last executing test programs: 2m5.783448758s ago: executing program 0 (id=142): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="08000800060006"], 0xfce) 2m5.595138229s ago: executing program 0 (id=145): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0xcc3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000040)="6700000011008188040f56ecdb4cb9cca7480ef435000000e3bd6efb440009000e002e0010000000ba80013ffa85f59a0000005a8c3774fa0af3dc59a933c1e6a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f", 0x67}], 0x1}, 0x0) 2m5.247074139s ago: executing program 0 (id=151): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="9879ffa09bed9e22a51e36bbf10829f06cd1fbbcb3d3845f9ab5318c0860f2e177f5c64adc199457683f7d56c047b241269ea29cf3c9905936bf2c3fae01cf", 0xfffffdfb, 0x201, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0x8, 0x40008101, 0x0, 0x0) 2m4.37527828s ago: executing program 0 (id=177): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, 0x0) syz_clone3(&(0x7f00000000c0)={0xa00400, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = open(&(0x7f0000000100)='./file1\x00', 0x64842, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x1, 0x7800, 0x0, 0x3) 2m4.236888778s ago: executing program 0 (id=179): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x20, r1, 0x301, 0x70bd28, 0x25dfdbfe, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x20}}, 0x20000034) 2m3.738912506s ago: executing program 0 (id=189): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000080)={@val={0x0, 0x6003}, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x18, 0x4000, 0x0, 0x3, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0xa000, 0x6558, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0x9, 0x0, @void}}}}}}}}, 0x32) 2m3.738812617s ago: executing program 32 (id=189): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000080)={@val={0x0, 0x6003}, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x18, 0x4000, 0x0, 0x3, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0xa000, 0x6558, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0x9, 0x0, @void}}}}}}}}, 0x32) 1m59.088512007s ago: executing program 5 (id=287): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) splice(r1, &(0x7f0000000040), r0, 0x0, 0x800000000ff, 0x0) 1m58.912463047s ago: executing program 5 (id=292): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0xe000202b}) waitid(0x2, 0x0, 0x0, 0x4, 0x0) 1m58.667558751s ago: executing program 5 (id=298): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000680003806400dec6080003400000000258000b80200001800a00010071756f7461000000100002800c0001400000000000000000340001800a0001006c696d6974000000240002800800044000000001"], 0x118}}, 0x0) 1m58.566831537s ago: executing program 5 (id=301): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r1, &(0x7f0000000240)={0x27, 0x0, 0x2, 0x6, 0x0, 0x3, "e88509de7f1939e8abff005597c8ef039a5be42200", 0x13}, 0x60) listen(r1, 0x40) close_range(r0, 0xffffffffffffffff, 0x0) 1m58.545888878s ago: executing program 5 (id=303): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x24000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) 1m58.520085319s ago: executing program 5 (id=304): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)=@newqdisc={0x3a8, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x378, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x64, 0x2, 0x3, 0x17, 0x20, 0x8, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0xffffffff}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x3a8}}, 0x0) 1m43.466097283s ago: executing program 33 (id=304): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)=@newqdisc={0x3a8, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x378, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x64, 0x2, 0x3, 0x17, 0x20, 0x8, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "dc542b4e237011fb38ddb228806571a8633206e26df63a43bbc516382325dedd79c1cf0a26379dfaf72cb5ab9ab7efe16f312ee9ab598d1ac0d7903ac69c51f1b6842ebecf00dec5deff737b59f0c1f0b57cc6c2b7b8c5b2c527aafa57222f4bd2355ccab39fa20d4033b6b687491532080101805feb9c6fa8a56a77186efcb394ce1a1cd7f2130835e3bf9e3ac25d0a102a808be13beb51f37da6d10046f131834545ee5013f43e41e91eb18a12c28540ab4106286e0f7568f6a9cd0c0da51df08e42848096b25d455ebec9adfd6e493d8c9725bc2d49bbbae0a5375b359f91d9dad20ed109ffbc52469cffd2cf5df7773f7a4c72ae167485315c326281efc4"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0xffffffff}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x3a8}}, 0x0) 1m37.283044542s ago: executing program 4 (id=685): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioprio_set$uid(0x3, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 1m37.233837395s ago: executing program 4 (id=687): r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000b80)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000080)) close(r1) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000001000)) 1m37.187184367s ago: executing program 4 (id=689): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r1}, 0xc) 1m37.114664501s ago: executing program 4 (id=693): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$inet_sctp(0x2, 0x5, 0x84) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1b8) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) 1m36.998408638s ago: executing program 4 (id=697): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) 1m36.11970631s ago: executing program 4 (id=721): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x40044}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)="ce2a36", 0x3}], 0x1, 0x0, 0x0, 0x12}}], 0x2, 0x40) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f00000002c0)=0x8001, 0x4) splice(r0, 0x0, r2, 0x0, 0x39000, 0x0) 1m36.031320434s ago: executing program 34 (id=721): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x40044}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)="ce2a36", 0x3}], 0x1, 0x0, 0x0, 0x12}}], 0x2, 0x40) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f00000002c0)=0x8001, 0x4) splice(r0, 0x0, r2, 0x0, 0x39000, 0x0) 1.593783597s ago: executing program 2 (id=2822): r0 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r1, 0x6) accept4$x25(r1, 0x0, 0x0, 0x80800) 846.082841ms ago: executing program 1 (id=2833): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x3, 0x2, 0x3, 0x0, 0xffffffffffffffff, 0x3}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="02000000040000000700000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x11, 0x15, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000009}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x61800, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2, r1}, 0xc) 813.385273ms ago: executing program 1 (id=2834): setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x2a0471a, &(0x7f0000000280)={[{@max_batch_time={'max_batch_time', 0x3d, 0xd}}]}, 0x82, 0x48f, &(0x7f0000000380)="$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") chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x10) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x10) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f00000003c0)={0x17c04, 0xffffffffffffffff, 0xb, 0x41000ff7ff, 0xc, 0x6d3}) 654.785312ms ago: executing program 2 (id=2835): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_io_uring_setup(0x6409, &(0x7f0000000300)={0x0, 0xd54b, 0x8, 0xfefffffd, 0x1a6}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x4, 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0xa) 598.378375ms ago: executing program 1 (id=2836): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x8, 0x10, 0x100000002, 0x0, 0xfff, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000000, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x4004) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x2c000010) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) 591.147716ms ago: executing program 7 (id=2837): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24, 0x3, @local, 0x6}, 0x1c) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x6b}, 0x1c) listen(r0, 0x204) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 517.35422ms ago: executing program 7 (id=2839): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$P9_RGETLOCK(r0, &(0x7f0000000040)={0x20, 0x37, 0x2, {0x1, 0x1000, 0x8, 0x0, 0x2, '[\x8d'}}, 0x20) 465.751603ms ago: executing program 3 (id=2840): unshare(0x6020480) r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x10) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cgroup.stat\x00', 0x5000000, 0x0) sendfile(r0, r2, 0x0, 0xc486) 457.627304ms ago: executing program 1 (id=2841): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/cgroup\x00') setuid(0xee01) open_by_handle_at(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="20000000f1000000", @ANYRES64=r0], 0x0) 429.122585ms ago: executing program 3 (id=2842): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000210018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000807b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0) 415.267566ms ago: executing program 1 (id=2843): r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = epoll_create1(0x0) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x1003ffffffc]}, 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000140)) pidfd_send_signal(r1, 0x11, 0x0, 0x4) 372.360378ms ago: executing program 6 (id=2844): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x10, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') ppoll(&(0x7f0000000080)=[{r0, 0x8}], 0x1, 0x0, 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x3) 371.797569ms ago: executing program 7 (id=2845): rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffeffffffffff]}, 0x0, 0x8) r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x12, 0x4, @tid=r0}, &(0x7f0000000380)=0x0) timer_settime(r1, 0x1, &(0x7f0000000080)={{0x77359400}, {0x0, 0x989680}}, 0x0) r2 = gettid() tkill(r2, 0x16) 364.566749ms ago: executing program 3 (id=2846): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd/4\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps_rollup\x00') fchdir(r0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x80000006) 349.98017ms ago: executing program 1 (id=2847): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6, 0x1, 0x0, 0x0, 0x0, 0x9, 0x1f0519, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x0, 0x8}, 0x6025, 0xc00, 0xb, 0x1, 0x2, 0x20085, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x20) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0xfffffffd, 0xfc}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) 332.213041ms ago: executing program 7 (id=2848): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000440)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9101) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0/../file0/../file0/../file0\x00', 0x0) 324.621601ms ago: executing program 3 (id=2849): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x300, 0x0, 0x1c, {[@window={0xe, 0x3}, @timestamp={0x5, 0x2, 0x7ffffff, 0x500}, @generic={0x0, 0x2, "d58838000391"}]}}}}}}, 0x4e) 318.966572ms ago: executing program 2 (id=2850): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000009c0)={0x3c, r2, 0x1, 0x78bd26, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa5}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x3}]}, 0x3c}}, 0x20) 291.369843ms ago: executing program 6 (id=2851): ioctl$USBDEVFS_GETDRIVER(0xffffffffffffffff, 0x8008550e, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x400c820, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'erspan0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b032200eb1025120212475400f6a13bb1000000080086dd4803", 0x10300, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) 281.835374ms ago: executing program 7 (id=2852): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x4000010) read$nci(r0, 0x0, 0x0) 266.641184ms ago: executing program 2 (id=2853): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002abd7000fcdbdf2507000000080001000100000008000500020000000a0004007770616e330000000c0017000201aa"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd0100000000001400000060000000000c2f00fe88a43de1a400000000000000007d01ff0200"/53], 0xfdef) 242.321216ms ago: executing program 7 (id=2854): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x4, {0x1, 0x1, 0x3, 0x1}}, 0x7) 241.968616ms ago: executing program 6 (id=2855): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@getchain={0x54, 0x66, 0x100, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xf}, {0x0, 0xc}, {0x0, 0xf}}, [{0x8, 0xb, 0x6}, {0x8, 0xb, 0x401}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0xe7da}, {0x8, 0xb, 0x36}, {0x8, 0xb, 0x800}]}, 0x54}}, 0x400c0) getsockname$packet(r0, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast2}]}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="9800000010000104fcffffff0000000000000000", @ANYRES32=r2, @ANYBLOB="0025000000000000780012800b000100697036746e6c00006800028006000f000300"], 0x98}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) 203.063298ms ago: executing program 35 (id=2854): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x4, {0x1, 0x1, 0x3, 0x1}}, 0x7) 197.807129ms ago: executing program 3 (id=2857): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r1 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x4660, 0x400, 0x3, 0x17}, &(0x7f00000004c0)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}) io_uring_enter(r1, 0x3495, 0x8cb5, 0x0, 0x0, 0x0) 166.9178ms ago: executing program 6 (id=2858): socketpair$unix(0x1, 0x2, 0x0, 0x0) setgroups(0x0, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xee00]) setregid(r0, r0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') statx(r1, &(0x7f0000000100)='.\x00', 0x0, 0x40, &(0x7f0000000400)) 145.810751ms ago: executing program 2 (id=2859): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/crypto\x00', 0x1800, 0x0) preadv(r0, &(0x7f00000012c0)=[{&(0x7f0000002080)=""/4080, 0xff0}], 0x1, 0x806, 0x3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000024c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000070000030900010073797a30000000004c000000090a01040000000000000000070000000900020073797a31000000000900010073797a3000000000080005400000001c08000a4000000000080003400000004008000f4000000006201200000c0a01030000000000000000070000070900020073797a31000000000900010073797a3000000000f4110380f01100800800034000000002"], 0x12b4}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 132.769612ms ago: executing program 6 (id=2860): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x6, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket(0x2b, 0x1, 0x1) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key(&(0x7f00000003c0)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080)="00000102", 0xfffff, r2) 56.801707ms ago: executing program 2 (id=2861): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x566, &(0x7f00000015c0)="$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") r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x9000) fallocate(r0, 0x0, 0x0, 0x8800000) r1 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x1600, 0x0, 0x3) 424.41µs ago: executing program 6 (id=2862): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000380), 0x3, 0x589, &(0x7f0000001580)="$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") openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x4842, 0x0) r0 = syz_io_uring_setup(0x1a0, &(0x7f0000000380)={0x0, 0x60d0, 0x1, 0x0, 0x3df}, &(0x7f00000006c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6003, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001700)=""/216, 0xd8}], 0x1, 0x0, 0x1}) io_uring_enter(r0, 0x47ba, 0x0, 0x28, 0x0, 0x0) 0s ago: executing program 3 (id=2863): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="1400000022000b0fd25a806c8c6f94f90124fc60", 0x14}], 0x1}, 0x4000010) kernel console output (not intermixed with test programs): de_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=15 [ 102.325183][ T7564] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=15 [ 102.379538][ T7576] loop2: detected capacity change from 0 to 128 [ 102.414143][ T7578] ext4 filesystem being mounted at /114/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.653976][ T7604] EXT4-fs (loop2): 1 truncate cleaned up [ 102.821044][ T7623] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7623 comm=syz.6.1507 [ 102.864414][ T7629] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1499'. [ 102.885981][ T7629] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1499'. [ 102.994877][ T7639] FAT-fs (loop7): codepage cp852 not found [ 103.414965][ T7674] EXT4-fs mount: 10 callbacks suppressed [ 103.414982][ T7674] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.552679][ T5064] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.628915][ T3396] kernel read not supported for file /vcs (pid: 3396 comm: kworker/0:3) [ 103.915553][ T3396] Process accounting resumed [ 104.270357][ T7707] Process accounting resumed [ 104.381228][ T7724] set_capacity_and_notify: 4 callbacks suppressed [ 104.381302][ T7724] loop2: detected capacity change from 0 to 512 [ 104.516611][ T7724] EXT4-fs (loop2): 1 orphan inode deleted [ 104.554810][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 104.554824][ T28] audit: type=1400 audit(1771303864.730:1007): avc: denied { mount } for pid=7752 comm="syz.7.1549" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 104.603836][ T7724] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.672097][ T28] audit: type=1400 audit(1771303864.840:1008): avc: denied { getopt } for pid=7758 comm="syz.7.1552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 104.742208][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.754665][ T3418] net_ratelimit: 2 callbacks suppressed [ 104.754682][ T3418] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.058186][ T7790] loop7: detected capacity change from 0 to 128 [ 105.067288][ T28] audit: type=1326 audit(1771303865.240:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7787 comm="syz.3.1564" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9203a1bf79 code=0x0 [ 105.099936][ T7790] syz.7.1563: attempt to access beyond end of device [ 105.099936][ T7790] loop7: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 105.114346][ T7790] syz.7.1563: attempt to access beyond end of device [ 105.114346][ T7790] loop7: rw=2049, sector=146, nr_sectors = 6 limit=128 [ 105.129464][ T7790] syz.7.1563: attempt to access beyond end of device [ 105.129464][ T7790] loop7: rw=8390657, sector=150, nr_sectors = 2 limit=128 [ 105.143426][ T7790] Buffer I/O error on dev loop7, logical block 75, lost async page write [ 105.152010][ T7790] syz.7.1563: attempt to access beyond end of device [ 105.152010][ T7790] loop7: rw=8390657, sector=152, nr_sectors = 2 limit=128 [ 105.166066][ T7790] Buffer I/O error on dev loop7, logical block 76, lost async page write [ 105.175795][ T7790] syz.7.1563: attempt to access beyond end of device [ 105.175795][ T7790] loop7: rw=2049, sector=170, nr_sectors = 6 limit=128 [ 105.190063][ T7790] syz.7.1563: attempt to access beyond end of device [ 105.190063][ T7790] loop7: rw=8390657, sector=174, nr_sectors = 2 limit=128 [ 105.204267][ T7790] Buffer I/O error on dev loop7, logical block 87, lost async page write [ 105.212826][ T7790] syz.7.1563: attempt to access beyond end of device [ 105.212826][ T7790] loop7: rw=8390657, sector=176, nr_sectors = 2 limit=128 [ 105.226671][ T7790] Buffer I/O error on dev loop7, logical block 88, lost async page write [ 105.235773][ T7790] syz.7.1563: attempt to access beyond end of device [ 105.235773][ T7790] loop7: rw=2049, sector=178, nr_sectors = 6 limit=128 [ 105.250154][ T7790] syz.7.1563: attempt to access beyond end of device [ 105.250154][ T7790] loop7: rw=8390657, sector=182, nr_sectors = 2 limit=128 [ 105.263918][ T7790] Buffer I/O error on dev loop7, logical block 91, lost async page write [ 105.272497][ T7790] syz.7.1563: attempt to access beyond end of device [ 105.272497][ T7790] loop7: rw=8390657, sector=184, nr_sectors = 2 limit=128 [ 105.286531][ T7790] Buffer I/O error on dev loop7, logical block 92, lost async page write [ 105.481915][ T7796] loop1: detected capacity change from 0 to 128 [ 105.488927][ T7796] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 105.502014][ T7796] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 105.543210][ T28] audit: type=1400 audit(1771303865.700:1010): avc: denied { ioctl } for pid=7797 comm="syz.6.1567" path="socket:[18320]" dev="sockfs" ino=18320 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 105.577673][ T12] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 105.604930][ T7802] loop7: detected capacity change from 0 to 1024 [ 105.645169][ T7802] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 105.665152][ T7802] ext4 filesystem being mounted at /144/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.698233][ T5460] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 105.741369][ T7812] loop7: detected capacity change from 0 to 128 [ 105.774414][ T7812] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 105.811698][ T7812] ext4 filesystem being mounted at /145/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 105.877936][ T5460] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 105.914066][ T3396] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 105.924617][ T3396] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 106.035267][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.043583][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.077024][ T7832] __nla_validate_parse: 3 callbacks suppressed [ 106.077039][ T7832] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1578'. [ 106.676956][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.685332][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.803645][ T28] audit: type=1326 audit(1771303866.970:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7889 comm="syz.7.1607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fec00bf79 code=0x7ffc0000 [ 106.854076][ T28] audit: type=1326 audit(1771303866.970:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7889 comm="syz.7.1607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fec00bf79 code=0x7ffc0000 [ 106.908150][ T28] audit: type=1326 audit(1771303866.970:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7889 comm="syz.7.1607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fec00bf79 code=0x7ffc0000 [ 106.962054][ T28] audit: type=1326 audit(1771303866.970:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7889 comm="syz.7.1607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fec00bf79 code=0x7ffc0000 [ 106.997739][ T28] audit: type=1326 audit(1771303866.970:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7889 comm="syz.7.1607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f8fec00bf79 code=0x7ffc0000 [ 107.022331][ T28] audit: type=1326 audit(1771303867.020:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7889 comm="syz.7.1607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fec00bf79 code=0x7ffc0000 [ 107.241374][ T7914] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1614'. [ 107.592677][ T7951] loop7: detected capacity change from 0 to 8192 [ 107.627619][ T7951] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 107.692611][ T7956] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1633'. [ 108.072745][ T7980] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1645'. [ 108.198969][ T7988] loop7: detected capacity change from 0 to 8192 [ 108.211670][ T7988] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 108.263464][ T7998] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.297267][ T8000] loop6: detected capacity change from 0 to 256 [ 108.319861][ T8000] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 108.352918][ T8000] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 108.396371][ T8002] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 108.403585][ T9] IPVS: starting estimator thread 0... [ 108.446123][ T7988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.464646][ T7988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.514344][ T8004] IPVS: using max 2016 ests per chain, 100800 per kthread [ 108.552476][ T8017] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1661'. [ 109.731706][ T28] kauditd_printk_skb: 86 callbacks suppressed [ 109.731784][ T28] audit: type=1326 audit(1771303869.900:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8064 comm="syz.2.1684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d9626bf79 code=0x7ffc0000 [ 109.767812][ T28] audit: type=1326 audit(1771303869.910:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8064 comm="syz.2.1684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d9626bf79 code=0x7ffc0000 [ 109.791649][ T28] audit: type=1326 audit(1771303869.910:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8064 comm="syz.2.1684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d9626bf79 code=0x7ffc0000 [ 109.817376][ T28] audit: type=1326 audit(1771303869.910:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8064 comm="syz.2.1684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f5d9626bf79 code=0x7ffc0000 [ 109.842326][ T28] audit: type=1326 audit(1771303869.910:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8064 comm="syz.2.1684" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5d9626bf79 code=0x0 [ 109.865449][ T28] audit: type=1326 audit(1771303869.930:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8064 comm="syz.2.1684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d9626bf79 code=0x7ffc0000 [ 109.897908][ T28] audit: type=1326 audit(1771303869.930:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8064 comm="syz.2.1684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d9626bf79 code=0x7ffc0000 [ 109.921736][ T28] audit: type=1326 audit(1771303869.930:1110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8064 comm="syz.2.1684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d9626bf79 code=0x7ffc0000 [ 109.950870][ T28] audit: type=1326 audit(1771303869.960:1111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8064 comm="syz.2.1684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d9626bf79 code=0x7ffc0000 [ 109.974912][ T28] audit: type=1326 audit(1771303869.960:1112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8064 comm="syz.2.1684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d9626bf79 code=0x7ffc0000 [ 110.594074][ T3528] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 111.009423][ T8104] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1701'. [ 111.051140][ T3537] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 111.074437][ T3537] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 111.153961][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.795241][ T7176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.803516][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.912413][ T8134] netlink: 'syz.2.1712': attribute type 6 has an invalid length. [ 112.099381][ T8160] loop1: detected capacity change from 0 to 512 [ 112.292726][ T8160] EXT4-fs (loop1): 1 orphan inode deleted [ 112.308246][ T8160] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.368183][ T8172] loop2: detected capacity change from 0 to 1024 [ 112.376830][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.405375][ T8172] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.522267][ T8172] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 112.537554][ T8172] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 112.550161][ T8172] EXT4-fs (loop2): This should not happen!! Data will be lost [ 112.550161][ T8172] [ 112.560048][ T8172] EXT4-fs (loop2): Total free blocks count 0 [ 112.566306][ T8172] EXT4-fs (loop2): Free/Dirty block details [ 112.572547][ T8172] EXT4-fs (loop2): free_blocks=68451041280 [ 112.578725][ T8172] EXT4-fs (loop2): dirty_blocks=3024 [ 112.584262][ T8172] EXT4-fs (loop2): Block reservation details [ 112.591130][ T8172] EXT4-fs (loop2): i_reserved_data_blocks=189 [ 112.737200][ T8196] netlink: 'syz.1.1739': attribute type 39 has an invalid length. [ 112.795779][ T8192] netlink: 'syz.7.1737': attribute type 6 has an invalid length. [ 112.828516][ T7168] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 113.005456][ T8206] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1753'. [ 113.056572][ T8206] netlink: 'syz.1.1753': attribute type 1 has an invalid length. [ 113.127976][ T8211] loop6: detected capacity change from 0 to 512 [ 113.435981][ T8211] EXT4-fs (loop6): 1 orphan inode deleted [ 113.493493][ T8211] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.545828][ T8225] loop1: detected capacity change from 0 to 512 [ 113.567599][ T8225] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 113.576744][ T8225] FAT-fs (loop1): Filesystem has been set read-only [ 113.793667][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.802046][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.907416][ T8229] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 113.924825][ T5064] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.036704][ T8234] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1756'. [ 114.138692][ T8250] loop2: detected capacity change from 0 to 1764 [ 114.146996][ T8250] iso9660: Unknown parameter 'de' [ 114.211842][ T8257] netlink: 63 bytes leftover after parsing attributes in process `syz.6.1765'. [ 114.355425][ T3396] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.479966][ T8272] loop7: detected capacity change from 0 to 512 [ 114.595430][ T8272] EXT4-fs (loop7): 1 orphan inode deleted [ 114.617689][ T8272] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.676941][ T5460] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.848355][ T8283] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 114.857878][ T3537] IPVS: starting estimator thread 0... [ 114.960677][ T8289] IPVS: using max 2304 ests per chain, 115200 per kthread [ 114.970470][ T8295] loop1: detected capacity change from 0 to 1024 [ 114.994022][ T3396] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.031202][ T8295] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.051138][ T8303] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1785'. [ 115.287288][ T8295] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 115.305564][ T8295] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1096 with error 28 [ 115.321278][ T8295] EXT4-fs (loop1): This should not happen!! Data will be lost [ 115.321278][ T8295] [ 115.331323][ T8295] EXT4-fs (loop1): Total free blocks count 0 [ 115.424540][ T8295] EXT4-fs (loop1): Free/Dirty block details [ 115.433925][ T8295] EXT4-fs (loop1): free_blocks=68451041280 [ 115.440359][ T8295] EXT4-fs (loop1): dirty_blocks=1104 [ 115.470469][ T8295] EXT4-fs (loop1): Block reservation details [ 115.479142][ T8295] EXT4-fs (loop1): i_reserved_data_blocks=69 [ 115.689957][ T7168] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1096 with error 28 [ 115.800854][ T8328] loop6: detected capacity change from 0 to 512 [ 115.919581][ T8328] EXT4-fs (loop6): 1 orphan inode deleted [ 115.932468][ T8328] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.961222][ T8339] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1799'. [ 116.241018][ T5064] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.409156][ T8383] loop2: detected capacity change from 0 to 512 [ 117.424839][ T8383] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 117.454381][ T8383] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 117.472736][ T8383] System zones: 1-12 [ 117.482977][ T8383] EXT4-fs (loop2): orphan cleanup on readonly fs [ 117.494949][ T8383] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1816: bg 0: block 361: padding at end of block bitmap is not set [ 117.532297][ T8383] loop2: lost filesystem error report for type 5 error -117 [ 117.532523][ T8383] EXT4-fs (loop2): Remounting filesystem read-only [ 117.539920][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 117.539940][ C0] EXT4-fs (loop2): initial error at time 1771303877: ext4_validate_block_bitmap:441 [ 117.539982][ C0] EXT4-fs (loop2): last error at time 1771303877: ext4_validate_block_bitmap:441 [ 117.574884][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.583172][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.622051][ T8383] EXT4-fs (loop2): 1 truncate cleaned up [ 117.642480][ T8383] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 117.667711][ T8383] EXT4-fs (loop2): shut down requested (0) [ 117.700810][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 117.980899][ T8390] loop2: detected capacity change from 0 to 512 [ 117.996945][ T8390] EXT4-fs: Ignoring removed i_version option [ 118.012999][ T8390] EXT4-fs: Ignoring removed bh option [ 118.039854][ T8390] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.066313][ T8390] ext4 filesystem being mounted at /378/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 118.145871][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.354014][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.362424][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.860725][ T8430] loop7: detected capacity change from 0 to 512 [ 119.647556][ T7168] bio_check_eod: 1 callbacks suppressed [ 119.647575][ T7168] kworker/u8:19: attempt to access beyond end of device [ 119.647575][ T7168] loop7: rw=1, sector=2384, nr_sectors = 2048 limit=512 [ 119.687374][ T7168] kworker/u8:19: attempt to access beyond end of device [ 119.687374][ T7168] loop7: rw=1, sector=4432, nr_sectors = 2296 limit=512 [ 119.717415][ T7168] kworker/u8:19: attempt to access beyond end of device [ 119.717415][ T7168] loop7: rw=1, sector=6728, nr_sectors = 2048 limit=512 [ 119.751108][ T7168] kworker/u8:19: attempt to access beyond end of device [ 119.751108][ T7168] loop7: rw=1, sector=8776, nr_sectors = 2048 limit=512 [ 119.776459][ T7168] kworker/u8:19: attempt to access beyond end of device [ 119.776459][ T7168] loop7: rw=1, sector=10824, nr_sectors = 5640 limit=512 [ 119.977792][ T8453] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1853'. [ 119.998605][ T8453] IPv6: sit1: Disabled Multicast RS [ 120.429477][ T8472] bridge2: entered promiscuous mode [ 120.449347][ T8472] bridge2: entered allmulticast mode [ 120.461944][ T8472] team0: Port device bridge2 added [ 120.473470][ T8472] bridge0: port 3(team0) entered blocking state [ 120.480555][ T8472] bridge0: port 3(team0) entered disabled state [ 120.487813][ T8472] team0: entered allmulticast mode [ 120.493142][ T8472] team_slave_0: entered allmulticast mode [ 120.498979][ T8472] team_slave_1: entered allmulticast mode [ 120.507130][ T8472] team0: left allmulticast mode [ 120.512603][ T8472] team_slave_0: left allmulticast mode [ 120.521200][ T8472] team_slave_1: left allmulticast mode [ 120.643949][ T28] kauditd_printk_skb: 514 callbacks suppressed [ 120.643964][ T28] audit: type=1400 audit(1771303880.810:1627): avc: denied { connect } for pid=8478 comm="syz.1.1852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 120.724922][ T8481] tipc: Enabled bearer , priority 10 [ 120.958141][ T8499] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1864'. [ 121.108645][ T8501] loop7: detected capacity change from 0 to 512 [ 121.198506][ T8501] EXT4-fs (loop7): 1 orphan inode deleted [ 121.212060][ T8501] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.255253][ T5460] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.394076][ T3417] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.402429][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.912489][ T8530] loop1: detected capacity change from 0 to 512 [ 121.937872][ T8530] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 121.969537][ T8530] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 121.978990][ T8530] System zones: 1-12 [ 121.992016][ T8530] EXT4-fs (loop1): orphan cleanup on readonly fs [ 122.088474][ T8530] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1874: bg 0: block 361: padding at end of block bitmap is not set [ 122.167951][ T8530] loop1: lost filesystem error report for type 5 error -117 [ 122.168912][ T8530] EXT4-fs (loop1): Remounting filesystem read-only [ 122.176372][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 122.176401][ C1] EXT4-fs (loop1): initial error at time 1771303882: ext4_validate_block_bitmap:441 [ 122.176422][ C1] EXT4-fs (loop1): last error at time 1771303882: ext4_validate_block_bitmap:441 [ 122.214981][ T8530] EXT4-fs (loop1): 1 truncate cleaned up [ 122.221117][ T8530] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 122.248952][ T8530] EXT4-fs (loop1): shut down requested (0) [ 122.271739][ T8537] netlink: 'syz.7.1876': attribute type 10 has an invalid length. [ 122.287241][ T8537] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1876'. [ 122.301622][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 122.317022][ T8537] geneve1: entered promiscuous mode [ 122.337056][ T8537] geneve1: entered allmulticast mode [ 122.352618][ T8537] team0: Port device geneve1 added [ 122.628120][ T8549] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1880'. [ 123.314320][ T7168] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.322647][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.391039][ T8584] bridge1: entered promiscuous mode [ 123.396721][ T8584] bridge1: entered allmulticast mode [ 123.405155][ T8584] team0: Port device bridge1 added [ 123.414376][ T8584] bridge0: port 1(team0) entered blocking state [ 123.420841][ T8584] bridge0: port 1(team0) entered disabled state [ 123.427492][ T8584] team0: entered allmulticast mode [ 123.433327][ T8584] team0: entered promiscuous mode [ 123.486789][ T8587] loop1: detected capacity change from 0 to 512 [ 123.511297][ T8592] loop7: detected capacity change from 0 to 512 [ 123.519350][ T8592] EXT4-fs error (device loop7): ext4_orphan_get:1391: inode #15: comm syz.7.1894: inode has both inline data and extents flags [ 123.532639][ T8592] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 123.532868][ T8592] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.1894: couldn't read orphan inode 15 (err -117) [ 123.542095][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 123.542113][ C1] EXT4-fs (loop7): initial error at time 1771303883: ext4_orphan_get:1391: inode 15 [ 123.542138][ C1] EXT4-fs (loop7): last error at time 1771303883: ext4_orphan_get:1391: inode 15 [ 123.579379][ T8592] loop7: lost filesystem error report for type 5 error -117 [ 123.579853][ T8592] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.691596][ T5460] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.692184][ T8587] EXT4-fs (loop1): 1 orphan inode deleted [ 123.719000][ T8587] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.785871][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.803805][ T8602] team0: Port device syz_tun added [ 123.840485][ T8602] team0: Port device syz_tun removed [ 123.867092][ T8602] bridge_slave_0: left allmulticast mode [ 123.872907][ T8602] bridge_slave_0: left promiscuous mode [ 123.878723][ T8602] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.898831][ T8614] loop1: detected capacity change from 0 to 512 [ 123.899805][ T8602] bridge_slave_1: left allmulticast mode [ 123.925052][ T8602] bridge_slave_1: left promiscuous mode [ 123.926872][ T8614] EXT4-fs (loop1): 1 orphan inode deleted [ 123.945072][ T8614] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.945489][ T8602] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.984102][ T8602] bond0: (slave bond_slave_0): Releasing backup interface [ 124.005344][ T8602] bond0: (slave bond_slave_1): Releasing backup interface [ 124.012224][ T8614] EXT4-fs (loop1): shut down requested (0) [ 124.026462][ T8602] team0: Port device team_slave_0 removed [ 124.040454][ T8602] team0: Port device team_slave_1 removed [ 124.047271][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.049137][ T8602] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.064449][ T8602] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.081342][ T8602] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.104038][ T8602] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.132371][ T8602] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 124.482569][ T8640] loop1: detected capacity change from 0 to 512 [ 124.490413][ T8640] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 124.502301][ T8640] EXT4-fs (loop1): 1 truncate cleaned up [ 124.511351][ T8640] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.528785][ T8642] bridge1: entered promiscuous mode [ 124.539336][ T8642] bridge1: entered allmulticast mode [ 124.552085][ T8642] team0: Port device bridge1 added [ 124.575553][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.595348][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.641763][ T8642] bridge0: port 1(team0) entered blocking state [ 124.655547][ T8642] bridge0: port 1(team0) entered disabled state [ 124.662022][ T8642] team0: entered allmulticast mode [ 124.704027][ T8642] geneve1: entered allmulticast mode [ 124.715045][ T8642] team0: entered promiscuous mode [ 124.723051][ T8645] loop2: detected capacity change from 0 to 512 [ 124.726642][ T8642] geneve1: entered promiscuous mode [ 124.845959][ T8657] loop1: detected capacity change from 0 to 1024 [ 124.860815][ T8657] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 124.897984][ T8657] System zones: 0-1, 3-36 [ 124.919464][ T8657] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.1921: bad orphan inode 134217728 [ 124.942843][ T8645] EXT4-fs (loop2): 1 orphan inode deleted [ 124.944007][ T8657] loop1: lost filesystem error report for type 5 error -117 [ 124.953871][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 124.963849][ T8645] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.967687][ C0] EXT4-fs (loop1): initial error at time 1771303885: ext4_orphan_get:1417 [ 124.967718][ C0] EXT4-fs (loop1): last error at time 1771303885: ext4_orphan_get:1417 [ 124.985168][ T8657] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.083634][ T8666] loop6: detected capacity change from 0 to 128 [ 125.126844][ T8666] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 125.140241][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.157964][ T8666] ext4 filesystem being mounted at /264/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.301473][ T8670] loop2: detected capacity change from 0 to 1024 [ 125.302358][ T5064] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 125.318022][ T8670] EXT4-fs: Ignoring removed orlov option [ 125.339808][ T8670] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.434831][ T8675] netlink: 'syz.6.1928': attribute type 2 has an invalid length. [ 125.467792][ T8675] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1928'. [ 125.515495][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.566986][ T8683] bridge1: entered promiscuous mode [ 125.574451][ T8683] bridge1: entered allmulticast mode [ 125.581888][ T8683] team0: Port device bridge1 added [ 125.592004][ T8683] bridge0: port 1(team0) entered blocking state [ 125.598776][ T8683] bridge0: port 1(team0) entered disabled state [ 125.606657][ T8683] team0: entered allmulticast mode [ 125.614326][ T8683] team0: entered promiscuous mode [ 125.735456][ T8690] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1934'. [ 125.759173][ T8690] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1934'. [ 125.804261][ T8690] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1934'. [ 125.818328][ T8690] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1934'. [ 125.820885][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.882269][ T8704] loop7: detected capacity change from 0 to 1024 [ 125.894557][ T8704] EXT4-fs: Ignoring removed orlov option [ 125.918578][ T8704] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.996999][ T8713] bridge2: entered promiscuous mode [ 126.017315][ T8713] bridge2: entered allmulticast mode [ 126.024601][ T8713] team0: Port device bridge2 added [ 126.100396][ T8720] loop1: detected capacity change from 0 to 512 [ 126.129740][ T5460] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.158412][ T8720] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.180511][ T8720] EXT4-fs (loop1): shut down requested (1) [ 126.191266][ T8730] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 126.200918][ T8730] System zones: 0-1, 3-36 [ 126.205945][ T8720] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=15 [ 126.215832][ T8732] netlink: 'syz.2.1950': attribute type 10 has an invalid length. [ 126.224024][ T8732] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1950'. [ 126.228502][ T8720] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=15 [ 126.242465][ T8730] EXT4-fs error (device loop7): ext4_orphan_get:1417: comm syz.7.1948: bad orphan inode 134217728 [ 126.253280][ T8730] loop7: lost filesystem error report for type 5 error -117 [ 126.253827][ T8730] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.254965][ T8732] geneve1: entered promiscuous mode [ 126.280946][ T8732] geneve1: entered allmulticast mode [ 126.287892][ T8732] team0: Port device geneve1 added [ 126.307641][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.326273][ T8735] bridge2: entered promiscuous mode [ 126.378041][ T8735] bridge2: entered allmulticast mode [ 126.398572][ T8735] team0: Port device bridge2 added [ 126.752264][ T8749] EXT4-fs (loop2): 1 orphan inode deleted [ 126.779536][ T8749] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.865271][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.104796][ T5460] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.139942][ T8775] bridge3: entered promiscuous mode [ 127.155341][ T8775] bridge3: entered allmulticast mode [ 127.163608][ T8775] team0: Port device bridge3 added [ 127.176560][ T8775] bridge0: port 3(team0) entered blocking state [ 127.183116][ T8775] bridge0: port 3(team0) entered disabled state [ 127.190011][ T8775] team0: entered allmulticast mode [ 127.195498][ T8775] team_slave_0: entered allmulticast mode [ 127.201401][ T8775] team_slave_1: entered allmulticast mode [ 127.207992][ T8775] team0: left allmulticast mode [ 127.213004][ T8775] team_slave_0: left allmulticast mode [ 127.219584][ T8775] team_slave_1: left allmulticast mode [ 127.268262][ T8784] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8784 comm=syz.2.1972 [ 127.327810][ T8790] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1973'. [ 127.340648][ T8790] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1973'. [ 127.350009][ T8789] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 127.359446][ T8790] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1973'. [ 127.376919][ T8789] EXT4-fs error (device loop7): __ext4_iget:5378: inode #3: block 127754: comm syz.7.1975: invalid block [ 127.388330][ T8789] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 127.388598][ T8789] EXT4-fs error (device loop7): ext4_quota_enable:7197: comm syz.7.1975: Bad quota inode: 3, type: 0 [ 127.397832][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 127.397868][ C1] EXT4-fs (loop7): initial error at time 1771303887: __ext4_iget:5378: inode 3: block 127754 [ 127.397905][ C1] EXT4-fs (loop7): last error at time 1771303887: __ext4_iget:5378: inode 3: block 127754 [ 127.448065][ T8789] loop7: lost filesystem error report for type 5 error -117 [ 127.448269][ T8789] EXT4-fs warning (device loop7): ext4_enable_quotas:7238: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 127.470562][ T8789] EXT4-fs (loop7): mount failed [ 127.758627][ T8814] bridge2: entered promiscuous mode [ 127.778974][ T8814] bridge2: entered allmulticast mode [ 127.790370][ T8814] team0: Port device bridge2 added [ 127.948468][ T8802] EXT4-fs (loop1): 1 orphan inode deleted [ 127.971399][ T8829] 9p: Bad value for 'wfdno' [ 127.982452][ T8802] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.047392][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.241440][ T8845] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1993'. [ 128.768853][ T28] audit: type=1400 audit(1771303888.940:1628): avc: denied { mounton } for pid=8886 comm="syz.7.2022" path="/" dev="configfs" ino=2016 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 129.075139][ T8901] set_capacity_and_notify: 4 callbacks suppressed [ 129.075159][ T8901] loop1: detected capacity change from 0 to 164 [ 129.164457][ T8901] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 129.270092][ T8905] loop7: detected capacity change from 0 to 8192 [ 129.372169][ T8922] loop7: detected capacity change from 0 to 512 [ 129.400985][ T8922] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.414571][ T8922] ext4 filesystem being mounted at /234/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.459862][ T5460] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.527794][ T8937] loop7: detected capacity change from 0 to 128 [ 129.709846][ T8943] loop2: detected capacity change from 0 to 8192 [ 129.774931][ T5145] loop2: p1 p2 p3 < > p4 < p5 p6 > [ 129.780420][ T5145] loop2: partition table partially beyond EOD, truncated [ 129.801219][ T5145] loop2: p1 start 30976 is beyond EOD, truncated [ 129.820813][ T5145] loop2: p2 size 16128 extends beyond EOD, truncated [ 129.838034][ T5145] loop2: p3 start 327168 is beyond EOD, truncated [ 129.856846][ T5145] loop2: p5 start 30976 is beyond EOD, truncated [ 129.870244][ T5145] loop2: p6 size 16128 extends beyond EOD, truncated [ 129.904085][ T8943] loop2: p1 p2 p3 < > p4 < p5 p6 > [ 129.913981][ T8943] loop2: partition table partially beyond EOD, truncated [ 129.924684][ T8943] loop2: p1 start 30976 is beyond EOD, truncated [ 129.931127][ T8943] loop2: p2 size 16128 extends beyond EOD, truncated [ 129.963105][ T8970] netlink: 'syz.3.2049': attribute type 29 has an invalid length. [ 129.989710][ T8943] loop2: p3 start 327168 is beyond EOD, truncated [ 130.014061][ T8943] loop2: p5 start 30976 is beyond EOD, truncated [ 130.025174][ T8970] netlink: 'syz.3.2049': attribute type 29 has an invalid length. [ 130.039037][ T8943] loop2: p6 size 16128 extends beyond EOD, truncated [ 130.046948][ T8973] loop7: detected capacity change from 0 to 128 [ 130.079052][ T8973] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 130.117279][ T8973] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 130.186415][ T2104] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 130.216320][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 130.218417][ T5145] udevd[5145]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 130.241889][ T3513] udevd[3513]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory [ 130.294034][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 130.304480][ T5145] udevd[5145]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 130.308619][ T3513] udevd[3513]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory [ 130.348275][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 130.357004][ T5145] udevd[5145]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 130.385327][ T5145] udevd[5145]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory [ 130.443580][ T9001] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 130.450239][ T9001] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 130.458233][ T9001] vhci_hcd vhci_hcd.0: Device attached [ 130.465360][ T9004] vhci_hcd: connection closed [ 130.465426][ T2104] vhci_hcd vhci_hcd.2: stop threads [ 130.476081][ T2104] vhci_hcd vhci_hcd.2: release socket [ 130.481613][ T2104] vhci_hcd vhci_hcd.2: disconnect device [ 131.032144][ T3417] kernel write not supported for file bpf-prog (pid: 3417 comm: kworker/1:5) [ 131.235824][ T9078] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 131.243540][ T9078] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 131.260462][ T9078] __nla_validate_parse: 1 callbacks suppressed [ 131.260480][ T9078] netlink: 14 bytes leftover after parsing attributes in process `syz.6.2099'. [ 131.287394][ T9078] bond0 (unregistering): Released all slaves [ 131.984437][ T9086] loop6: detected capacity change from 0 to 2048 [ 132.012149][ T9086] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.045059][ T5064] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.071669][ T28] audit: type=1400 audit(1771303892.230:1629): avc: denied { listen } for pid=9091 comm="syz.2.2104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 132.130223][ T9099] netlink: 'syz.6.2103': attribute type 10 has an invalid length. [ 132.144205][ T9099] syz_tun: entered promiscuous mode [ 132.155273][ T28] audit: type=1400 audit(1771303892.330:1630): avc: denied { nosuid_transition } for pid=9095 comm="syz.2.2106" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process2 permissive=1 [ 132.211043][ T28] audit: type=1400 audit(1771303892.330:1631): avc: denied { transition } for pid=9095 comm="syz.2.2106" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=126 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 132.277458][ T28] audit: type=1400 audit(1771303892.330:1632): avc: denied { entrypoint } for pid=9095 comm="syz.2.2106" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=126 scontext=system_u:object_r:hugetlbfs_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 132.313899][ T28] audit: type=1400 audit(1771303892.330:1633): avc: denied { share } for pid=9095 comm="syz.2.2106" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 132.334273][ T28] audit: type=1400 audit(1771303892.330:1634): avc: denied { noatsecure } for pid=9095 comm="syz.2.2106" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 132.424070][ T3396] kernel write not supported for file bpf-prog (pid: 3396 comm: kworker/0:3) [ 132.531759][ T9128] loop1: detected capacity change from 0 to 256 [ 132.551422][ T9128] vfat: Unknown parameter '0xffffffffffffffffÿÿÿÿÿÿÿÿÿÿ18446744073709551615ÿÿÿÿÿÿÿÿ' [ 132.607052][ T28] audit: type=1400 audit(1771303892.770:1635): avc: denied { sys_module } for pid=9131 comm="syz.3.2121" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 132.717539][ T9152] loop6: detected capacity change from 0 to 128 [ 132.734948][ T9152] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 132.754245][ T9152] ext4 filesystem being mounted at /303/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 132.815491][ T5064] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 133.232186][ T28] audit: type=1400 audit(1771303893.400:1636): avc: denied { create } for pid=9171 comm="syz.3.2135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 133.263633][ T28] audit: type=1400 audit(1771303893.430:1637): avc: denied { connect } for pid=9171 comm="syz.3.2135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 133.385067][ T9180] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2138'. [ 133.395489][ T9180] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2138'. [ 133.509161][ T9192] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2143'. [ 133.533915][ T9192] netlink: 'syz.7.2143': attribute type 29 has an invalid length. [ 133.541853][ T9192] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2143'. [ 133.586503][ T9196] loop2: detected capacity change from 0 to 512 [ 133.634317][ T9196] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.658208][ T9196] EXT4-fs (loop2): shut down requested (1) [ 133.674041][ T9196] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=15 [ 133.683158][ T9196] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=15 [ 133.728168][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.764317][ T9203] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2146'. [ 133.794882][ T9205] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2157'. [ 133.803899][ T9203] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 133.804259][ T9205] netlink: 'syz.2.2157': attribute type 29 has an invalid length. [ 133.810511][ T9203] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 133.827284][ T9203] vhci_hcd vhci_hcd.0: Device attached [ 133.834501][ T9205] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2157'. [ 133.843488][ T9206] vhci_hcd: connection closed [ 133.844081][ T7158] vhci_hcd vhci_hcd.7: stop threads [ 133.863585][ T7158] vhci_hcd vhci_hcd.7: release socket [ 133.869119][ T7158] vhci_hcd vhci_hcd.7: disconnect device [ 134.299471][ T9232] loop1: detected capacity change from 0 to 512 [ 134.322703][ T9232] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 134.373934][ T9232] EXT4-fs error (device loop1): __ext4_iget:5378: inode #3: block 127754: comm syz.1.2159: invalid block [ 134.402670][ T9232] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 134.411222][ T9232] EXT4-fs error (device loop1): ext4_quota_enable:7197: comm syz.1.2159: Bad quota inode: 3, type: 0 [ 134.420430][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 134.420454][ C1] EXT4-fs (loop1): initial error at time 1771303894: __ext4_iget:5378: inode 3: block 127754 [ 134.420497][ C1] EXT4-fs (loop1): last error at time 1771303894: __ext4_iget:5378: inode 3: block 127754 [ 134.478508][ T9232] loop1: lost filesystem error report for type 5 error -117 [ 134.478716][ T9232] EXT4-fs warning (device loop1): ext4_enable_quotas:7238: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 134.500937][ T9232] EXT4-fs (loop1): mount failed [ 134.576115][ T9246] loop7: detected capacity change from 0 to 2048 [ 134.600956][ T9246] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.628918][ T9232] Process accounting paused [ 134.696870][ T5460] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.847692][ T9269] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 134.900450][ T9269] netlink: 14 bytes leftover after parsing attributes in process `syz.7.2173'. [ 135.005340][ T9269] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 135.035560][ T9269] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 135.046640][ T9269] bond0 (unregistering): Released all slaves [ 135.055684][ T9279] loop6: detected capacity change from 0 to 512 [ 135.062448][ T9279] EXT4-fs: Ignoring removed bh option [ 135.068220][ T9279] EXT4-fs: inline encryption not supported [ 135.082261][ T9279] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 135.133502][ T9283] loop2: detected capacity change from 0 to 512 [ 135.154965][ T9279] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 135.195003][ T9279] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2176: bg 0: block 248: padding at end of block bitmap is not set [ 135.212781][ T9283] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.235181][ T9283] ext4 filesystem being mounted at /460/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.246724][ T9279] loop6: lost filesystem error report for type 5 error -117 [ 135.246913][ T9279] __quota_error: 4 callbacks suppressed [ 135.246948][ T9279] Quota error (device loop6): write_blk: dquota write failed [ 135.254304][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 135.254328][ C1] EXT4-fs (loop6): last error at time 1771303895: ext4_validate_block_bitmap:441 [ 135.290937][ T9264] netlink: 'syz.2.2172': attribute type 1 has an invalid length. [ 135.306409][ T9279] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 135.323202][ T9279] EXT4-fs error (device loop6): ext4_acquire_dquot:7003: comm syz.6.2176: Failed to acquire dquot type 1 [ 135.335879][ T9279] loop6: lost filesystem error report for type 5 error -117 [ 135.336455][ T9279] EXT4-fs (loop6): 1 truncate cleaned up [ 135.362893][ T9279] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 135.387415][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.825788][ T5064] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 135.847940][ T9335] ip6tnl1: entered allmulticast mode [ 135.900495][ T9337] loop6: detected capacity change from 0 to 2048 [ 135.926306][ T9337] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.939051][ T9337] ext4 filesystem being mounted at /313/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 135.974439][ T9337] EXT4-fs (loop6): shut down requested (1) [ 135.980733][ T9337] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=12 [ 135.990213][ T9337] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=12 [ 136.007379][ T9337] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=13 [ 136.023454][ T9337] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=13 [ 136.033124][ T28] audit: type=1400 audit(1771303896.200:1642): avc: denied { write } for pid=9336 comm="syz.6.2187" name="file0" dev="loop6" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 136.063252][ T9337] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=13 [ 136.082555][ T28] audit: type=1400 audit(1771303896.250:1643): avc: denied { setattr } for pid=9336 comm="syz.6.2187" name="file0" dev="loop6" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 136.144020][ T5064] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.279996][ T9355] loop1: detected capacity change from 0 to 8192 [ 136.483256][ T9371] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 136.490975][ T9371] FAT-fs (loop1): Filesystem has been set read-only [ 136.560666][ T9378] loop7: detected capacity change from 0 to 512 [ 136.590988][ T9378] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 136.649309][ T9378] EXT4-fs error (device loop7): ext4_orphan_get:1391: inode #17: comm syz.7.2204: inode has both inline data and extents flags [ 136.664979][ T9378] loop7: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117 [ 136.665141][ T9382] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2208'. [ 136.665137][ T9378] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.2204: couldn't read orphan inode 17 (err -117) [ 136.665169][ T9378] loop7: lost filesystem error report for type 5 error -117 [ 136.674344][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 136.674384][ C0] EXT4-fs (loop7): initial error at time 1771303896: ext4_orphan_get:1391: inode 17 [ 136.674421][ C0] EXT4-fs (loop7): last error at time 1771303896: ext4_orphan_get:1391: inode 17 [ 136.728296][ T9378] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.778536][ T5460] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.988257][ T9403] syz_tun: entered promiscuous mode [ 136.993776][ T9403] syz_tun: entered allmulticast mode [ 137.010657][ T9403] team0: Port device syz_tun added [ 137.018638][ T9403] syz_tun: left promiscuous mode [ 137.023757][ T9403] syz_tun: left allmulticast mode [ 137.041195][ T9403] team0: Port device syz_tun removed [ 137.049853][ T9403] team0: left allmulticast mode [ 137.064019][ T9403] team0: left promiscuous mode [ 137.069121][ T9403] bridge0: port 1(team0) entered disabled state [ 137.090253][ T9403] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 137.724865][ T9410] ip6erspan1: entered allmulticast mode [ 137.844974][ T9423] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2221'. [ 137.954167][ T9429] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2223'. [ 137.963501][ T9429] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2223'. [ 138.457202][ T9464] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2236'. [ 138.488093][ T9467] loop6: detected capacity change from 0 to 1024 [ 138.496796][ T9467] EXT4-fs: Ignoring removed orlov option [ 138.503341][ T9467] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 138.515729][ T9467] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.555516][ T5064] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.728645][ T9491] team0: Port device syz_tun added [ 138.747611][ T9491] team0: Port device syz_tun removed [ 138.767633][ T9491] bridge_slave_0: left allmulticast mode [ 138.773574][ T9491] bridge_slave_0: left promiscuous mode [ 138.790997][ T9491] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.802483][ T9491] bridge_slave_1: left allmulticast mode [ 138.808358][ T9491] bridge_slave_1: left promiscuous mode [ 138.814467][ T9491] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.824403][ T9491] bond0: (slave bond_slave_0): Releasing backup interface [ 138.842468][ T9491] bond0: (slave bond_slave_1): Releasing backup interface [ 138.855722][ T9491] team0: Port device team_slave_0 removed [ 138.869877][ T9491] team0: Port device team_slave_1 removed [ 138.877498][ T9491] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 138.885253][ T9491] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 138.896255][ T9491] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 138.904340][ T9491] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 138.922906][ T9491] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 139.370812][ T28] audit: type=1400 audit(1771303899.540:1644): avc: denied { relabelfrom } for pid=9514 comm="syz.2.2257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 139.390983][ T28] audit: type=1400 audit(1771303899.540:1645): avc: denied { relabelto } for pid=9514 comm="syz.2.2257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 139.511070][ T9523] loop2: detected capacity change from 0 to 512 [ 139.535865][ T9521] loop7: detected capacity change from 0 to 8192 [ 139.547197][ T9523] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.579642][ T9523] ext4 filesystem being mounted at /480/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.666881][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.799284][ T9526] FAT-fs (loop7): error, corrupted directory (invalid entries) [ 139.813534][ T9526] FAT-fs (loop7): Filesystem has been set read-only [ 139.879293][ T9530] loop2: detected capacity change from 0 to 164 [ 139.924652][ T9530] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 139.945842][ T9532] syz_tun: entered promiscuous mode [ 139.953456][ T9532] syz_tun: entered allmulticast mode [ 139.964280][ T9532] team0: Port device syz_tun added [ 140.006987][ T9532] syz_tun: left promiscuous mode [ 140.012212][ T9532] syz_tun: left allmulticast mode [ 140.048096][ T9532] team0: Port device syz_tun removed [ 140.056112][ T9532] team0: left allmulticast mode [ 140.061049][ T9532] team_slave_0: left allmulticast mode [ 140.070054][ T9532] team_slave_1: left allmulticast mode [ 140.089839][ T9532] geneve1: left allmulticast mode [ 140.099184][ T9532] team0: left promiscuous mode [ 140.106379][ T9532] team_slave_0: left promiscuous mode [ 140.122444][ T9532] team_slave_1: left promiscuous mode [ 140.134955][ T9532] geneve1: left promiscuous mode [ 140.140326][ T9532] bridge0: port 3(team0) entered disabled state [ 140.155065][ T9532] bridge_slave_0: left allmulticast mode [ 140.163006][ T9532] bridge_slave_0: left promiscuous mode [ 140.174005][ T9532] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.200862][ T9532] bridge_slave_1: left allmulticast mode [ 140.211837][ T9532] bridge_slave_1: left promiscuous mode [ 140.218114][ T9532] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.240438][ T9532] team0: Port device team_slave_0 removed [ 140.259835][ T9532] team0: Port device team_slave_1 removed [ 140.271277][ T9532] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.284036][ T9532] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 140.319477][ T9529] netlink: 'syz.3.2264': attribute type 1 has an invalid length. [ 140.448944][ T9532] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.457863][ T9532] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 140.468811][ T9532] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 140.610934][ T9566] loop2: detected capacity change from 0 to 512 [ 140.654175][ T9566] EXT4-fs: Ignoring removed bh option [ 140.659637][ T9566] EXT4-fs: inline encryption not supported [ 140.697004][ T9571] syz_tun: left promiscuous mode [ 140.745953][ T9571] syz_tun: entered promiscuous mode [ 140.752303][ T9566] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 140.772496][ T9571] syz_tun: entered allmulticast mode [ 140.781036][ T9571] team0: Port device syz_tun added [ 140.806413][ T9575] syz_tun: left promiscuous mode [ 140.821369][ T9575] syz_tun: left allmulticast mode [ 140.844113][ T9575] team0: Port device syz_tun removed [ 140.854862][ T9566] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 140.860975][ T9575] team0: left allmulticast mode [ 140.880857][ T9566] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2275: bg 0: block 248: padding at end of block bitmap is not set [ 140.895233][ T9575] geneve1: left allmulticast mode [ 140.895270][ T9575] team0: left promiscuous mode [ 140.905305][ T9575] geneve1: left promiscuous mode [ 140.910744][ T9575] bridge0: port 1(team0) entered disabled state [ 140.922971][ T9566] loop2: lost filesystem error report for type 5 error -117 [ 140.923278][ T9566] Quota error (device loop2): write_blk: dquota write failed [ 140.930689][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 140.930716][ C1] EXT4-fs (loop2): last error at time 1771303901: ext4_validate_block_bitmap:441 [ 140.969181][ T9575] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 140.974081][ T9566] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 141.017301][ T3537] Process accounting resumed [ 141.033988][ T9566] EXT4-fs error (device loop2): ext4_acquire_dquot:7003: comm syz.2.2275: Failed to acquire dquot type 1 [ 141.063884][ T9566] loop2: lost filesystem error report for type 5 error -117 [ 141.064418][ T9566] EXT4-fs (loop2): 1 truncate cleaned up [ 141.099293][ T9566] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 141.160385][ T9593] loop1: detected capacity change from 0 to 2048 [ 141.206697][ T9593] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.223952][ T9593] ext4 filesystem being mounted at /482/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 141.290300][ T9593] EXT4-fs (loop1): shut down requested (1) [ 141.296754][ T9593] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 141.305755][ T9593] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 141.315172][ T9593] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=13 [ 141.324100][ T9593] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=13 [ 141.332909][ T9593] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=13 [ 141.354082][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.414981][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 141.483130][ T28] audit: type=1326 audit(1771303901.650:1646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9600 comm="syz.2.2302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d9626bf79 code=0x7ffc0000 [ 141.540423][ T28] audit: type=1326 audit(1771303901.650:1647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9600 comm="syz.2.2302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d9626bf79 code=0x7ffc0000 [ 141.612145][ T28] audit: type=1326 audit(1771303901.650:1648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9600 comm="syz.2.2302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d9626bf79 code=0x7ffc0000 [ 141.705815][ T28] audit: type=1326 audit(1771303901.650:1649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9600 comm="syz.2.2302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d9626bf79 code=0x7ffc0000 [ 141.762484][ T9611] loop1: detected capacity change from 0 to 512 [ 141.776111][ T28] audit: type=1326 audit(1771303901.650:1650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9600 comm="syz.2.2302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f5d9626bf79 code=0x7ffc0000 [ 141.854573][ T28] audit: type=1326 audit(1771303901.650:1651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9600 comm="syz.2.2302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d9626bf79 code=0x7ffc0000 [ 141.878405][ T28] audit: type=1326 audit(1771303901.650:1652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9600 comm="syz.2.2302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d9626bf79 code=0x7ffc0000 [ 141.902508][ T28] audit: type=1326 audit(1771303901.660:1653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9600 comm="syz.2.2302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d9626bf79 code=0x7ffc0000 [ 141.950110][ T9611] EXT4-fs (loop1): 1 orphan inode deleted [ 141.965814][ T9611] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.039232][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.086511][ T9630] loop7: detected capacity change from 0 to 512 [ 142.113473][ T9630] EXT4-fs: Ignoring removed bh option [ 142.147776][ T9630] EXT4-fs: inline encryption not supported [ 142.163953][ T9630] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 142.206490][ T9630] EXT4-fs warning (device loop7): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 142.230736][ T9630] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.2303: bg 0: block 248: padding at end of block bitmap is not set [ 142.256933][ T9630] loop7: lost filesystem error report for type 5 error -117 [ 142.257152][ T9630] EXT4-fs error (device loop7): ext4_acquire_dquot:7003: comm syz.7.2303: Failed to acquire dquot type 1 [ 142.264621][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 142.264641][ C1] EXT4-fs (loop7): last error at time 1771303902: ext4_validate_block_bitmap:441 [ 142.384602][ T9630] loop7: lost filesystem error report for type 5 error -117 [ 142.385257][ T9630] EXT4-fs (loop7): 1 truncate cleaned up [ 142.410773][ T9630] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 142.865796][ T5460] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 142.955708][ T9656] loop6: detected capacity change from 0 to 512 [ 143.092245][ T9664] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2317'. [ 143.180982][ T9656] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.234849][ T9656] ext4 filesystem being mounted at /340/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.334825][ T5064] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.779584][ T9643] syz.1.2308 (9643) used greatest stack depth: 5896 bytes left [ 143.884861][ T9701] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 143.993005][ T9716] loop6: detected capacity change from 0 to 1024 [ 144.035661][ T9716] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a016c118, mo2=0002] [ 144.053938][ T9716] System zones: 0-1, 3-12 [ 144.058876][ T9716] EXT4-fs (loop6): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.117557][ T5064] EXT4-fs (loop6): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 144.131636][ T9721] loop2: detected capacity change from 0 to 512 [ 144.188012][ T9721] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.226701][ T9721] ext4 filesystem being mounted at /501/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.264828][ T9721] EXT4-fs (loop2): shut down requested (1) [ 144.282091][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.409725][ T9742] syzkaller1: entered promiscuous mode [ 144.416176][ T9742] syzkaller1: entered allmulticast mode [ 144.501112][ T9755] netlink: 130020 bytes leftover after parsing attributes in process `syz.3.2353'. [ 144.532001][ T9755] netlink: del zone limit has 4 unknown bytes [ 144.819455][ T9777] ip6erspan0: entered allmulticast mode [ 144.887795][ T9783] set_capacity_and_notify: 1 callbacks suppressed [ 144.887815][ T9783] loop1: detected capacity change from 0 to 512 [ 144.905769][ T9783] EXT4-fs: Ignoring removed oldalloc option [ 144.963977][ T9783] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: comm syz.1.2364: Parent and EA inode have the same ino 15 [ 144.989096][ T9789] loop7: detected capacity change from 0 to 512 [ 145.014958][ T9789] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 145.034085][ T9783] loop1: lost filesystem error report for type 5 error -117 [ 145.040587][ T9783] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: comm syz.1.2364: Parent and EA inode have the same ino 15 [ 145.047978][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 145.048002][ C0] EXT4-fs (loop1): initial error at time 1771303905: ext4_xattr_inode_iget:437 [ 145.048030][ C0] EXT4-fs (loop1): last error at time 1771303905: ext4_xattr_inode_iget:437 [ 145.114732][ T9789] EXT4-fs (loop7): 1 truncate cleaned up [ 145.121069][ T9789] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.133410][ T9783] loop1: lost filesystem error report for type 5 error -117 [ 145.133806][ T9783] EXT4-fs (loop1): 1 orphan inode deleted [ 145.167568][ T9783] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.188893][ T5460] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.261045][ T9796] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2369'. [ 145.299667][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.359613][ T9798] loop7: detected capacity change from 0 to 512 [ 145.513739][ T9798] EXT4-fs (loop7): 1 orphan inode deleted [ 145.552027][ T9798] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.564356][ T9806] loop2: detected capacity change from 0 to 2048 [ 145.616946][ T9806] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.650422][ T9806] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 145.693672][ T5460] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.703390][ T9806] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 145.831665][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.925890][ T9825] loop1: detected capacity change from 0 to 512 [ 146.079318][ T9831] sctp: [Deprecated]: syz.1.2382 (pid 9831) Use of struct sctp_assoc_value in delayed_ack socket option. [ 146.079318][ T9831] Use struct sctp_sack_info instead [ 146.738677][ T9864] ip6erspan0: entered allmulticast mode [ 146.817628][ T28] kauditd_printk_skb: 33 callbacks suppressed [ 146.817645][ T28] audit: type=1400 audit(1771303906.990:1685): avc: denied { sqpoll } for pid=9867 comm="syz.2.2399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 147.159535][ T9888] sctp: [Deprecated]: syz.7.2407 (pid 9888) Use of int in max_burst socket option deprecated. [ 147.159535][ T9888] Use struct sctp_assoc_value instead [ 147.173985][ T28] audit: type=1400 audit(1771303907.330:1686): avc: denied { setopt } for pid=9887 comm="syz.7.2407" lport=48146 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 147.274216][ T9894] tipc: Started in network mode [ 147.284018][ T9894] tipc: Node identity ac14140f, cluster identity 4711 [ 147.308839][ T9894] tipc: New replicast peer: 255.255.255.255 [ 147.336450][ T9894] tipc: Enabled bearer , priority 10 [ 147.357893][ T9897] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2410'. [ 147.378265][ T9897] tipc: Disabling bearer [ 148.172534][ T9908] loop2: detected capacity change from 0 to 512 [ 148.184472][ T9912] netlink: 212892 bytes leftover after parsing attributes in process `syz.1.2425'. [ 148.234364][ T9908] EXT4-fs: Ignoring removed oldalloc option [ 148.278021][ T9908] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: comm syz.2.2416: Parent and EA inode have the same ino 15 [ 148.313956][ T9908] loop2: lost filesystem error report for type 5 error -117 [ 148.317602][ T9914] loop6: detected capacity change from 0 to 512 [ 148.325341][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 148.325481][ C1] EXT4-fs (loop2): initial error at time 1771303908: ext4_xattr_inode_iget:437 [ 148.325782][ C1] EXT4-fs (loop2): last error at time 1771303908: ext4_xattr_inode_iget:437 [ 148.360606][ T9908] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: comm syz.2.2416: Parent and EA inode have the same ino 15 [ 148.401566][ T9908] loop2: lost filesystem error report for type 5 error -117 [ 148.413787][ T9908] EXT4-fs (loop2): 1 orphan inode deleted [ 148.437561][ T9908] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.541634][ T9928] netlink: 'syz.7.2423': attribute type 39 has an invalid length. [ 148.581985][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.616772][ T9930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.626454][ T9930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.703133][ T9914] EXT4-fs (loop6): 1 orphan inode deleted [ 148.748077][ T9914] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.806639][ T9905] syz.3.2412 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 148.820668][ T9905] CPU: 1 UID: 0 PID: 9905 Comm: syz.3.2412 Tainted: G W syzkaller #0 PREEMPT(full) [ 148.820711][ T9905] Tainted: [W]=WARN [ 148.820720][ T9905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 148.820738][ T9905] Call Trace: [ 148.820821][ T9905] [ 148.820831][ T9905] __dump_stack+0x1d/0x30 [ 148.820914][ T9905] dump_stack_lvl+0x95/0xd0 [ 148.820996][ T9905] dump_stack+0x15/0x1b [ 148.821017][ T9905] dump_header+0x80/0x240 [ 148.821108][ T9905] oom_kill_process+0x295/0x350 [ 148.821170][ T9905] out_of_memory+0x97d/0xb80 [ 148.821221][ T9905] try_charge_memcg+0x62e/0xa10 [ 148.821269][ T9905] obj_cgroup_charge_pages+0x23/0xc0 [ 148.821342][ T9905] __memcg_kmem_charge_page+0x9e/0x170 [ 148.821401][ T9905] __alloc_frozen_pages_noprof+0x18a/0x360 [ 148.821436][ T9905] alloc_pages_mpol+0xb3/0x260 [ 148.821463][ T9905] alloc_pages_noprof+0x8f/0x130 [ 148.821488][ T9905] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 148.821564][ T9905] __kvmalloc_node_noprof+0x3d4/0x650 [ 148.821605][ T9905] ? ip_set_alloc+0x24/0x30 [ 148.821666][ T9905] ? ip_set_alloc+0x24/0x30 [ 148.821695][ T9905] ? __kmalloc_cache_noprof+0x18a/0x410 [ 148.821794][ T9905] ip_set_alloc+0x24/0x30 [ 148.821866][ T9905] hash_netiface_create+0x282/0x740 [ 148.821893][ T9905] ? __pfx_hash_netiface_create+0x10/0x10 [ 148.821926][ T9905] ip_set_create+0x3cf/0x970 [ 148.822030][ T9905] ? __nla_parse+0x40/0x60 [ 148.822060][ T9905] nfnetlink_rcv_msg+0x509/0x5d0 [ 148.822111][ T9905] netlink_rcv_skb+0x123/0x220 [ 148.822219][ T9905] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 148.822255][ T9905] nfnetlink_rcv+0x167/0x1720 [ 148.822292][ T9905] ? __list_del_entry_valid_or_report+0x65/0x130 [ 148.822418][ T9905] ? __rmqueue_pcplist+0x9b0/0xb70 [ 148.822448][ T9905] ? _raw_spin_lock_bh+0x56/0xb0 [ 148.822469][ T9905] ? _raw_spin_unlock_bh+0x18/0x20 [ 148.822496][ T9905] ? selinux_nlmsg_lookup+0x99/0x890 [ 148.822555][ T9905] ? __rcu_read_unlock+0x33/0x70 [ 148.822581][ T9905] ? __netlink_lookup+0x276/0x2b0 [ 148.822613][ T9905] netlink_unicast+0x5c0/0x690 [ 148.822719][ T9905] netlink_sendmsg+0x5c8/0x6f0 [ 148.822759][ T9905] ? __pfx_netlink_sendmsg+0x10/0x10 [ 148.822795][ T9905] ____sys_sendmsg+0x5af/0x600 [ 148.822871][ T9905] ___sys_sendmsg+0x195/0x1e0 [ 148.822917][ T9905] __x64_sys_sendmsg+0xd4/0x160 [ 148.823026][ T9905] x64_sys_call+0x194c/0x3020 [ 148.823056][ T9905] do_syscall_64+0x12c/0x370 [ 148.823120][ T9905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.823223][ T9905] RIP: 0033:0x7f9203a1bf79 [ 148.823244][ T9905] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.823267][ T9905] RSP: 002b:00007f9202477028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 148.823375][ T9905] RAX: ffffffffffffffda RBX: 00007f9203c95fa0 RCX: 00007f9203a1bf79 [ 148.823392][ T9905] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 148.823408][ T9905] RBP: 00007f9203ab27e0 R08: 0000000000000000 R09: 0000000000000000 [ 148.823425][ T9905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 148.823442][ T9905] R13: 00007f9203c96038 R14: 00007f9203c95fa0 R15: 00007fffd73c8cf8 [ 148.823517][ T9905] [ 148.823555][ T9905] memory: usage 307200kB, limit 307200kB, failcnt 462 [ 149.149005][ T9905] memory+swap: usage 319320kB, limit 9007199254740988kB, failcnt 0 [ 149.157304][ T9905] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 149.164914][ T9905] Memory cgroup stats for /syz3: [ 149.165174][ T9905] cache 0 [ 149.173356][ T9905] rss 0 [ 149.176781][ T9905] shmem 0 [ 149.179773][ T9905] mapped_file 0 [ 149.183285][ T9905] dirty 0 [ 149.186652][ T9905] writeback 0 [ 149.190100][ T9905] workingset_refault_anon 1572 [ 149.195126][ T9905] workingset_refault_file 433 [ 149.199925][ T9905] swap 12410880 [ 149.203432][ T9905] swapcached 27062272 [ 149.208776][ T9905] pgpgin 150925 [ 149.209087][ T5064] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.213169][ T9905] pgpgout 150924 [ 149.225295][ T9905] pgfault 125886 [ 149.233871][ T9905] pgmajfault 223 [ 149.237642][ T9905] inactive_anon 0 [ 149.241294][ T9905] active_anon 4096 [ 149.253416][ T9940] loop1: detected capacity change from 0 to 764 [ 149.260367][ T9905] inactive_file 0 [ 149.264357][ T9905] active_file 0 [ 149.267877][ T9905] unevictable 0 [ 149.272268][ T9905] hierarchical_memory_limit 314572800 [ 149.279054][ T9905] hierarchical_memsw_limit 9223372036854771712 [ 149.298908][ T9942] loop6: detected capacity change from 0 to 128 [ 149.304519][ T9905] total_cache 0 [ 149.308819][ T9905] total_rss 0 [ 149.312275][ T9905] total_shmem 0 [ 149.323819][ T9905] total_mapped_file 0 [ 149.328306][ T9905] total_dirty 0 [ 149.331795][ T9905] total_writeback 0 [ 149.344195][ T9905] total_workingset_refault_anon 1572 [ 149.355078][ T9905] total_workingset_refault_file 433 [ 149.360389][ T9905] total_swap 12410880 [ 149.364797][ T9905] total_swapcached 27062272 [ 149.369869][ T9905] total_pgpgin 150925 [ 149.386798][ T9905] total_pgpgout 150924 [ 149.391281][ T9905] total_pgfault 125886 [ 149.403649][ T9905] total_pgmajfault 223 [ 149.416241][ T9905] total_inactive_anon 0 [ 149.420472][ T9905] total_active_anon 4096 [ 149.430848][ T9946] netlink: 212892 bytes leftover after parsing attributes in process `syz.6.2431'. [ 149.440736][ T9905] total_inactive_file 0 [ 149.445174][ T9905] total_active_file 0 [ 149.449268][ T9905] total_unevictable 0 [ 149.453271][ T9905] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.2412,pid=9904,uid=0 [ 149.471714][ T9905] Memory cgroup out of memory: Killed process 9904 (syz.3.2412) total-vm:96204kB, anon-rss:1224kB, file-rss:22148kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:0 [ 149.503889][ T9937] Cannot find del_set index 3 as target [ 149.878156][ T9982] loop2: detected capacity change from 0 to 1024 [ 149.915939][ T9982] EXT4-fs: Ignoring removed mblk_io_submit option [ 149.927314][ T9985] tipc: Started in network mode [ 149.943712][ T9985] tipc: Node identity ac14140f, cluster identity 4711 [ 149.981277][ T9985] tipc: New replicast peer: 255.255.255.255 [ 149.994422][ T9985] tipc: Enabled bearer , priority 10 [ 150.004666][ T9992] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2450'. [ 150.006170][ T9982] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.025891][ T9992] tipc: Disabling bearer [ 150.061066][T10000] loop7: detected capacity change from 0 to 512 [ 150.067683][ T9982] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: comm syz.2.2448: inode #4: comm syz.2.2448: iget: illegal inode # [ 150.080428][T10000] EXT4-fs: Ignoring removed nobh option [ 150.094777][ T9982] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.2448: error while reading EA inode 4 err=-117 [ 150.116000][T10000] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 150.146337][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.156434][T10000] EXT4-fs error (device loop7): ext4_orphan_get:1391: inode #15: comm syz.7.2454: iget: bad i_size value: 38620345925642 [ 150.181636][T10000] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 150.184302][T10000] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.2454: couldn't read orphan inode 15 (err -117) [ 150.205593][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 150.205618][ C0] EXT4-fs (loop7): initial error at time 1771303910: ext4_orphan_get:1391: inode 15 [ 150.205645][ C0] EXT4-fs (loop7): last error at time 1771303910: ext4_orphan_get:1391: inode 15 [ 150.231505][T10000] loop7: lost filesystem error report for type 5 error -117 [ 150.233078][T10000] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.344565][T10000] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.2454: bg 0: block 5: invalid block bitmap [ 150.374998][T10000] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 150.398385][T10000] EXT4-fs (loop7): This should not happen!! Data will be lost [ 150.398385][T10000] [ 150.423390][T10000] EXT4-fs (loop7): Total free blocks count 0 [ 150.439452][T10000] EXT4-fs (loop7): Free/Dirty block details [ 150.445751][T10000] EXT4-fs (loop7): free_blocks=0 [ 150.450905][T10000] EXT4-fs (loop7): dirty_blocks=1 [ 150.456295][T10000] EXT4-fs (loop7): Block reservation details [ 150.462462][T10000] EXT4-fs (loop7): i_reserved_data_blocks=1 [ 150.506811][ T5460] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.650289][T10031] loop6: detected capacity change from 0 to 1024 [ 150.658000][T10034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.667508][T10034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.696258][T10031] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 150.721370][T10031] System zones: 0-1, 3-36 [ 150.732741][T10031] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.2468: bad orphan inode 134217728 [ 150.748550][T10031] loop6: lost filesystem error report for type 5 error -117 [ 150.749203][T10031] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.043698][T10043] loop1: detected capacity change from 0 to 512 [ 151.067998][T10043] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.080793][T10043] ext4 filesystem being mounted at /520/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 151.097258][T10043] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #2: comm syz.1.2473: corrupted inode contents [ 151.109854][ T28] audit: type=1326 audit(1771303911.280:1687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10011 comm="syz.2.2457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d9626bf79 code=0x7fc00000 [ 151.133765][T10043] EXT4-fs error (device loop1): ext4_dirty_inode:6450: inode #2: comm syz.1.2473: mark_inode_dirty error [ 151.145768][T10043] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #2: comm syz.1.2473: corrupted inode contents [ 151.168861][T10043] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #2: comm syz.1.2473: mark_inode_dirty error [ 151.184917][T10046] EXT4-fs warning (device loop1): ext4_es_cache_extent:1082: inode #2: comm syz.1.2473: ES cache extent failed: add [0,1,22,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 151.184917][T10046] [ 151.263595][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.630785][T10072] loop7: detected capacity change from 0 to 1024 [ 151.658160][T10072] EXT4-fs: Ignoring removed bh option [ 151.713785][T10072] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.735681][T10072] raw_sendmsg: syz.7.2484 forgot to set AF_INET. Fix it! [ 151.795967][ T5064] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.805739][ T5460] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.894540][T10081] loop7: detected capacity change from 0 to 512 [ 151.914879][T10081] EXT4-fs error (device loop7): ext4_orphan_get:1391: inode #15: comm syz.7.2487: inode has both inline data and extents flags [ 151.933980][T10081] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 151.939981][T10081] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.2487: couldn't read orphan inode 15 (err -117) [ 151.943934][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 151.953887][T10081] loop7: lost filesystem error report for type 5 error -117 [ 151.961001][ C1] EXT4-fs (loop7): initial error at time 1771303912: ext4_orphan_get:1391: inode 15 [ 151.984347][ C1] EXT4-fs (loop7): last error at time 1771303912: ext4_orphan_get:1391: inode 15 [ 152.026232][T10081] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.069801][ T5460] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.069852][T10093] loop2: detected capacity change from 0 to 2048 [ 152.129917][T10093] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.161533][T10093] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 152.176595][T10093] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 28 [ 152.188943][T10093] EXT4-fs (loop2): This should not happen!! Data will be lost [ 152.188943][T10093] [ 152.198658][T10093] EXT4-fs (loop2): Total free blocks count 0 [ 152.204790][T10093] EXT4-fs (loop2): Free/Dirty block details [ 152.210802][T10093] EXT4-fs (loop2): free_blocks=2415919504 [ 152.216725][T10093] EXT4-fs (loop2): dirty_blocks=16 [ 152.222032][T10093] EXT4-fs (loop2): Block reservation details [ 152.228069][T10093] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 152.248363][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.258889][T10105] loop1: detected capacity change from 0 to 512 [ 152.266340][T10105] EXT4-fs: Ignoring removed nobh option [ 152.276427][T10105] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 152.293060][T10107] loop7: detected capacity change from 0 to 1024 [ 152.307565][T10105] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.2496: iget: bad i_size value: 38620345925642 [ 152.323023][T10105] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 152.323690][T10105] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.2496: couldn't read orphan inode 15 (err -117) [ 152.323944][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 152.351201][ C1] EXT4-fs (loop1): initial error at time 1771303912: ext4_orphan_get:1391: inode 15 [ 152.360688][ C1] EXT4-fs (loop1): last error at time 1771303912: ext4_orphan_get:1391: inode 15 [ 152.366174][T10107] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 152.383065][T10111] loop2: detected capacity change from 0 to 1024 [ 152.389615][T10107] System zones: 0-1, 3-36 [ 152.400103][T10105] loop1: lost filesystem error report for type 5 error -117 [ 152.403492][T10107] EXT4-fs error (device loop7): ext4_orphan_get:1417: comm syz.7.2497: bad orphan inode 134217728 [ 152.411823][T10105] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.439376][T10107] loop7: lost filesystem error report for type 5 error -117 [ 152.443895][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 152.452399][T10107] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.457818][ C0] EXT4-fs (loop7): initial error at time 1771303912: ext4_orphan_get:1417 [ 152.457855][ C0] EXT4-fs (loop7): last error at time 1771303912: ext4_orphan_get:1417 [ 152.496623][T10111] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 152.508925][T10111] ext4 filesystem being mounted at /535/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.525033][T10111] EXT4-fs error (device loop2): ext4_map_blocks:818: inode #15: block 3: comm syz.2.2498: lblock 3 mapped to illegal pblock 3 (length 3) [ 152.539530][T10111] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 152.565735][T10111] EXT4-fs (loop2): This should not happen!! Data will be lost [ 152.565735][T10111] [ 152.599823][T10105] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.2496: bg 0: block 5: invalid block bitmap [ 152.616513][T10111] EXT4-fs error (device loop2): ext4_map_blocks:818: inode #15: block 8: comm syz.2.2498: lblock 8 mapped to illegal pblock 8 (length 8) [ 152.626975][T10105] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 152.643606][T10105] EXT4-fs (loop1): This should not happen!! Data will be lost [ 152.643606][T10105] [ 152.646984][T10111] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 152.654573][T10105] EXT4-fs (loop1): Total free blocks count 0 [ 152.675310][T10105] EXT4-fs (loop1): Free/Dirty block details [ 152.682472][T10111] EXT4-fs (loop2): This should not happen!! Data will be lost [ 152.682472][T10111] [ 152.700048][T10105] EXT4-fs (loop1): free_blocks=0 [ 152.713927][T10105] EXT4-fs (loop1): dirty_blocks=1 [ 152.722994][T10105] EXT4-fs (loop1): Block reservation details [ 152.728270][T10121] loop6: detected capacity change from 0 to 1024 [ 152.733437][T10105] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 152.746444][T10121] EXT4-fs: Ignoring removed oldalloc option [ 152.752623][T10121] EXT4-fs: Ignoring removed bh option [ 152.775694][T10121] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.799361][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 152.822118][ T28] audit: type=1400 audit(1771303912.980:1688): avc: denied { ioctl } for pid=10124 comm="syz.3.2503" path="socket:[25227]" dev="sockfs" ino=25227 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 152.856774][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.884275][ T5064] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.944413][T10131] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.2504: inode has both inline data and extents flags [ 152.972045][T10131] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 152.973972][T10131] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.2504: couldn't read orphan inode 15 (err -117) [ 152.995033][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 152.995063][ C0] EXT4-fs (loop1): initial error at time 1771303913: ext4_orphan_get:1391: inode 15 [ 152.995100][ C0] EXT4-fs (loop1): last error at time 1771303913: ext4_orphan_get:1391: inode 15 [ 153.021010][T10131] loop1: lost filesystem error report for type 5 error -117 [ 153.022269][T10131] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.065840][T10139] ext4 filesystem being mounted at /372/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 153.134954][T10139] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #2: comm syz.6.2508: corrupted inode contents [ 153.234510][T10139] EXT4-fs error (device loop6): ext4_dirty_inode:6450: inode #2: comm syz.6.2508: mark_inode_dirty error [ 153.277576][T10139] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #2: comm syz.6.2508: corrupted inode contents [ 153.292050][T10139] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #2: comm syz.6.2508: mark_inode_dirty error [ 153.308058][T10146] EXT4-fs warning (device loop6): ext4_es_cache_extent:1082: inode #2: comm syz.6.2508: ES cache extent failed: add [0,1,22,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 153.308058][T10146] [ 153.520307][T10170] ext4 filesystem being mounted at /374/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.583481][T10170] EXT4-fs error (device loop6): ext4_map_blocks:818: inode #15: block 3: comm syz.6.2518: lblock 3 mapped to illegal pblock 3 (length 3) [ 153.650540][T10170] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 153.679132][T10170] EXT4-fs (loop6): This should not happen!! Data will be lost [ 153.679132][T10170] [ 153.710139][T10189] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2526'. [ 153.725061][T10189] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2526'. [ 153.741185][T10189] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2526'. [ 153.750387][T10183] EXT4-fs error (device loop6): ext4_map_blocks:818: inode #15: block 8: comm syz.6.2518: lblock 8 mapped to illegal pblock 8 (length 8) [ 153.773949][T10189] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2526'. [ 153.790153][T10183] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 153.847114][T10183] EXT4-fs (loop6): This should not happen!! Data will be lost [ 153.847114][T10183] [ 154.334847][ T28] audit: type=1400 audit(1771303914.510:1689): avc: denied { accept } for pid=10207 comm="syz.7.2533" path="socket:[26229]" dev="sockfs" ino=26229 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 154.810376][T10228] ext4 filesystem being mounted at /380/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 154.831084][T10228] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #2: comm syz.6.2541: corrupted inode contents [ 154.900946][T10228] EXT4-fs error (device loop6): ext4_dirty_inode:6450: inode #2: comm syz.6.2541: mark_inode_dirty error [ 154.928732][T10228] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #2: comm syz.6.2541: corrupted inode contents [ 154.979429][T10228] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #2: comm syz.6.2541: mark_inode_dirty error [ 154.991738][T10234] EXT4-fs warning (device loop6): ext4_es_cache_extent:1082: inode #2: comm syz.6.2541: ES cache extent failed: add [0,1,21,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 154.991738][T10234] [ 155.017105][T10237] EXT4-fs warning (device loop6): ext4_empty_dir:3087: inode #18: comm syz.6.2541: directory missing '.' [ 155.072052][T10246] set_capacity_and_notify: 5 callbacks suppressed [ 155.072071][T10246] loop7: detected capacity change from 0 to 512 [ 155.154085][T10246] ext4 filesystem being mounted at /331/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 155.216180][T10246] EXT4-fs error (device loop7): ext4_do_update_inode:5569: inode #2: comm syz.7.2546: corrupted inode contents [ 155.284144][T10246] EXT4-fs error (device loop7): ext4_dirty_inode:6450: inode #2: comm syz.7.2546: mark_inode_dirty error [ 155.326347][T10246] EXT4-fs error (device loop7): ext4_do_update_inode:5569: inode #2: comm syz.7.2546: corrupted inode contents [ 155.366150][T10246] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #2: comm syz.7.2546: mark_inode_dirty error [ 155.426493][T10261] EXT4-fs warning (device loop7): ext4_es_cache_extent:1082: inode #2: comm syz.7.2546: ES cache extent failed: add [0,1,22,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 155.426493][T10261] [ 155.832886][T10265] loop7: detected capacity change from 0 to 1024 [ 156.052700][T10272] loop1: detected capacity change from 0 to 1024 [ 156.055014][T10265] EXT4-fs: inline encryption not supported [ 156.071273][T10265] EXT4-fs: Ignoring removed bh option [ 156.088612][T10272] EXT4-fs: Ignoring removed orlov option [ 156.431622][T10290] loop6: detected capacity change from 0 to 128 [ 157.442180][ T28] audit: type=1400 audit(1771303917.610:1690): avc: denied { accept } for pid=10318 comm="syz.3.2569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 157.523319][ T28] audit: type=1326 audit(1771303917.660:1691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10293 comm="syz.1.2559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88ee4bbf79 code=0x7fc00000 [ 157.667678][T10325] loop1: detected capacity change from 0 to 1024 [ 157.719273][T10325] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 157.745354][T10325] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 157.756145][T10325] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 157.799436][T10325] EXT4-fs error (device loop1): ext4_get_journal_inode:5865: inode #5: comm syz.1.2572: unexpected bad inode w/o EXT4_IGET_BAD [ 157.813376][T10325] loop1: lost file I/O error report for ino 5 type 5 pos 0x0 len 0x0 error -117 [ 157.813626][T10325] EXT4-fs (loop1): no journal found [ 157.822736][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 157.822762][ C1] EXT4-fs (loop1): initial error at time 1771303917: ext4_get_journal_inode:5865: inode 5 [ 157.822797][ C1] EXT4-fs (loop1): last error at time 1771303917: ext4_get_journal_inode:5865: inode 5 [ 157.865991][T10325] EXT4-fs (loop1): can't get journal size [ 157.901191][ T28] audit: type=1400 audit(1771303918.070:1692): avc: denied { read open } for pid=10338 comm="syz.2.2578" path="/" dev="configfs" ino=2016 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 157.924977][T10325] EXT4-fs (loop1): shut down requested (0) [ 158.036774][ T28] audit: type=1400 audit(1771303918.210:1693): avc: denied { write } for pid=10345 comm="syz.1.2581" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 158.080643][T10350] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2583'. [ 158.133589][ T28] audit: type=1400 audit(1771303918.250:1694): avc: denied { setopt } for pid=10349 comm="syz.3.2583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 158.249216][ T28] audit: type=1400 audit(1771303918.420:1695): avc: denied { setopt } for pid=10355 comm="syz.3.2586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 158.357489][ T28] audit: type=1400 audit(1771303918.440:1696): avc: denied { ioctl } for pid=10355 comm="syz.3.2586" path="socket:[29115]" dev="sockfs" ino=29115 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 158.458968][ T28] audit: type=1400 audit(1771303918.460:1697): avc: denied { mount } for pid=10359 comm="syz.2.2588" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 159.043636][T10383] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2597'. [ 159.100596][ T28] audit: type=1400 audit(1771303919.270:1698): avc: denied { setopt } for pid=10384 comm="syz.1.2599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 159.188788][T10393] loop2: detected capacity change from 0 to 512 [ 159.206742][T10393] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 159.224058][T10393] EXT4-fs (loop2): 1 truncate cleaned up [ 159.260265][ T28] audit: type=1400 audit(1771303919.420:1699): avc: denied { name_bind } for pid=10400 comm="syz.3.2606" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 159.608402][T10426] loop1: detected capacity change from 0 to 128 [ 159.615946][T10426] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 159.639627][T10426] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 159.653928][T10426] FAT-fs (loop1): Filesystem has been set read-only [ 159.660687][T10426] syz.1.2616: attempt to access beyond end of device [ 159.660687][T10426] loop1: rw=8912896, sector=2065, nr_sectors = 8 limit=128 [ 159.678696][T10426] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 159.687561][T10426] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 159.696030][T10426] syz.1.2616: attempt to access beyond end of device [ 159.696030][T10426] loop1: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 159.707016][T10301] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 159.720321][T10425] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 159.731318][T10429] netlink: 'syz.2.2617': attribute type 4 has an invalid length. [ 159.739312][T10426] syz.1.2616: attempt to access beyond end of device [ 159.739312][T10426] loop1: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 159.756440][T10425] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 159.766247][T10429] netlink: 'syz.2.2617': attribute type 4 has an invalid length. [ 159.774361][T10425] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 159.795272][T10426] syz.1.2616: attempt to access beyond end of device [ 159.795272][T10426] loop1: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 159.833600][T10425] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 159.852464][T10425] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 159.867610][T10426] syz.1.2616: attempt to access beyond end of device [ 159.867610][T10426] loop1: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 159.908607][T10425] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 159.934048][T10425] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 159.950220][T10426] syz.1.2616: attempt to access beyond end of device [ 159.950220][T10426] loop1: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 159.997107][T10426] syz.1.2616: attempt to access beyond end of device [ 159.997107][T10426] loop1: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 160.011999][T10426] syz.1.2616: attempt to access beyond end of device [ 160.011999][T10426] loop1: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 160.028703][T10426] syz.1.2616: attempt to access beyond end of device [ 160.028703][T10426] loop1: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 160.043417][T10426] syz.1.2616: attempt to access beyond end of device [ 160.043417][T10426] loop1: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 160.103960][T10445] loop6: detected capacity change from 0 to 512 [ 160.117404][T10445] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 160.129774][T10445] EXT4-fs (loop6): 1 truncate cleaned up [ 160.318772][T10460] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2630'. [ 160.385049][ T28] audit: type=1400 audit(1771303920.560:1700): avc: denied { ioctl } for pid=10461 comm="syz.2.2631" path="/dev/snapshot" dev="devtmpfs" ino=90 ioctlcmd=0x3304 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 160.426450][T10468] loop7: detected capacity change from 0 to 1024 [ 160.433612][T10468] EXT4-fs: inline encryption not supported [ 160.449247][T10468] EXT4-fs: Ignoring removed bh option [ 160.457974][ T28] audit: type=1326 audit(1771303920.630:1701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10463 comm="syz.6.2632" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fab5d6ebf79 code=0x0 [ 160.504048][T10468] EXT4-fs error (device loop7): mb_free_blocks:2047: group 0, inode 15: block 273:freeing already freed block (bit 17); block bitmap corrupt. [ 161.298447][T10523] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 161.437432][T10540] netlink: 'syz.2.2664': attribute type 8 has an invalid length. [ 161.447540][T10540] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2664'. [ 161.468459][T10540] bond0: entered promiscuous mode [ 161.476075][T10540] gretap0: entered promiscuous mode [ 161.486812][T10540] bond0: left promiscuous mode [ 161.510442][T10540] gretap0: left promiscuous mode [ 162.440942][T10606] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2688'. [ 162.501495][T10606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.509763][T10613] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2690'. [ 162.557747][T10611] bond0: (slave batadv1): Opening slave failed [ 162.648829][T10623] delete_channel: no stack [ 162.689283][T10628] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2700'. [ 162.696775][T10626] loop7: detected capacity change from 0 to 1024 [ 162.702525][T10628] netlink: 'syz.1.2700': attribute type 20 has an invalid length. [ 162.712816][T10628] netlink: 'syz.1.2700': attribute type 21 has an invalid length. [ 162.731524][T10626] EXT4-fs: Ignoring removed orlov option [ 162.744201][T10626] EXT4-fs (loop7): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 162.905185][T10644] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2707'. [ 162.926233][T10646] loop2: detected capacity change from 0 to 1024 [ 162.936226][T10644] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2707'. [ 162.946355][T10646] EXT4-fs: Ignoring removed nomblk_io_submit option [ 162.993579][T10646] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e841c01c, mo2=0003] [ 163.002323][T10646] System zones: 0-1, 3-36 [ 163.065300][T10655] loop6: detected capacity change from 0 to 1764 [ 163.102549][T10664] loop2: detected capacity change from 0 to 512 [ 163.161610][T10664] ext4 filesystem being mounted at /589/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 163.173854][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 163.173871][ T28] audit: type=1400 audit(1771303923.330:1722): avc: denied { lock } for pid=10665 comm="syz.3.2716" path="socket:[28223]" dev="sockfs" ino=28223 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 163.257479][T10664] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #2: comm syz.2.2714: corrupted inode contents [ 163.303060][T10664] EXT4-fs error (device loop2): ext4_dirty_inode:6450: inode #2: comm syz.2.2714: mark_inode_dirty error [ 163.315377][ T28] audit: type=1326 audit(1771303923.410:1723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10670 comm="syz.6.2717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab5d6ebf79 code=0x7ffc0000 [ 163.355052][T10664] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #2: comm syz.2.2714: corrupted inode contents [ 163.411715][T10677] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2720'. [ 163.414556][ T28] audit: type=1326 audit(1771303923.410:1724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10670 comm="syz.6.2717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab5d6ebf79 code=0x7ffc0000 [ 163.473306][ T28] audit: type=1326 audit(1771303923.410:1725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10670 comm="syz.6.2717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab5d6ebf79 code=0x7ffc0000 [ 163.504286][T10677] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2720'. [ 163.523971][T10664] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #2: comm syz.2.2714: mark_inode_dirty error [ 163.543953][ T28] audit: type=1326 audit(1771303923.410:1726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10670 comm="syz.6.2717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab5d6ebf79 code=0x7ffc0000 [ 163.596451][T10677] geneve2: entered promiscuous mode [ 163.597501][ T28] audit: type=1326 audit(1771303923.410:1727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10670 comm="syz.6.2717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fab5d6ebf79 code=0x7ffc0000 [ 163.625583][ T28] audit: type=1326 audit(1771303923.410:1728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10670 comm="syz.6.2717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab5d6ebf79 code=0x7ffc0000 [ 163.638408][T10677] geneve2: entered allmulticast mode [ 163.652678][ T28] audit: type=1326 audit(1771303923.410:1729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10670 comm="syz.6.2717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab5d6ebf79 code=0x7ffc0000 [ 163.678543][ T28] audit: type=1326 audit(1771303923.410:1730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10670 comm="syz.6.2717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab5d6ebf79 code=0x7ffc0000 [ 163.702433][ T28] audit: type=1326 audit(1771303923.410:1731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10670 comm="syz.6.2717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab5d6ebf79 code=0x7ffc0000 [ 163.761587][ T7176] Bluetooth: hci0: Frame reassembly failed (-84) [ 163.799072][ T3317] EXT4-fs unmount: 27 callbacks suppressed [ 163.799092][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.652660][T10718] Process accounting resumed [ 164.660292][T10720] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2739'. [ 164.679188][T10720] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2739'. [ 164.688503][T10720] netlink: 'syz.3.2739': attribute type 6 has an invalid length. [ 164.699696][T10720] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2739'. [ 164.699693][ T7174] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.699745][ T7174] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.699875][T10720] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2739'. [ 164.735726][ T7174] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.753958][ T7176] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.764144][T10720] netlink: 'syz.3.2739': attribute type 6 has an invalid length. [ 165.281382][T10764] loop1: detected capacity change from 0 to 512 [ 165.333291][T10764] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.366389][T10764] ext4 filesystem being mounted at /569/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.464774][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.509244][T10773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.518901][T10773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.537983][T10775] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2769'. [ 165.548637][T10775] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2769'. [ 165.691000][T10783] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2763'. [ 165.706360][ T2104] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.715339][T10775] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2769'. [ 165.729370][ T2104] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.741764][T10775] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2769'. [ 165.750860][ T2104] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.760559][ T2104] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.803913][ T3528] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 166.133055][T10823] SELinux: security policydb version 16 (MLS) not backwards compatible [ 166.145999][T10823] SELinux: failed to load policy [ 166.447689][T10865] loop6: detected capacity change from 0 to 1024 [ 166.455067][T10865] EXT4-fs: Ignoring removed nomblk_io_submit option [ 166.475913][T10865] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 166.494019][T10865] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e054c018, mo2=0002] [ 166.502380][T10865] System zones: 0-1, 3-36 [ 166.508666][T10865] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.549598][T10865] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 166.574389][T10868] loop1: detected capacity change from 0 to 128 [ 166.581277][T10868] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 166.625367][ T5064] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.791406][T10888] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2806'. [ 166.969244][T10899] loop2: detected capacity change from 0 to 512 [ 166.980347][T10901] syz.3.2813: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0 [ 167.048937][T10901] CPU: 1 UID: 0 PID: 10901 Comm: syz.3.2813 Tainted: G W syzkaller #0 PREEMPT(full) [ 167.048978][T10901] Tainted: [W]=WARN [ 167.048985][T10901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 167.048999][T10901] Call Trace: [ 167.049006][T10901] [ 167.049014][T10901] __dump_stack+0x1d/0x30 [ 167.049125][T10901] dump_stack_lvl+0x95/0xd0 [ 167.049154][T10901] dump_stack+0x15/0x1b [ 167.049181][T10901] warn_alloc+0x145/0x1c0 [ 167.049221][T10901] ? __schedule+0x85a/0xd40 [ 167.049251][T10901] ? __rcu_read_unlock+0x4e/0x70 [ 167.049276][T10901] __vmalloc_node_range_noprof+0xa0/0x12b0 [ 167.049308][T10901] ? __futex_wait+0x1fd/0x260 [ 167.049401][T10901] ? __pfx_futex_wake_mark+0x10/0x10 [ 167.049462][T10901] ? __rcu_read_unlock+0x4e/0x70 [ 167.049485][T10901] ? avc_has_perm_noaudit+0xab/0x130 [ 167.049510][T10901] ? should_fail_ex+0x30/0x280 [ 167.049539][T10901] ? xskq_create+0x36/0xe0 [ 167.049563][T10901] vmalloc_user_noprof+0x7d/0xb0 [ 167.049662][T10901] ? xskq_create+0x80/0xe0 [ 167.049687][T10901] xskq_create+0x80/0xe0 [ 167.049709][T10901] xsk_init_queue+0x70/0xb0 [ 167.049748][T10901] xsk_setsockopt+0x477/0x640 [ 167.049788][T10901] ? __pfx_xsk_setsockopt+0x10/0x10 [ 167.049941][T10901] __sys_setsockopt+0x184/0x200 [ 167.049977][T10901] __x64_sys_setsockopt+0x64/0x80 [ 167.050009][T10901] x64_sys_call+0x2327/0x3020 [ 167.050043][T10901] do_syscall_64+0x12c/0x370 [ 167.050116][T10901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.050143][T10901] RIP: 0033:0x7f9203a1bf79 [ 167.050162][T10901] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.050185][T10901] RSP: 002b:00007f9202477028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 167.050254][T10901] RAX: ffffffffffffffda RBX: 00007f9203c95fa0 RCX: 00007f9203a1bf79 [ 167.050331][T10901] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000004 [ 167.050346][T10901] RBP: 00007f9203ab27e0 R08: 0000000000000004 R09: 0000000000000000 [ 167.050360][T10901] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 167.050374][T10901] R13: 00007f9203c96038 R14: 00007f9203c95fa0 R15: 00007fffd73c8cf8 [ 167.050396][T10901] [ 167.279504][T10901] Mem-Info: [ 167.281211][T10899] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.297073][T10901] active_anon:13363 inactive_anon:6555 isolated_anon:0 [ 167.297073][T10901] active_file:23170 inactive_file:2521 isolated_file:0 [ 167.297073][T10901] unevictable:0 dirty:237 writeback:0 [ 167.297073][T10901] slab_reclaimable:3822 slab_unreclaimable:20071 [ 167.297073][T10901] mapped:29161 shmem:10854 pagetables:6043 [ 167.297073][T10901] sec_pagetables:0 bounce:0 [ 167.297073][T10901] kernel_misc_reclaimable:0 [ 167.297073][T10901] free:1810173 free_pcp:15596 free_cma:0 [ 167.342681][T10901] Node 0 active_anon:53452kB inactive_anon:26220kB active_file:92680kB inactive_file:10084kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:116644kB dirty:948kB writeback:0kB shmem:43416kB kernel_stack:4416kB pagetables:24172kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 167.342628][T10899] ext4 filesystem being mounted at /598/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 167.342741][T10901] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 167.412057][T10901] lowmem_reserve[]: 0 2879 7857 7857 [ 167.417505][T10901] Node 0 DMA32 free:2944688kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2948316kB mlocked:0kB bounce:0kB free_pcp:3628kB local_pcp:104kB free_cma:0kB [ 167.471506][T10901] lowmem_reserve[]: 0 0 4978 4978 [ 167.495096][T10901] Node 0 Normal free:4280644kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:43476kB inactive_anon:26220kB active_file:92680kB inactive_file:10084kB unevictable:0kB writepending:948kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:69056kB local_pcp:13388kB free_cma:0kB [ 167.543880][T10901] lowmem_reserve[]: 0 0 0 0 [ 167.548683][T10901] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 167.582807][T10901] Node 0 DMA32: 2*4kB (M) 1*8kB (M) 2*16kB (M) 2*32kB (M) 1*64kB (M) 4*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944688kB [ 167.611964][T10901] Node 0 Normal: 2077*4kB (UME) 1294*8kB (UME) 920*16kB (UME) 785*32kB (UME) 460*64kB (UME) 320*128kB (UME) 170*256kB (UME) 97*512kB (UM) 56*1024kB (UE) 46*2048kB (UME) 956*4096kB (UM) = 4289412kB [ 167.676257][T10901] Node 0 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 167.703872][T10901] 32493 total pagecache pages [ 167.708667][T10901] 22 pages in swap cache [ 167.713048][T10901] Free swap = 82004kB [ 167.723887][T10901] Total swap = 124996kB [ 167.734163][T10901] 2097051 pages RAM [ 167.740757][T10913] loop7: detected capacity change from 0 to 512 [ 167.753913][T10901] 0 pages HighMem/MovableOnly [ 167.758725][T10901] 81572 pages reserved [ 167.764550][T10913] EXT4-fs (loop7): orphan cleanup on readonly fs [ 167.776312][T10913] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 167.797176][T10913] EXT4-fs error (device loop7): ext4_get_branch:178: inode #13: block 1024: comm syz.7.2818: invalid block [ 167.813870][T10913] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 167.814047][T10913] EXT4-fs (loop7): Remounting filesystem read-only [ 167.829808][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 167.829830][ C0] EXT4-fs (loop7): initial error at time 1771303927: ext4_get_branch:178: inode 13: block 1024 [ 167.829879][ C0] EXT4-fs (loop7): last error at time 1771303927: ext4_get_branch:178: inode 13: block 1024 [ 167.857154][T10913] EXT4-fs (loop7): 1 truncate cleaned up [ 167.863220][T10913] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 167.878177][T10913] netlink: 'syz.7.2818': attribute type 7 has an invalid length. [ 167.885997][T10913] netlink: 'syz.7.2818': attribute type 8 has an invalid length. [ 167.952405][ T5460] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.035174][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.064129][T10926] batadv_slave_1: entered promiscuous mode [ 168.089861][T10925] batadv_slave_1: left promiscuous mode [ 168.719813][ T28] kauditd_printk_skb: 33 callbacks suppressed [ 168.719883][ T28] audit: type=1400 audit(1771303928.890:1765): avc: denied { create } for pid=10952 comm="syz.1.2832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 168.826450][T10957] loop1: detected capacity change from 0 to 512 [ 168.832883][ T28] audit: type=1400 audit(1771303928.940:1766): avc: denied { shutdown } for pid=10952 comm="syz.1.2832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 168.857884][ T28] audit: type=1400 audit(1771303928.940:1767): avc: denied { read } for pid=10952 comm="syz.1.2832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 168.878968][T10957] EXT4-fs (loop1): 1 truncate cleaned up [ 168.885264][T10957] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.900218][T10957] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2834: bg 0: block 465: padding at end of block bitmap is not set [ 168.933199][T10957] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6687: Corrupt filesystem [ 168.949765][T10957] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.2834: invalid indirect mapped block 234881024 (level 0) [ 169.051399][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.436314][ T28] audit: type=1400 audit(1771303929.610:1768): avc: denied { connect } for pid=11007 comm="syz.3.2857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 169.562386][T11020] loop2: detected capacity change from 0 to 1024 [ 169.571627][T11020] EXT4-fs: Ignoring removed orlov option [ 169.615609][T11024] loop6: detected capacity change from 0 to 1024 [ 169.623941][T11020] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.656887][T11024] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.693474][ T28] audit: type=1400 audit(1771303929.860:1769): avc: denied { map } for pid=11019 comm="syz.2.2861" path="/604/file1/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 169.738783][T11024] ================================================================== [ 169.746919][T11024] BUG: KCSAN: data-race in filemap_read / filemap_read [ 169.753796][T11024] [ 169.756191][T11024] write to 0xffff88813b9a1fa8 of 8 bytes by task 11035 on cpu 0: [ 169.763940][T11024] filemap_read+0x98d/0xa10 [ 169.768481][T11024] generic_file_read_iter+0x79/0x330 [ 169.773799][T11024] ext4_file_read_iter+0x1cc/0x290 [ 169.778965][T11024] __io_read+0x463/0xc50 [ 169.783240][T11024] io_read+0x4a/0x190 [ 169.787260][T11024] __io_issue_sqe+0xfd/0x2d0 [ 169.791890][T11024] io_issue_sqe+0x208/0xc00 [ 169.796441][T11024] io_wq_submit_work+0x5bc/0x830 [ 169.801437][T11024] io_worker_handle_work+0x41e/0x950 [ 169.807019][T11024] io_wq_worker+0x23d/0x970 [ 169.811546][T11024] ret_from_fork+0x150/0x360 [ 169.816168][T11024] ret_from_fork_asm+0x1a/0x30 [ 169.820964][T11024] [ 169.823305][T11024] read to 0xffff88813b9a1fa8 of 8 bytes by task 11024 on cpu 1: [ 169.830949][T11024] filemap_read+0x6f/0xa10 [ 169.835392][T11024] generic_file_read_iter+0x79/0x330 [ 169.840715][T11024] ext4_file_read_iter+0x1cc/0x290 [ 169.845908][T11024] __io_read+0x463/0xc50 [ 169.850205][T11024] io_read+0x4a/0x190 [ 169.854224][T11024] __io_issue_sqe+0xfd/0x2d0 [ 169.858853][T11024] io_issue_sqe+0x208/0xc00 [ 169.863390][T11024] io_submit_sqes+0x7ec/0x1260 [ 169.868187][T11024] __se_sys_io_uring_enter+0x1c9/0xf50 [ 169.873688][T11024] __x64_sys_io_uring_enter+0x78/0x90 [ 169.879105][T11024] x64_sys_call+0x1e16/0x3020 [ 169.883816][T11024] do_syscall_64+0x12c/0x370 [ 169.888453][T11024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.894458][T11024] [ 169.896801][T11024] value changed: 0xffffffffffffffff -> 0x000000000000000a [ 169.903931][T11024] [ 169.906270][T11024] Reported by Kernel Concurrency Sanitizer on: [ 169.912436][T11024] CPU: 1 UID: 0 PID: 11024 Comm: syz.6.2862 Tainted: G W syzkaller #0 PREEMPT(full) [ 169.923410][T11024] Tainted: [W]=WARN [ 169.927243][T11024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 169.937489][T11024] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 169.948415][ T28] audit: type=1400 audit(1771303929.860:1770): avc: denied { execute } for pid=11019 comm="syz.2.2861" path="/604/file1/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 170.006303][T11014] chnl_net:caif_netlink_parms(): no params data found [ 170.129570][ T5064] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.145634][ T8562] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.207699][ T12] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 170.218077][ T12] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.323195][ T12] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 170.334652][ T12] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.396910][ T12] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 170.407455][ T12] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.467110][ T12] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 170.477472][ T12] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.622227][ T12] team0: Port device geneve1 removed [ 170.677147][ T12] team0: Port device bridge1 removed [ 170.725478][ T12] team0: Port device bridge2 removed [ 170.765500][ T12] bond0 (unregistering): Released all slaves [ 170.808089][ T12] tipc: Left network mode [ 170.815946][ T12] hsr_slave_0: left promiscuous mode [ 170.821927][ T12] hsr_slave_1: left promiscuous mode [ 170.831909][ T12] veth1_macvtap: left promiscuous mode [ 170.837504][ T12] veth0_macvtap: left promiscuous mode [ 170.843269][ T12] veth1_vlan: left promiscuous mode [ 170.851171][ T12] veth0_vlan: left promiscuous mode [ 171.225766][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 171.265161][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 171.305137][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 171.365252][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 171.495456][ T12] bond0 (unregistering): Released all slaves [ 171.556231][ T12] team0: Port device bridge1 removed [ 171.595294][ T12] bond0 (unregistering): Released all slaves [ 171.636851][ T12] tipc: Left network mode [ 171.653268][ T12] hsr_slave_0: left promiscuous mode [ 171.659300][ T12] hsr_slave_1: left promiscuous mode [ 171.665241][ T12] batman_adv: batadv0: Removing interface: vlan2 [ 171.958974][ T12] IPVS: stop unused estimator thread 0...