6716] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 91.724205][ T6727] SELinux: Context system_u:object_r:lost_found_t:s0 is not valid (left unmapped). [ 91.724628][ T6725] vxcan2: entered allmulticast mode [ 91.882344][ T6745] netlink: 27 bytes leftover after parsing attributes in process `syz.4.1253'. [ 91.942658][ T4052] IPVS: starting estimator thread 0... [ 92.023670][ T6758] IPVS: using max 2256 ests per chain, 112800 per kthread [ 92.064991][ T6767] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 92.229308][ T6777] vxcan2: entered allmulticast mode [ 93.300274][ T6817] Unsupported ieee802154 address type: 0 [ 93.384636][ T6827] loop0: detected capacity change from 0 to 512 [ 93.407097][ T6827] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 93.417197][ T6827] EXT4-fs error (device loop0): ext4_iget_extra_inode:5210: inode #15: comm syz.0.1287: corrupted in-inode xattr: e_value size too large [ 93.417239][ T6827] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 93.417463][ T6827] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.1287: couldn't read orphan inode 15 (err -117) [ 93.417503][ T6827] loop0: lost filesystem error report for type 5 error -117 [ 93.418221][ T6827] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.485790][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 93.485807][ T29] audit: type=1400 audit(1792496318.714:703): avc: denied { write } for pid=6825 comm="syz.0.1287" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 93.606485][ T6843] loop3: detected capacity change from 0 to 164 [ 93.621555][ T6843] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 93.642760][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.753075][ T6854] Unsupported ieee802154 address type: 0 [ 93.776453][ T6857] tun0: tun_chr_ioctl cmd 1074025675 [ 93.776478][ T6857] tun0: persist enabled [ 93.776676][ T6857] tun0: tun_chr_ioctl cmd 1074025675 [ 93.776692][ T6857] tun0: persist enabled [ 94.066219][ T6887] Unsupported ieee802154 address type: 0 [ 94.217274][ T6900] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1322'. [ 94.232379][ T6900] gretap0: entered promiscuous mode [ 94.252388][ T6900] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1322'. [ 94.252465][ T6900] 0ªî{X¹¦: renamed from gretap0 [ 94.274377][ T6900] 0ªî{X¹¦: left promiscuous mode [ 94.274396][ T6900] 0ªî{X¹¦: entered allmulticast mode [ 94.276028][ T6900] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 94.312177][ T6903] loop5: detected capacity change from 0 to 2048 [ 94.331402][ T6903] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.332556][ T29] audit: type=1400 audit(1792496319.554:704): avc: denied { write } for pid=6901 comm="syz.5.1323" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 94.343655][ T6903] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 94.343851][ T6903] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 94.343925][ T6903] EXT4-fs (loop5): This should not happen!! Data will be lost [ 94.343925][ T6903] [ 94.344052][ T6903] EXT4-fs (loop5): Total free blocks count 0 [ 94.344093][ T6903] EXT4-fs (loop5): Free/Dirty block details [ 94.344137][ T6903] EXT4-fs (loop5): free_blocks=4096 [ 94.344182][ T6903] EXT4-fs (loop5): dirty_blocks=64 [ 94.344224][ T6903] EXT4-fs (loop5): Block reservation details [ 94.344263][ T6903] EXT4-fs (loop5): i_reserved_data_blocks=4 [ 94.457514][ T12] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 94.697565][ T6923] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1332'. [ 94.764164][ T6935] loop4: detected capacity change from 0 to 164 [ 94.929933][ T6949] pimreg: entered allmulticast mode [ 94.932891][ T6948] pimreg: left allmulticast mode [ 94.983763][ T6953] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1345'. [ 95.305538][ T29] audit: type=1400 audit(1792496320.534:705): avc: denied { setopt } for pid=6973 comm="syz.0.1355" lport=55644 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 95.552594][ T364] IPVS: starting estimator thread 0... [ 95.634206][ T6992] IPVS: using max 1776 ests per chain, 88800 per kthread [ 95.969169][ T29] audit: type=1400 audit(1792496321.194:706): avc: denied { write } for pid=7014 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.018998][ T29] audit: type=1400 audit(1792496321.244:707): avc: denied { write } for pid=7034 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.281875][ T29] audit: type=1400 audit(1792496321.504:708): avc: denied { read } for pid=7060 comm="syz.3.1385" name="file0" dev="tmpfs" ino=1533 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 96.282037][ T29] audit: type=1400 audit(1792496321.504:709): avc: denied { open } for pid=7060 comm="syz.3.1385" path="/289/file0" dev="tmpfs" ino=1533 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 96.422261][ T29] audit: type=1400 audit(1792496321.644:710): avc: denied { write } for pid=7059 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.467894][ T29] audit: type=1400 audit(1792496321.694:711): avc: denied { write } for pid=7079 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.814456][ T29] audit: type=1400 audit(1792496322.044:712): avc: denied { ioctl } for pid=7104 comm="syz.3.1397" path="socket:[15779]" dev="sockfs" ino=15779 ioctlcmd=0x48c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 96.878255][ T7109] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1399'. [ 96.937338][ T7114] rxe_eth0 speed is unknown, defaulting to 1000 [ 97.028488][ T7116] rxe_eth0 speed is unknown, defaulting to 1000 [ 97.205466][ T7136] loop3: detected capacity change from 0 to 4096 [ 97.216771][ T7136] EXT4-fs: Invalid commit interval -1, must be smaller than 21474836 [ 97.298822][ T7146] loop1: detected capacity change from 0 to 164 [ 97.477870][ T7156] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1414'. [ 97.483917][ T7156] gretap0: entered promiscuous mode [ 97.497769][ T7156] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1414'. [ 97.497842][ T7156] 0ªî{X¹¦: renamed from gretap0 [ 97.516574][ T7156] 0ªî{X¹¦: left promiscuous mode [ 97.516620][ T7156] 0ªî{X¹¦: entered allmulticast mode [ 97.518564][ T7156] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 97.556389][ T7158] ieee802154 phy0 wpan0: encryption failed: -22 [ 97.995568][ T7131] kexec: Could not allocate control_code_buffer [ 98.015080][ T7177] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1423'. [ 98.062529][ T7181] unsupported nlmsg_type 40 [ 98.229214][ T7202] rxe_eth0 speed is unknown, defaulting to 1000 [ 98.436434][ T7205] rxe_eth0 speed is unknown, defaulting to 1000 [ 98.898873][ T7217] pimreg: entered allmulticast mode [ 98.916003][ T7216] pimreg: left allmulticast mode [ 99.461230][ T7234] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1439'. [ 100.090724][ T7289] loop0: detected capacity change from 0 to 2048 [ 100.136367][ T7289] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.142700][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 100.142717][ T29] audit: type=1400 audit(1792496325.364:720): avc: denied { write } for pid=7288 comm="syz.0.1462" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 100.184443][ T7289] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 100.185109][ T7289] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 100.185245][ T7289] EXT4-fs (loop0): This should not happen!! Data will be lost [ 100.185245][ T7289] [ 100.185286][ T7289] EXT4-fs (loop0): Total free blocks count 0 [ 100.185328][ T7289] EXT4-fs (loop0): Free/Dirty block details [ 100.185362][ T7289] EXT4-fs (loop0): free_blocks=4096 [ 100.185470][ T7289] EXT4-fs (loop0): dirty_blocks=64 [ 100.185540][ T7289] EXT4-fs (loop0): Block reservation details [ 100.185573][ T7289] EXT4-fs (loop0): i_reserved_data_blocks=4 [ 100.266092][ T12] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 100.358191][ T7307] rxe_eth0 speed is unknown, defaulting to 1000 [ 100.414350][ T7308] rxe_eth0 speed is unknown, defaulting to 1000 [ 100.545071][ T7317] ieee802154 phy0 wpan0: encryption failed: -22 [ 100.903914][ T7353] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 100.923921][ T7354] netlink: 'syz.1.1491': attribute type 15 has an invalid length. [ 100.945237][ T7354] netlink: 'syz.1.1491': attribute type 15 has an invalid length. [ 100.977484][ T7359] loop3: detected capacity change from 0 to 128 [ 100.995577][ T7359] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 100.999509][ T7359] ext4 filesystem being mounted at /315/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.001768][ T29] audit: type=1400 audit(1792496326.224:721): avc: denied { write } for pid=7358 comm="syz.3.1492" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 101.126967][ T29] audit: type=1326 audit(1792496326.354:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7371 comm="syz.0.1498" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f732faaf559 code=0x7ffc0000 [ 101.128085][ T29] audit: type=1326 audit(1792496326.354:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7371 comm="syz.0.1498" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f732faaf559 code=0x7ffc0000 [ 101.128117][ T29] audit: type=1326 audit(1792496326.354:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7371 comm="syz.0.1498" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f732faaf559 code=0x7ffc0000 [ 101.129088][ T29] audit: type=1326 audit(1792496326.354:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7371 comm="syz.0.1498" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f732faaf559 code=0x7ffc0000 [ 101.129409][ T29] audit: type=1326 audit(1792496326.354:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7371 comm="syz.0.1498" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f732faaf559 code=0x7ffc0000 [ 101.129999][ T29] audit: type=1326 audit(1792496326.354:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7371 comm="syz.0.1498" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f732faaf559 code=0x7ffc0000 [ 101.130033][ T29] audit: type=1326 audit(1792496326.354:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7371 comm="syz.0.1498" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f732faaf559 code=0x7ffc0000 [ 101.131082][ T29] audit: type=1326 audit(1792496326.354:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7371 comm="syz.0.1498" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f732faaf559 code=0x7ffc0000 [ 101.373021][ T3306] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 101.545188][ T7388] loop0: detected capacity change from 0 to 4096 [ 101.545625][ T7388] EXT4-fs: Invalid commit interval -1, must be smaller than 21474836 [ 101.587298][ T7393] loop5: detected capacity change from 0 to 512 [ 101.587770][ T7393] EXT4-fs: Ignoring removed nobh option [ 101.617103][ T7393] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.617213][ T7393] ext4 filesystem being mounted at /100/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.663510][ T5979] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.914670][ T7417] syz_tun: entered allmulticast mode [ 101.938646][ T7420] loop0: detected capacity change from 0 to 512 [ 101.950417][ T7420] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 101.950441][ T7420] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e118, mo2=0002] [ 101.950572][ T7420] EXT4-fs (loop0): orphan cleanup on readonly fs [ 101.952262][ T7420] EXT4-fs error (device loop0): ext4_validate_block_bitmap:436: comm syz.0.1516: bg 0: block 15: invalid block bitmap [ 101.952289][ T7420] loop0: lost filesystem error report for type 5 error -117 [ 101.953193][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 101.953215][ C1] EXT4-fs (loop0): initial error at time 1792496327: ext4_validate_block_bitmap:436 [ 101.953255][ C1] EXT4-fs (loop0): last error at time 1792496327: ext4_validate_block_bitmap:436 [ 101.953446][ T7420] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 101.953554][ T7420] loop0: lost filesystem error report for type 5 error -117 [ 101.972945][ T7420] EXT4-fs (loop0): 1 truncate cleaned up [ 101.974127][ T7420] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 101.979393][ T7420] EXT4-fs (loop0): shut down requested (1) [ 101.979729][ T7420] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=16 [ 101.979759][ T7420] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=16 [ 101.980012][ T7420] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=16 [ 102.009927][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.858692][ T7468] loop4: detected capacity change from 0 to 2048 [ 102.882242][ T7468] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.901587][ T7468] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 102.901669][ T7468] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 102.901778][ T7468] EXT4-fs (loop4): This should not happen!! Data will be lost [ 102.901778][ T7468] [ 102.901795][ T7468] EXT4-fs (loop4): Total free blocks count 0 [ 102.901854][ T7468] EXT4-fs (loop4): Free/Dirty block details [ 102.901871][ T7468] EXT4-fs (loop4): free_blocks=4096 [ 102.901888][ T7468] EXT4-fs (loop4): dirty_blocks=64 [ 102.901912][ T7468] EXT4-fs (loop4): Block reservation details [ 102.901927][ T7468] EXT4-fs (loop4): i_reserved_data_blocks=4 [ 103.001741][ T79] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 103.147894][ T7484] loop5: detected capacity change from 0 to 512 [ 103.152434][ T7484] EXT4-fs: Ignoring removed nobh option [ 103.167149][ T7484] EXT4-fs error (device loop5) in ext4_process_orphan:346: Out of memory [ 103.167226][ T7484] loop5: lost filesystem error report for type 5 error -12 [ 103.167581][ T7484] EXT4-fs (loop5): 2 truncates cleaned up [ 103.174436][ T7484] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.240322][ T7484] EXT4-fs error (device loop5): ext4_validate_block_bitmap:436: comm syz.5.1544: bg 0: block 5: invalid block bitmap [ 103.242070][ T7484] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 22 with max blocks 484 with error 28 [ 103.242103][ T7484] EXT4-fs (loop5): This should not happen!! Data will be lost [ 103.242103][ T7484] [ 103.242118][ T7484] EXT4-fs (loop5): Total free blocks count 0 [ 103.242170][ T7484] EXT4-fs (loop5): Free/Dirty block details [ 103.242186][ T7484] EXT4-fs (loop5): free_blocks=0 [ 103.242201][ T7484] EXT4-fs (loop5): dirty_blocks=485 [ 103.242218][ T7484] EXT4-fs (loop5): Block reservation details [ 103.242231][ T7484] EXT4-fs (loop5): i_reserved_data_blocks=485 [ 103.308576][ T7484] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 103.441764][ T7448] kexec: Could not allocate control_code_buffer [ 103.478178][ T7493] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1549'. [ 103.578598][ T7503] loop1: detected capacity change from 0 to 2048 [ 103.607095][ T7503] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.651229][ T7503] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 103.651321][ T7503] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 103.651360][ T7503] EXT4-fs (loop1): This should not happen!! Data will be lost [ 103.651360][ T7503] [ 103.651378][ T7503] EXT4-fs (loop1): Total free blocks count 0 [ 103.651395][ T7503] EXT4-fs (loop1): Free/Dirty block details [ 103.651457][ T7503] EXT4-fs (loop1): free_blocks=4096 [ 103.651474][ T7503] EXT4-fs (loop1): dirty_blocks=64 [ 103.651489][ T7503] EXT4-fs (loop1): Block reservation details [ 103.651500][ T7503] EXT4-fs (loop1): i_reserved_data_blocks=4 [ 103.728756][ T70] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 103.752885][ T7515] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7515 comm=syz.5.1557 [ 103.995855][ T7532] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 104.731495][ T7561] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 104.774298][ T7564] batadv_slave_1: entered promiscuous mode [ 104.774979][ T7563] batadv_slave_1: left promiscuous mode [ 104.820408][ T7525] kexec: Could not allocate control_code_buffer [ 104.910496][ T7570] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 104.931934][ T7574] rxe_eth0 speed is unknown, defaulting to 1000 [ 104.987308][ T7578] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1583'. [ 105.118433][ T7591] loop0: detected capacity change from 0 to 512 [ 105.131415][ T7591] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 105.155294][ T7591] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 105.155462][ T7591] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 105.155498][ T7591] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 105.368297][ T7597] loop4: detected capacity change from 0 to 256 [ 105.463804][ T7609] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 105.566896][ T7616] loop4: detected capacity change from 0 to 1024 [ 105.576452][ T7616] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 105.582289][ T7616] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e054c01c, mo2=0002] [ 105.582413][ T7616] System zones: 0-1, 3-36 [ 105.608892][ T7616] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.678107][ T7623] bond0: (slave ip6tnl1): refused to change device type [ 105.699905][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.842439][ T7632] loop4: detected capacity change from 0 to 512 [ 105.847150][ T7632] EXT4-fs: Ignoring removed nobh option [ 105.852689][ T7632] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 105.902132][ T7632] device-mapper: ioctl: device name cannot contain '/' [ 105.980866][ T29] kauditd_printk_skb: 85 callbacks suppressed [ 105.980887][ T29] audit: type=1400 audit(1792496331.204:815): avc: denied { relabelfrom } for pid=7635 comm="syz.3.1611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 105.980935][ T29] audit: type=1400 audit(1792496331.204:816): avc: denied { relabelto } for pid=7635 comm="syz.3.1611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 106.031617][ T3383] logitech-hidpp-device 0003:046D:C082.0004: hidraw0: USB HID v0.04 Device [syz0] on syz0 [ 106.163733][ T7594] kexec: Could not allocate control_code_buffer [ 106.212483][ T7652] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1618'. [ 106.296053][ T7591] FAT-fs (loop0): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 106.296243][ T7591] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 106.349977][ T29] audit: type=1400 audit(1792496331.574:817): avc: denied { create } for pid=7661 comm="syz.0.1623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 106.350403][ T29] audit: type=1400 audit(1792496331.574:818): avc: denied { setopt } for pid=7661 comm="syz.0.1623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 106.511473][ T7673] loop1: detected capacity change from 0 to 1024 [ 106.512239][ T7673] EXT4-fs: Ignoring removed bh option [ 106.537594][ T7673] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 106.537713][ T7673] ext4 filesystem being mounted at /359/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.540132][ T29] audit: type=1400 audit(1792496331.764:819): avc: denied { write } for pid=7672 comm="syz.1.1627" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 106.542851][ T7673] EXT4-fs error (device loop1): ext4_map_blocks:832: inode #15: block 3: comm syz.1.1627: lblock 3 mapped to illegal pblock 3 (length 3) [ 106.544536][ T7673] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 106.544615][ T7673] EXT4-fs (loop1): This should not happen!! Data will be lost [ 106.544615][ T7673] [ 106.547834][ T7673] EXT4-fs error (device loop1): ext4_map_blocks:832: inode #15: comm syz.1.1627: lblock 0 mapped to illegal pblock 0 (length 3) [ 106.548683][ T7673] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 117 [ 106.548766][ T7673] EXT4-fs (loop1): This should not happen!! Data will be lost [ 106.548766][ T7673] [ 106.622637][ T70] EXT4-fs error (device loop1): ext4_map_blocks:832: inode #15: block 7: comm kworker/u8:4: lblock 7 mapped to illegal pblock 7 (length 9) [ 106.623989][ T70] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 7 with max blocks 9 with error 117 [ 106.624060][ T70] EXT4-fs (loop1): This should not happen!! Data will be lost [ 106.624060][ T70] [ 106.658197][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 106.939639][ T29] audit: type=1400 audit(1792496332.164:820): avc: denied { unmount } for pid=5979 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 107.693871][ T7679] kexec: Could not allocate control_code_buffer [ 107.731491][ T7741] netlink: 'syz.5.1657': attribute type 15 has an invalid length. [ 107.733872][ T7741] netlink: 'syz.5.1657': attribute type 15 has an invalid length. [ 107.908808][ T29] audit: type=1326 audit(1792496333.134:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7746 comm="syz.1.1660" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85ac7af559 code=0x7ffc0000 [ 107.910729][ T29] audit: type=1326 audit(1792496333.134:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7746 comm="syz.1.1660" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85ac7af559 code=0x7ffc0000 [ 107.910888][ T29] audit: type=1326 audit(1792496333.134:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7746 comm="syz.1.1660" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f85ac7af559 code=0x7ffc0000 [ 107.917053][ T29] audit: type=1326 audit(1792496333.144:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7746 comm="syz.1.1660" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85ac7af559 code=0x7ffc0000 [ 108.023235][ T7750] loop5: detected capacity change from 0 to 512 [ 108.047502][ T7750] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 108.047527][ T7750] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e118, mo2=0002] [ 108.047714][ T7750] EXT4-fs (loop5): orphan cleanup on readonly fs [ 108.052291][ T7750] EXT4-fs error (device loop5): ext4_validate_block_bitmap:436: comm syz.5.1661: bg 0: block 15: invalid block bitmap [ 108.052325][ T7750] loop5: lost filesystem error report for type 5 error -117 [ 108.053173][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 108.053197][ C0] EXT4-fs (loop5): initial error at time 1792496333: ext4_validate_block_bitmap:436 [ 108.053228][ C0] EXT4-fs (loop5): last error at time 1792496333: ext4_validate_block_bitmap:436 [ 108.062467][ T7750] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 108.062496][ T7750] loop5: lost filesystem error report for type 5 error -117 [ 108.073325][ T7750] EXT4-fs (loop5): 1 truncate cleaned up [ 108.074328][ T7750] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 108.136491][ T7750] EXT4-fs (loop5): shut down requested (1) [ 108.137048][ T7750] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=16 [ 108.137152][ T7750] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=16 [ 108.141568][ T7750] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=16 [ 108.210500][ T5979] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.278552][ T7762] ip_tables: iptables: counters copy to user failed while replacing table [ 108.619813][ T7779] loop4: detected capacity change from 0 to 1764 [ 108.650520][ T7781] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 108.808149][ T7752] kexec: Could not allocate control_code_buffer [ 109.242729][ T7835] loop5: detected capacity change from 0 to 1024 [ 109.246788][ T7835] EXT4-fs: Ignoring removed bh option [ 109.264894][ T7835] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 109.264993][ T7835] ext4 filesystem being mounted at /150/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.289113][ T7835] EXT4-fs error (device loop5): ext4_map_blocks:832: inode #15: block 3: comm syz.5.1701: lblock 3 mapped to illegal pblock 3 (length 3) [ 109.293830][ T7835] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 109.293863][ T7835] EXT4-fs (loop5): This should not happen!! Data will be lost [ 109.293863][ T7835] [ 109.314211][ T7835] EXT4-fs error (device loop5): ext4_map_blocks:832: inode #15: comm syz.5.1701: lblock 0 mapped to illegal pblock 0 (length 3) [ 109.315988][ T7835] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 117 [ 109.316064][ T7835] EXT4-fs (loop5): This should not happen!! Data will be lost [ 109.316064][ T7835] [ 109.368149][ T70] EXT4-fs error (device loop5): ext4_map_blocks:832: inode #15: block 7: comm kworker/u8:4: lblock 7 mapped to illegal pblock 7 (length 9) [ 109.368386][ T70] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 7 with max blocks 9 with error 117 [ 109.368416][ T70] EXT4-fs (loop5): This should not happen!! Data will be lost [ 109.368416][ T70] [ 109.369790][ T5979] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 109.769521][ T7864] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1713'. [ 109.965490][ T7816] kexec: Could not allocate control_code_buffer [ 110.208679][ T7911] loop5: detected capacity change from 0 to 1024 [ 110.235928][ T7911] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 110.240997][ T7911] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e054c01c, mo2=0002] [ 110.241040][ T7911] System zones: 0-1, 3-36 [ 110.242138][ T7911] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.320104][ T5979] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.399886][ T7922] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 110.709795][ T7948] bond0: (slave ip6tnl1): refused to change device type [ 110.932903][ T7969] ip_tables: iptables: counters copy to user failed while replacing table [ 110.969738][ T7973] bond0: (slave ip6tnl1): refused to change device type [ 111.461656][ T7998] loop3: detected capacity change from 0 to 1764 [ 111.519558][ T8001] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1774'. [ 111.519606][ T8001] netlink: 'syz.4.1774': attribute type 3 has an invalid length. [ 111.599593][ T8004] ip_tables: iptables: counters copy to user failed while replacing table [ 111.905653][ T8017] loop3: detected capacity change from 0 to 1024 [ 111.944733][ T8017] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 112.006420][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 112.162620][ T7985] kexec: Could not allocate control_code_buffer [ 112.240446][ T3383] logitech-hidpp-device 0003:046D:C082.0005: hidraw0: USB HID v0.04 Device [syz0] on syz0 [ 112.360136][ T8044] loop1: detected capacity change from 0 to 1764 [ 112.386989][ T8047] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8047 comm=syz.3.1792 [ 112.860094][ T8063] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 113.106824][ T8068] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 113.253368][ T8078] loop5: detected capacity change from 0 to 1764 [ 113.511462][ T8095] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 113.536181][ T8058] kexec: Could not allocate control_code_buffer [ 113.760804][ T8115] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 114.231297][ T8136] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 114.299312][ T8140] loop5: detected capacity change from 0 to 512 [ 114.312183][ T8140] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 114.342710][ T8140] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 114.342842][ T8140] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548) [ 114.342935][ T8140] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548) [ 114.558089][ T8105] kexec: Could not allocate control_code_buffer [ 114.721595][ T8140] FAT-fs (loop5): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 114.721753][ T8140] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 114.853650][ T8165] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 114.875023][ T8167] loop3: detected capacity change from 0 to 512 [ 114.875524][ T8167] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 114.907351][ T8167] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 114.907463][ T8167] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 114.907533][ T8167] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 115.169600][ T8167] FAT-fs (loop3): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 115.169822][ T8167] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 115.288432][ T8184] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 115.456251][ T8198] loop0: detected capacity change from 0 to 1024 [ 115.485123][ T8198] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 115.557545][ T29] kauditd_printk_skb: 47 callbacks suppressed [ 115.557564][ T29] audit: type=1400 audit(1792496340.786:872): avc: denied { read } for pid=8209 comm="syz.3.1867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 115.620007][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 115.661361][ T8212] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 115.678007][ T8214] loop4: detected capacity change from 0 to 1024 [ 115.678521][ T8214] EXT4-fs: inline encryption not supported [ 115.702005][ T8214] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 115.702087][ T8214] ext4 filesystem being mounted at /346/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.735592][ T29] audit: type=1400 audit(1792496340.966:873): avc: denied { write } for pid=8213 comm="syz.4.1869" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 115.742312][ T29] audit: type=1400 audit(1792496340.966:874): avc: denied { append } for pid=8213 comm="syz.4.1869" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 115.742456][ T8214] EXT4-fs error (device loop4): ext4_validate_block_bitmap:445: comm syz.4.1869: bg 0: block 112: padding at end of block bitmap is not set [ 115.747691][ T8214] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 1 with error 28 [ 115.747806][ T8214] EXT4-fs (loop4): This should not happen!! Data will be lost [ 115.747806][ T8214] [ 115.747862][ T8214] EXT4-fs (loop4): Total free blocks count 0 [ 115.747909][ T8214] EXT4-fs (loop4): Free/Dirty block details [ 115.747947][ T8214] EXT4-fs (loop4): free_blocks=0 [ 115.748041][ T8214] EXT4-fs (loop4): dirty_blocks=16 [ 115.748055][ T8214] EXT4-fs (loop4): Block reservation details [ 115.748067][ T8214] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 115.864094][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 116.028808][ T8235] loop5: detected capacity change from 0 to 2048 [ 116.058642][ T8235] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.058726][ T8235] ext4 filesystem being mounted at /182/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.082364][ T29] audit: type=1400 audit(1792496341.296:875): avc: denied { create } for pid=8245 comm="syz.0.1881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 116.082407][ T29] audit: type=1400 audit(1792496341.296:876): avc: denied { write } for pid=8245 comm="syz.0.1881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 116.163797][ T5979] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.166358][ T1046] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 116.167574][ T1046] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 116.335801][ T8275] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1893'. [ 116.336031][ T8275] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1893'. [ 116.380526][ T8278] ip_tables: iptables: counters copy to user failed while replacing table [ 116.409887][ T8280] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 116.410159][ T8280] netlink: 'syz.0.1895': attribute type 12 has an invalid length. [ 116.661821][ T8303] sctp: [Deprecated]: syz.5.1903 (pid 8303) Use of int in maxseg socket option. [ 116.661821][ T8303] Use struct sctp_assoc_value instead [ 116.667815][ T8304] sctp: Failed to create the SCTP UDP tunneling v4 sock [ 116.996626][ T8328] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1918'. [ 116.997420][ T8328] netlink: 59 bytes leftover after parsing attributes in process `syz.4.1918'. [ 117.043495][ T8332] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1920'. [ 117.219847][ T29] audit: type=1400 audit(1792496342.446:877): avc: denied { write } for pid=8341 comm="syz.4.1925" name="file0" dev="tmpfs" ino=1910 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 117.221484][ T29] audit: type=1400 audit(1792496342.446:878): avc: denied { ioctl } for pid=8341 comm="syz.4.1925" path="/362/file0" dev="tmpfs" ino=1910 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 117.574964][ T8373] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8373 comm=syz.0.1938 [ 117.638787][ T8379] scsi_dev_info_list_add_str: bad dev info string 'Ã' '' '' [ 117.715641][ T8383] smc: removing ib device rxe0 [ 117.741887][ T8381] lo speed is unknown, defaulting to 1000 [ 117.742719][ T8381] lo speed is unknown, defaulting to 1000 [ 117.743057][ T8381] lo speed is unknown, defaulting to 1000 [ 117.936254][ T8381] infiniband sz1: set active [ 117.936275][ T8381] infiniband sz1: added lo [ 117.982511][ T8381] RDS/IB: sz1: added [ 117.982543][ T8381] smc: adding ib device sz1 with port count 1 [ 117.982564][ T8381] smc: ib device sz1 port 1 has no pnetid [ 118.011631][ T28] lo speed is unknown, defaulting to 1000 [ 118.011718][ T8381] lo speed is unknown, defaulting to 1000 [ 118.014460][ T8237] Bluetooth: hci0: command 0x1003 tx timeout [ 118.014546][ T3722] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 118.037908][ T3383] lo speed is unknown, defaulting to 1000 [ 118.113188][ T29] audit: type=1400 audit(1792496343.336:879): avc: denied { write } for pid=8410 comm="syz.3.1948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 118.189360][ T29] audit: type=1400 audit(1792496343.416:880): avc: denied { write } for pid=8420 comm="syz.1.1950" name="event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 118.270338][ T8425] loop3: detected capacity change from 0 to 1024 [ 118.270900][ T8425] EXT4-fs: Ignoring removed bh option [ 118.297917][ T8425] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 118.297987][ T8425] ext4 filesystem being mounted at /406/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.302522][ T29] audit: type=1400 audit(1792496343.526:881): avc: denied { write } for pid=8424 comm="syz.3.1952" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 118.365978][ T8381] lo speed is unknown, defaulting to 1000 [ 118.449252][ T8381] lo speed is unknown, defaulting to 1000 [ 118.510593][ T8381] lo speed is unknown, defaulting to 1000 [ 118.587081][ T8381] lo speed is unknown, defaulting to 1000 [ 118.667144][ T8381] lo speed is unknown, defaulting to 1000 [ 119.316252][ T8432] loop0: detected capacity change from 0 to 1024 [ 119.316586][ T8432] EXT4-fs: Ignoring removed oldalloc option [ 119.316657][ T8432] EXT4-fs: Ignoring removed orlov option [ 119.344851][ T8432] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.071789][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 121.077475][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.159273][ T8438] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1956'. [ 121.276317][ T8448] loop5: detected capacity change from 0 to 512 [ 121.282837][ T8448] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 121.282928][ T8448] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 121.325100][ T8448] EXT4-fs (loop5): 1 truncate cleaned up [ 121.325653][ T8448] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.331320][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 121.331361][ T29] audit: type=1400 audit(1792496346.556:885): avc: denied { write } for pid=8447 comm="syz.5.1962" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 121.405240][ T8452] loop1: detected capacity change from 0 to 512 [ 121.558589][ T5979] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.611296][ T364] Bluetooth: hci0: Frame reassembly failed (-84) [ 121.613427][ T29] audit: type=1400 audit(1792496346.836:886): avc: denied { setopt } for pid=8477 comm="syz.4.1973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 121.732000][ T29] audit: type=1400 audit(1792496346.956:887): avc: denied { load_policy } for pid=8485 comm="syz.3.1975" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 121.732046][ T8486] SELinux: failed to load policy [ 122.034498][ T29] audit: type=1400 audit(1792496347.256:888): avc: denied { sys_module } for pid=8513 comm="syz.3.1989" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 122.359625][ T8541] bond0: entered promiscuous mode [ 122.359649][ T8541] bond_slave_0: entered promiscuous mode [ 122.359734][ T8541] bond_slave_1: entered promiscuous mode [ 122.359951][ T8541] netdevsim netdevsim0 netdevsim2: entered promiscuous mode [ 122.363212][ T8541] batadv0: entered promiscuous mode [ 122.368695][ T8541] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 122.860079][ T8562] loop1: detected capacity change from 0 to 512 [ 122.860778][ T8562] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 122.899764][ T8562] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 122.899923][ T8562] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 122.900001][ T8562] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 122.955882][ T8566] lo speed is unknown, defaulting to 1000 [ 122.992544][ T8567] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2008'. [ 123.253477][ T8562] FAT-fs (loop1): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 123.253665][ T8562] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 123.393973][ T8578] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 123.608731][ T8588] veth0: entered promiscuous mode [ 123.609301][ T8586] veth0: left promiscuous mode [ 123.613934][ T3722] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 123.715368][ T8595] netdevsim netdevsim1: Direct firmware load for .. failed with error -2 [ 123.959471][ T29] audit: type=1400 audit(1792496349.186:889): avc: denied { checkpoint_restore } for pid=8596 comm="syz.4.2022" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 124.479879][ T8607] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 124.551770][ T8611] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 124.622925][ T8623] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 124.631716][ T29] audit: type=1326 audit(1792496349.856:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8626 comm="syz.1.2037" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85ac7af559 code=0x7ffc0000 [ 124.632924][ T29] audit: type=1326 audit(1792496349.856:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8626 comm="syz.1.2037" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85ac7af559 code=0x7ffc0000 [ 124.633062][ T29] audit: type=1326 audit(1792496349.856:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8626 comm="syz.1.2037" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85ac7af559 code=0x7ffc0000 [ 124.634392][ T3358] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 124.717088][ T29] audit: type=1326 audit(1792496349.946:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8626 comm="syz.1.2037" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85ac7af559 code=0x7ffc0000 [ 124.717367][ T29] audit: type=1326 audit(1792496349.946:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8626 comm="syz.1.2037" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f85ac7af2c2 code=0x7ffc0000 [ 124.781075][ T8633] loop0: detected capacity change from 0 to 512 [ 124.792272][ T8633] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 124.792294][ T8633] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c800e018, mo2=0003] [ 124.792465][ T8633] EXT4-fs (loop0): orphan cleanup on readonly fs [ 124.792838][ T8633] EXT4-fs error (device loop0): ext4_validate_block_bitmap:436: comm syz.0.2039: bg 0: block 15: invalid block bitmap [ 124.792872][ T8633] loop0: lost filesystem error report for type 5 error -117 [ 124.793141][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 124.793162][ C1] EXT4-fs (loop0): initial error at time 1792496350: ext4_validate_block_bitmap:436 [ 124.793187][ C1] EXT4-fs (loop0): last error at time 1792496350: ext4_validate_block_bitmap:436 [ 124.802469][ T8636] FAULT_INJECTION: forcing a failure. [ 124.802469][ T8636] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 124.802557][ T8636] CPU: 0 UID: 0 PID: 8636 Comm: syz.5.2042 Not tainted syzkaller #0 PREEMPT(lazy) [ 124.802652][ T8636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 124.802696][ T8636] Call Trace: [ 124.802727][ T8636] [ 124.802750][ T8636] __dump_stack+0x1d/0x30 [ 124.802854][ T8636] dump_stack_lvl+0x95/0xd0 [ 124.802907][ T8636] dump_stack+0x15/0x1b [ 124.802928][ T8636] should_fail_ex+0x262/0x280 [ 124.803030][ T8636] should_fail_alloc_page+0xf2/0x100 [ 124.803145][ T8636] __alloc_frozen_pages_noprof+0x157/0x400 [ 124.803230][ T8636] alloc_pages_mpol+0xaf/0x1d0 [ 124.803330][ T8636] folio_alloc_mpol_noprof+0x39/0x80 [ 124.803480][ T8636] shmem_get_folio_gfp+0x3ff/0xd90 [ 124.803605][ T8636] ? filemap_map_pages+0xe96/0xf70 [ 124.803713][ T8636] shmem_fault+0xf6/0x250 [ 124.803861][ T8636] handle_mm_fault+0x2310/0x3bb0 [ 124.803976][ T8636] __get_user_pages+0x12e9/0x1eb0 [ 124.804137][ T8636] __mm_populate+0x242/0x390 [ 124.804228][ T8636] vm_mmap_pgoff+0x23b/0x2d0 [ 124.804348][ T8636] ksys_mmap_pgoff+0xc1/0x310 [ 124.804412][ T8636] ? __x64_sys_mmap+0x49/0x70 [ 124.804536][ T8636] x64_sys_call+0x23b3/0x2550 [ 124.804623][ T8636] do_syscall_64+0x112/0x360 [ 124.804765][ T8636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.804855][ T8636] RIP: 0033:0x7f9bbc1cf559 [ 124.804907][ T8636] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.804972][ T8636] RSP: 002b:00007f9bbac1f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 124.805056][ T8636] RAX: ffffffffffffffda RBX: 00007f9bbc455fa0 RCX: 00007f9bbc1cf559 [ 124.805106][ T8636] RDX: b635773f04ebbee2 RSI: 0000000000b36000 RDI: 0000200000000000 [ 124.805156][ T8636] RBP: 00007f9bbc266b20 R08: ffffffffffffffff R09: 0000000000000000 [ 124.805199][ T8636] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 124.805241][ T8636] R13: 00007f9bbc456038 R14: 00007f9bbc455fa0 R15: 00007ffe1fd4e398 [ 124.805325][ T8636] [ 124.809965][ T8633] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 124.809991][ T8633] loop0: lost filesystem error report for type 5 error -117 [ 124.817752][ T8633] EXT4-fs (loop0): 1 truncate cleaned up [ 124.818121][ T8633] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 125.096635][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.167032][ T8646] vcan0: tx drop: invalid sa for name 0x0102030405060708 [ 125.241171][ T8651] loop0: detected capacity change from 0 to 512 [ 125.453378][ T3358] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 126.720191][ T8714] loop1: detected capacity change from 0 to 256 [ 126.721786][ T8714] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 126.729207][ T8714] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 126.769756][ T8717] ip_tables: iptables: counters copy to user failed while replacing table [ 126.882405][ T8728] loop1: detected capacity change from 0 to 512 [ 126.907665][ T8728] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 126.907686][ T8728] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 126.912423][ T8728] EXT4-fs (loop1): 1 truncate cleaned up [ 126.912893][ T8728] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.961504][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 126.961525][ T29] audit: type=1400 audit(1792496352.186:922): avc: denied { write } for pid=8727 comm="syz.1.2079" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 127.099811][ T8722] loop0: detected capacity change from 0 to 8192 [ 127.194105][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.321087][ T8753] sctp: [Deprecated]: syz.3.2090 (pid 8753) Use of int in max_burst socket option deprecated. [ 127.321087][ T8753] Use struct sctp_assoc_value instead [ 127.417033][ T8760] loop5: detected capacity change from 0 to 2048 [ 127.437487][ T8760] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.459967][ T8766] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 127.482100][ T5979] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.530966][ T3358] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 127.532145][ T3358] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 127.574372][ T3358] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 127.623544][ T3408] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 127.635418][ T8776] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2098'. [ 127.635491][ T8776] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2098'. [ 127.684516][ T8778] loop4: detected capacity change from 0 to 512 [ 127.699872][ T8778] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 127.699892][ T8778] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 127.702251][ T8778] EXT4-fs (loop4): 1 truncate cleaned up [ 127.702703][ T8778] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.746091][ T29] audit: type=1400 audit(1792496352.976:923): avc: denied { write } for pid=8777 comm="syz.4.2100" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 127.911437][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.145097][ T8796] loop5: detected capacity change from 0 to 1024 [ 128.181105][ T8796] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 128.234010][ T5979] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 128.265318][ T9] lo speed is unknown, defaulting to 1000 [ 128.265439][ T8762] syz_tun: entered allmulticast mode [ 128.391624][ T8817] loop3: detected capacity change from 0 to 512 [ 128.403824][ T8818] loop1: detected capacity change from 0 to 128 [ 128.404772][ T8818] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 128.418654][ T8818] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 128.434104][ T8818] ext2 filesystem being mounted at /441/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 128.437538][ T29] audit: type=1400 audit(1792496353.666:924): avc: denied { write } for pid=8816 comm="syz.1.2113" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 128.438267][ T8817] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 128.438281][ T8817] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 128.439814][ T29] audit: type=1400 audit(1792496353.666:925): avc: denied { write } for pid=8816 comm="syz.1.2113" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 128.440299][ T8817] EXT4-fs (loop3): 1 truncate cleaned up [ 128.440711][ T8817] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.445671][ T29] audit: type=1400 audit(1792496353.676:926): avc: denied { write } for pid=8816 comm="syz.1.2113" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 128.455816][ T29] audit: type=1400 audit(1792496353.686:927): avc: denied { write } for pid=8816 comm="syz.1.2113" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 128.455956][ T29] audit: type=1400 audit(1792496353.686:928): avc: denied { create } for pid=8816 comm="syz.1.2113" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 128.457354][ T8818] EXT4-fs error (device loop1): dx_make_map:1296: inode #2: block 33: comm syz.1.2113: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 128.458529][ T8818] EXT4-fs error (device loop1) in do_split:2029: Corrupt filesystem [ 128.459636][ T8815] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2111'. [ 128.459700][ T8815] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2111'. [ 128.554911][ T29] audit: type=1400 audit(1792496353.786:929): avc: denied { write } for pid=8813 comm="syz.3.2112" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 128.686630][ T3305] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 128.829570][ T8828] loop1: detected capacity change from 0 to 1024 [ 128.842339][ T8828] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 128.922514][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 128.969603][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.741073][ T8846] bond0: option arp_interval: invalid value () [ 129.741101][ T8846] bond0: option arp_interval: allowed values 0 - 2147483647 [ 129.850953][ T8859] loop4: detected capacity change from 0 to 256 [ 129.868374][ T8859] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 129.868990][ T8859] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 130.104777][ T8869] lo speed is unknown, defaulting to 1000 [ 130.129766][ T8871] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 130.129787][ T8871] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 130.157340][ T8871] EXT4-fs (loop0): 1 truncate cleaned up [ 130.157948][ T8871] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.188737][ T29] audit: type=1400 audit(1792496355.416:930): avc: denied { write } for pid=8870 comm="syz.0.2133" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 130.495357][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.706227][ T8850] kexec: Could not allocate control_code_buffer [ 130.964203][ T8895] vcan0: tx drop: invalid sa for name 0x0102030405060708 [ 131.045952][ T8899] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2140'. [ 131.714757][ T8881] kexec: Could not allocate control_code_buffer [ 131.747863][ T8893] lo speed is unknown, defaulting to 1000 [ 131.766435][ T8905] set_capacity_and_notify: 1 callbacks suppressed [ 131.766521][ T8905] loop0: detected capacity change from 0 to 256 [ 131.767448][ T8905] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 131.771547][ T8905] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 131.849225][ T8906] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2144'. [ 131.881956][ T8908] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2148'. [ 131.908703][ T8902] lo speed is unknown, defaulting to 1000 [ 131.913910][ T8912] batadv_slave_1: entered promiscuous mode [ 131.915796][ T8911] batadv_slave_1: left promiscuous mode [ 132.249073][ T8928] loop3: detected capacity change from 0 to 1024 [ 132.291376][ T8928] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.318187][ T29] audit: type=1400 audit(1792496357.546:931): avc: denied { write } for pid=8927 comm="syz.3.2153" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 132.361289][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.623231][ T8960] loop4: detected capacity change from 0 to 512 [ 132.638680][ T8960] EXT4-fs: Ignoring removed nobh option [ 132.650846][ T8960] EXT4-fs error (device loop4) in ext4_process_orphan:346: Out of memory [ 132.650919][ T8960] loop4: lost filesystem error report for type 5 error -12 [ 132.651615][ T8960] EXT4-fs (loop4): 2 truncates cleaned up [ 132.652615][ T8960] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.675327][ T29] audit: type=1400 audit(1792496357.906:932): avc: denied { write } for pid=8959 comm="syz.4.2167" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 132.755240][ T8960] EXT4-fs error (device loop4): ext4_validate_block_bitmap:436: comm syz.4.2167: bg 0: block 5: invalid block bitmap [ 132.755654][ T8960] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 22 with max blocks 484 with error 28 [ 132.755684][ T8960] EXT4-fs (loop4): This should not happen!! Data will be lost [ 132.755684][ T8960] [ 132.755703][ T8960] EXT4-fs (loop4): Total free blocks count 0 [ 132.755720][ T8960] EXT4-fs (loop4): Free/Dirty block details [ 132.755736][ T8960] EXT4-fs (loop4): free_blocks=0 [ 132.755753][ T8960] EXT4-fs (loop4): dirty_blocks=485 [ 132.755769][ T8960] EXT4-fs (loop4): Block reservation details [ 132.755785][ T8960] EXT4-fs (loop4): i_reserved_data_blocks=485 [ 132.755895][ T8966] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 132.957508][ T8977] netlink: 'syz.0.2173': attribute type 4 has an invalid length. [ 132.957533][ T8977] netlink: 'syz.0.2173': attribute type 4 has an invalid length. [ 132.957549][ T8977] netlink: 'syz.0.2173': attribute type 7 has an invalid length. [ 132.957569][ T8977] netlink: 197284 bytes leftover after parsing attributes in process `syz.0.2173'. [ 133.056310][ T8983] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2169'. [ 133.387634][ T8973] lo speed is unknown, defaulting to 1000 [ 133.619131][ T29] audit: type=1400 audit(1792496358.846:933): avc: denied { setopt } for pid=9000 comm="syz.4.2184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 133.780695][ T9011] loop0: detected capacity change from 0 to 512 [ 133.781138][ T9011] EXT4-fs: Ignoring removed nobh option [ 133.821418][ T9011] EXT4-fs error (device loop0) in ext4_process_orphan:346: Out of memory [ 133.821444][ T9011] loop0: lost filesystem error report for type 5 error -12 [ 133.823155][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 133.823179][ C0] EXT4-fs (loop0): initial error at time 1792496359: ext4_process_orphan:346 [ 133.823206][ C0] EXT4-fs (loop0): last error at time 1792496359: ext4_process_orphan:346 [ 133.869374][ T9011] EXT4-fs (loop0): 2 truncates cleaned up [ 133.869752][ T9011] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.902737][ T29] audit: type=1400 audit(1792496359.126:934): avc: denied { write } for pid=9010 comm="syz.0.2186" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 133.965184][ T9011] EXT4-fs error (device loop0): ext4_validate_block_bitmap:436: comm syz.0.2186: bg 0: block 5: invalid block bitmap [ 133.965619][ T9011] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 22 with max blocks 484 with error 28 [ 133.965652][ T9011] EXT4-fs (loop0): This should not happen!! Data will be lost [ 133.965652][ T9011] [ 133.965669][ T9011] EXT4-fs (loop0): Total free blocks count 0 [ 133.965685][ T9011] EXT4-fs (loop0): Free/Dirty block details [ 133.965730][ T9011] EXT4-fs (loop0): free_blocks=0 [ 133.965745][ T9011] EXT4-fs (loop0): dirty_blocks=485 [ 133.965837][ T9011] EXT4-fs (loop0): Block reservation details [ 133.965851][ T9011] EXT4-fs (loop0): i_reserved_data_blocks=485 [ 133.967026][ T9019] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 134.207699][ T9037] loop0: detected capacity change from 0 to 128 [ 134.210046][ T9037] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 134.230915][ T9037] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 134.231124][ T9037] ext2 filesystem being mounted at /464/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 134.297885][ T29] audit: type=1400 audit(1792496359.526:935): avc: denied { write } for pid=9036 comm="syz.0.2193" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 134.298985][ T29] audit: type=1400 audit(1792496359.526:936): avc: denied { write } for pid=9036 comm="syz.0.2193" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 134.301493][ T29] audit: type=1400 audit(1792496359.526:937): avc: denied { write } for pid=9036 comm="syz.0.2193" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 134.341447][ T9037] EXT4-fs error (device loop0): dx_make_map:1296: inode #2: block 33: comm syz.0.2193: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 134.344436][ T9037] EXT4-fs error (device loop0) in do_split:2029: Corrupt filesystem [ 134.347005][ T29] audit: type=1400 audit(1792496359.556:938): avc: denied { write } for pid=9036 comm="syz.0.2193" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 134.437863][ T3300] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 134.796965][ T9067] loop5: detected capacity change from 0 to 512 [ 134.820674][ T9067] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 134.820697][ T9067] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 134.826320][ T9067] EXT4-fs (loop5): 1 truncate cleaned up [ 134.827250][ T9067] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.851564][ T29] audit: type=1400 audit(1792496360.076:939): avc: denied { write } for pid=9066 comm="syz.5.2213" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 134.874677][ T9073] loop1: detected capacity change from 0 to 512 [ 134.893892][ T9073] EXT4-fs: Ignoring removed nobh option [ 134.915542][ T9073] EXT4-fs error (device loop1) in ext4_process_orphan:346: Out of memory [ 134.915566][ T9073] loop1: lost filesystem error report for type 5 error -12 [ 134.917300][ T9073] EXT4-fs (loop1): 2 truncates cleaned up [ 134.917778][ T9073] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.921396][ T29] audit: type=1400 audit(1792496360.146:940): avc: denied { write } for pid=9072 comm="syz.1.2205" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 135.015415][ T9078] EXT4-fs error (device loop1): ext4_validate_block_bitmap:436: comm syz.1.2205: bg 0: block 5: invalid block bitmap [ 135.018112][ T9078] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 135.018149][ T9078] EXT4-fs (loop1): This should not happen!! Data will be lost [ 135.018149][ T9078] [ 135.018167][ T9078] EXT4-fs (loop1): Total free blocks count 0 [ 135.018235][ T9078] EXT4-fs (loop1): Free/Dirty block details [ 135.018250][ T9078] EXT4-fs (loop1): free_blocks=0 [ 135.018262][ T9078] EXT4-fs (loop1): dirty_blocks=485 [ 135.018276][ T9078] EXT4-fs (loop1): Block reservation details [ 135.018290][ T9078] EXT4-fs (loop1): i_reserved_data_blocks=485 [ 135.020269][ T9073] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 22 with max blocks 484 with error 28 [ 135.091063][ T9078] syz.1.2205 (9078) used greatest stack depth: 9648 bytes left [ 135.129347][ T5979] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.241414][ T9086] loop0: detected capacity change from 0 to 512 [ 135.254914][ T9045] kexec: Could not allocate control_code_buffer [ 135.266591][ T9086] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c018, mo2=0002] [ 135.266676][ T9086] System zones: 0-7 [ 135.273287][ T9086] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.348160][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.652849][ T9103] loop5: detected capacity change from 0 to 512 [ 135.697171][ T9105] loop4: detected capacity change from 0 to 512 [ 135.699847][ T9103] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.699974][ T9103] ext4 filesystem being mounted at /246/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 135.700119][ T9105] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 135.700200][ T9105] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 135.708704][ T9105] EXT4-fs (loop4): 1 truncate cleaned up [ 135.709706][ T9105] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.961146][ T5979] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.979891][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.030225][ T9122] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2232'. [ 136.800800][ T9128] lo speed is unknown, defaulting to 1000 [ 136.925531][ T9119] lo speed is unknown, defaulting to 1000 [ 136.964312][ T9121] kexec: Could not allocate control_code_buffer [ 137.009914][ T9149] loop4: detected capacity change from 0 to 512 [ 137.031165][ T9149] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 137.031185][ T9149] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 137.035213][ T9149] EXT4-fs (loop4): 1 truncate cleaned up [ 137.036232][ T9149] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.282679][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.414514][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 137.414532][ T29] audit: type=1400 audit(1792496362.646:946): avc: denied { ioctl } for pid=9172 comm="syz.0.2250" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=250 ioctlcmd=0x586a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 137.417000][ T9168] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2255'. [ 137.509274][ T29] audit: type=1326 audit(1792496362.736:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9174 comm="syz.0.2251" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f732faaf559 code=0x7ffc0000 [ 137.510550][ T29] audit: type=1326 audit(1792496362.736:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9174 comm="syz.0.2251" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f732faaf559 code=0x7ffc0000 [ 137.510609][ T29] audit: type=1326 audit(1792496362.736:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9174 comm="syz.0.2251" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f732faaf559 code=0x7ffc0000 [ 137.510976][ T29] audit: type=1326 audit(1792496362.736:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9174 comm="syz.0.2251" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7f732faaf559 code=0x7ffc0000 [ 137.511157][ T29] audit: type=1326 audit(1792496362.736:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9174 comm="syz.0.2251" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f732faaf559 code=0x7ffc0000 [ 137.511546][ T29] audit: type=1326 audit(1792496362.736:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9174 comm="syz.0.2251" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f732faaf559 code=0x7ffc0000 [ 137.512261][ T29] audit: type=1326 audit(1792496362.736:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9174 comm="syz.0.2251" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f732faaf559 code=0x7ffc0000 [ 137.753033][ T29] audit: type=1326 audit(1792496362.976:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9174 comm="syz.0.2251" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f732faaf559 code=0x7ffc0000 [ 137.877190][ T9188] loop5: detected capacity change from 0 to 512 [ 137.881227][ T9188] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 137.881294][ T9188] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 137.919547][ T9188] EXT4-fs (loop5): 1 truncate cleaned up [ 137.920180][ T9188] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.943584][ T29] audit: type=1400 audit(1792496363.166:955): avc: denied { write } for pid=9187 comm="syz.5.2257" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 138.124527][ T5979] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.141715][ T9198] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2260'. [ 138.141744][ T9198] netlink: 'syz.3.2260': attribute type 1 has an invalid length. [ 138.198405][ T9204] rdma_rxe: rxe_newlink: failed to add lo [ 138.259646][ T9208] loop4: detected capacity change from 0 to 512 [ 138.274641][ T9208] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c018, mo2=0002] [ 138.274681][ T9208] System zones: 0-7 [ 138.275207][ T9208] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.348218][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.404194][ T9225] loop1: detected capacity change from 0 to 512 [ 138.422083][ T9225] EXT4-fs error (device loop1): ext4_xattr_inode_iget:473: comm syz.1.2273: EA inode 11 has unexpected i_nlink=2 ref_count=7168870745731235840 [ 138.422129][ T9225] loop1: lost filesystem error report for type 5 error -117 [ 138.422393][ T9225] EXT4-fs (loop1): 1 orphan inode deleted [ 138.422915][ T9225] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.478765][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.676852][ T9235] lo speed is unknown, defaulting to 1000 [ 138.815809][ T9248] loop1: detected capacity change from 0 to 512 [ 138.851539][ T9248] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c018, mo2=0002] [ 138.851582][ T9248] System zones: 0-7 [ 138.852274][ T9248] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.897382][ T9257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.897511][ T9257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.927266][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.050155][ T9266] rdma_rxe: rxe_newlink: failed to add lo [ 139.095165][ T9] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 139.306633][ T9278] loop0: detected capacity change from 0 to 512 [ 139.321887][ T9278] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 139.321908][ T9278] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 139.346747][ T9278] EXT4-fs (loop0): 1 truncate cleaned up [ 139.347226][ T9278] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.415429][ T3383] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 139.415805][ T3383] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 139.506191][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.587043][ T9302] loop0: detected capacity change from 0 to 164 [ 139.640648][ T9309] loop1: detected capacity change from 0 to 164 [ 139.655661][ T9309] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 139.656626][ T9309] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 139.659483][ T9309] rock: directory entry would overflow storage [ 139.659498][ T9309] rock: sig=0x4f50, size=4, remaining=3 [ 139.659516][ T9309] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 139.745610][ T9321] loop1: detected capacity change from 0 to 512 [ 139.748373][ T9321] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 139.748389][ T9321] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 139.750818][ T9321] EXT4-fs (loop1): 1 truncate cleaned up [ 139.751311][ T9321] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.876116][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.934547][ T9] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 140.086158][ T9335] lo speed is unknown, defaulting to 1000 [ 140.129174][ T9336] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2320'. [ 140.476296][ T9348] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 140.525822][ T9352] loop3: detected capacity change from 0 to 512 [ 140.539387][ T9352] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 140.539402][ T9352] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 140.542209][ T9352] EXT4-fs (loop3): 1 truncate cleaned up [ 140.542656][ T9352] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.789144][ T9368] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 140.789684][ T9368] ext4 filesystem being mounted at /258/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.817328][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.897826][ T5979] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 140.916135][ T9378] sg_write: data in/out 432480/136 bytes for SCSI command 0x0-- guessing data in; [ 140.916135][ T9378] program syz.0.2338 not setting count and/or reply_len properly [ 141.227328][ T9405] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 141.227347][ T9405] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 141.236852][ T9405] EXT4-fs (loop1): 1 truncate cleaned up [ 141.237701][ T9405] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.039936][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.180088][ T9422] set_capacity_and_notify: 3 callbacks suppressed [ 144.180111][ T9422] loop1: detected capacity change from 0 to 8192 [ 144.379672][ T9452] FAULT_INJECTION: forcing a failure. [ 144.379672][ T9452] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 144.379704][ T9452] CPU: 0 UID: 0 PID: 9452 Comm: syz.0.2370 Not tainted syzkaller #0 PREEMPT(lazy) [ 144.379735][ T9452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 144.379753][ T9452] Call Trace: [ 144.379762][ T9452] [ 144.379829][ T9452] __dump_stack+0x1d/0x30 [ 144.379871][ T9452] dump_stack_lvl+0x95/0xd0 [ 144.379898][ T9452] dump_stack+0x15/0x1b [ 144.379983][ T9452] should_fail_ex+0x262/0x280 [ 144.380056][ T9452] should_fail+0xb/0x20 [ 144.380092][ T9452] should_fail_usercopy+0x1a/0x20 [ 144.380133][ T9452] _copy_from_user+0x1c/0xb0 [ 144.380249][ T9452] __x64_sys_futimesat+0x9b/0x1e0 [ 144.380285][ T9452] x64_sys_call+0x21c4/0x2550 [ 144.380389][ T9452] do_syscall_64+0x112/0x360 [ 144.380426][ T9452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.380449][ T9452] RIP: 0033:0x7f732faaf559 [ 144.380579][ T9452] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.380599][ T9452] RSP: 002b:00007f732e4ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000105 [ 144.380621][ T9452] RAX: ffffffffffffffda RBX: 00007f732fd35fa0 RCX: 00007f732faaf559 [ 144.380684][ T9452] RDX: 00002000000002c0 RSI: 0000000000000000 RDI: 0000000000000003 [ 144.380704][ T9452] RBP: 00007f732fb46b20 R08: 0000000000000000 R09: 0000000000000000 [ 144.380722][ T9452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 144.380739][ T9452] R13: 00007f732fd36038 R14: 00007f732fd35fa0 R15: 00007ffd340f6c08 [ 144.380760][ T9452] [ 144.764662][ T9480] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2383'. [ 144.800216][ T9480] hsr_slave_1 (unregistering): left promiscuous mode [ 144.855492][ T9487] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2386'. [ 144.855515][ T9487] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2386'. [ 144.865477][ T9487] macvtap1: entered allmulticast mode [ 144.865532][ T9487] dummy0: entered allmulticast mode [ 144.865673][ T9487] dummy0: entered promiscuous mode [ 144.887253][ T9487] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2386'. [ 144.887374][ T9487] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2386'. [ 144.907467][ T9487] macvtap2: entered allmulticast mode [ 144.958038][ T9492] device-mapper: ioctl: Unable to rename non-existent device, to • [ 145.031629][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 145.031648][ T29] audit: type=1400 audit(1792496370.256:972): avc: denied { bind } for pid=9502 comm="syz.1.2393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 145.031787][ T29] audit: type=1400 audit(1792496370.256:973): avc: denied { listen } for pid=9502 comm="syz.1.2393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 145.058987][ T28] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 145.059983][ T28] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 145.126972][ T9510] loop3: detected capacity change from 0 to 256 [ 145.128781][ T9510] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 145.174408][ T9515] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 145.225081][ T9521] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779008) [ 145.225143][ T9521] FAT-fs (loop3): Filesystem has been set read-only [ 145.392967][ T9521] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779008) [ 145.393068][ T9521] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779008) [ 145.393093][ T9521] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779008) [ 145.406780][ T9542] ptp ptp0: max value is 20 [ 145.663571][ T29] audit: type=1400 audit(1792496370.896:974): avc: denied { cpu } for pid=9559 comm="syz.3.2419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 145.741890][ T29] audit: type=1400 audit(1792496370.966:975): avc: denied { ioctl } for pid=9568 comm="syz.3.2424" path="/dev/input/event2" dev="devtmpfs" ino=245 ioctlcmd=0x4590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 145.775856][ T29] audit: type=1326 audit(1792496371.006:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9573 comm="syz.1.2426" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85ac7af559 code=0x7ffc0000 [ 145.775903][ T29] audit: type=1326 audit(1792496371.006:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9573 comm="syz.1.2426" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85ac7af559 code=0x7ffc0000 [ 145.775984][ T29] audit: type=1326 audit(1792496371.006:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9573 comm="syz.1.2426" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85ac7af559 code=0x7ffc0000 [ 145.776325][ T29] audit: type=1326 audit(1792496371.006:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9573 comm="syz.1.2426" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7f85ac7af559 code=0x7ffc0000 [ 145.776385][ T29] audit: type=1326 audit(1792496371.006:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9573 comm="syz.1.2426" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85ac7af559 code=0x7ffc0000 [ 145.776561][ T29] audit: type=1326 audit(1792496371.006:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9573 comm="syz.1.2426" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85ac7af559 code=0x7ffc0000 [ 146.071522][ T9586] xt_hashlimit: size too large, truncated to 1048576 [ 146.248174][ T9578] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input6 [ 146.314960][ T9606] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 147.282516][ T9620] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2444'. [ 147.282542][ T9620] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2444'. [ 147.294484][ T9620] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2444'. [ 147.294558][ T9620] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2444'. [ 147.325565][ T9621] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 147.465215][ T9636] IPVS: sh: FWM 3 0x00000003 - no destination available [ 147.541462][ T9642] RDS: rds_bind could not find a transport for 0:0:2f63:6163::, load rds_tcp or rds_rdma? [ 147.682708][ T9659] FAULT_INJECTION: forcing a failure. [ 147.682708][ T9659] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 147.682742][ T9659] CPU: 0 UID: 0 PID: 9659 Comm: syz.0.2465 Not tainted syzkaller #0 PREEMPT(lazy) [ 147.682768][ T9659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 147.682781][ T9659] Call Trace: [ 147.682846][ T9659] [ 147.682854][ T9659] __dump_stack+0x1d/0x30 [ 147.682880][ T9659] dump_stack_lvl+0x95/0xd0 [ 147.682903][ T9659] dump_stack+0x15/0x1b [ 147.682930][ T9659] should_fail_ex+0x262/0x280 [ 147.683019][ T9659] should_fail+0xb/0x20 [ 147.683054][ T9659] should_fail_usercopy+0x1a/0x20 [ 147.683239][ T9659] _copy_from_user+0x1c/0xb0 [ 147.683283][ T9659] __se_sys_set_mempolicy+0x2ce/0x3a0 [ 147.683308][ T9659] ? restore_fpregs_from_fpstate+0x61/0x110 [ 147.683407][ T9659] __x64_sys_set_mempolicy+0x43/0x50 [ 147.683448][ T9659] x64_sys_call+0x12d5/0x2550 [ 147.683483][ T9659] do_syscall_64+0x112/0x360 [ 147.683526][ T9659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.683565][ T9659] RIP: 0033:0x7f732faaf559 [ 147.683617][ T9659] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.683636][ T9659] RSP: 002b:00007f732e4ff028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ee [ 147.683657][ T9659] RAX: ffffffffffffffda RBX: 00007f732fd35fa0 RCX: 00007f732faaf559 [ 147.683674][ T9659] RDX: 0000000000000005 RSI: 00002000000003c0 RDI: 0000000000000002 [ 147.683752][ T9659] RBP: 00007f732fb46b20 R08: 0000000000000000 R09: 0000000000000000 [ 147.683766][ T9659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 147.683821][ T9659] R13: 00007f732fd36038 R14: 00007f732fd35fa0 R15: 00007ffd340f6c08 [ 147.683843][ T9659] [ 147.906353][ T9673] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 147.942448][ T9680] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 147.972860][ T9684] bonding: b is being created... [ 148.053951][ T79] bond0: (slave netdevsim2): link status definitely down, disabling slave [ 148.136801][ T9701] loop4: detected capacity change from 0 to 512 [ 148.137520][ T9701] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 148.137536][ T9701] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 148.141309][ T9701] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 148.141338][ T9701] System zones: 1-12 [ 148.142790][ T9701] EXT4-fs error (device loop4): ext4_orphan_get:1429: comm syz.4.2481: bad orphan inode 131072 [ 148.142904][ T9701] loop4: lost filesystem error report for type 5 error -117 [ 148.143136][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 148.143157][ C0] EXT4-fs (loop4): initial error at time 1792496373: ext4_orphan_get:1429 [ 148.143187][ C0] EXT4-fs (loop4): last error at time 1792496373: ext4_orphan_get:1429 [ 148.172224][ T9701] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.277892][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.530951][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 151.530973][ T29] audit: type=1326 audit(1792496376.756:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9754 comm="syz.4.2506" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fe1b1f559 code=0x7ffc0000 [ 151.531082][ T29] audit: type=1326 audit(1792496376.756:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9754 comm="syz.4.2506" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fe1b1f559 code=0x7ffc0000 [ 151.584252][ T29] audit: type=1326 audit(1792496376.756:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9754 comm="syz.4.2506" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fe1b1f559 code=0x7ffc0000 [ 151.584381][ T29] audit: type=1326 audit(1792496376.756:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9754 comm="syz.4.2506" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fe1b1f559 code=0x7ffc0000 [ 151.584512][ T29] audit: type=1326 audit(1792496376.756:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9754 comm="syz.4.2506" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f2fe1b1f559 code=0x7ffc0000 [ 151.584656][ T29] audit: type=1326 audit(1792496376.796:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9754 comm="syz.4.2506" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fe1b1f559 code=0x7ffc0000 [ 151.584745][ T29] audit: type=1326 audit(1792496376.796:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9754 comm="syz.4.2506" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fe1b1f559 code=0x7ffc0000 [ 151.584838][ T29] audit: type=1326 audit(1792496376.806:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9754 comm="syz.4.2506" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fe1b1f559 code=0x7ffc0000 [ 151.584978][ T29] audit: type=1326 audit(1792496376.806:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9754 comm="syz.4.2506" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fe1b1f559 code=0x7ffc0000 [ 151.585063][ T29] audit: type=1326 audit(1792496376.806:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9754 comm="syz.4.2506" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2fe1b1f559 code=0x7ffc0000 [ 151.861878][ T9773] sctp: [Deprecated]: syz.0.2514 (pid 9773) Use of struct sctp_assoc_value in delayed_ack socket option. [ 151.861878][ T9773] Use struct sctp_sack_info instead [ 151.937823][ T9781] loop0: detected capacity change from 0 to 512 [ 151.944041][ T9781] EXT4-fs error (device loop0): ext4_orphan_get:1403: inode #15: comm syz.0.2517: inode has both inline data and extents flags [ 151.944128][ T9781] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 151.944715][ T9781] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.2517: couldn't read orphan inode 15 (err -117) [ 151.944874][ T9781] loop0: lost filesystem error report for type 5 error -117 [ 151.947686][ T9781] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.012818][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.032216][ T9794] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2523'. [ 152.067465][ T9790] loop1: detected capacity change from 0 to 164 [ 152.362618][ T9822] loop0: detected capacity change from 0 to 8192 [ 153.221169][ T9873] loop0: detected capacity change from 0 to 8192 [ 153.766239][ T9900] loop5: detected capacity change from 0 to 8192 [ 154.506085][ T9952] loop0: detected capacity change from 0 to 128 [ 154.896682][ T9982] loop0: detected capacity change from 0 to 512 [ 154.915248][ T9982] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 154.915267][ T9982] FAT-fs (loop0): Filesystem has been set read-only [ 155.032483][ T9992] loop0: detected capacity change from 0 to 512 [ 155.042352][ T9992] EXT4-fs error (device loop0): ext4_xattr_inode_iget:473: comm syz.0.2610: EA inode 11 has unexpected i_nlink=2 ref_count=7168870745731235840 [ 155.042484][ T9992] loop0: lost filesystem error report for type 5 error -117 [ 155.042769][ T9992] EXT4-fs (loop0): 1 orphan inode deleted [ 155.043822][ T9992] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.091647][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.618783][T10003] loop3: detected capacity change from 0 to 8192 [ 155.847993][ T11] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 155.850422][ T11] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 155.938166][T10036] xt_hashlimit: size too large, truncated to 1048576 [ 156.152134][T10048] loop0: detected capacity change from 0 to 1024 [ 156.152591][T10048] EXT4-fs: dax option not supported [ 159.115617][T10059] loop5: detected capacity change from 0 to 256 [ 159.132720][T10059] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 159.181622][T10062] loop1: detected capacity change from 0 to 8192 [ 159.202543][T10065] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 159.202660][T10065] FAT-fs (loop5): Filesystem has been set read-only [ 159.339519][T10073] loop0: detected capacity change from 0 to 512 [ 159.340044][T10073] EXT4-fs: Ignoring removed nomblk_io_submit option [ 159.360085][T10073] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 159.360131][T10073] EXT4-fs error (device loop0): ext4_iget_extra_inode:5210: inode #15: comm syz.0.2645: corrupted in-inode xattr: e_value size too large [ 159.360264][T10073] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 159.361790][T10073] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.2645: couldn't read orphan inode 15 (err -117) [ 159.361820][T10073] loop0: lost filesystem error report for type 5 error -117 [ 159.363130][ C1] EXT4-fs (loop0): error count since last fsck: 2 [ 159.363156][ C1] EXT4-fs (loop0): initial error at time 1792496384: ext4_iget_extra_inode:5210: inode 15 [ 159.363207][ C1] EXT4-fs (loop0): last error at time 1792496384: ext4_orphan_get:1408 [ 159.442768][T10073] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.459239][ T29] kauditd_printk_skb: 156 callbacks suppressed [ 159.459259][ T29] audit: type=1400 audit(1792496384.696:1164): avc: denied { watch } for pid=10072 comm="syz.0.2645" path="/577/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 159.500953][T10059] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 159.501134][T10059] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 159.501216][T10059] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 159.544719][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.546539][T10079] loop3: detected capacity change from 0 to 1024 [ 159.559815][T10079] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 159.597436][T10079] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.665494][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.678180][T10093] loop5: detected capacity change from 0 to 512 [ 159.698320][T10093] EXT4-fs: Ignoring removed mblk_io_submit option [ 159.710518][T10093] EXT4-fs error (device loop5): ext4_iget_extra_inode:5210: inode #15: comm syz.5.2649: corrupted in-inode xattr: e_value size too large [ 159.710563][T10093] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 159.710803][T10093] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.2649: couldn't read orphan inode 15 (err -117) [ 159.710919][T10093] loop5: lost filesystem error report for type 5 error -117 [ 159.712202][T10093] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.721813][ T29] audit: type=1400 audit(1792496384.936:1165): avc: denied { write } for pid=10092 comm="syz.5.2649" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 159.724814][ T29] audit: type=1400 audit(1792496384.936:1166): avc: denied { write } for pid=10092 comm="syz.5.2649" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 159.725762][ T29] audit: type=1400 audit(1792496384.956:1167): avc: denied { write } for pid=10092 comm="syz.5.2649" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 159.727570][ T29] audit: type=1400 audit(1792496384.956:1168): avc: denied { write } for pid=10092 comm="syz.5.2649" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 159.775964][ T5979] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.894647][T10103] FAULT_INJECTION: forcing a failure. [ 159.894647][T10103] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 159.894685][T10103] CPU: 0 UID: 0 PID: 10103 Comm: syz.5.2655 Not tainted syzkaller #0 PREEMPT(lazy) [ 159.894741][T10103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 159.894776][T10103] Call Trace: [ 159.894782][T10103] [ 159.894789][T10103] __dump_stack+0x1d/0x30 [ 159.894813][T10103] dump_stack_lvl+0x95/0xd0 [ 159.894846][T10103] dump_stack+0x15/0x1b [ 159.894865][T10103] should_fail_ex+0x262/0x280 [ 159.894896][T10103] should_fail+0xb/0x20 [ 159.894921][T10103] should_fail_usercopy+0x1a/0x20 [ 159.895014][T10103] _copy_from_user+0x1c/0xb0 [ 159.895077][T10103] vmemdup_user+0x5e/0xd0 [ 159.895101][T10103] path_setxattrat+0x1b3/0x320 [ 159.895194][T10103] __x64_sys_lsetxattr+0x71/0x90 [ 159.895218][T10103] x64_sys_call+0x22c1/0x2550 [ 159.895242][T10103] do_syscall_64+0x112/0x360 [ 159.895270][T10103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.895365][T10103] RIP: 0033:0x7f9bbc1cf559 [ 159.895379][T10103] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.895396][T10103] RSP: 002b:00007f9bbac1f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 159.895450][T10103] RAX: ffffffffffffffda RBX: 00007f9bbc455fa0 RCX: 00007f9bbc1cf559 [ 159.895487][T10103] RDX: 0000200000000240 RSI: 0000200000000080 RDI: 0000000000000000 [ 159.895500][T10103] RBP: 00007f9bbc266b20 R08: 0000000000000003 R09: 0000000000000000 [ 159.895512][T10103] R10: 0000000000001001 R11: 0000000000000246 R12: 0000000000000000 [ 159.895524][T10103] R13: 00007f9bbc456038 R14: 00007f9bbc455fa0 R15: 00007ffe1fd4e398 [ 159.895542][T10103] [ 160.095835][T10113] loop5: detected capacity change from 0 to 512 [ 160.098124][T10113] EXT4-fs: Ignoring removed nobh option [ 160.099799][T10111] netlink: 'syz.1.2659': attribute type 9 has an invalid length. [ 160.129012][T10113] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.129148][T10113] ext4 filesystem being mounted at /321/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.139921][ T29] audit: type=1400 audit(1792496385.366:1169): avc: denied { write } for pid=10112 comm="syz.5.2660" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 160.142898][T10113] EXT4-fs error (device loop5): ext4_do_update_inode:5801: inode #2: comm syz.5.2660: corrupted inode contents [ 160.144605][T10113] EXT4-fs error (device loop5): ext4_dirty_inode:6736: inode #2: comm syz.5.2660: mark_inode_dirty error [ 160.145172][T10113] EXT4-fs error (device loop5): ext4_do_update_inode:5801: inode #2: comm syz.5.2660: corrupted inode contents [ 160.145548][T10113] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #2: comm syz.5.2660: mark_inode_dirty error [ 160.149687][T10113] EXT4-fs warning (device loop5): ext4_es_cache_extent:1082: inode #2: comm syz.5.2660: ES cache extent failed: add [0,1,22,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 160.149687][T10113] [ 160.150327][ T29] audit: type=1400 audit(1792496385.386:1170): avc: denied { write } for pid=10112 comm="syz.5.2660" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 160.150573][T10113] EXT4-fs error (device loop5): ext4_do_update_inode:5801: inode #2: comm syz.5.2660: corrupted inode contents [ 160.150986][T10113] EXT4-fs error (device loop5): ext4_append:88: inode #2: comm syz.5.2660: mark_inode_dirty error [ 160.151354][T10113] EXT4-fs error (device loop5) in ext4_append:100: Corrupt filesystem [ 160.157463][T10113] EXT4-fs error (device loop5): ext4_do_update_inode:5801: inode #2: comm syz.5.2660: corrupted inode contents [ 160.157921][ T29] audit: type=1400 audit(1792496385.386:1171): avc: denied { write } for pid=10112 comm="syz.5.2660" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 160.158102][T10113] EXT4-fs error (device loop5): add_dirent_to_buf:2153: inode #2: comm syz.5.2660: mark_inode_dirty error [ 160.160764][ T29] audit: type=1400 audit(1792496385.396:1172): avc: denied { write } for pid=10112 comm="syz.5.2660" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 160.269997][ T5979] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.680384][ T29] audit: type=1400 audit(1792496385.906:1173): avc: denied { ioctl } for pid=10166 comm="syz.5.2685" path="/newroot/327/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=2208 ioctlcmd=0x0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 160.686149][T10154] loop3: detected capacity change from 0 to 512 [ 160.688648][T10154] vfat: Unknown parameter 'ÿÿÿÿÿ01777777777777777777777' [ 160.833341][T10179] loop3: detected capacity change from 0 to 512 [ 160.859016][T10182] FAULT_INJECTION: forcing a failure. [ 160.859016][T10182] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 160.859104][T10182] CPU: 0 UID: 0 PID: 10182 Comm: syz.5.2690 Not tainted syzkaller #0 PREEMPT(lazy) [ 160.859130][T10182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 160.859146][T10182] Call Trace: [ 160.859154][T10182] [ 160.859228][T10182] __dump_stack+0x1d/0x30 [ 160.859261][T10182] dump_stack_lvl+0x95/0xd0 [ 160.859291][T10182] dump_stack+0x15/0x1b [ 160.859320][T10182] should_fail_ex+0x262/0x280 [ 160.859399][T10182] should_fail+0xb/0x20 [ 160.859427][T10182] should_fail_usercopy+0x1a/0x20 [ 160.859509][T10182] _copy_from_user+0x1c/0xb0 [ 160.859550][T10182] __se_sys_io_uring_register+0x80d/0x1340 [ 160.859589][T10182] ? __se_sys_futex+0x2f6/0x370 [ 160.859632][T10182] ? xfd_validate_state+0x45/0xf0 [ 160.859671][T10182] ? restore_fpregs_from_fpstate+0x61/0x110 [ 160.859706][T10182] __x64_sys_io_uring_register+0x55/0x70 [ 160.859745][T10182] x64_sys_call+0x1ff6/0x2550 [ 160.859834][T10182] do_syscall_64+0x112/0x360 [ 160.859877][T10182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.859900][T10182] RIP: 0033:0x7f9bbc1cf559 [ 160.859917][T10182] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.859936][T10182] RSP: 002b:00007f9bbac1f028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 160.859992][T10182] RAX: ffffffffffffffda RBX: 00007f9bbc455fa0 RCX: 00007f9bbc1cf559 [ 160.860012][T10182] RDX: 0000200000000000 RSI: 000000000000000b RDI: ffffffffffffffff [ 160.860031][T10182] RBP: 00007f9bbc266b20 R08: 0000000000000000 R09: 0000000000000000 [ 160.860048][T10182] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 160.860066][T10182] R13: 00007f9bbc456038 R14: 00007f9bbc455fa0 R15: 00007ffe1fd4e398 [ 160.860144][T10182] [ 161.022950][T10185] loop3: detected capacity change from 0 to 128 [ 161.049842][T10185] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 161.056940][T10185] ext4 filesystem being mounted at /564/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.165227][T10186] loop5: detected capacity change from 0 to 8192 [ 161.235185][ T3306] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 161.536468][T10212] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 161.536537][T10212] ext4 filesystem being mounted at /593/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.538478][T10212] EXT4-fs error (device loop0): ext4_free_blocks:6719: comm syz.0.2710: Freeing blocks not in datazone - block = 0, count = 16 [ 161.539343][T10212] EXT4-fs warning (device loop0): ext4_resize_begin:82: There are errors in the filesystem, so online resizing is not allowed [ 161.604597][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 161.894877][T10221] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.894947][T10221] ext4 filesystem being mounted at /595/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.897094][T10221] EXT4-fs error (device loop0): ext4_map_blocks:832: inode #15: comm syz.0.2702: lblock 0 mapped to illegal pblock 0 (length 1) [ 161.897667][T10221] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #15: comm syz.0.2702: lblock 0 mapped to illegal pblock 0 (length 1) [ 161.897883][T10221] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #15: comm syz.0.2702: lblock 0 mapped to illegal pblock 0 (length 1) [ 161.898155][T10221] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #15: comm syz.0.2702: lblock 0 mapped to illegal pblock 0 (length 1) [ 161.898450][T10221] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #15: comm syz.0.2702: lblock 0 mapped to illegal pblock 0 (length 1) [ 161.898687][T10221] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #15: comm syz.0.2702: lblock 0 mapped to illegal pblock 0 (length 1) [ 161.898937][T10221] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #15: comm syz.0.2702: lblock 0 mapped to illegal pblock 0 (length 1) [ 161.899098][T10221] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #15: comm syz.0.2702: lblock 0 mapped to illegal pblock 0 (length 1) [ 161.899326][T10221] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #15: comm syz.0.2702: lblock 0 mapped to illegal pblock 0 (length 1) [ 161.899561][T10221] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #15: comm syz.0.2702: lblock 0 mapped to illegal pblock 0 (length 1) [ 162.100447][T10231] FAULT_INJECTION: forcing a failure. [ 162.100447][T10231] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 162.100510][T10231] CPU: 0 UID: 0 PID: 10231 Comm: syz.4.2705 Not tainted syzkaller #0 PREEMPT(lazy) [ 162.100592][T10231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 162.100606][T10231] Call Trace: [ 162.100614][T10231] [ 162.100629][T10231] __dump_stack+0x1d/0x30 [ 162.100664][T10231] dump_stack_lvl+0x95/0xd0 [ 162.100735][T10231] dump_stack+0x15/0x1b [ 162.100763][T10231] should_fail_ex+0x262/0x280 [ 162.100850][T10231] should_fail_alloc_page+0xf2/0x100 [ 162.100895][T10231] __alloc_frozen_pages_noprof+0x157/0x400 [ 162.100921][T10231] alloc_pages_mpol+0xaf/0x1d0 [ 162.100992][T10231] folio_alloc_mpol_noprof+0x39/0x80 [ 162.101028][T10231] shmem_get_folio_gfp+0x3ff/0xd90 [ 162.101071][T10231] ? filemap_map_pages+0xe96/0xf70 [ 162.101155][T10231] shmem_fault+0xf6/0x250 [ 162.101217][T10231] handle_mm_fault+0x2310/0x3bb0 [ 162.101253][T10231] __get_user_pages+0x12e9/0x1eb0 [ 162.101298][T10231] __mm_populate+0x242/0x390 [ 162.101331][T10231] vm_mmap_pgoff+0x23b/0x2d0 [ 162.101418][T10231] ksys_mmap_pgoff+0xc1/0x310 [ 162.101488][T10231] ? __x64_sys_mmap+0x49/0x70 [ 162.101565][T10231] x64_sys_call+0x23b3/0x2550 [ 162.101603][T10231] do_syscall_64+0x112/0x360 [ 162.101656][T10231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.101701][T10231] RIP: 0033:0x7f2fe1b1f559 [ 162.101719][T10231] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.101817][T10231] RSP: 002b:00007f2fe0577028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 162.101846][T10231] RAX: ffffffffffffffda RBX: 00007f2fe1da5fa0 RCX: 00007f2fe1b1f559 [ 162.101946][T10231] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000 [ 162.101966][T10231] RBP: 00007f2fe1bb6b20 R08: ffffffffffffffff R09: 0000000000000000 [ 162.101985][T10231] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 162.102001][T10231] R13: 00007f2fe1da6038 R14: 00007f2fe1da5fa0 R15: 00007ffd33feb7f8 [ 162.102021][T10231] [ 162.343849][T10235] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 162.346076][T10235] ext4 filesystem being mounted at /560/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.592308][ T3305] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 162.602808][ T3306] ================================================================== [ 162.602849][ T3306] BUG: KCSAN: data-race in __xa_clear_mark / xas_find_marked [ 162.602905][ T3306] [ 162.602909][ T3306] read-write to 0xffff888105df5470 of 8 bytes by interrupt on cpu 1: [ 162.602926][ T3306] __xa_clear_mark+0xf5/0x1e0 [ 162.602957][ T3306] __folio_end_writeback+0xe7/0x530 [ 162.602997][ T3306] folio_end_writeback_no_dropbehind+0x6d/0x200 [ 162.603029][ T3306] folio_end_writeback+0x1c/0x70 [ 162.603057][ T3306] bh_end_async_write+0x18b/0x230 [ 162.603087][ T3306] bio_endio+0x390/0x570 [ 162.603122][ T3306] blk_update_request+0x33a/0x710 [ 162.603167][ T3306] blk_mq_end_request+0x26/0x50 [ 162.603206][ T3306] lo_complete_rq+0x98/0x130 [ 162.603240][ T3306] blk_done_softirq+0x77/0xb0 [ 162.603266][ T3306] handle_softirqs+0xcc/0x2a0 [ 162.603286][ T3306] run_ksoftirqd+0x1c/0x30 [ 162.603314][ T3306] smpboot_thread_fn+0x32f/0x520 [ 162.603339][ T3306] kthread+0x223/0x270 [ 162.603361][ T3306] ret_from_fork+0x146/0x330 [ 162.603391][ T3306] ret_from_fork_asm+0x1a/0x30 [ 162.603419][ T3306] [ 162.603426][ T3306] read to 0xffff888105df5470 of 8 bytes by task 3306 on cpu 0: [ 162.603446][ T3306] xas_find_marked+0x211/0x650 [ 162.603483][ T3306] filemap_get_folios_tag+0xf7/0x400 [ 162.603515][ T3306] filemap_write_and_wait_range+0x1f5/0x370 [ 162.603544][ T3306] sync_blockdev+0x35/0x50 [ 162.603565][ T3306] sync_filesystem+0x168/0x190 [ 162.603594][ T3306] generic_shutdown_super+0x4c/0x220 [ 162.603624][ T3306] kill_block_super+0x2d/0xb0 [ 162.603658][ T3306] deactivate_locked_super+0x73/0x180 [ 162.603693][ T3306] deactivate_super+0x9a/0xb0 [ 162.603723][ T3306] cleanup_mnt+0x143/0x1c0 [ 162.603754][ T3306] __cleanup_mnt+0x19/0x20 [ 162.603784][ T3306] task_work_run+0x130/0x1a0 [ 162.603811][ T3306] exit_to_user_mode_loop+0x1e4/0x8c0 [ 162.603852][ T3306] do_syscall_64+0x212/0x360 [ 162.603884][ T3306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.603910][ T3306] [ 162.603915][ T3306] value changed: 0x0000000000000001 -> 0x0000000000000000 [ 162.603929][ T3306] [ 162.603934][ T3306] Reported by Kernel Concurrency Sanitizer on: [ 162.603948][ T3306] CPU: 0 UID: 0 PID: 3306 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(lazy) [ 162.603981][ T3306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 162.603998][ T3306] ================================================================== [ 162.748650][T10243] device-mapper: ioctl: Invalid ioctl structure: uuid À@, name , dev 5b [ 162.896060][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.