last executing test programs: 1m24.153036878s ago: executing program 3 (id=3162): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x34}, 0x6}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x6, &(0x7f0000000140)={0x7d, {{0x29, 0x0, 0x2000000, @rand_addr=' \x01\x00', 0x1005}}}, 0x88) 1m24.11455802s ago: executing program 3 (id=3163): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xe, 0xa}, {0x8, 0x7}}}, 0x24}}, 0x20048084) 1m24.075474992s ago: executing program 3 (id=3165): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f00000014c0)={0xc, {"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", 0x1000}}, 0x1006) 1m23.803254286s ago: executing program 3 (id=3179): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x50bd2f, 0xfffffffc, {0x60, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_etf={{0x8}, {0xfffffffffffffea5, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xb, 0xb}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x3004408c) 1m23.686640622s ago: executing program 3 (id=3185): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) 1m23.618192125s ago: executing program 3 (id=3189): unshare(0x64000600) r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f00000002c0)="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", 0xfc) 1m8.603297131s ago: executing program 32 (id=3189): unshare(0x64000600) r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f00000002c0)="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", 0xfc) 1m2.831402061s ago: executing program 0 (id=3833): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x40000) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x2}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x200000035}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) 1m2.792190653s ago: executing program 0 (id=3835): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file2\x00', 0x404, &(0x7f0000000640)={[{@nojournal_checksum}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@noauto_da_alloc}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@dioread_lock}]}, 0x3, 0x439, &(0x7f0000000200)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="0002000000800000140012800900010076657468000000000400028008000300"], 0x48}}, 0x8000) 1m2.65283469s ago: executing program 0 (id=3839): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x1, {0x41, 0x0, 0x3}}, 0x10) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x9d3354bba4295a8d, {{0x41}}}, 0x10) 1m2.579561043s ago: executing program 0 (id=3842): symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$9p_unix(&(0x7f00000000c0)='./file0/file0/..\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x12d7498, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000040)={0xa0202, 0x0, 0x11}, 0x18) 1m2.514340977s ago: executing program 0 (id=3845): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)={0x54, r1, 0x1, 0x70bd25, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x6}, {0xc, 0x90, 0x239f}}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000) 1m2.24590422s ago: executing program 0 (id=3853): setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x1}, 0x8) unshare(0x22020600) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x2}, 0xa0) 1m2.193747093s ago: executing program 33 (id=3853): setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x1}, 0x8) unshare(0x22020600) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x2}, 0xa0) 4.895230304s ago: executing program 2 (id=6048): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) close_range(r0, 0xffffffffffffffff, 0x0) 4.809352708s ago: executing program 2 (id=6051): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, &(0x7f0000001dc0)={0x9, 0x0, 0x80000}, 0x20) 4.807616908s ago: executing program 2 (id=6052): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) fcntl$lock(r0, 0x24, &(0x7f0000000040)={0x0, 0x4, 0x4, 0xfffffffffffffff7}) 4.542390981s ago: executing program 2 (id=6063): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4010, &(0x7f00000001c0), 0x2, 0xbd8, &(0x7f00000083c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xa0242, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file3\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x4) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x2) 2.158253591s ago: executing program 4 (id=6118): socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) syz_genetlink_get_family_id$tipc(&(0x7f0000000880), 0xffffffffffffffff) 2.129359063s ago: executing program 4 (id=6119): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0) 2.045094337s ago: executing program 4 (id=6121): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) r1 = dup(r0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000940), r1) 2.022200508s ago: executing program 4 (id=6122): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x800, 0x0, 0x103, 0x9, 0xfc}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0xa, 0x4e22, 0x80000, @loopback, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000000e80)=[@dstopts={{0x18, 0x29, 0x37, {0x5c}}}], 0x18}, 0x841) 1.998892909s ago: executing program 4 (id=6124): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 1.962110941s ago: executing program 4 (id=6125): socket(0x2d, 0x2, 0x0) r0 = syz_io_uring_setup(0x231, &(0x7f0000000180)={0x0, 0xdd68, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0x0) 1.440112167s ago: executing program 1 (id=6128): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0x1a0, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_NAT={0xa4, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x80, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x38}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT={0xe0, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x60, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x6c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x17}}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @private=0xa010100}}}]}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 1.439970247s ago: executing program 5 (id=6129): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/sco\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/dev_mcast\x00') close_range(r0, 0xffffffffffffffff, 0x0) 1.439658847s ago: executing program 5 (id=6131): r0 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x6, 0x0, 0x38159f4e, 0xd25f, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2000004, 0x2, @perf_bp={0x0, 0x2}, 0x10088a, 0x7ff, 0x4, 0x0, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x100000b, 0x12011, r0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x47, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x30040, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x182, 0x6}, 0x6025, 0x4005, 0x4, 0x0, 0x80000000, 0x1, 0xa, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) 1.155071471s ago: executing program 1 (id=6134): r0 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r0, r0, 0x21) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4790, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0) 1.119712293s ago: executing program 5 (id=6135): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x48, 0x0, &(0x7f0000000680)="e3ef7f670000ec6783b4241544940000000000000000000000000033a42c0400000000000000544b00aab05450dc23d925bde6a1b56f92241432fa00228f11b0cc67e2e658d909c5", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r0 = syz_open_dev$sg(&(0x7f0000000140), 0xa, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 1.046816507s ago: executing program 2 (id=6063): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4010, &(0x7f00000001c0), 0x2, 0xbd8, &(0x7f00000083c0)="$eJzs3M1rHOcZAPBnRqu1ZKtduZRS91KVUmwoXUsuMrUp1C4uvfRQaK8FC3llhNYfSCquZB1W7T9Q2p5begk4MQk5xGdfEpJrLol9TcghYIJiJWBCsmH2Q1K8Wkm2dzWO/PvBu/O+887u8zwer2Ze2N0AXlhj2UMacSwiLiYRpdb+NCKKjd5QRK153PrayvTnayvTSdTrf/okiSQiHq6tTLdfK2ltj7QGQxHx7m+T+N4/OuMuLC3PTVWrlfnW+OTilesnF5aWfzF7Zepy5XLl6sTpX02emjw9fmayZ7U++uDcnc9+8vuPal+8/OXtT//9UhLnYqQ1t7WOXhmLsY1/k60KETHV62A5GWjVs7XOpLDLk9I+JwUAQFfplnu4H0QpBmLz5q0Ub76Xa3IAAABAT9QHIuoAAADAAZdY/wMAAMAB1/4cwMO1lel2y/cTCfvrwfmIGG3Wv95qzZlC1BrboRiMiMMPk9j6tdak+bRnNhYRH94/81rWouN7yP+71YMQO6qtRsQPtzv/SaP+0ca3uDvrTyNivAfxxx4b7/f/v2ep/1wP4uddPwAvprvnmxeyzutfunH/E9tc/wrbXLueRt7Xv/b933rH/d9m/QNd7v/+uMcYN2/990a3uaz+X9/53avtlsXPts9U1BN4sBrxo8J29Scb9Sdd6r+4xxilr25Uus3lXX/9/xHHY/v625Kdf5/o5MxstTLefNw2xuo7k690i593/dn5P9yl/vbvP3U7/9f3GOMvFy683rHz/mZ35/rTj4vJnxu9YmvP36YWF+cnIorJHzr3n9ohkdrmMe3XyOo/8dOd3//b1T/QfLnGXLYWWG1ts/HfHwv7m9s33+iWUnv998Tnf3jXI/Ykq/9Sl/O/tf63C53n/597jPGzt/51otvc1vVv1rL47bUwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALSlETESSVre6KdpuRxxJCK+H4fT6rWFxZ/PXPvr1UvZXMRoDKYzs9XKeESUmuMkG080+pvjU4+NfxkRRyPiP6Xhxrg8fa16Ke/iAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2HAkIkYiScsRkUbEeilNy+W8swIAAAB6bjTvBAAAAIC+s/4HAACAg8/6HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgD47+uO795KIqJ0dbrRMsTU3mGtmQL+leScA5GYg7wSA3BTyTgDIzROu8d0uwAGU7DI/1HXmUM9zAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOD5dfzY3XtJRNTODjdaptiaG8w1M6Df0rwTAHIzsNNkYf/yAPaftzi8uKzxgWSX+aHNY2rfnDnUt5wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeP6MNFqSliOi2NpXLkd8JyJGYzCZma1WxiPiuxHxfmnwUDaeyDlnAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAem9haXluqlqtzGedNFqdjT3fgk4kzUr6HqsVp5Z/yTo96RTjKZ/+qF6v55183zu5/lkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAnC0vLc1PVamV+Ie9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgLwtLC3PTVWrlfk+dvKuEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/HwdAAD///TiCwo=") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xa0242, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file3\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x4) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x2) 1.010216789s ago: executing program 5 (id=6136): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x44, 0x0, &(0x7f0000000240)="e300c0678bb63701fd85b69fb68a0000ec67838717bd86ddece156d0f9421c617dd2455138a253e98cf382a75b4e359485bd744edf53e823bd97b020c801a21fb202f078", 0x0, 0x403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2}, 0x50) r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x6f5e, 0x2) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 995.63431ms ago: executing program 1 (id=6137): r0 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x9, &(0x7f0000000240)=0x0) connect$can_bcm(r0, &(0x7f0000000000), 0x10) io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x400000, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000200)="0500000093c21faf16da39de706f646800580f02000000003f427e000000000000580f02000000003f420f00000000000029ffffff000000", 0x38}]) 886.886945ms ago: executing program 5 (id=6140): r0 = socket(0x11, 0xa, 0x5) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @broadcast}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendto$inet(r0, &(0x7f0000000100), 0x5ee, 0x800, &(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x10) 825.576178ms ago: executing program 6 (id=6141): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000c00000018000180140002006261746164765f736c6176655f310000600003805c"], 0x8c}}, 0x0) 819.381379ms ago: executing program 1 (id=6142): r0 = syz_io_uring_setup(0xd86, &(0x7f0000000140)={0x0, 0x2c32, 0x400, 0x1, 0x89}, &(0x7f00000001c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000380)='./cgroup\x00', 0x2, 0x298f82}) io_uring_enter(r0, 0x3516, 0xaddf, 0x2, 0x0, 0x1517f) 737.036493ms ago: executing program 5 (id=6143): syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x1000000, &(0x7f00000000c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b) ftruncate(r0, 0x0) 689.493905ms ago: executing program 6 (id=6144): r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x68, 0x10, 0x437, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x20c89, 0x48044}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x38, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LINK={0x8, 0x1, r1}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}, @IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x2000c800}, 0x20000000) 583.90886ms ago: executing program 1 (id=6145): r0 = io_uring_setup(0x5741, &(0x7f00000001c0)={0x0, 0x7c27, 0x0, 0x1040, 0x1fb}) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 549.940202ms ago: executing program 1 (id=6146): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x404, &(0x7f0000000340)={[{@errors_remount}, {@nodiscard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@barrier}, {@jqfmt_vfsold}, {@quota}]}, 0x1, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) sync() rename(&(0x7f00000003c0)='./file1\x00', &(0x7f0000000000)='./file0/file0\x00') 522.367093ms ago: executing program 6 (id=6147): r0 = getpid() syz_pidfd_open(r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='fdinfo/3\x00') read$eventfd(r1, &(0x7f0000000280), 0x8) 389.14809ms ago: executing program 6 (id=6148): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0x8}]}, 0x10) syz_emit_ethernet(0xd2, &(0x7f00000000c0)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x9c, 0x11, 0x0, @local, @mcast2, {[], {0x4e21, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "8754847d6553fb2c519b47e620d4a6e6f13056d7b9e61a7e51f57ccef8eff1ae", "20a443848df49b8d2ed59cbb1b06de21c14a97b0c79d36388e0dbbadba3eaadb1bfbb05bab78ba151390d952a1323cdb", "12150b0665cf3b09d5fa65fdfbb9b4a159166460751322608fdcc306", {"ee58fac9d789d06c216759d4b59879a4", "002a589bba2cf29cfbe16d1bc1196d36"}}}}}}}}, 0x0) 98.674855ms ago: executing program 2 (id=6149): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x46, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40040, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x528, 0x2, @perf_config_ext={0x1, 0x6}, 0xc00, 0x3ffffffc, 0x0, 0x2, 0x103fb, 0xffffffff, 0x5, 0x0, 0x0, 0x0, 0x400000000000009}, 0x0, 0x1, 0xffffffffffffffff, 0xb) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r0) execve(&(0x7f0000000300)='./file0\x00', &(0x7f0000002200)={[&(0x7f0000000340)='^-%-\\x\\$})\'!&}*']}, 0x0) 97.949915ms ago: executing program 6 (id=6159): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c642b4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 0s ago: executing program 6 (id=6150): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x2, {0x2, 0x0, 0x2}}, 0x18) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x6c20}, 0x1, 0x0, 0x0, 0x40}, 0x80) kernel console output (not intermixed with test programs): e_name } for pid=12756 comm="syz.5.4081" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 136.537606][T12775] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4085'. [ 136.558369][ T28] audit: type=1400 audit(1774068526.091:12903): avc: denied { rename } for pid=12756 comm="syz.5.4081" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 136.558402][ T28] audit: type=1400 audit(1774068526.091:12904): avc: denied { rmdir } for pid=12756 comm="syz.5.4081" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 136.644719][T11521] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.675227][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.718004][ T28] audit: type=1400 audit(1774068526.291:12905): avc: denied { write } for pid=12777 comm="syz.5.4087" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 136.791666][T12785] loop5: detected capacity change from 0 to 512 [ 136.806174][T12785] EXT4-fs: Ignoring removed nobh option [ 136.850176][T12785] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.877084][T12785] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.909627][T12785] netlink: 116376 bytes leftover after parsing attributes in process `syz.5.4088'. [ 136.923905][ T28] audit: type=1400 audit(1774068526.511:12906): avc: denied { write } for pid=12804 comm="syz.4.4096" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 136.950480][ T28] audit: type=1400 audit(1774068526.531:12907): avc: denied { open } for pid=12804 comm="syz.4.4096" path="/dev/input/event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 136.957898][T12785] netlink: zone id is out of range [ 136.992401][T12785] netlink: zone id is out of range [ 137.023712][T12785] netlink: zone id is out of range [ 137.138409][T12826] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 137.155467][T12785] netlink: zone id is out of range [ 137.163294][T12785] netlink: zone id is out of range [ 137.174819][T12826] FAT-fs (loop4): error, clusters badly computed (5 != 1) [ 137.183623][T12826] FAT-fs (loop4): Filesystem has been set read-only [ 137.200994][T12785] netlink: zone id is out of range [ 137.208904][T12785] netlink: zone id is out of range [ 137.214478][T12785] netlink: zone id is out of range [ 137.220063][T12785] netlink: zone id is out of range [ 137.226939][T12785] netlink: zone id is out of range [ 137.339050][T12843] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4108'. [ 137.369397][T11521] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.426151][T12851] netlink: 128 bytes leftover after parsing attributes in process `syz.5.4110'. [ 137.458920][T12855] netlink: 'syz.4.4114': attribute type 17 has an invalid length. [ 137.645044][T12877] EXT4-fs: Ignoring removed orlov option [ 137.684112][T12877] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.742620][T11521] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.845031][T12903] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 137.879222][T12903] EXT4-fs error (device loop6): ext4_get_branch:178: inode #11: block 4294967295: comm syz.6.4135: invalid block [ 137.892832][T12903] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 137.893031][T12903] EXT4-fs (loop6): Remounting filesystem read-only [ 137.902381][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 137.902403][ C0] EXT4-fs (loop6): initial error at time 1774068527: ext4_get_branch:178: inode 11: block 4294967295 [ 137.902450][ C0] EXT4-fs (loop6): last error at time 1774068527: ext4_get_branch:178: inode 11: block 4294967295 [ 137.954220][T12903] EXT4-fs (loop6): 2 truncates cleaned up [ 137.960864][T12903] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.994738][T12116] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.065558][T12919] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4142'. [ 138.302831][T12945] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.4155: invalid block [ 138.318760][T12945] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 138.319601][T12945] EXT4-fs (loop2): Remounting filesystem read-only [ 138.328836][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 138.328859][ C1] EXT4-fs (loop2): initial error at time 1774068527: ext4_get_branch:178: inode 11: block 4294967295 [ 138.328899][ C1] EXT4-fs (loop2): last error at time 1774068527: ext4_get_branch:178: inode 11: block 4294967295 [ 138.366186][T12945] EXT4-fs (loop2): 2 truncates cleaned up [ 138.367865][T12953] netlink: 'syz.4.4158': attribute type 2 has an invalid length. [ 138.372529][T12945] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.414111][T12953] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4158'. [ 138.424893][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.525149][T12966] EXT4-fs: Ignoring removed nomblk_io_submit option [ 138.530794][T12970] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4165'. [ 138.578246][T12972] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.598092][T12966] EXT4-fs (loop1): 1 truncate cleaned up [ 138.617326][T12966] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.635442][T12979] EXT4-fs: Ignoring removed orlov option [ 138.642313][T11521] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.655421][T12979] EXT4-fs (loop2): stripe (133) is not aligned with cluster size (16), stripe is disabled [ 138.698294][T12979] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.732548][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.744721][T12979] EXT4-fs error (device loop2): ext4_check_all_de:659: inode #12: block 7: comm syz.2.4169: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 138.777018][T12979] EXT4-fs (loop2): Remounting filesystem read-only [ 138.813819][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.911441][T12993] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.981583][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.008666][T13004] rtc_cmos 00:00: Alarms can be up to one day in the future [ 139.071734][T13012] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 139.124928][T13012] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.4181: bad orphan inode 131083 [ 139.170245][T13012] loop6: lost filesystem error report for type 5 error -117 [ 139.175813][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 139.189810][ C0] EXT4-fs (loop6): initial error at time 1774068528: ext4_orphan_get:1417 [ 139.198388][ C0] EXT4-fs (loop6): last error at time 1774068528: ext4_orphan_get:1417 [ 139.208714][T13012] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.287895][T13036] set_capacity_and_notify: 9 callbacks suppressed [ 139.287911][T13036] loop1: detected capacity change from 0 to 512 [ 139.352656][T13036] EXT4-fs: Ignoring removed nomblk_io_submit option [ 139.382257][T13036] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #11: comm syz.1.4188: iget: bad extended attribute block 3153 [ 139.417018][T13036] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 139.417276][T13036] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.4188: couldn't read orphan inode 11 (err -117) [ 139.426540][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 139.426571][ C0] EXT4-fs (loop1): initial error at time 1774068529: ext4_orphan_get:1391: inode 11 [ 139.426596][ C0] EXT4-fs (loop1): last error at time 1774068529: ext4_orphan_get:1391: inode 11 [ 139.469833][T13036] loop1: lost filesystem error report for type 5 error -117 [ 139.474963][T13036] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.528741][T13036] EXT4-fs error (device loop1): ext4_readdir:265: inode #2: block 13: comm syz.1.4188: path /808/file0: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 139.552296][T13054] netlink: 'syz.5.4195': attribute type 10 has an invalid length. [ 139.590427][T13061] loop2: detected capacity change from 0 to 1024 [ 139.608869][T12116] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.632973][T13061] EXT4-fs: Ignoring removed nobh option [ 139.640331][T13068] loop5: detected capacity change from 0 to 512 [ 139.673873][T13061] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 139.702271][T13068] EXT4-fs error (device loop5): ext4_iget_extra_inode:5025: inode #12: comm syz.5.4197: corrupted in-inode xattr: bad e_name length [ 139.702730][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.723228][T13068] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 139.725743][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 139.741531][ C0] EXT4-fs (loop5): initial error at time 1774068529: ext4_iget_extra_inode:5025: inode 12 [ 139.751681][ C0] EXT4-fs (loop5): last error at time 1774068529: ext4_iget_extra_inode:5025: inode 12 [ 139.753476][T13068] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.4197: couldn't read orphan inode 12 (err -117) [ 139.807982][T13068] loop5: lost filesystem error report for type 5 error -117 [ 139.816253][T13061] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.837228][T13068] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.861682][ T3366] IPVS: starting estimator thread 0... [ 139.868651][T13061] EXT4-fs error (device loop2): ext4_find_dest_de:2050: inode #12: block 7: comm syz.2.4196: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 139.901590][T13061] EXT4-fs (loop2): Remounting filesystem read-only [ 139.923774][T13068] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4197'. [ 139.952503][T13094] loop1: detected capacity change from 0 to 2048 [ 139.960722][T11521] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.976558][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.978900][T13094] ext4 filesystem being mounted at /810/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 140.022957][T13099] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4210'. [ 140.032735][T13088] IPVS: using max 2304 ests per chain, 115200 per kthread [ 140.057420][T13099] bridge_slave_0: default FDB implementation only supports local addresses [ 140.069698][T13103] loop4: detected capacity change from 0 to 128 [ 140.099724][T13106] loop5: detected capacity change from 0 to 512 [ 140.118081][T13103] ext4 filesystem being mounted at /897/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 140.140278][T13106] ext4 filesystem being mounted at /107/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.267602][T13123] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4220'. [ 140.298462][T13134] loop5: detected capacity change from 0 to 256 [ 140.424704][T13147] x_tables: duplicate underflow at hook 1 [ 140.447113][T13150] sg_write: data in/out 414172/80 bytes for SCSI command 0x0-- guessing data in; [ 140.447113][T13150] program syz.4.4230 not setting count and/or reply_len properly [ 140.642107][T13172] loop4: detected capacity change from 0 to 2048 [ 140.943214][T13195] loop1: detected capacity change from 0 to 512 [ 140.965223][T13195] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 141.007379][T13195] EXT4-fs (loop1): 1 truncate cleaned up [ 141.027083][T13204] loop4: detected capacity change from 0 to 128 [ 141.544627][T13251] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.583487][T13259] __nla_validate_parse: 3 callbacks suppressed [ 141.583507][T13259] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4278'. [ 141.613062][T13265] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4280'. [ 141.753462][T13279] ext4 filesystem being mounted at /919/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.905130][T13301] bridge0: entered promiscuous mode [ 142.011767][T13319] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4298'. [ 142.060951][ T28] kauditd_printk_skb: 52 callbacks suppressed [ 142.060970][ T28] audit: type=1400 audit(1774068531.641:12960): avc: denied { create } for pid=13323 comm="syz.2.4302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 142.158912][ T28] audit: type=1400 audit(1774068531.671:12961): avc: denied { write } for pid=13323 comm="syz.2.4302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 142.227810][ T28] audit: type=1400 audit(1774068531.751:12962): avc: denied { setopt } for pid=13338 comm="syz.6.4309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 142.274909][T13359] netlink: 'syz.4.4314': attribute type 10 has an invalid length. [ 142.293106][ T28] audit: type=1400 audit(1774068531.841:12963): avc: denied { read write } for pid=13353 comm="syz.6.4313" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 142.323529][T13359] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 142.350267][T13359] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 142.380022][ T28] audit: type=1400 audit(1774068531.841:12964): avc: denied { open } for pid=13353 comm="syz.6.4313" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 142.390618][T13370] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4319'. [ 142.406304][T13372] netlink: 'syz.4.4314': attribute type 10 has an invalid length. [ 142.414870][T13370] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4319'. [ 142.422792][T13372] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4314'. [ 142.441145][ T28] audit: type=1400 audit(1774068531.841:12965): avc: denied { ioctl } for pid=13353 comm="syz.6.4313" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 142.444336][T13365] ext4 filesystem being mounted at /954/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.528772][T13372] batadv0: entered promiscuous mode [ 142.534025][T13372] batadv0: entered allmulticast mode [ 142.562351][ T28] audit: type=1400 audit(1774068531.961:12966): avc: denied { connect } for pid=13369 comm="syz.6.4320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 142.587755][T13372] bond0: (slave batadv0): Releasing backup interface [ 142.601911][T13372] bridge0: port 3(batadv0) entered blocking state [ 142.608960][T13372] bridge0: port 3(batadv0) entered disabled state [ 142.754074][T13403] tipc: Failed to obtain node identity [ 142.775891][T13403] tipc: Enabling of bearer rejected, failed to enable media [ 142.854415][T13419] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 142.900008][T13419] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 142.936894][ T50] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 142.947497][ T50] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 143.021779][T13439] EXT4-fs: Ignoring removed nobh option [ 143.039808][ T50] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 143.054700][T13437] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4344'. [ 143.091479][T13439] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 143.105281][ T28] audit: type=1400 audit(1774068532.671:12967): avc: denied { lock } for pid=13447 comm="syz.4.4348" path="socket:[36589]" dev="sockfs" ino=36589 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 143.127299][T13439] EXT4-fs (loop1): 1 truncate cleaned up [ 143.169782][T13456] EXT4-fs: Ignoring removed bh option [ 143.241242][T13466] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4353'. [ 143.255137][T13466] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4353'. [ 143.273390][ T28] audit: type=1401 audit(1774068532.851:12968): op=setxattr invalid_context="" [ 143.314793][T13475] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4355'. [ 143.410124][ T28] audit: type=1400 audit(1774068532.991:12969): avc: denied { ioctl } for pid=13484 comm="syz.6.4357" path="socket:[36983]" dev="sockfs" ino=36983 ioctlcmd=0x48e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 143.507284][T13495] FAT-fs (loop4): error, clusters badly computed (0 != 1) [ 143.519004][T13495] FAT-fs (loop4): Filesystem has been set read-only [ 143.543187][T13499] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 143.557673][T13499] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 144.145515][T13570] Invalid ELF header len 10 [ 144.286858][T13591] net_ratelimit: 140 callbacks suppressed [ 144.286879][T13591] openvswitch: netlink: Key type 30 is not supported [ 144.359696][T13599] set_capacity_and_notify: 12 callbacks suppressed [ 144.359717][T13599] loop1: detected capacity change from 0 to 512 [ 144.408228][T13603] loop6: detected capacity change from 0 to 1024 [ 144.427445][T13599] EXT4-fs (loop1): 1 truncate cleaned up [ 144.435178][T13603] EXT4-fs: Ignoring removed mblk_io_submit option [ 144.444083][T13603] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 144.472133][T13606] loop2: detected capacity change from 0 to 128 [ 144.473774][T13603] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 144.514396][T13606] FAT-fs (loop2): FAT read failed (blocknr 128) [ 144.635982][T13603] EXT4-fs error (device loop6): ext4_ext_check_inode:521: inode #11: comm syz.6.4414: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 144.724533][T13603] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 144.724761][T13603] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.4414: couldn't read orphan inode 11 (err -117) [ 144.734563][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 144.734583][ C0] EXT4-fs (loop6): initial error at time 1774068534: ext4_ext_check_inode:521: inode 11 [ 144.734616][ C0] EXT4-fs (loop6): last error at time 1774068534: ext4_ext_check_inode:521: inode 11 [ 144.790272][T13613] loop2: detected capacity change from 0 to 512 [ 144.813621][T13603] loop6: lost filesystem error report for type 5 error -117 [ 144.819354][T13613] ext4 filesystem being mounted at /978/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.000145][T13603] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.4414: Invalid block bitmap block 0 in block_group 0 [ 145.016427][T13623] loop2: detected capacity change from 0 to 512 [ 145.023796][T13603] EXT4-fs error (device loop6): ext4_acquire_dquot:7001: comm syz.6.4414: Failed to acquire dquot type 0 [ 145.045872][T13623] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 145.069043][T13623] EXT4-fs (loop2): 1 truncate cleaned up [ 145.089010][T13623] EXT4-fs warning (device loop2): verify_group_input:137: Cannot add at group 49 (only 1 groups) [ 145.236204][T13644] loop6: detected capacity change from 0 to 2048 [ 145.434659][T13670] loop6: detected capacity change from 0 to 764 [ 145.458486][T13674] tipc: Enabling of bearer rejected, failed to enable media [ 145.471926][T13670] Symlink component flag not implemented [ 145.501451][T13670] Symlink component flag not implemented (15) [ 145.543341][T13682] loop5: detected capacity change from 0 to 512 [ 145.569181][T13682] ext4 filesystem being mounted at /150/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.652303][T13692] loop4: detected capacity change from 0 to 2048 [ 145.715769][T13700] loop2: detected capacity change from 0 to 512 [ 145.734339][T13700] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 145.761019][T13702] EXT4-fs: Ignoring removed nobh option [ 145.800829][T13702] ------------[ cut here ]------------ [ 145.806558][T13702] EA inode 11 i_nlink=1026 [ 145.806576][T13702] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#1: syz.6.4459/13702 [ 145.822166][T13702] Modules linked in: [ 145.826111][T13702] CPU: 1 UID: 0 PID: 13702 Comm: syz.6.4459 Not tainted syzkaller #0 PREEMPT(full) [ 145.835650][T13702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 145.846015][T13702] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 145.852988][T13702] Code: 74 46 99 ff 4c 8d 2d 9d ad 5d 05 49 8d 7e 40 e8 14 e0 b5 ff 49 8b 6e 40 4c 89 e7 e8 48 db b5 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 1f 97 dd 03 66 66 66 66 66 66 2e [ 145.871191][T13700] EXT4-fs (loop2): 1 truncate cleaned up [ 145.872994][T13702] RSP: 0018:ffffc900037ab5a8 EFLAGS: 00010246 [ 145.884725][T13702] RAX: ffff88810366bd08 RBX: ffff888100794a68 RCX: ffffffff81c01878 [ 145.892939][T13702] RDX: 0000000000000402 RSI: 000000000000000b RDI: ffffffff871dc600 [ 145.901029][T13702] RBP: 000000000000000b R08: 0001888100794a1b R09: 0000000000000000 [ 145.909440][T13702] R10: ffffc900037ab4d8 R11: 0001c900037ab4d8 R12: ffff888100794a18 [ 145.917970][T13702] R13: ffffffff871dc600 R14: ffff8881007949d0 R15: 0000000000000001 [ 145.926288][T13702] FS: 00007f539e6f76c0(0000) GS:ffff8882ae9db000(0000) knlGS:0000000000000000 [ 145.935581][T13702] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 145.942219][T13702] CR2: 0000001b33e22ff8 CR3: 00000001262f0000 CR4: 00000000003506f0 [ 145.950249][T13702] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 145.958365][T13702] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 145.966410][T13702] Call Trace: [ 145.969942][T13702] [ 145.973063][T13702] ext4_xattr_set_entry+0x77c/0x1010 [ 145.978472][T13702] ext4_xattr_ibody_set+0x184/0x3c0 [ 145.983882][T13702] ext4_expand_extra_isize_ea+0xd7b/0x11a0 [ 145.990093][T13702] __ext4_expand_extra_isize+0x246/0x280 [ 145.995935][T13702] __ext4_mark_inode_dirty+0x29b/0x400 [ 146.001686][T13702] ext4_evict_inode+0x7c3/0xd60 [ 146.006918][T13702] ? __pfx_ext4_evict_inode+0x10/0x10 [ 146.012515][T13702] evict+0x2af/0x510 [ 146.016686][T13702] ? __dquot_initialize+0x146/0x7c0 [ 146.022084][T13702] iput+0x41a/0x580 [ 146.025989][T13702] ext4_process_orphan+0x1a9/0x1c0 [ 146.031361][T13702] ext4_orphan_cleanup+0x6a8/0xa00 [ 146.036784][T13702] ext4_fill_super+0x3408/0x37c0 [ 146.041932][T13702] ? set_blocksize+0x14c/0x270 [ 146.046949][T13702] ? setup_bdev_super+0x30e/0x370 [ 146.052322][T13702] ? __pfx_ext4_fill_super+0x10/0x10 [ 146.057772][T13702] get_tree_bdev_flags+0x291/0x300 [ 146.062935][T13702] ? __pfx_ext4_fill_super+0x10/0x10 [ 146.068331][T13702] get_tree_bdev+0x1f/0x30 [ 146.072883][T13702] ext4_get_tree+0x1c/0x30 [ 146.077419][T13702] vfs_get_tree+0x57/0x1d0 [ 146.082019][T13702] do_new_mount+0x288/0x8d0 [ 146.086626][T13702] path_mount+0x4d0/0xbc0 [ 146.091297][T13702] __se_sys_mount+0x28c/0x2e0 [ 146.096357][T13702] __x64_sys_mount+0x67/0x80 [ 146.101189][T13702] x64_sys_call+0x2d61/0x3020 [ 146.106396][T13702] do_syscall_64+0x12c/0x370 [ 146.111041][T13702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.117028][T13702] RIP: 0033:0x7f539fc9da0a [ 146.121484][T13702] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.141554][T13702] RSP: 002b:00007f539e6f6e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 146.150314][T13702] RAX: ffffffffffffffda RBX: 00007f539e6f6ee0 RCX: 00007f539fc9da0a [ 146.158534][T13702] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 00007f539e6f6ea0 [ 146.166683][T13702] RBP: 0000200000000180 R08: 00007f539e6f6ee0 R09: 0000000000000740 [ 146.174782][T13702] R10: 0000000000000740 R11: 0000000000000246 R12: 0000200000000140 [ 146.182804][T13702] R13: 00007f539e6f6ea0 R14: 00000000000004a3 R15: 00002000000003c0 [ 146.190981][T13702] [ 146.194205][T13702] ---[ end trace 0000000000000000 ]--- [ 146.200306][T13702] EXT4-fs (loop6): 1 orphan inode deleted [ 146.230190][T13702] EXT4-fs error (device loop6): ext4_find_dest_de:2050: inode #2: block 13: comm syz.6.4459: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 146.486020][T13748] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=34 sclass=netlink_audit_socket pid=13748 comm=syz.6.4478 [ 146.510462][T13748] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=21 sclass=netlink_audit_socket pid=13748 comm=syz.6.4478 [ 146.585177][T13761] netlink: zone id is out of range [ 146.599365][T13761] netlink: zone id is out of range [ 146.640371][T13761] netlink: zone id is out of range [ 146.653979][T13761] netlink: zone id is out of range [ 146.665270][T13761] netlink: zone id is out of range [ 146.676016][T13761] netlink: zone id is out of range [ 146.684858][T13761] netlink: zone id is out of range [ 146.690346][T13761] netlink: zone id is out of range [ 146.700625][T13761] netlink: zone id is out of range [ 146.718766][T13773] __nla_validate_parse: 7 callbacks suppressed [ 146.718785][T13773] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4492'. [ 146.718811][T13773] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4492'. [ 146.765342][T13777] SELinux: Context  is not valid (left unmapped). [ 146.814179][T13775] Symlink component flag not implemented [ 146.843863][T13775] Symlink component flag not implemented (116) [ 146.844651][T13787] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4498'. [ 146.932290][T13793] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #3: comm syz.1.4501: corrupted inode contents [ 146.969613][T13793] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 146.970125][T13793] EXT4-fs error (device loop1): ext4_dirty_inode:6450: inode #3: comm syz.1.4501: mark_inode_dirty error [ 146.979384][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 146.979405][ C0] EXT4-fs (loop1): initial error at time 1774068536: ext4_do_update_inode:5569: inode 3 [ 146.979448][ C0] EXT4-fs (loop1): last error at time 1774068536: ext4_do_update_inode:5569: inode 3 [ 147.032252][T13793] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 147.047260][T13793] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #3: comm syz.1.4501: corrupted inode contents [ 147.069700][T13793] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 147.069828][T13793] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #3: comm syz.1.4501: mark_inode_dirty error [ 147.090754][T13793] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 147.092392][T13793] __quota_error: 44 callbacks suppressed [ 147.092409][T13793] Quota error (device loop1): write_blk: dquota write failed [ 147.121326][T13793] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 147.134138][T13793] EXT4-fs error (device loop1): ext4_acquire_dquot:7001: comm syz.1.4501: Failed to acquire dquot type 0 [ 147.152178][T13793] loop1: lost filesystem error report for type 5 error -117 [ 147.152719][T13793] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #16: comm syz.1.4501: corrupted inode contents [ 147.201256][T13793] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 147.201451][T13793] EXT4-fs error (device loop1): ext4_dirty_inode:6450: inode #16: comm syz.1.4501: mark_inode_dirty error [ 147.227415][ T28] audit: type=1400 audit(1774068536.811:13012): avc: denied { create } for pid=13820 comm="syz.6.4512" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_dgram_socket permissive=1 [ 147.231251][T13793] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 147.293961][T13829] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 147.327582][T13793] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #16: comm syz.1.4501: corrupted inode contents [ 147.362754][T13829] EXT4-fs (loop6): 1 truncate cleaned up [ 147.378856][T13793] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 147.379626][T13793] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #16: comm syz.1.4501: mark_inode_dirty error [ 147.410799][T13793] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 147.440852][T13844] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4523'. [ 147.444653][ T28] audit: type=1400 audit(1774068537.011:13013): avc: denied { bind } for pid=13845 comm="syz.6.4524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 147.454558][T13793] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #16: comm syz.1.4501: corrupted inode contents [ 147.508598][T13852] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4526'. [ 147.520421][T13793] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 147.520600][T13793] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 147.536833][T13844] hsr_slave_0: left promiscuous mode [ 147.541050][T13793] loop1: lost filesystem error report for type 5 error -117 [ 147.545227][T13793] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #16: comm syz.1.4501: corrupted inode contents [ 147.566674][T13793] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 147.566925][T13793] EXT4-fs error (device loop1): ext4_truncate:4587: inode #16: comm syz.1.4501: mark_inode_dirty error [ 147.566989][T13844] hsr_slave_1: left promiscuous mode [ 147.593578][T13793] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 147.604092][T13793] loop1: lost filesystem error report for type 5 error -117 [ 147.604803][T13793] EXT4-fs (loop1): 1 truncate cleaned up [ 147.620338][T13852] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4526'. [ 147.620908][T13793] ext4 filesystem being mounted at /864/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.813157][T13874] SELinux: security_context_str_to_sid (ôa`yv©—-”|J+0lè8G[økT—ƒ_È×|nœÉUÓ5 [ 147.813157][T13874] M9) failed with errno=-22 [ 147.838215][ T28] audit: type=1326 audit(1774068537.421:13014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13875 comm="syz.4.4540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75c146c799 code=0x7ffc0000 [ 147.872878][ T28] audit: type=1326 audit(1774068537.421:13015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13875 comm="syz.4.4540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75c146c799 code=0x7ffc0000 [ 147.897131][T13874] SELinux: security_context_str_to_sid (--^$-) failed with errno=-22 [ 147.991557][ T28] audit: type=1326 audit(1774068537.421:13016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13875 comm="syz.4.4540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75c146c799 code=0x7ffc0000 [ 148.018655][ T28] audit: type=1326 audit(1774068537.421:13017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13875 comm="syz.4.4540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75c146c799 code=0x7ffc0000 [ 148.062049][ T28] audit: type=1326 audit(1774068537.421:13018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13875 comm="syz.4.4540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7f75c146c799 code=0x7ffc0000 [ 148.107918][ T28] audit: type=1326 audit(1774068537.421:13019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13875 comm="syz.4.4540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75c146c799 code=0x7ffc0000 [ 148.424627][T13920] EXT4-fs: test_dummy_encryption option not supported [ 148.435320][T13924] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 148.465569][T13924] ext2 filesystem being mounted at /869/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.480752][T13920] SELinux: security_context_str_to_sid (ÿû`Û'àˆsÃÉuàA^:=®‚) failed with errno=-22 [ 148.598127][T13939] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4568'. [ 148.610192][T13939] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4568'. [ 148.918908][T13982] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4587'. [ 149.036973][T13998] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4594'. [ 149.085037][T14001] netlink: 'syz.6.4596': attribute type 10 has an invalid length. [ 149.115015][T14005] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 149.120265][T14008] netlink: 'syz.6.4596': attribute type 10 has an invalid length. [ 149.137390][T14001] team0: Port device netdevsim1 added [ 149.162313][T14005] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 149.172866][T14005] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 149.181436][T14005] System zones: 0-2, 18-18, 34-35 [ 149.249745][T14008] team0: Port device netdevsim1 removed [ 149.262395][T14008] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 149.388056][T14031] set_capacity_and_notify: 12 callbacks suppressed [ 149.388076][T14031] loop1: detected capacity change from 0 to 128 [ 149.486811][T14031] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 149.514468][T14031] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 149.643463][T14060] loop6: detected capacity change from 0 to 1024 [ 149.651855][T14060] EXT4-fs: Ignoring removed bh option [ 149.659693][T14060] EXT4-fs: Ignoring removed oldalloc option [ 149.667170][T14060] EXT4-fs: Ignoring removed nobh option [ 150.043791][T14089] loop6: detected capacity change from 0 to 128 [ 150.049526][T14091] netlink: 'syz.5.4635': attribute type 11 has an invalid length. [ 150.219359][T14113] loop4: detected capacity change from 0 to 512 [ 150.244995][T14113] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 150.289873][T14113] EXT4-fs (loop4): 1 orphan inode deleted [ 150.297139][T14113] EXT4-fs (loop4): 1 truncate cleaned up [ 150.749154][T14169] netlink: 'syz.1.4674': attribute type 2 has an invalid length. [ 150.777665][T14177] loop2: detected capacity change from 0 to 128 [ 150.805447][T14177] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 150.828221][T14177] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 150.911383][T14183] loop2: detected capacity change from 0 to 512 [ 150.939256][T14183] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.4680: invalid indirect mapped block 4294967295 (level 1) [ 150.975567][T14183] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.4680: invalid indirect mapped block 4294967295 (level 1) [ 150.989734][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 150.989756][ C0] EXT4-fs (loop2): initial error at time 1774068540: ext4_free_branches:1023: inode 11 [ 150.989795][ C0] EXT4-fs (loop2): last error at time 1774068540: ext4_free_branches:1023: inode 11 [ 151.053154][T14183] EXT4-fs (loop2): 2 truncates cleaned up [ 151.724175][T14202] loop4: detected capacity change from 0 to 512 [ 151.788413][T14202] ext4 filesystem being mounted at /988/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.857904][T14202] EXT4-fs error (device loop4): ext4_acquire_dquot:7001: comm syz.4.4688: Failed to acquire dquot type 0 [ 152.049142][T14246] SELinux: policydb table sizes (74,0) do not match mine (8,7) [ 152.081451][T14246] SELinux: failed to load policy [ 152.083693][T14254] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=14254 comm=syz.4.4712 [ 152.099881][ T28] kauditd_printk_skb: 60 callbacks suppressed [ 152.099896][ T28] audit: type=1326 audit(1774068541.681:13078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14251 comm="syz.2.4710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f14bb9fc799 code=0x7ffc0000 [ 152.181062][ T28] audit: type=1326 audit(1774068541.681:13079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14251 comm="syz.2.4710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14bb9fc799 code=0x7ffc0000 [ 152.211632][ T28] audit: type=1326 audit(1774068541.681:13080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14251 comm="syz.2.4710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14bb9fc799 code=0x7ffc0000 [ 152.236913][ T28] audit: type=1326 audit(1774068541.721:13081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14251 comm="syz.2.4710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f14bb9fc799 code=0x7ffc0000 [ 152.272128][ T28] audit: type=1326 audit(1774068541.721:13082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14251 comm="syz.2.4710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14bb9fc799 code=0x7ffc0000 [ 152.308334][T14269] __nla_validate_parse: 6 callbacks suppressed [ 152.308353][T14269] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4719'. [ 152.346557][ T28] audit: type=1326 audit(1774068541.721:13083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14251 comm="syz.2.4710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14bb9fc799 code=0x7ffc0000 [ 152.379236][ T28] audit: type=1400 audit(1774068541.851:13084): avc: denied { name_bind } for pid=14265 comm="syz.1.4718" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 152.411206][T14276] loop1: detected capacity change from 0 to 512 [ 152.420409][ T28] audit: type=1400 audit(1774068541.851:13085): avc: denied { node_bind } for pid=14265 comm="syz.1.4718" saddr=255.255.255.255 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 152.473280][T14284] loop6: detected capacity change from 0 to 512 [ 152.473905][T14276] ext4 filesystem being mounted at /912/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.480066][T14284] EXT4-fs: Ignoring removed oldalloc option [ 152.533439][T14284] EXT4-fs (loop6): 1 truncate cleaned up [ 152.829404][T14327] netlink: 56 bytes leftover after parsing attributes in process `syz.6.4745'. [ 152.880844][ T28] audit: type=1400 audit(1774068542.461:13086): avc: denied { append } for pid=14330 comm="syz.5.4747" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 152.927047][ T28] audit: type=1400 audit(1774068542.511:13087): avc: denied { create } for pid=14332 comm="syz.1.4748" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_tcpdiag_socket permissive=1 [ 153.025562][T14345] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4753'. [ 153.093886][T14356] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4760'. [ 153.106202][T14356] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4760'. [ 153.125900][T14356] netlink: 'syz.1.4760': attribute type 13 has an invalid length. [ 153.290073][T14386] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4774'. [ 153.477271][T14404] 9pnet_fd: p9_fd_create_tcp (14404): problem binding to privport [ 153.509109][T14408] loop1: detected capacity change from 0 to 512 [ 153.524238][T14408] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.4783: invalid indirect mapped block 4294967295 (level 1) [ 153.546011][T14408] fserror_report: 3 callbacks suppressed [ 153.546029][T14408] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 153.562368][T14408] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.4783: invalid indirect mapped block 4294967295 (level 1) [ 153.571691][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 153.571712][ C0] EXT4-fs (loop1): initial error at time 1774068543: ext4_free_branches:1023: inode 11 [ 153.571750][ C0] EXT4-fs (loop1): last error at time 1774068543: ext4_free_branches:1023: inode 11 [ 153.617877][T14408] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 153.621819][T14408] EXT4-fs (loop1): 2 truncates cleaned up [ 153.651916][T14414] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 153.671790][T14414] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.4786: bg 0: block 104: invalid block bitmap [ 153.685555][T14414] loop2: lost filesystem error report for type 5 error -117 [ 153.686202][T14414] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 153.702322][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 153.702349][ C1] EXT4-fs (loop2): initial error at time 1774068543: ext4_validate_block_bitmap:432 [ 153.702396][ C1] EXT4-fs (loop2): last error at time 1774068543: ext4_validate_block_bitmap:432 [ 153.728238][T14414] loop2: lost filesystem error report for type 5 error -117 [ 153.732567][T14414] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.4786: invalid indirect mapped block 1 (level 1) [ 153.753407][T14414] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 153.755513][T14414] EXT4-fs (loop2): 1 truncate cleaned up [ 153.880619][T14430] EXT4-fs: Ignoring removed oldalloc option [ 153.889931][T14430] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.4792: invalid indirect mapped block 4294967295 (level 1) [ 153.918063][T14430] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 153.918283][T14430] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.4792: invalid indirect mapped block 4294967295 (level 1) [ 153.927504][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 153.927524][ C0] EXT4-fs (loop5): initial error at time 1774068543: ext4_free_branches:1023: inode 11 [ 153.927555][ C0] EXT4-fs (loop5): last error at time 1774068543: ext4_free_branches:1023: inode 11 [ 153.972565][T14430] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 153.973952][T14430] EXT4-fs (loop5): 2 truncates cleaned up [ 154.009035][T14430] EXT4-fs error (device loop5): ext4_inlinedir_to_tree:1324: inode #12: block 7: comm syz.5.4792: path /223/file0/file0: bad entry in directory: directory entry overrun - offset=196864, inode=4278190093, rec_len=196860, size=60 fake=0 [ 154.090662][T14442] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4798'. [ 154.154709][T14447] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4800'. [ 154.175905][T14447] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4800'. [ 154.248049][T14453] ext4 filesystem being mounted at /225/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.360971][T14464] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4807'. [ 154.461850][T14477] set_capacity_and_notify: 4 callbacks suppressed [ 154.461869][T14477] loop2: detected capacity change from 0 to 512 [ 154.551338][T14477] ext4 filesystem being mounted at /1064/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 154.613424][T14499] batadv0: entered promiscuous mode [ 154.621609][T14499] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 154.634851][T14499] batadv0: left promiscuous mode [ 154.850544][T14528] loop6: detected capacity change from 0 to 512 [ 154.857510][T14528] EXT4-fs: Ignoring removed nomblk_io_submit option [ 154.879638][T14528] ext4 filesystem being mounted at /176/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 154.914257][T14528] EXT4-fs error (device loop6): ext4_acquire_dquot:7001: comm syz.6.4838: Failed to acquire dquot type 1 [ 155.028226][ T1035] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 155.044489][ T1035] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 155.052306][ T1035] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 155.060046][ T1035] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 155.067652][ T1035] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 155.082043][ T1035] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 155.089758][ T1035] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 155.100241][ T1035] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 155.107924][ T1035] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 155.115412][ T1035] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 155.135812][ T1035] hid-generic 0000:0000:0004.0002: hidraw0: HID v0.03 Device [syz1] on syz0 [ 155.193392][T14549] fido_id[14549]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 155.578897][T14560] netlink: 'syz.1.4851': attribute type 1 has an invalid length. [ 155.629956][T14564] tipc: Enabled bearer , priority 28 [ 155.680949][T14566] loop6: detected capacity change from 0 to 512 [ 155.738908][T14566] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 155.775694][T14566] EXT4-fs (loop6): 1 truncate cleaned up [ 155.814478][T14583] netem: change failed [ 155.872540][T14592] netlink: 'syz.6.4865': attribute type 12 has an invalid length. [ 156.103887][T14612] netlink: 'syz.5.4876': attribute type 2 has an invalid length. [ 156.276902][T14628] loop2: detected capacity change from 0 to 512 [ 156.299682][T14628] EXT4-fs: Ignoring removed i_version option [ 156.310590][T14628] EXT4-fs: Ignoring removed bh option [ 156.347835][T14628] ext4 filesystem being mounted at /1076/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 156.707765][T14644] vlan2: entered promiscuous mode [ 156.715440][ T10] hid-generic 0080:0005:FFFFFFFE.0003: hidraw0: HID v0.03 Device [syz0] on syz1 [ 156.726977][T14644] bridge0: entered promiscuous mode [ 156.799713][T14646] fido_id[14646]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 156.833387][T14650] loop6: detected capacity change from 0 to 1764 [ 156.943951][T14660] tipc: Enabled bearer , priority 12 [ 157.209330][T14692] loop5: detected capacity change from 0 to 512 [ 157.248439][T14692] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 157.307558][T14692] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.4914: bad orphan inode 131083 [ 157.321491][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 157.321509][ T28] audit: type=1400 audit(1774068546.901:13101): avc: denied { ioctl } for pid=14703 comm="syz.2.4920" path="socket:[40993]" dev="sockfs" ino=40993 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 157.403784][T14692] loop5: lost filesystem error report for type 5 error -117 [ 157.405735][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 157.419800][ C0] EXT4-fs (loop5): initial error at time 1774068546: ext4_orphan_get:1417 [ 157.428633][ C0] EXT4-fs (loop5): last error at time 1774068546: ext4_orphan_get:1417 [ 157.455189][T14692] EXT4-fs mount: 80 callbacks suppressed [ 157.455209][T14692] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.507429][T14720] loop1: detected capacity change from 0 to 2048 [ 157.524069][T14692] EXT4-fs error (device loop5): ext4_readdir:265: inode #2: block 13: comm syz.5.4914: path /248/file1: bad entry in directory: '.' directory cannot be the last in data block - offset=0, inode=2, rec_len=1024, size=1024 fake=1 [ 157.565161][T14726] loop2: detected capacity change from 0 to 1024 [ 157.590078][T11521] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.663596][T14726] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a055c01c, mo2=0002] [ 157.681715][T14735] loop5: detected capacity change from 0 to 1024 [ 157.693334][T14726] System zones: 0-1, 3-36 [ 157.701923][T14726] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.738533][T14735] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 157.741694][T14740] __nla_validate_parse: 6 callbacks suppressed [ 157.741710][T14740] netlink: 96 bytes leftover after parsing attributes in process `syz.6.4937'. [ 157.781082][T14735] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 157.812395][T14735] JBD2: no valid journal superblock found [ 157.822144][T14735] EXT4-fs (loop5): Could not load journal inode [ 157.831358][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.833672][T14740] vlan2: entered allmulticast mode [ 157.850059][T14740] gretap0: entered allmulticast mode [ 157.905223][T14750] loop1: detected capacity change from 0 to 512 [ 157.961201][T14750] EXT4-fs: Ignoring removed bh option [ 157.978715][T14750] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 157.998800][T14750] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 158.009787][ T28] audit: type=1400 audit(1774068547.591:13102): avc: denied { shutdown } for pid=14757 comm="syz.2.4945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 158.047094][T14750] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 158.059041][T14750] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 158.075877][T14750] System zones: 0-2, 18-18, 34-35 [ 158.084944][T14750] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.132021][ T28] audit: type=1400 audit(1774068547.711:13103): avc: denied { mounton } for pid=14770 comm="syz.2.4951" path="/proc/2262/ns" dev="proc" ino=40714 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 158.169937][T14750] EXT4-fs error (device loop1): ext4_empty_dir:3118: inode #12: block 32: comm syz.1.4941: bad entry in directory: directory entry overrun - offset=24, inode=13, rec_len=2320, size=2048 fake=0 [ 158.252414][ T28] audit: type=1400 audit(1774068547.831:13104): avc: denied { relabelfrom } for pid=14780 comm="syz.4.4955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 158.284124][ T28] audit: type=1400 audit(1774068547.851:13105): avc: denied { relabelto } for pid=14780 comm="syz.4.4955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 158.327136][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.342349][T14788] tipc: Enabling of bearer rejected, failed to enable media [ 158.472084][T14805] EXT4-fs: Ignoring removed orlov option [ 158.504429][T14805] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.582117][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.693813][ T28] audit: type=1400 audit(1774068548.271:13106): avc: denied { getopt } for pid=14822 comm="syz.1.4975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 158.737454][T14830] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4978'. [ 158.798380][ T28] audit: type=1400 audit(1774068548.381:13107): avc: denied { create } for pid=14836 comm="syz.2.4981" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_socket permissive=1 [ 158.851340][T14842] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 158.872122][T14842] EXT4-fs (loop4): 1 truncate cleaned up [ 158.881670][T14842] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.916383][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.034533][T14867] netlink: 16178 bytes leftover after parsing attributes in process `syz.5.4994'. [ 159.122302][ T28] audit: type=1400 audit(1774068548.701:13108): avc: denied { listen } for pid=14879 comm="syz.4.5000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 159.201170][T14885] netlink: 'syz.4.5003': attribute type 1 has an invalid length. [ 159.226049][T14885] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5003'. [ 159.258853][ T28] audit: type=1326 audit(1774068548.841:13109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14892 comm="syz.5.5007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9d73cc799 code=0x7ffc0000 [ 159.283615][ T28] audit: type=1326 audit(1774068548.841:13110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14892 comm="syz.5.5007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9d73cc799 code=0x7ffc0000 [ 159.357342][T14899] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 159.366193][T14899] FAT-fs (loop5): Filesystem has been set read-only [ 159.389659][T14899] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 159.414477][T14899] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 159.426475][T14908] EXT4-fs: dax option not supported [ 159.434317][T14899] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 159.456838][T14899] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 159.477756][T14899] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 159.494751][T14899] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 159.507153][T14899] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 159.536133][T14899] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 159.547600][T14923] set_capacity_and_notify: 4 callbacks suppressed [ 159.547618][T14923] loop6: detected capacity change from 0 to 128 [ 159.559121][T14899] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 159.571238][T14899] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 159.580008][T14899] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 159.623520][T14899] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 159.637133][T14930] loop1: detected capacity change from 0 to 512 [ 159.651077][T14899] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 159.663391][T14930] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.678852][T14930] ext4 filesystem being mounted at /962/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 159.681992][T14899] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 159.710539][T14899] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 159.715452][T14930] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #2: comm syz.1.5023: corrupted inode contents [ 159.719354][T14899] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 159.720656][T14899] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 159.788245][T14899] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 159.797866][T14899] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 159.808413][T14899] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 159.818120][T14930] EXT4-fs error (device loop1): ext4_dirty_inode:6450: inode #2: comm syz.1.5023: mark_inode_dirty error [ 159.828047][T14945] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5030'. [ 159.840654][T14899] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 159.849434][T14930] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #2: comm syz.1.5023: corrupted inode contents [ 159.862583][T14899] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 159.871206][T14930] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #2: comm syz.1.5023: mark_inode_dirty error [ 159.883125][T14899] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 159.953711][T14956] loop4: detected capacity change from 0 to 1024 [ 159.962406][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.027748][T14956] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.114055][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.178417][T14979] loop2: detected capacity change from 0 to 2048 [ 160.226588][T14979] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.243300][T14994] loop4: detected capacity change from 0 to 512 [ 160.254575][T14994] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 160.333957][T14994] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 160.349547][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.382316][T15006] loop1: detected capacity change from 0 to 1024 [ 160.475017][T15006] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.522712][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.683351][T15053] team0: Cannot enslave team device to itself [ 160.846881][T15072] loop5: detected capacity change from 0 to 1024 [ 160.860371][T15072] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.909889][T15072] EXT4-fs error (device loop5): ext4_empty_dir:3107: inode #11: block 623: comm syz.5.5082: Attempting to read directory block (623) that is past i_size (638464) [ 160.942222][T15072] EXT4-fs (loop5): Remounting filesystem read-only [ 160.949703][T15090] loop1: detected capacity change from 0 to 128 [ 161.043934][T15090] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 161.063012][T15090] FAT-fs (loop1): Filesystem has been set read-only [ 161.076911][T15109] loop4: detected capacity change from 0 to 1024 [ 161.083824][T11521] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.096438][T15090] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 161.107280][T15090] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 161.116314][T15090] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 161.159014][T15090] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 161.162290][T15109] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 161.169069][T15090] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 161.197610][T15090] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 161.206594][T15090] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 161.215572][T15090] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 161.225104][T15090] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 161.234185][T15090] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 161.243039][T15090] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 161.251853][T15090] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 161.260935][T15090] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 161.269843][T15090] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 161.276865][T15109] ext4 filesystem being mounted at /1063/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.278894][T15090] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 161.297918][T15090] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 161.309533][T15090] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 161.326544][T15090] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 161.335594][T15090] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 161.347522][T15090] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 161.357362][T15109] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.5094: bg 0: block 112: padding at end of block bitmap is not set [ 161.372861][T15090] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 161.386996][T15090] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 161.400639][T15090] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 161.450981][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 161.523081][T15134] loop4: detected capacity change from 0 to 764 [ 161.782439][T15167] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5118'. [ 161.800541][T15176] xt_hashlimit: size too large, truncated to 1048576 [ 161.869507][T15183] EXT4-fs: Ignoring removed nomblk_io_submit option [ 161.898146][T15183] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.914168][T15194] process 'syz.2.5125' launched '/dev/fd/3' with NULL argv: empty string added [ 161.995563][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.033507][T15202] ip6tnl1: entered allmulticast mode [ 162.258474][T15230] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5137'. [ 162.431656][T15247] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.431791][T15247] ext4 filesystem being mounted at /240/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 162.501134][T12116] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.691229][T15261] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.740906][T15261] ext4 filesystem being mounted at /1142/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.759174][T15277] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5157'. [ 162.813290][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.871685][T15287] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5161'. [ 162.989209][T15300] netlink: 'syz.5.5168': attribute type 2 has an invalid length. [ 163.061806][T15302] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.097260][T15302] ext4 filesystem being mounted at /1070/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.305778][ T28] kauditd_printk_skb: 27 callbacks suppressed [ 163.305797][ T28] audit: type=1400 audit(1774068552.861:13138): avc: denied { write } for pid=15324 comm="syz.6.5179" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 163.497173][ T50] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:3: bg 0: block 345: padding at end of block bitmap is not set [ 163.515217][ T50] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 128 with error 117 [ 163.535773][ T50] EXT4-fs (loop4): This should not happen!! Data will be lost [ 163.535773][ T50] [ 163.558830][ T50] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 144 with max blocks 2048 with error 117 [ 163.571668][ T50] EXT4-fs (loop4): This should not happen!! Data will be lost [ 163.571668][ T50] [ 163.677956][T15344] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5189'. [ 163.689945][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.701039][T15344] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5189'. [ 163.875784][ T28] audit: type=1400 audit(1774068553.451:13139): avc: denied { getopt } for pid=15368 comm="syz.4.5200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 163.957515][ T1035] IPVS: starting estimator thread 0... [ 163.971252][T15383] EXT4-fs: Ignoring removed mblk_io_submit option [ 163.998750][T15383] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.053917][T15384] IPVS: using max 2160 ests per chain, 108000 per kthread [ 164.070877][ T28] audit: type=1400 audit(1774068553.641:13140): avc: denied { mount } for pid=15395 comm="syz.5.5211" name="/" dev="rpc_pipefs" ino=42624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 164.108363][T15383] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 164.152190][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.312973][T15428] delete_channel: no stack [ 164.360057][ T28] audit: type=1400 audit(1774068553.931:13141): avc: denied { write } for pid=15432 comm="syz.1.5231" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 164.415332][ T28] audit: type=1400 audit(1774068553.941:13142): avc: denied { recv } for pid=15435 comm="syz.6.5232" saddr=10.128.0.163 src=30036 daddr=10.128.0.121 dest=56358 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 164.473313][ T28] audit: type=1400 audit(1774068553.941:13143): avc: denied { read write } for pid=3315 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 164.501875][T15452] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 164.518498][T15452] EXT4-fs (loop4): 1 truncate cleaned up [ 164.541779][T15452] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.552673][ T28] audit: type=1400 audit(1774068553.941:13144): avc: denied { open } for pid=3315 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 164.583428][ T28] audit: type=1400 audit(1774068553.941:13145): avc: denied { ioctl } for pid=3315 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 164.583464][ T28] audit: type=1400 audit(1774068553.941:13146): avc: denied { wake_alarm } for pid=15437 comm="syz.1.5233" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 164.583493][ T28] audit: type=1400 audit(1774068554.031:13147): avc: denied { create } for pid=15445 comm="syz.1.5236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 164.617331][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.660731][T15463] tipc: Enabled bearer , priority 10 [ 164.682927][T15465] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5245'. [ 164.750451][T15467] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5246'. [ 164.933422][T15487] can0: slcan on ptm0. [ 165.037276][T15486] can0 (unregistered): slcan off ptm0. [ 165.136527][T15520] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5268'. [ 165.178457][T15524] set_capacity_and_notify: 8 callbacks suppressed [ 165.178491][T15524] loop5: detected capacity change from 0 to 128 [ 165.197140][T15531] loop4: detected capacity change from 0 to 164 [ 165.233622][T15538] net_ratelimit: 104 callbacks suppressed [ 165.233639][T15538] IPv6: addrconf: prefix option has invalid lifetime [ 165.248874][T15537] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5273'. [ 165.262292][T15531] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 165.426594][T15549] loop2: detected capacity change from 0 to 1024 [ 165.442558][T15549] ext4: Unknown parameter 'smackfstransmute' [ 165.501303][T15572] loop1: detected capacity change from 0 to 512 [ 165.517051][T15574] loop6: detected capacity change from 0 to 512 [ 165.527912][T15574] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 165.540485][T15572] EXT4-fs (loop1): orphan cleanup on readonly fs [ 165.554440][T15572] EXT4-fs error (device loop1): ext4_ext_check_inode:521: inode #13: comm syz.1.5284: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 8553(8553) [ 165.554838][T15574] EXT4-fs (loop6): 1 orphan inode deleted [ 165.579352][T15572] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 165.585771][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 165.601744][ C0] EXT4-fs (loop1): last error at time 1774068555: ext4_ext_check_inode:521: inode 13 [ 165.604196][T15572] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.5284: couldn't read orphan inode 13 (err -117) [ 165.624547][T15583] tipc: Enabled bearer , priority 10 [ 165.642333][T15574] EXT4-fs (loop6): 1 truncate cleaned up [ 165.657606][T15574] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.666900][T15572] loop1: lost filesystem error report for type 5 error -117 [ 165.670978][T15572] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 165.721571][T15593] loop4: detected capacity change from 0 to 128 [ 165.742371][T15595] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5294'. [ 165.770742][T12116] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.802182][T15572] EXT4-fs: Ignoring removed i_version option [ 165.837800][T15572] EXT4-fs: group quota file already specified [ 165.843721][T15603] sg_write: data in/out 438748/176 bytes for SCSI command 0x0-- guessing data in; [ 165.843721][T15603] program syz.2.5298 not setting count and/or reply_len properly [ 165.912658][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.019282][T15627] netlink: 27 bytes leftover after parsing attributes in process `syz.4.5310'. [ 166.195174][T15650] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 166.212577][T15650] bridge1: entered promiscuous mode [ 166.247077][T15657] loop2: detected capacity change from 0 to 512 [ 166.256833][T15650] bridge1: entered allmulticast mode [ 166.270836][T15657] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.287177][T15657] ext4 filesystem being mounted at /1177/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 166.337034][T15657] EXT4-fs error (device loop2): ext4_get_first_dir_block:3538: inode #12: comm syz.2.5325: directory missing '.' [ 166.365644][T15670] loop1: detected capacity change from 0 to 136 [ 166.368850][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.414728][T15670] Attempt to read inode for relocated directory [ 166.473694][T15678] loop2: detected capacity change from 0 to 2048 [ 166.507337][T15686] syz.5.5339 uses obsolete (PF_INET,SOCK_PACKET) [ 166.574493][T15690] tipc: Resetting bearer [ 166.604919][T15690] tipc: Resetting bearer [ 166.623974][T15701] netlink: 'syz.1.5338': attribute type 16 has an invalid length. [ 166.657842][T15701] netlink: 'syz.1.5338': attribute type 17 has an invalid length. [ 166.666981][T15690] tipc: Resetting bearer [ 166.678566][T15690] tipc: Resetting bearer [ 166.694358][T15690] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.709709][T15690] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.740419][T15690] hsr0: left promiscuous mode [ 166.771199][T15717] ieee802154 phy1 wpan1: encryption failed: -22 [ 166.782760][ T1035] tipc: Node number set to 2046665164 [ 166.868785][T15725] loop4: detected capacity change from 0 to 1024 [ 166.873932][T15701] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.877950][T15725] EXT4-fs: inline encryption not supported [ 166.882680][T15701] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.899971][T15701] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.907545][T15701] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.909925][T15725] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.072816][T15738] FAT-fs (loop5): Directory bread(block 64) failed [ 167.083676][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.114792][T15738] FAT-fs (loop5): Directory bread(block 65) failed [ 167.136642][T15738] FAT-fs (loop5): Directory bread(block 66) failed [ 167.197501][T15738] FAT-fs (loop5): Directory bread(block 67) failed [ 167.231586][T15738] FAT-fs (loop5): Directory bread(block 68) failed [ 167.267484][T15738] FAT-fs (loop5): Directory bread(block 69) failed [ 167.274284][T15738] FAT-fs (loop5): Directory bread(block 70) failed [ 167.311237][T15738] FAT-fs (loop5): Directory bread(block 71) failed [ 167.330521][T15738] FAT-fs (loop5): Directory bread(block 72) failed [ 167.345769][T15738] FAT-fs (loop5): Directory bread(block 73) failed [ 167.377208][T15767] EXT4-fs: Ignoring removed oldalloc option [ 167.397786][T15767] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 167.425476][T15767] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.5376: invalid indirect mapped block 9 (level 0) [ 167.455626][T15767] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 167.455749][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 167.471625][ C0] EXT4-fs (loop1): initial error at time 1774068557: ext4_free_branches:1023: inode 11 [ 167.481423][ C0] EXT4-fs (loop1): last error at time 1774068557: ext4_free_branches:1023: inode 11 [ 167.494445][T15767] EXT4-fs (loop1): 1 truncate cleaned up [ 167.503495][T15767] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.534156][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.546226][T15778] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 167.586485][T15778] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 167.632516][T15778] EXT4-fs (loop2): 1 truncate cleaned up [ 167.662103][T15778] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.725216][T15778] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 167.819466][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.837330][T15804] EXT4-fs: Ignoring removed orlov option [ 167.869583][T15804] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.914976][T15814] __nla_validate_parse: 2 callbacks suppressed [ 167.915002][T15814] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5398'. [ 167.925814][T15816] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5399'. [ 168.113004][T11521] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.152591][T15838] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 168.180273][T15840] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5410'. [ 168.195690][T15838] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c119, mo2=0002] [ 168.238783][T15838] System zones: 1-12 [ 168.264637][T15838] EXT4-fs error (device loop5): ext4_iget_extra_inode:5025: inode #15: comm syz.5.5406: corrupted in-inode xattr: e_value size too large [ 168.300726][T15852] syz.1.5414 (15852) used obsolete PPPIOCDETACH ioctl [ 168.301690][T15854] macsec1: entered allmulticast mode [ 168.313229][T15854] macsec0: entered allmulticast mode [ 168.318584][T15854] veth1_macvtap: entered allmulticast mode [ 168.327349][T15838] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 168.329499][T15838] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.5406: couldn't read orphan inode 15 (err -117) [ 168.338793][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 168.338817][ C1] EXT4-fs (loop5): initial error at time 1774068557: ext4_iget_extra_inode:5025: inode 15 [ 168.338862][ C1] EXT4-fs (loop5): last error at time 1774068557: ext4_iget_extra_inode:5025: inode 15 [ 168.394475][T15838] loop5: lost filesystem error report for type 5 error -117 [ 168.402258][ T28] kauditd_printk_skb: 110 callbacks suppressed [ 168.402277][ T28] audit: type=1326 audit(1774068557.981:13258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15858 comm="syz.6.5419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f539fc9c799 code=0x7ffc0000 [ 168.416544][T15838] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.448605][ T28] audit: type=1326 audit(1774068557.981:13259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15858 comm="syz.6.5419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f539fc9c799 code=0x7ffc0000 [ 168.490046][ T28] audit: type=1326 audit(1774068557.981:13260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15858 comm="syz.6.5419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7f539fc9c799 code=0x7ffc0000 [ 168.537122][ T28] audit: type=1326 audit(1774068557.981:13261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15858 comm="syz.6.5419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f539fc9c799 code=0x7ffc0000 [ 168.595275][ T28] audit: type=1326 audit(1774068557.981:13262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15858 comm="syz.6.5419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f539fc9c799 code=0x7ffc0000 [ 168.623769][ T28] audit: type=1400 audit(1774068558.151:13263): avc: denied { bind } for pid=15870 comm="syz.2.5425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 168.644501][ T28] audit: type=1400 audit(1774068558.151:13264): avc: denied { write } for pid=15870 comm="syz.2.5425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 168.683378][T11521] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.770347][T15880] EXT4-fs warning (device loop6): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 168.788144][ T28] audit: type=1400 audit(1774068558.351:13265): avc: denied { create } for pid=15883 comm="syz.1.5431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 168.810149][T15880] EXT4-fs warning (device loop6): dx_probe:849: Enable large directory feature to access it [ 168.823851][T15880] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.5430: Corrupt directory, running e2fsck is recommended [ 168.861015][T15888] devtmpfs: Too few inodes for current use [ 168.877625][ T28] audit: type=1400 audit(1774068558.441:13266): avc: denied { mount } for pid=15887 comm="syz.1.5432" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 168.906546][T15880] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2 [ 168.914983][T15880] EXT4-fs error (device loop6): ext4_iget_extra_inode:5025: inode #15: comm syz.6.5430: corrupted in-inode xattr: invalid ea_ino [ 168.929032][T15880] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 168.929375][ T28] audit: type=1400 audit(1774068558.441:13267): avc: denied { remount } for pid=15887 comm="syz.1.5432" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 168.931189][T15880] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.5430: couldn't read orphan inode 15 (err -117) [ 168.938932][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 168.938954][ C1] EXT4-fs (loop6): initial error at time 1774068558: ext4_iget_extra_inode:5025: inode 15 [ 168.938983][ C1] EXT4-fs (loop6): last error at time 1774068558: ext4_iget_extra_inode:5025: inode 15 [ 169.011143][T15893] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 198) [ 169.022862][T15893] FAT-fs (loop2): Filesystem has been set read-only [ 169.040850][T15880] loop6: lost filesystem error report for type 5 error -117 [ 169.042496][T15880] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.066805][T15893] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 198) [ 169.069164][T15893] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 198) [ 169.081840][T15880] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #2: comm syz.6.5430: corrupted xattr block 255: invalid header [ 169.084874][T15898] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 169.101486][T15880] SELinux: (dev loop6, type ext4) getxattr errno 117 [ 169.116234][T15898] ext4 filesystem being mounted at /1040/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.129972][T15880] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.157290][T15898] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:375: inode #2: comm syz.1.5437: No space for directory leaf checksum. Please run e2fsck -D. [ 169.174051][T15898] EXT4-fs error (device loop1): htree_dirblock_to_tree:1051: inode #2: comm syz.1.5437: Directory block failed checksum [ 169.237774][ T3315] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 169.292491][T15880] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5430'. [ 169.406763][T15913] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.525593][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.673253][T15958] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5467'. [ 169.720833][T15964] EXT4-fs (loop4): 1 truncate cleaned up [ 169.737461][T15964] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.767949][T15972] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 169.780007][T15964] EXT4-fs warning (device loop4): ext4_group_add:1735: No reserved GDT blocks, can't resize [ 169.794579][T15974] program syz.6.5473 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 169.812118][T15972] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.5472: bad orphan inode 131083 [ 169.825923][T15972] loop5: lost filesystem error report for type 5 error -117 [ 169.826723][T15972] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.831779][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.846660][T15976] program syz.6.5473 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 169.918677][T11521] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.160150][T16018] EXT4-fs: inline encryption not supported [ 170.197407][ T313] tipc: Subscription rejected, illegal request [ 170.221163][T16018] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.249271][T16018] ext4 filesystem being mounted at /364/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 170.307148][T11521] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.507908][T16059] netlink: 'syz.4.5510': attribute type 16 has an invalid length. [ 170.513355][T16053] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.533796][T16059] netlink: 'syz.4.5510': attribute type 17 has an invalid length. [ 170.592726][T16053] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.665798][T16073] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5520'. [ 170.700461][T16053] tipc: Resetting bearer [ 170.709558][T16053] tipc: Resetting bearer [ 170.839713][T16089] set_capacity_and_notify: 14 callbacks suppressed [ 170.839731][T16089] loop5: detected capacity change from 0 to 512 [ 170.875531][T16089] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 170.884138][T16059] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.893034][T16059] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.918429][T16089] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 170.943800][T16059] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.945768][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 170.950950][T16059] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.957365][ C0] EXT4-fs (loop5): initial error at time 1774068560: ext4_mb_generate_buddy:1315 [ 170.965284][T16089] EXT4-fs (loop5): 1 truncate cleaned up [ 170.974020][ C0] EXT4-fs (loop5): last error at time 1774068560: ext4_mb_generate_buddy:1315 [ 171.030195][T16089] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.059813][T16105] loop6: detected capacity change from 0 to 164 [ 171.095611][T16105] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 171.142464][T16105] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 171.162690][T16114] loop1: detected capacity change from 0 to 256 [ 171.222426][T16089] EXT4-fs error (device loop5): ext4_check_all_de:659: inode #12: block 7: comm syz.5.5527: bad entry in directory: directory entry overrun - offset=16, inode=2147483648, rec_len=1024, size=124 fake=0 [ 171.231646][T16122] loop4: detected capacity change from 0 to 1024 [ 171.279355][T16122] EXT4-fs: Ignoring removed orlov option [ 171.341397][T11521] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.474808][T16149] loop5: detected capacity change from 0 to 8192 [ 171.489891][T16149] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 171.802889][T16177] netlink: 240 bytes leftover after parsing attributes in process `syz.6.5568'. [ 171.960133][T16195] loop5: detected capacity change from 0 to 256 [ 172.452244][T16234] loop1: detected capacity change from 0 to 128 [ 172.468985][T16234] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 172.497967][T16234] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 172.506019][T16234] FAT-fs (loop1): Filesystem has been set read-only [ 172.512714][T16234] syz.1.5595: attempt to access beyond end of device [ 172.512714][T16234] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 172.644074][T16246] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5601'. [ 172.723198][T16254] loop6: detected capacity change from 0 to 512 [ 172.747368][T16254] ext4 filesystem being mounted at /341/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.836633][T16262] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5609'. [ 173.013611][T16272] loop4: detected capacity change from 0 to 512 [ 173.046340][T16272] ext4 filesystem being mounted at /1155/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.230533][T16290] loop4: detected capacity change from 0 to 1024 [ 173.247616][T16290] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a055c01c, mo2=0002] [ 173.281962][T16290] System zones: 0-1, 3-36 [ 173.385474][T16300] vlan3: entered allmulticast mode [ 173.446652][T16302] EXT4-fs: Ignoring removed bh option [ 173.471846][T16302] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 173.511090][T16302] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e84ce028, mo2=0000] [ 173.520960][T16302] System zones: 0-1, 3-12 [ 173.527190][T16302] EXT4-fs error (device loop4): ext4_map_blocks:818: inode #3: block 1: comm syz.4.5623: lblock 1 mapped to illegal pblock 1 (length 1) [ 173.541942][T16302] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 173.542185][T16302] EXT4-fs (loop4): Remounting filesystem read-only [ 173.551418][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 173.551436][ C1] EXT4-fs (loop4): initial error at time 1774068563: ext4_map_blocks:818: inode 3: block 1 [ 173.551474][ C1] EXT4-fs (loop4): last error at time 1774068563: ext4_map_blocks:818: inode 3: block 1 [ 173.588264][T16302] __quota_error: 57 callbacks suppressed [ 173.588281][T16302] Quota error (device loop4): write_blk: dquota write failed [ 173.601824][T16302] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 173.612079][T16302] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 173.620999][T16302] EXT4-fs (loop4): 1 orphan inode deleted [ 173.676745][T16306] tipc: Invalid UDP bearer configuration [ 173.676798][T16306] tipc: Enabling of bearer rejected, failed to enable media [ 173.723329][T16310] EXT4-fs: Ignoring removed bh option [ 173.729061][T16310] EXT4-fs: Ignoring removed oldalloc option [ 173.739391][T16310] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 173.751457][T16310] EXT4-fs (loop6): invalid journal inode [ 173.758842][T16310] EXT4-fs (loop6): can't get journal size [ 173.766716][T16310] EXT4-fs (loop6): 1 truncate cleaned up [ 173.926745][ T28] audit: type=1326 audit(1774068563.511:13325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16316 comm="syz.1.5632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c4c76c799 code=0x7ffc0000 [ 173.952342][ T28] audit: type=1326 audit(1774068563.511:13326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16316 comm="syz.1.5632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c4c76c799 code=0x7ffc0000 [ 173.979979][ T28] audit: type=1326 audit(1774068563.531:13327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16316 comm="syz.1.5632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7f9c4c76c799 code=0x7ffc0000 [ 174.005187][ T28] audit: type=1326 audit(1774068563.531:13328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16316 comm="syz.1.5632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c4c76c799 code=0x7ffc0000 [ 174.030137][ T28] audit: type=1326 audit(1774068563.531:13329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16316 comm="syz.1.5632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c4c76c799 code=0x7ffc0000 [ 174.121393][T16332] sch_fq: defrate 4294967295 ignored. [ 174.165842][ T28] audit: type=1326 audit(1774068563.741:13330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16337 comm="syz.2.5640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14bb9fc799 code=0x7ffc0000 [ 174.222764][ T28] audit: type=1326 audit(1774068563.741:13331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16337 comm="syz.2.5640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14bb9fc799 code=0x7ffc0000 [ 174.278181][T16336] ext4 filesystem being mounted at /347/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 174.609727][T16372] EXT4-fs: Ignoring removed nomblk_io_submit option [ 174.692227][T16379] tmpfs: Bad value for 'mpol' [ 174.743399][T16383] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 174.750863][T16383] IPv6: NLM_F_CREATE should be set when creating new route [ 174.879566][T16387] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a055c01c, mo2=0002] [ 174.895420][T16387] System zones: 0-1, 3-36 [ 175.063713][T16396] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5664'. [ 175.087682][T16396] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5664'. [ 175.098879][T16396] netlink: 'syz.2.5664': attribute type 13 has an invalid length. [ 175.108842][T16398] netlink: 'syz.6.5666': attribute type 21 has an invalid length. [ 175.126843][T16396] netlink: 'syz.2.5664': attribute type 12 has an invalid length. [ 175.644382][T16460] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5695'. [ 175.720295][T16468] netlink: 'syz.5.5700': attribute type 5 has an invalid length. [ 175.806430][T16481] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5707'. [ 175.835802][T16481] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5707'. [ 175.844771][T16481] netlink: 'syz.2.5707': attribute type 18 has an invalid length. [ 175.857494][T16481] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5707'. [ 175.913261][T16496] set_capacity_and_notify: 8 callbacks suppressed [ 175.913276][T16496] loop1: detected capacity change from 0 to 512 [ 175.941450][T16499] loop4: detected capacity change from 0 to 512 [ 175.979778][T16499] ext4 filesystem being mounted at /1176/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.980556][T16496] FAT-fs (loop1): FAT read failed (blocknr 128) [ 176.008586][T16499] EXT4-fs: Ignoring sb option on remount [ 176.014381][T16499] EXT4-fs: Remounting fs w/o journal so ignoring data_err option [ 176.022571][T16499] EXT4-fs: Cannot change journaled quota options when quota turned on [ 176.129939][T16506] loop2: detected capacity change from 0 to 2048 [ 176.138808][T16508] loop1: detected capacity change from 0 to 512 [ 176.154309][T16508] EXT4-fs: Ignoring removed mblk_io_submit option [ 176.170419][T16512] loop4: detected capacity change from 0 to 164 [ 176.181746][T16508] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 176.205183][T16508] EXT4-fs (loop1): 1 orphan inode deleted [ 176.221696][T16508] EXT4-fs (loop1): 1 truncate cleaned up [ 176.390869][T16533] loop4: detected capacity change from 0 to 512 [ 176.399022][T16533] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 176.432100][T16533] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 176.440734][T16533] System zones: 1-12 [ 176.440872][ T50] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:3: bg 0: block 64: padding at end of block bitmap is not set [ 176.459624][T16533] EXT4-fs (loop4): 1 truncate cleaned up [ 176.467801][ T50] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 176.485087][T16533] EXT4-fs warning (device loop4): ext4_group_extend:1890: can't read last block, resize aborted [ 176.503699][ T50] EXT4-fs (loop2): This should not happen!! Data will be lost [ 176.503699][ T50] [ 176.515135][ T50] EXT4-fs (loop2): Total free blocks count 0 [ 176.522549][ T50] EXT4-fs (loop2): Free/Dirty block details [ 176.530300][ T50] EXT4-fs (loop2): free_blocks=0 [ 176.535309][ T50] EXT4-fs (loop2): dirty_blocks=512 [ 176.586899][ T50] EXT4-fs (loop2): Block reservation details [ 176.592999][ T50] EXT4-fs (loop2): i_reserved_data_blocks=32 [ 176.628714][ T50] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 480 with error 28 [ 176.669685][T16551] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5738'. [ 176.684314][ T50] EXT4-fs (loop2): This should not happen!! Data will be lost [ 176.684314][ T50] [ 176.976819][T16587] netlink: 'syz.5.5749': attribute type 16 has an invalid length. [ 177.018148][T16577] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.035946][T16577] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.064191][T16587] netlink: 'syz.5.5749': attribute type 17 has an invalid length. [ 177.212024][T16623] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5770'. [ 177.241649][T16625] loop4: detected capacity change from 0 to 256 [ 177.274136][T16625] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 177.298258][T16625] FAT-fs (loop4): Filesystem has been set read-only [ 177.348333][T16587] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.355466][T16587] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.387518][T16587] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.394799][T16587] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.547418][T16646] loop6: detected capacity change from 0 to 512 [ 177.574357][T16648] netlink: 52 bytes leftover after parsing attributes in process `syz.5.5782'. [ 177.605968][T16648] netlink: 56 bytes leftover after parsing attributes in process `syz.5.5782'. [ 177.822019][T16683] loop1: detected capacity change from 0 to 512 [ 177.888084][T16688] netlink: 'syz.6.5794': attribute type 16 has an invalid length. [ 177.913035][T16680] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.922906][T16688] netlink: 'syz.6.5794': attribute type 17 has an invalid length. [ 177.930305][T16680] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.102489][T16688] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.109716][T16688] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.147738][T16688] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.154890][T16688] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.336208][T16720] nftables ruleset with unbound set [ 178.533216][T16734] loop6: detected capacity change from 0 to 512 [ 178.565170][T16734] EXT4-fs (loop6): 1 truncate cleaned up [ 178.610300][T16740] netlink: 'syz.2.5823': attribute type 8 has an invalid length. [ 178.730877][T16752] tipc: Bearer : already 2 bearers with priority 10 [ 178.750111][T16752] tipc: Bearer : trying with adjusted priority [ 178.758713][T16752] tipc: Enabling of bearer rejected, failed to enable media [ 179.148661][T16782] EXT4-fs (loop5): orphan cleanup on readonly fs [ 179.155762][T16782] __quota_error: 55 callbacks suppressed [ 179.155779][T16782] Quota error (device loop5): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 179.171849][T16782] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 179.182651][T16782] EXT4-fs error (device loop5): ext4_acquire_dquot:7001: comm syz.5.5842: Failed to acquire dquot type 1 [ 179.194266][T16782] loop5: lost filesystem error report for type 5 error -117 [ 179.194752][T16782] Quota error (device loop5): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 179.202226][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 179.202246][ C1] EXT4-fs (loop5): last error at time 1774069081: ext4_acquire_dquot:7001 [ 179.228086][T16782] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 179.240016][T16782] EXT4-fs error (device loop5): ext4_acquire_dquot:7001: comm syz.5.5842: Failed to acquire dquot type 1 [ 179.252528][T16782] loop5: lost filesystem error report for type 5 error -117 [ 179.253019][T16782] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.5842: bg 0: block 248: padding at end of block bitmap is not set [ 179.276784][T16782] loop5: lost filesystem error report for type 5 error -117 [ 179.277009][T16782] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 179.295479][T16782] loop5: lost filesystem error report for type 5 error -117 [ 179.296691][T16782] Quota error (device loop5): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 179.314477][T16782] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 179.331648][T16782] EXT4-fs error (device loop5): ext4_acquire_dquot:7001: comm syz.5.5842: Failed to acquire dquot type 1 [ 179.345527][T16782] loop5: lost filesystem error report for type 5 error -117 [ 179.345824][T16782] EXT4-fs (loop5): 1 orphan inode deleted [ 179.364534][T16791] GUP no longer grows the stack in syz.1.5845 (16791): 200000006000-200000008000 (200000004000) [ 179.376377][T16791] CPU: 0 UID: 0 PID: 16791 Comm: syz.1.5845 Tainted: G W syzkaller #0 PREEMPT(full) [ 179.376414][T16791] Tainted: [W]=WARN [ 179.376421][T16791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 179.376437][T16791] Call Trace: [ 179.376445][T16791] [ 179.376454][T16791] __dump_stack+0x1d/0x30 [ 179.376485][T16791] dump_stack_lvl+0x95/0xd0 [ 179.376510][T16791] dump_stack+0x15/0x1b [ 179.376591][T16782] EXT4-fs: Ignoring removed bh option [ 179.376621][T16791] fixup_user_fault+0x4fb/0x550 [ 179.376655][T16791] fault_in_user_writeable+0x5c/0xc0 [ 179.376683][T16791] futex_lock_pi+0x60b/0x7e0 [ 179.376755][T16791] ? __pfx_futex_wake_mark+0x10/0x10 [ 179.376783][T16791] do_futex+0x21f/0x380 [ 179.376850][T16791] __se_sys_futex+0x2f6/0x370 [ 179.376925][T16791] ? xfd_validate_state+0x45/0xf0 [ 179.376956][T16791] __x64_sys_futex+0x78/0x90 [ 179.376985][T16791] x64_sys_call+0x24ab/0x3020 [ 179.377071][T16791] do_syscall_64+0x12c/0x370 [ 179.377097][T16791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.377119][T16791] RIP: 0033:0x7f9c4c76c799 [ 179.377135][T16791] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.377153][T16791] RSP: 002b:00007f9c4b1bf028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 179.377209][T16791] RAX: ffffffffffffffda RBX: 00007f9c4c9e5fa0 RCX: 00007f9c4c76c799 [ 179.377223][T16791] RDX: 00000000fffff7fc RSI: 000000000000008d RDI: 0000200000004000 [ 179.377260][T16791] RBP: 00007f9c4c802c99 R08: 0000000000000000 R09: 0000000000000000 [ 179.377339][T16791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 179.377352][T16791] R13: 00007f9c4c9e6038 R14: 00007f9c4c9e5fa0 R15: 00007ffe2ee5f5c8 [ 179.377371][T16791] [ 179.461272][ T28] audit: type=1400 audit(1774069081.979:13387): avc: denied { bind } for pid=16798 comm="syz.1.5849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 179.465809][T16782] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 179.590443][T16782] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 179.611505][T16782] EXT4-fs (loop5): can't enable nombcache during remount [ 179.798487][T16817] libceph: secret too big 289 [ 179.913449][ T28] audit: type=1326 audit(1774069082.427:13388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16773 comm="syz.4.5838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75c146c799 code=0x7fc00000 [ 179.976242][ T28] audit: type=1400 audit(1774069082.466:13389): avc: denied { getopt } for pid=16822 comm="syz.4.5860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 180.117740][ T28] audit: type=1400 audit(1774069082.621:13390): avc: denied { map } for pid=16828 comm="syz.4.5863" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 180.281196][T16845] __nla_validate_parse: 3 callbacks suppressed [ 180.281215][T16845] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5870'. [ 180.408068][T16851] Invalid ELF header len 10 [ 180.622162][T16864] EXT4-fs: Ignoring removed nomblk_io_submit option [ 180.628986][T16863] usb usb3: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 180.664942][T16864] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #11: comm syz.4.5875: iget: bad extended attribute block 3153 [ 180.683519][T16864] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 180.685264][T16864] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.5875: couldn't read orphan inode 11 (err -117) [ 180.694680][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 180.694700][ C0] EXT4-fs (loop4): initial error at time 1774069083: ext4_orphan_get:1391: inode 11 [ 180.694751][ C0] EXT4-fs (loop4): last error at time 1774069083: ext4_orphan_get:1391: inode 11 [ 180.736200][T16864] loop4: lost filesystem error report for type 5 error -117 [ 180.740442][T16864] EXT4-fs error (device loop4): ext4_lookup:1785: inode #14: comm syz.4.5875: invalid fast symlink length 39 [ 180.912435][T16882] SELinux: Context system_u:object_r:mouse_device_t:s0 is not valid (left unmapped). [ 181.071215][T16887] pimreg0: tun_chr_ioctl cmd 1074025681 [ 181.468046][T16905] set_capacity_and_notify: 7 callbacks suppressed [ 181.468096][T16905] loop2: detected capacity change from 0 to 512 [ 181.507984][T16908] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5897'. [ 181.621033][T16924] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5905'. [ 181.637203][T16924] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5905'. [ 181.687239][T16905] ext4 filesystem being mounted at /1306/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 181.887800][T16954] netlink: 27 bytes leftover after parsing attributes in process `syz.6.5917'. [ 181.958612][T16962] loop2: detected capacity change from 0 to 128 [ 182.030221][T16967] loop4: detected capacity change from 0 to 512 [ 182.048794][T16967] EXT4-fs: dax option not supported [ 182.093631][T16973] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5926'. [ 182.345978][T16999] loop1: detected capacity change from 0 to 512 [ 182.416288][T16999] ext4 filesystem being mounted at /1139/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 182.537662][T17021] wireguard: wg2: Could not create IPv4 socket [ 182.746163][T17049] bond0: entered promiscuous mode [ 182.761885][T17053] loop2: detected capacity change from 0 to 512 [ 182.763652][T17049] bond_slave_0: entered promiscuous mode [ 182.799889][T17053] ext4 filesystem being mounted at /1319/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 182.810614][T17049] bond_slave_1: entered promiscuous mode [ 182.851084][T17049] bond0: left promiscuous mode [ 182.878369][T17049] bond_slave_0: left promiscuous mode [ 182.894935][T17049] bond_slave_1: left promiscuous mode [ 182.896200][T17041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.931232][T17041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.026347][T17077] loop2: detected capacity change from 0 to 2048 [ 183.205830][T17104] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5986'. [ 183.343880][T17122] loop6: detected capacity change from 0 to 128 [ 183.733147][T17140] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6003'. [ 183.766702][T17144] program syz.6.6004 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 183.777052][T17146] loop4: detected capacity change from 0 to 128 [ 183.845511][T17152] netem: change failed [ 184.280742][T17190] loop6: detected capacity change from 0 to 1024 [ 184.307273][T17190] EXT4-fs: Ignoring removed oldalloc option [ 184.333518][T17189] loop5: detected capacity change from 0 to 4096 [ 184.344391][T17190] EXT4-fs: Ignoring removed bh option [ 184.555520][T17204] ext4 filesystem being mounted at /1331/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.568348][T17207] Failed to initialize the IGMP autojoin socket (err -2) [ 184.730565][ T28] kauditd_printk_skb: 38 callbacks suppressed [ 184.730581][ T28] audit: type=1400 audit(1774069087.122:13429): avc: denied { create } for pid=17222 comm="syz.5.6038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 184.806286][ T28] audit: type=1400 audit(1774069087.151:13430): avc: denied { read } for pid=17222 comm="syz.5.6038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 184.879830][ T28] audit: type=1400 audit(1774069087.151:13431): avc: denied { block_suspend } for pid=17222 comm="syz.5.6038" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 185.140556][ T28] audit: type=1400 audit(1774069087.524:13432): avc: denied { mount } for pid=17243 comm="syz.1.6047" name="/" dev="hugetlbfs" ino=48641 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 185.185447][T17251] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6049'. [ 185.203832][T17239] ext4 filesystem being mounted at /457/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 185.271942][T17257] netlink: 'syz.4.6053': attribute type 1 has an invalid length. [ 185.293474][T17257] netlink: 'syz.4.6053': attribute type 2 has an invalid length. [ 185.412846][ T28] audit: type=1400 audit(1774069087.798:13433): avc: denied { mount } for pid=17268 comm="syz.1.6059" name="/" dev="configfs" ino=1112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 185.464941][T17274] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 185.485386][T17274] FAT-fs (loop5): Filesystem has been set read-only [ 185.579155][T17281] EXT4-fs: inline encryption not supported [ 185.590101][ T28] audit: type=1400 audit(1774069087.965:13434): avc: denied { write } for pid=17283 comm="syz.1.6066" path="socket:[48720]" dev="sockfs" ino=48720 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 185.647203][ T28] audit: type=1400 audit(1774069088.024:13435): avc: denied { mounton } for pid=17287 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 185.694806][ T28] audit: type=1400 audit(1774069088.053:13436): avc: denied { execute_no_trans } for pid=17291 comm="syz.1.6068" path="/1158/file0" dev="tmpfs" ino=5948 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 185.758493][T17286] ext4 filesystem being mounted at /459/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.895221][T17287] Failed to initialize the IGMP autojoin socket (err -2) [ 186.049439][T17287] chnl_net:caif_netlink_parms(): no params data found [ 186.217455][T17287] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.230818][T17332] ext4 filesystem being mounted at /466/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.252836][T17287] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.263864][T17287] bridge_slave_0: entered allmulticast mode [ 186.274707][T17287] bridge_slave_0: entered promiscuous mode [ 186.308093][T17287] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.327101][T17287] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.334766][T17287] bridge_slave_1: entered allmulticast mode [ 186.342582][T17287] bridge_slave_1: entered promiscuous mode [ 186.429560][T17287] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 186.527079][T17287] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.585315][T17287] smc: adding net device veth1_to_team with user defined pnetid S [ 186.629694][T17287] team0: Port device team_slave_0 added [ 186.649360][T17287] team0: Port device team_slave_1 added [ 186.671571][T17287] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 186.679237][T17371] set_capacity_and_notify: 7 callbacks suppressed [ 186.679256][T17371] loop6: detected capacity change from 0 to 128 [ 186.710012][T17287] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 186.771699][T17287] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 186.786220][T17287] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 186.793546][T17287] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 186.820700][T17287] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 186.851822][T17287] smc: adding net device xfrm0 with user defined pnetid SYZ1 [ 186.918287][T17388] loop6: detected capacity change from 0 to 128 [ 186.927730][T17388] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 186.936083][T17388] System zones: 1-3, 19-19, 35-36 [ 186.942273][T17388] ext4 filesystem being mounted at /447/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 186.987491][T17287] hsr_slave_0: entered promiscuous mode [ 186.995314][T17287] hsr_slave_1: entered promiscuous mode [ 187.000269][ T28] audit: type=1400 audit(1774069089.349:13437): avc: denied { mount } for pid=17391 comm="syz.1.6098" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 187.001428][T17287] debugfs: 'hsr0' already exists in 'hsr' [ 187.030100][T17287] Cannot create hsr debugfs directory [ 187.118773][ T28] audit: type=1400 audit(1774069089.467:13438): avc: denied { override_creds } for pid=17396 comm="syz.1.6100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 187.155905][T17403] sg_write: process 2454 (syz.1.6102) changed security contexts after opening file descriptor, this is not allowed. [ 187.269354][T17414] loop1: detected capacity change from 0 to 1024 [ 187.311269][T17414] EXT4-fs (loop1): shut down requested (2) [ 187.322297][T17287] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.348368][T17287] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.413806][T17287] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.426763][T17429] loop1: detected capacity change from 0 to 128 [ 187.427176][T17287] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.529528][T17287] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.541332][T17287] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.592781][T17287] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.603515][T17287] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.659003][T17444] loop4: detected capacity change from 0 to 4096 [ 187.685067][T17444] EXT4-fs error (device loop4): ext4_acquire_dquot:7001: comm syz.4.6114: Failed to acquire dquot type 1 [ 187.720110][T17287] netdevsim netdevsim2 netdevsim0: renamed from eth9 [ 187.738511][ T3310] EXT4-fs unmount: 71 callbacks suppressed [ 187.738537][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.740265][T17287] netdevsim netdevsim2 netdevsim1: renamed from eth10 [ 187.773732][T17287] netdevsim netdevsim2 netdevsim2: renamed from eth11 [ 187.800826][T17287] netdevsim netdevsim2 netdevsim3: renamed from eth12 [ 187.829342][T17454] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 187.835280][T17454] dvmrp1: linktype set to 1 [ 187.940591][T17287] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.962144][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.969362][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.003616][ T108] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.010734][ T108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.131042][T17287] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 188.253414][T17287] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 188.458389][T17287] veth0_vlan: entered promiscuous mode [ 188.471127][T17287] veth1_vlan: entered promiscuous mode [ 188.521944][T17287] veth0_macvtap: entered promiscuous mode [ 188.549556][T17287] veth1_macvtap: entered promiscuous mode [ 188.627051][T17287] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 188.660756][T17287] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 188.676247][T17287] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 188.729113][T17287] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 188.782545][T17287] wireguard: wg0: Could not create IPv4 socket [ 188.838496][T17287] wireguard: wg1: Could not create IPv4 socket [ 188.886555][T17287] wireguard: wg2: Could not create IPv4 socket [ 188.954173][T17507] program syz.5.6135 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 189.080641][T17516] program syz.5.6136 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 189.117654][T17511] loop2: detected capacity change from 0 to 4096 [ 189.166818][T17511] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.201132][T17511] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #15: comm syz.2.6063: corrupted inode contents [ 189.337558][T17511] EXT4-fs error (device loop2): ext4_dirty_inode:6450: inode #15: comm syz.2.6063: mark_inode_dirty error [ 189.338386][T17538] loop5: detected capacity change from 0 to 128 [ 189.401233][T17538] syz.5.6143: attempt to access beyond end of device [ 189.401233][T17538] loop5: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 189.429452][T17511] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #15: comm syz.2.6063: corrupted inode contents [ 189.493064][T17511] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #15: comm syz.2.6063: mark_inode_dirty error [ 189.518742][T17547] loop1: detected capacity change from 0 to 512 [ 189.535829][T17538] syz.5.6143: attempt to access beyond end of device [ 189.535829][T17538] loop5: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 189.569240][T17538] Buffer I/O error on dev loop5, logical block 79, lost async page write [ 189.580704][T17538] syz.5.6143: attempt to access beyond end of device [ 189.580704][T17538] loop5: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 189.609293][T17547] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 189.613458][T17511] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #15: comm syz.2.6063: corrupted inode contents [ 189.650080][T17538] Buffer I/O error on dev loop5, logical block 80, lost async page write [ 189.679912][T17547] EXT4-fs (loop1): 1 truncate cleaned up [ 189.695461][T17511] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #15: comm syz.2.6063: mark_inode_dirty error [ 189.698517][T17547] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.730389][T17511] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #15: comm syz.2.6063: corrupted inode contents [ 189.755489][T17538] syz.5.6143: attempt to access beyond end of device [ 189.755489][T17538] loop5: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 189.775672][T17511] EXT4-fs error (device loop2): ext4_truncate:4587: inode #15: comm syz.2.6063: mark_inode_dirty error [ 189.785025][T17538] syz.5.6143: attempt to access beyond end of device [ 189.785025][T17538] loop5: rw=8390657, sector=166, nr_sectors = 2 limit=128 [ 189.808179][T17511] EXT4-fs error (device loop2) in ext4_setattr:5983: Corrupt filesystem [ 189.835398][T17538] Buffer I/O error on dev loop5, logical block 83, lost async page write [ 189.856826][T17533] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #15: comm syz.2.6063: corrupted inode contents [ 189.874554][T17538] syz.5.6143: attempt to access beyond end of device [ 189.874554][T17538] loop5: rw=8390657, sector=168, nr_sectors = 2 limit=128 [ 189.892214][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 189.892229][ T28] audit: type=1400 audit(1774069092.192:13460): avc: denied { rmdir } for pid=17510 comm="syz.2.6063" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 189.906746][T17538] Buffer I/O error on dev loop5, logical block 84, lost async page write [ 189.954768][T17287] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 189.954931][T17287] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 189.968680][T17538] syz.5.6143: attempt to access beyond end of device [ 189.968680][T17538] loop5: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 189.970723][T17287] EXT4-fs warning (device loop2): ext4_evict_inode:258: couldn't mark inode dirty (err -117) [ 189.988370][T17538] syz.5.6143: attempt to access beyond end of device [ 189.988370][T17538] loop5: rw=8390657, sector=190, nr_sectors = 2 limit=128 [ 190.044441][T17538] Buffer I/O error on dev loop5, logical block 95, lost async page write [ 190.068379][T17538] syz.5.6143: attempt to access beyond end of device [ 190.068379][T17538] loop5: rw=8390657, sector=192, nr_sectors = 2 limit=128 [ 190.084236][T17287] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.096724][T17538] Buffer I/O error on dev loop5, logical block 96, lost async page write [ 190.106701][ T23] ================================================================== [ 190.114909][ T23] BUG: KCSAN: data-race in kick_pool / wq_worker_running [ 190.122063][ T23] [ 190.124563][ T23] read-write to 0xffff888237c2a8a4 of 4 bytes by task 3405 on cpu 0: [ 190.132914][ T23] wq_worker_running+0x9b/0x120 [ 190.137867][ T23] schedule_timeout+0xca/0x180 [ 190.142726][ T23] msleep+0x4f/0x90 [ 190.147092][ T23] nsim_fib_event+0x3e32/0x4d70 [ 190.152040][ T23] nsim_fib_event_work+0x13d/0x210 [ 190.157245][ T23] process_scheduled_works+0x513/0xa10 [ 190.162967][ T23] worker_thread+0x58a/0x780 [ 190.167639][ T23] kthread+0x22a/0x280 [ 190.171893][ T23] ret_from_fork+0x150/0x360 [ 190.176575][ T23] ret_from_fork_asm+0x1a/0x30 [ 190.181357][ T23] [ 190.183761][ T23] read to 0xffff888237c2a8a4 of 4 bytes by task 23 on cpu 1: [ 190.191179][ T23] kick_pool+0x49/0x2d0 [ 190.195540][ T23] __queue_work+0x896/0xaf0 [ 190.200137][ T23] queue_work_on+0xa9/0x140 [ 190.204681][ T23] process_srcu+0xa56/0xdc0 [ 190.209623][ T23] process_scheduled_works+0x513/0xa10 [ 190.215104][ T23] worker_thread+0x58a/0x780 [ 190.219706][ T23] kthread+0x22a/0x280 [ 190.223868][ T23] ret_from_fork+0x150/0x360 [ 190.228478][ T23] ret_from_fork_asm+0x1a/0x30 [ 190.233358][ T23] [ 190.235679][ T23] value changed: 0x00000000 -> 0x00000001 [ 190.241475][ T23] [ 190.243871][ T23] Reported by Kernel Concurrency Sanitizer on: [ 190.250106][ T23] CPU: 1 UID: 0 PID: 23 Comm: kworker/1:0 Tainted: G W syzkaller #0 PREEMPT(full) [ 190.260875][ T23] Tainted: [W]=WARN [ 190.264666][ T23] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 190.274882][ T23] Workqueue: rcu_gp process_srcu [ 190.279837][ T23] ================================================================== [ 190.465146][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.036824][ T28] audit: type=1400 audit(1774069100.239:13461): avc: denied { recv } for pid=18353 comm="dhcpcd" src=68 daddr=255.255.255.255 dest=67 netif=veth1_to_bond scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1