last executing test programs: 1m15.287115308s ago: executing program 4 (id=587): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000880)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x12}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x20}}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r0 = creat(&(0x7f0000000200)='./file1\x00', 0x12e) close(r0) 1m15.143412511s ago: executing program 4 (id=592): unshare(0x22020600) r0 = socket$inet6(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x4, &(0x7f00000010c0)=ANY=[@ANYBLOB="8500000008000000350000008400000085000000070000009500000000000000fed023d1d405000000c7d4012507000000c71adb05d72768b8242dd90d17e4c52505750482b009546a5f3f00573f31b53fd3e52bd87184446d165ae2939bbca322a415a98c885faad395f3e4e0635559362ed862ce7c69ad133037af3a000000000000000000000058c122dff93c54caec3751652d11fd4f66711918d3604b92666d60c88b658fe57bb5d365c5b89625385f230ba21f570635837c7bc74be573bfd68aaaf06d842085f84b96c4709e2c9449f0818f6fc5657572fb3e5bb8ff6f643e52f4964c62a70a011ede8b504c8a30381b8eff01d7615e1789bb4b3b7ef3668a98a785a80aa2d1ab149b9316091fb3025f0716799d8280acb3880a882f28dd3111e02c3b0b2818bf5bb902cc9c1666f5fdd2e43901ca4796f04db25c3df35cdfc17c54936202b45b7a09816aa76e8b9bbe24022007aae367025040e8b2255ced48a4b2db3f280dc6fd2f5374548c499ae74631f3be04e28d601369f9488fb074eb35540df5e053376ea29125d6bb916496b04b8e359c1edef91677414729967cffa736d7789c14e918b77518ee8e5d5aff9148be69267fff35"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/148, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x8b63bfea1a14a3c7}, 0x16) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x3c1, 0x3, 0x570, 0x368, 0x8, 0x7f02ae, 0x0, 0x200, 0x4a0, 0x2e8, 0x2e8, 0x4a0, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x340, 0x368, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @fd={0x2, 0x0, r1}}, @common=@inet=@iprange={{0x68}, {@ipv4, @ipv4=@remote, @ipv6=@mcast2, @ipv4=@remote}}]}, @common=@unspec=@CLASSIFY={0x28}}, {{@ipv6={@private2, @private2, [], [], 'veth0_to_team\x00', 'netdevsim0\x00', {}, {0xff}, 0x0, 0x0, 0x1}, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@mh={{0x28}, {"a27d"}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x13, 0xec, 0x5, 0x400, 'snmp\x00', 'syz0\x00', {0xffffffff8cdbbefd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d0) 1m14.980563316s ago: executing program 4 (id=596): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) 1m14.939858909s ago: executing program 4 (id=599): perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xffffffffffffffff, 0x8000000000000000}, 0x0, 0x10000, 0x4, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x9, 0x0) mq_timedreceive(r0, &(0x7f0000004600)=""/102381, 0xfffffceb, 0x0, 0x0) 1m14.826495589s ago: executing program 4 (id=604): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000000c0)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'lc\x00', 0x1, 0x0, 0x4}, 0x2c) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 1m14.742185107s ago: executing program 4 (id=607): ptrace(0x10, 0x1) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x6, 0x0, 0x0, 0x0, 0x8000000009917, 0x400000000000fffd}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0xffffffffffffffff}, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x1}, 0x0) 59.555393542s ago: executing program 32 (id=607): ptrace(0x10, 0x1) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x6, 0x0, 0x0, 0x0, 0x8000000009917, 0x400000000000fffd}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0xffffffffffffffff}, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x1}, 0x0) 1.635171114s ago: executing program 3 (id=3346): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 1.344989329s ago: executing program 1 (id=3358): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') exit(0x4000000000009) fchdir(r0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x60000, 0x3) getdents(r1, 0x0, 0x0) 572.139099ms ago: executing program 3 (id=3360): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x40900, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) 535.664072ms ago: executing program 5 (id=3364): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000a80)='kfree\x00', r1}, 0x18) modify_ldt$write(0x1, &(0x7f0000000040)={0xd35, 0x1000, 0x4000}, 0x10) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) 500.157955ms ago: executing program 3 (id=3365): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x18d6, &(0x7f0000000440)={0x0, 0x5352, 0x40, 0x2000, 0xfffffffc}, &(0x7f0000ffe000), &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r1, 0x2, &(0x7f0000000180), 0xfe) 482.205157ms ago: executing program 5 (id=3366): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0, 0x0, 0xb}, 0x18) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000580)={0x500, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="020200090f000000000000000000000005000600000000000a0000000000000000000000000000000000000000000000000000000000000002000100000004d20000020300000020050005002f8000000a00000000000000ff0100000000000000000000000000010000000000000000010018"], 0x78}}, 0x0) 465.976248ms ago: executing program 1 (id=3367): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x370, 0x0, 0x111, 0x4b4, 0x1e0, 0xd4feffff, 0x2f8, 0x20a, 0x278, 0x2f8, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0x0, 0xffffff00], [0x0, 0xffffffff], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x73, 0xe}, 0x0, 0x168, 0x1b0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x8, {0x2}}}}, {{@ipv6={@remote, @mcast2, [0x0, 0x0, 0xff000000], [0xff], 'veth1_to_hsr\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@ipv4={'\x00', '\xff\xff', @loopback}, 'wlan1\x00', {0x7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000080)=0x40) pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd02000040", 0x42}], 0x1, 0x0, 0x0) 455.429379ms ago: executing program 0 (id=3368): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000004140)={0x9, 0xffff, 0xfff8, 0x8, 0x11, "414d2276ba0cc02b"}) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x9) write(r1, &(0x7f0000002780)="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", 0xccc) 407.187833ms ago: executing program 5 (id=3371): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c000000fedbdf2500"/20, @ANYRES32=0x0, @ANYBLOB="40000000000000000c002b80080003"], 0x2c}}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01400000000000000000067400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a733000080002000000e6ff0700070026093a0914000600626f6e643000"/94], 0x78}, 0x1, 0xffffffff00000003}, 0x0) 363.217557ms ago: executing program 0 (id=3372): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000004000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000003f000500000000000000df25047c0000040000000c0001"], 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x0) 362.840227ms ago: executing program 1 (id=3373): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x17, 0x80000000, 0x4e, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x700, 0x7, 0x8, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000680)={'syztnl1\x00', 0x0}) 335.40608ms ago: executing program 2 (id=3374): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) sendmmsg$unix(r1, &(0x7f0000005400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x40000}}], 0x1, 0x4004080) 319.942901ms ago: executing program 0 (id=3375): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000800)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r0, 0x0, 0x4}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000c0}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b040000000000be17000200fffe4c0004802800018007000100637400001c000280080001400000001108000240000000090500030000000000200001800700010063740000140002800800024000000011080004400000000c0900010073797a30000000000900020073797a32"], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0) 314.267481ms ago: executing program 5 (id=3376): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = dup(r0) fsetxattr$security_selinux(r2, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x20, 0x0) 284.861044ms ago: executing program 2 (id=3377): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfd}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000007c0)={0x2, 0x2, 0x1, 0x9, 0x2, 0xce8, 0x44ab, 0xffff, r1}, &(0x7f0000000800)=0x20) 284.300614ms ago: executing program 1 (id=3378): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x100) socket(0x40000000015, 0x5, 0x0) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x20000000}) 238.383318ms ago: executing program 1 (id=3379): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0xe000202b}) epoll_pwait(r2, &(0x7f00000000c0)=[{}], 0x1, 0xd92d, 0x0, 0x0) 222.07577ms ago: executing program 5 (id=3380): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) symlinkat(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00') newfstatat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, 0x100) 219.65304ms ago: executing program 0 (id=3390): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = dup(r0) fsetxattr$security_selinux(r2, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x20, 0x0) 201.836762ms ago: executing program 2 (id=3381): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e40)=ANY=[@ANYBLOB="0b00000005000000020000000200000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000160000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) capget(&(0x7f0000000340)={0x20080522}, 0x0) 186.979433ms ago: executing program 0 (id=3382): r0 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bd2, 0x10100, 0x0, 0x313}, &(0x7f00000005c0)=0x0, &(0x7f0000000280)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x40, 0x0, r4, 0x0, &(0x7f0000000000)="bd", 0xfffffffffffffe28, 0x100, 0x1}) io_uring_enter(r0, 0x46f3, 0x0, 0x0, 0x0, 0x0) write(r3, &(0x7f00000000c0)='g', 0x1) 177.152844ms ago: executing program 5 (id=3383): r0 = open(&(0x7f0000000400)='./file0\x00', 0x64842, 0x2) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x1cb041, 0x9) r2 = dup(r1) sendfile(r2, r0, 0x0, 0x8000fffffffc) 152.857976ms ago: executing program 0 (id=3384): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x804, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) writev(r0, &(0x7f0000001300)=[{&(0x7f0000000280)="a4", 0x34000}], 0x1) 134.693997ms ago: executing program 3 (id=3385): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0xed0, &(0x7f0000000400)={0x0, 0x6e2, 0x10300, 0x2}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0xa3d, 0x4, 0x0, 0x0, 0x0) shutdown(r0, 0x2) 130.768938ms ago: executing program 2 (id=3386): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)={0x14, 0x17, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x40000c4}, 0x4040) 101.035521ms ago: executing program 3 (id=3387): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c00000008001240000000000500050002000000050004000000000010000300686173683a6970"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) 99.203841ms ago: executing program 2 (id=3388): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x53, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 68.749133ms ago: executing program 2 (id=3389): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x100) socket(0x40000000015, 0x5, 0x0) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x20000000}) 63.439614ms ago: executing program 3 (id=3391): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000800)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r0, 0x0, 0x4}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000c0}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b040000000000be17000200fffe4c0004802800018007000100637400001c000280080001400000001108000240000000090500030000000000200001800700010063740000140002800800024000000011080004400000000c0900010073797a30000000000900020073797a32"], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0) 0s ago: executing program 1 (id=3392): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000c40)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x25dfdbfe, {{@in=@empty, @in6=@dev={0xfe, 0x80, '\x00', 0x42}, 0x0, 0x0, 0x81e, 0x4, 0xa, 0x20, 0x80, 0x21}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x33}, @in=@loopback, {0x401, 0x0, 0x8, 0x0, 0xffffffff, 0x3, 0x0, 0x8000000}, {0xfffffffffffffffd, 0x0, 0xfffffffffffffffd, 0x80000001}, {0x0, 0x1, 0xfffffffc}, 0x2, 0x0, 0xa, 0x2, 0x1, 0x51}}, 0xf0}, 0x1, 0x0, 0x0, 0x24040021}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000002040)=0x4, 0x4) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000690005"], 0x28}}, 0x0) recvmmsg(r0, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/91, 0x5b}}, {{&(0x7f0000000000)=@isdn, 0x0, &(0x7f0000000640)=[{&(0x7f0000000080)=""/225, 0x1}, {&(0x7f00000001c0)=""/65}, {&(0x7f0000000d40)=""/4095, 0x1f}, {&(0x7f0000000240)=""/99}, {&(0x7f00000002c0)=""/122}, {&(0x7f0000000340)=""/217}, {&(0x7f00000008c0)=""/35}, {&(0x7f0000000500)=""/214}, {&(0x7f0000000600)=""/1}]}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000780)=""/32}], 0x0, &(0x7f00000009c0)=""/126}}], 0x40000000000024a, 0x40002002, 0x0) kernel console output (not intermixed with test programs): ] SELinux: failed to load policy [ 74.015372][ T6650] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1356'. [ 74.024383][ T6650] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1356'. [ 74.046184][ T29] kauditd_printk_skb: 150 callbacks suppressed [ 74.046202][ T29] audit: type=1400 audit(1767988191.528:1559): avc: denied { connect } for pid=6652 comm="syz.0.1357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 74.072116][ T29] audit: type=1400 audit(1767988191.528:1560): avc: denied { write } for pid=6652 comm="syz.0.1357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 74.108638][ T29] audit: type=1400 audit(1767988191.578:1561): avc: denied { create } for pid=6656 comm="syz.5.1359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 74.137772][ T29] audit: type=1400 audit(1767988191.588:1562): avc: denied { write } for pid=6656 comm="syz.5.1359" path="socket:[14585]" dev="sockfs" ino=14585 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 74.169904][ T6660] loop2: detected capacity change from 0 to 512 [ 74.177133][ T6660] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 74.187148][ T29] audit: type=1326 audit(1767988191.658:1563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6661 comm="syz.1.1362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f173dc7f749 code=0x7ffc0000 [ 74.210898][ T29] audit: type=1326 audit(1767988191.658:1564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6661 comm="syz.1.1362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f173dc7f749 code=0x7ffc0000 [ 74.236522][ T29] audit: type=1326 audit(1767988191.718:1565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6661 comm="syz.1.1362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f173dc7f749 code=0x7ffc0000 [ 74.260026][ T29] audit: type=1326 audit(1767988191.718:1566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6661 comm="syz.1.1362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f173dc7f749 code=0x7ffc0000 [ 74.283684][ T29] audit: type=1326 audit(1767988191.718:1567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6661 comm="syz.1.1362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f173dc7f749 code=0x7ffc0000 [ 74.290616][ T6660] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e002c01c, mo2=0002] [ 74.307477][ T29] audit: type=1326 audit(1767988191.718:1568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6661 comm="syz.1.1362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f173dc7f749 code=0x7ffc0000 [ 74.345553][ T6660] System zones: 1-12 [ 74.350011][ T6660] EXT4-fs error (device loop2): __ext4_iget:5426: inode #15: block 1803188595: comm syz.2.1361: invalid block [ 74.394109][ T6670] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1365'. [ 74.423676][ T6660] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.1361: couldn't read orphan inode 15 (err -117) [ 74.454899][ T6660] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.498329][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.517056][ T6685] loop3: detected capacity change from 0 to 512 [ 74.532160][ T6689] EXT4-fs: Ignoring removed nobh option [ 74.537920][ T6689] EXT4-fs: inline encryption not supported [ 74.547738][ T6689] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.562874][ T6689] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.1374: Allocating blocks 385-513 which overlap fs metadata [ 74.577400][ T6685] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 74.586470][ T6685] EXT4-fs (loop3): orphan cleanup on readonly fs [ 74.594102][ T6689] EXT4-fs (loop1): pa ffff888107a51690: logic 16, phys. 129, len 24 [ 74.602235][ T6689] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 74.626790][ T6685] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.1370: Failed to acquire dquot type 1 [ 74.656475][ T6689] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 74.668850][ T6689] EXT4-fs (loop1): This should not happen!! Data will be lost [ 74.668850][ T6689] [ 74.676640][ T6685] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1370: bg 0: block 40: padding at end of block bitmap is not set [ 74.678654][ T6689] EXT4-fs (loop1): Total free blocks count 0 [ 74.698926][ T6689] EXT4-fs (loop1): Free/Dirty block details [ 74.704909][ T6689] EXT4-fs (loop1): free_blocks=128 [ 74.710116][ T6689] EXT4-fs (loop1): dirty_blocks=0 [ 74.715265][ T6689] EXT4-fs (loop1): Block reservation details [ 74.721301][ T6689] EXT4-fs (loop1): i_reserved_data_blocks=0 [ 74.731338][ T6707] netlink: 'syz.0.1389': attribute type 15 has an invalid length. [ 74.746652][ T6685] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 74.760693][ T6706] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c018, mo2=0002] [ 74.776787][ T6703] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 74.785198][ T6706] System zones: 1-12 [ 74.790551][ T6703] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 74.803197][ T6706] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: comm syz.2.1379: Parent and EA inode have the same ino 15 [ 74.826349][ T6685] EXT4-fs (loop3): 1 truncate cleaned up [ 74.832849][ T6685] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 74.845842][ T6703] Symlink component flag not implemented [ 74.848256][ T6706] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: comm syz.2.1379: Parent and EA inode have the same ino 15 [ 74.851504][ T6703] Symlink component flag not implemented [ 74.852393][ T6703] Symlink component flag not implemented (7) [ 74.864713][ T6706] EXT4-fs (loop2): 1 orphan inode deleted [ 74.869567][ T6703] Symlink component flag not implemented (116) [ 74.884354][ T6716] netlink: 1016 bytes leftover after parsing attributes in process `syz.1.1382'. [ 74.889929][ T6706] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.897441][ T6716] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 74.946415][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.983562][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.228025][ T6759] bridge_slave_0: left allmulticast mode [ 75.233745][ T6759] bridge_slave_0: left promiscuous mode [ 75.239505][ T6759] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.263645][ T6759] bridge_slave_1: left allmulticast mode [ 75.269532][ T6759] bridge_slave_1: left promiscuous mode [ 75.275254][ T6759] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.329021][ T6778] netlink: 'syz.2.1410': attribute type 21 has an invalid length. [ 75.339772][ T6759] bond0: (slave bond_slave_0): Releasing backup interface [ 75.356081][ T6759] bond0: (slave bond_slave_1): Releasing backup interface [ 75.379428][ T6759] team0: Port device team_slave_0 removed [ 75.397229][ T6759] team0: Port device team_slave_1 removed [ 75.405226][ T6759] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.412873][ T6759] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 75.422123][ T6759] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.429776][ T6759] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 75.445155][ T6789] EXT4-fs: Ignoring removed nobh option [ 75.451246][ T6789] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 75.451162][ T6759] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 75.479526][ T6789] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 75.490849][ T6789] EXT4-fs error (device loop0): ext4_get_journal_inode:5849: comm syz.0.1412: inode #4294967295: comm syz.0.1412: iget: illegal inode # [ 75.505252][ T6789] EXT4-fs (loop0): no journal found [ 75.505282][ T6778] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1410'. [ 75.505300][ T6778] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1410'. [ 75.528839][ T6789] EXT4-fs (loop0): can't get journal size [ 75.572329][ T6789] EXT4-fs (loop0): failed to initialize system zone (-22) [ 75.579819][ T6789] EXT4-fs (loop0): mount failed [ 75.614999][ T6800] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=6800 comm=syz.1.1419 [ 75.790238][ T6816] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1424'. [ 75.877418][ T6826] dummy0: entered allmulticast mode [ 75.887822][ T6826] dummy0: left allmulticast mode [ 75.956687][ T6840] set_capacity_and_notify: 4 callbacks suppressed [ 75.956709][ T6840] loop2: detected capacity change from 0 to 128 [ 75.973745][ T6842] openvswitch: netlink: Missing key (keys=40, expected=100) [ 75.974636][ T6840] bond0: Removing last ns target with arp_interval on [ 76.041711][ T6852] random: crng reseeded on system resumption [ 76.088129][ T6859] loop5: detected capacity change from 0 to 1024 [ 76.108923][ T6859] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 76.122546][ T6859] ext4 filesystem being mounted at /80/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.144385][ T6866] loop0: detected capacity change from 0 to 1024 [ 76.145223][ T6859] EXT4-fs error (device loop5): ext4_map_blocks:825: inode #15: block 3: comm syz.5.1445: lblock 3 mapped to illegal pblock 3 (length 3) [ 76.167068][ T6859] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 76.179681][ T6859] EXT4-fs (loop5): This should not happen!! Data will be lost [ 76.179681][ T6859] [ 76.190669][ T6866] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.200648][ T6859] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #15: block 3: comm syz.5.1445: lblock 3 mapped to illegal pblock 3 (length 1) [ 76.245323][ T6866] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.1447: Allocating blocks 449-513 which overlap fs metadata [ 76.259608][ T5763] EXT4-fs error (device loop5): ext4_map_blocks:825: inode #15: block 8: comm kworker/u8:19: lblock 8 mapped to illegal pblock 8 (length 8) [ 76.280924][ T6876] loop1: detected capacity change from 0 to 512 [ 76.284828][ T6865] EXT4-fs (loop0): pa ffff88810795e070: logic 48, phys. 177, len 21 [ 76.291039][ T5763] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 76.295359][ T6865] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 4 [ 76.307805][ T5763] EXT4-fs (loop5): This should not happen!! Data will be lost [ 76.307805][ T5763] [ 76.330413][ T5915] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 76.331486][ T6876] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.356178][ T6876] EXT4-fs error (device loop1): ext4_lookup:1785: inode #12: comm syz.1.1450: iget: checksum invalid [ 76.368843][ T6876] EXT4-fs warning (device loop1): ext4_resize_begin:82: There are errors in the filesystem, so online resizing is not allowed [ 76.403213][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.413202][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.503656][ T6898] netlink: 'syz.0.1462': attribute type 8 has an invalid length. [ 76.754647][ T6945] program syz.2.1486 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 76.816904][ T6956] loop5: detected capacity change from 0 to 128 [ 76.838504][ T6956] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 76.851503][ T6956] ext4 filesystem being mounted at /92/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 76.908088][ T5915] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 76.970946][ T6979] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1499'. [ 76.982969][ T6979] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1499'. [ 77.000636][ T6983] program syz.1.1513 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 77.041433][ T6987] netlink: 268 bytes leftover after parsing attributes in process `syz.0.1505'. [ 77.071244][ T6994] netlink: 'syz.1.1507': attribute type 2 has an invalid length. [ 77.128832][ T6998] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 77.258472][ T7029] netlink: 'syz.5.1525': attribute type 2 has an invalid length. [ 77.268098][ T7031] netlink: 'syz.1.1523': attribute type 2 has an invalid length. [ 77.318872][ T7033] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1526'. [ 77.367783][ T7041] loop0: detected capacity change from 0 to 764 [ 77.380094][ T7041] rock: directory entry would overflow storage [ 77.386413][ T7041] rock: sig=0x4654, size=5, remaining=4 [ 77.404813][ T7048] loop1: detected capacity change from 0 to 2048 [ 77.438549][ T7053] loop5: detected capacity change from 0 to 512 [ 77.448929][ T7053] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #18: comm syz.5.1535: iget: bad extra_isize 90 (inode size 256) [ 77.463612][ T7053] EXT4-fs (loop5): Remounting filesystem read-only [ 77.470519][ T7053] EXT4-fs warning (device loop5): ext4_evict_inode:273: xattr delete (err -30) [ 77.475623][ T7048] Alternate GPT is invalid, using primary GPT. [ 77.479783][ T7053] EXT4-fs (loop5): 1 orphan inode deleted [ 77.486149][ T7048] loop1: p2 p3 p7 [ 77.492572][ T7053] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.525018][ T5915] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.647178][ T7076] loop5: detected capacity change from 0 to 128 [ 77.716765][ T7088] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 77.716765][ T7088] program syz.2.1553 not setting count and/or reply_len properly [ 77.767894][ T7096] netlink: 'syz.0.1556': attribute type 10 has an invalid length. [ 77.788402][ T7096] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.797549][ T7096] team0: Port device bond0 added [ 77.837884][ T7100] loop2: detected capacity change from 0 to 512 [ 77.847871][ T7096] team0: Port device bond0 removed [ 77.858241][ T7100] EXT4-fs warning (device loop2): ext4_xattr_inode_get:546: inode #11: comm syz.2.1558: ea_inode file size=4 entry size=6 [ 77.875226][ T7096] bridge_slave_0: left allmulticast mode [ 77.881129][ T7096] bridge_slave_0: left promiscuous mode [ 77.887163][ T7096] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.896726][ T7100] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.1558: corrupted inode contents [ 77.909137][ T7100] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #15: comm syz.2.1558: mark_inode_dirty error [ 77.920900][ T7100] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.1558: corrupted inode contents [ 77.934079][ T7100] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3000: inode #15: comm syz.2.1558: mark_inode_dirty error [ 77.935094][ T7096] bridge_slave_1: left allmulticast mode [ 77.952407][ T7096] bridge_slave_1: left promiscuous mode [ 77.958136][ T7100] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3003: inode #15: comm syz.2.1558: mark inode dirty (error -117) [ 77.958728][ T7096] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.972762][ T7100] EXT4-fs warning (device loop2): ext4_evict_inode:273: xattr delete (err -117) [ 77.987101][ T7100] EXT4-fs (loop2): 1 orphan inode deleted [ 77.993816][ T7100] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.006490][ T7096] bond0: (slave bond_slave_0): Releasing backup interface [ 78.016918][ T7096] bond0: (slave bond_slave_1): Releasing backup interface [ 78.029376][ T7096] team0: Port device team_slave_0 removed [ 78.029638][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.046127][ T7096] team0: Port device team_slave_1 removed [ 78.053165][ T7096] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.060651][ T7096] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.070667][ T7096] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.078170][ T7096] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.088431][ T7096] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 78.184634][ T7120] EXT4-fs: inline encryption not supported [ 78.190668][ T7120] EXT4-fs: Ignoring removed orlov option [ 78.199421][ T7120] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 78.225811][ T7126] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 78.243713][ T7126] ext4 filesystem being mounted at /299/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 78.252002][ T7129] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1572'. [ 78.285008][ T7129] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1572'. [ 78.289201][ T7120] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840c018, mo2=0002] [ 78.307877][ T7120] System zones: 0-1, 3-12 [ 78.324442][ T7134] netlink: 116376 bytes leftover after parsing attributes in process `syz.3.1573'. [ 78.338251][ T7134] netlink: zone id is out of range [ 78.343412][ T7134] netlink: zone id is out of range [ 78.344759][ T7120] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.348614][ T7134] netlink: zone id is out of range [ 78.365905][ T7134] netlink: zone id is out of range [ 78.371049][ T7134] netlink: zone id is out of range [ 78.376268][ T7134] netlink: zone id is out of range [ 78.412138][ T7120] EXT4-fs (loop1): Online defrag not supported with bigalloc [ 78.434454][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.457622][ T3316] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 78.530550][ T11] I/O error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 2 [ 78.560489][ T7165] EXT4-fs: Ignoring removed orlov option [ 78.566441][ T7165] EXT4-fs: Ignoring removed i_version option [ 78.572471][ T7165] EXT4-fs: Ignoring removed nomblk_io_submit option [ 78.596008][ T7165] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 78.604121][ T7165] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e118, mo2=0002] [ 78.616199][ T7165] EXT4-fs (loop1): orphan cleanup on readonly fs [ 78.622650][ T7165] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 78.637312][ T7165] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 78.675403][ T7165] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1587: bg 0: block 40: padding at end of block bitmap is not set [ 78.694204][ T7165] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 78.704788][ T7165] EXT4-fs (loop1): 1 truncate cleaned up [ 78.712193][ T7165] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 78.766287][ T7165] EXT4-fs (loop1): shut down requested (1) [ 78.775175][ T7165] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=16 [ 78.784270][ T7165] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=16 [ 78.818994][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.883604][ T7189] sit0: entered promiscuous mode [ 78.892426][ T7189] netlink: 'syz.1.1597': attribute type 1 has an invalid length. [ 78.900351][ T7189] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1597'. [ 78.989927][ T7195] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 79.000027][ T7195] Symlink component flag not implemented [ 79.006286][ T7195] Symlink component flag not implemented (7) [ 79.056417][ T29] kauditd_printk_skb: 451 callbacks suppressed [ 79.056434][ T29] audit: type=1326 audit(1767988196.538:2017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7168 comm="syz.3.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f22cbeb2005 code=0x7ffc0000 [ 79.091313][ T29] audit: type=1326 audit(1767988196.568:2018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7168 comm="syz.3.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f22cbeb2005 code=0x7ffc0000 [ 79.115850][ T29] audit: type=1326 audit(1767988196.598:2019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7168 comm="syz.3.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f22cbeb2005 code=0x7ffc0000 [ 79.140098][ T29] audit: type=1326 audit(1767988196.618:2020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7168 comm="syz.3.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f22cbeb2005 code=0x7ffc0000 [ 79.163732][ T29] audit: type=1326 audit(1767988196.648:2021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7168 comm="syz.3.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f22cbeb2005 code=0x7ffc0000 [ 79.229578][ T7206] EXT4-fs: Ignoring removed orlov option [ 79.240187][ T29] audit: type=1326 audit(1767988196.668:2022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7168 comm="syz.3.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f22cbeb2005 code=0x7ffc0000 [ 79.263912][ T29] audit: type=1326 audit(1767988196.668:2023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7168 comm="syz.3.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f22cbeb2005 code=0x7ffc0000 [ 79.287696][ T29] audit: type=1326 audit(1767988196.668:2024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7168 comm="syz.3.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f22cbeb2005 code=0x7ffc0000 [ 79.311362][ T29] audit: type=1326 audit(1767988196.678:2025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7168 comm="syz.3.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f22cbeb2005 code=0x7ffc0000 [ 79.335145][ T29] audit: type=1326 audit(1767988196.678:2026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7168 comm="syz.3.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f22cbeb2005 code=0x7ffc0000 [ 79.336912][ T7206] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 79.399047][ T7206] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.492631][ T7225] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 33554436, id = 0 [ 79.547016][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.830487][ T4260] IPVS: starting estimator thread 0... [ 79.902175][ T7283] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.922514][ T7289] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 79.930315][ T7277] IPVS: using max 1680 ests per chain, 84000 per kthread [ 79.989542][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.042463][ T7295] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 80.069732][ T7297] ext4: Unknown parameter 'hash' [ 80.088439][ T7295] EXT4-fs (loop2): 1 truncate cleaned up [ 80.094681][ T7295] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.181613][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.234985][ T7304] EXT4-fs (loop3): 1 truncate cleaned up [ 80.255983][ T7304] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.485397][ T7317] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 80.493156][ T7320] netlink: 'syz.0.1652': attribute type 10 has an invalid length. [ 80.505427][ T7320] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.1652'. [ 80.529302][ T7317] EXT4-fs warning (device loop2): dx_probe:837: inode #2: comm syz.2.1651: Unimplemented hash flags: 0x0001 [ 80.540948][ T7317] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.1651: Corrupt directory, running e2fsck is recommended [ 80.708830][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.896368][ T7253] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 81.016576][ T7349] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1674'. [ 81.025656][ T7348] set_capacity_and_notify: 12 callbacks suppressed [ 81.025677][ T7348] loop1: detected capacity change from 0 to 512 [ 81.043876][ T7348] EXT4-fs: Ignoring removed mblk_io_submit option [ 81.065424][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.081928][ T7354] tap0: tun_chr_ioctl cmd 1074025677 [ 81.085514][ T7348] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.1662: bad orphan inode 15 [ 81.087973][ T7354] tap0: linktype set to 768 [ 81.122472][ T7348] ext4_test_bit(bit=14, block=5) = 0 [ 81.131387][ T7348] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.155070][ T7362] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1669'. [ 81.167285][ T7359] loop5: detected capacity change from 0 to 2048 [ 81.169649][ T7348] EXT4-fs error (device loop1): __ext4_new_inode:1073: comm syz.1.1662: reserved inode found cleared - inode=1 [ 81.214975][ T7359] Alternate GPT is invalid, using primary GPT. [ 81.221582][ T7359] loop5: p1 p2 p3 [ 81.225475][ T7359] loop5: partition table partially beyond EOD, truncated [ 81.232626][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.291462][ T7372] tap0: tun_chr_ioctl cmd 1074025677 [ 81.297542][ T7372] tap0: linktype set to 780 [ 81.374841][ T7385] loop5: detected capacity change from 0 to 128 [ 81.388408][ T7394] syz_tun: entered promiscuous mode [ 81.393905][ T7394] syz_tun: left promiscuous mode [ 81.588263][ T7410] netlink: 758 bytes leftover after parsing attributes in process `syz.3.1695'. [ 81.680759][ T7424] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1700'. [ 81.727725][ T7428] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1702'. [ 81.774532][ T7434] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1706'. [ 81.810118][ T7442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.837829][ T7442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.849392][ T3512] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x4 [ 81.857444][ T3512] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x2 [ 81.865337][ T3512] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 81.889973][ T3512] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 81.898036][ T3512] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 81.906003][ T3512] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 81.913897][ T3512] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 81.924482][ T3512] hid-generic 0000:3000000:0000.0002: hidraw0: HID v0.00 Device [sy] on syz0 [ 81.948521][ T7454] netlink: 'syz.5.1714': attribute type 3 has an invalid length. [ 82.130695][ T7482] loop5: detected capacity change from 0 to 512 [ 82.143255][ T7482] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.1729: bad orphan inode 13 [ 82.153734][ T7482] ext4_test_bit(bit=12, block=4) = 1 [ 82.159484][ T7482] is_bad_inode(inode)=0 [ 82.163914][ T7482] NEXT_ORPHAN(inode)=0 [ 82.168438][ T7482] max_ino=32 [ 82.171900][ T7482] i_nlink=1 [ 82.176714][ T7482] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.192258][ T7482] EXT4-fs warning (device loop5): dx_probe:801: inode #2: comm syz.5.1729: Unrecognised inode hash code 20 [ 82.203916][ T7482] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.1729: Corrupt directory, running e2fsck is recommended [ 82.222428][ T7482] EXT4-fs warning (device loop5): dx_probe:801: inode #2: comm syz.5.1729: Unrecognised inode hash code 20 [ 82.233962][ T7482] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.1729: Corrupt directory, running e2fsck is recommended [ 82.268449][ T5915] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.306046][ T7498] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1737'. [ 82.315089][ T7498] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1737'. [ 82.324156][ T7498] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1737'. [ 82.333106][ T7498] netlink: 2 bytes leftover after parsing attributes in process `syz.5.1737'. [ 82.370094][ T7504] loop5: detected capacity change from 0 to 512 [ 82.377012][ T7504] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 82.400501][ T7504] EXT4-fs (loop5): invalid journal inode [ 82.406635][ T7504] EXT4-fs (loop5): can't get journal size [ 82.413054][ T7504] EXT4-fs (loop5): 1 truncate cleaned up [ 82.421006][ T7504] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.447931][ T5915] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.492526][ T7516] tap0: tun_chr_ioctl cmd 2148553947 [ 82.623942][ T7530] netlink: 'syz.5.1750': attribute type 2 has an invalid length. [ 82.708457][ T7539] loop1: detected capacity change from 0 to 128 [ 82.716820][ T7539] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 82.730319][ T7539] ext4 filesystem being mounted at /416/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.758969][ T3314] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 82.962496][ T7579] loop3: detected capacity change from 0 to 512 [ 82.972577][ T7579] EXT4-fs error (device loop3): ext4_iget_extra_inode:5073: inode #15: comm syz.3.1783: corrupted in-inode xattr: invalid ea_ino [ 82.986495][ T7579] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.1783: couldn't read orphan inode 15 (err -117) [ 83.003730][ T7579] EXT4-fs (loop3): shut down requested (0) [ 83.111541][ T7593] vhci_hcd vhci_hcd.2: invalid port number 96 [ 83.117728][ T7593] vhci_hcd vhci_hcd.2: default hub control req: 2000 vfffc i0060 l7 [ 83.161552][ T7605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.175798][ T7605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.481337][ T7625] random: crng reseeded on system resumption [ 83.494227][ T7625] Restarting kernel threads ... [ 83.499518][ T7625] Done restarting kernel threads. [ 83.532550][ T7627] dvmrp1: entered allmulticast mode [ 83.548427][ T7627] dvmrp1: left allmulticast mode [ 83.597913][ T7633] loop1: detected capacity change from 0 to 512 [ 83.604976][ T7633] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 83.621066][ T7633] EXT4-fs (loop1): 1 orphan inode deleted [ 83.626933][ T7633] EXT4-fs (loop1): 1 truncate cleaned up [ 83.636613][ T7633] EXT4-fs error (device loop1): ext4_inlinedir_to_tree:1324: inode #12: block 7: comm syz.1.1795: path /426/file0/file0: bad entry in directory: directory entry overrun - offset=788, inode=13, rec_len=784, size=60 fake=0 [ 83.680113][ T7633] EXT4-fs (loop1): Remounting filesystem read-only [ 83.716058][ T4260] kernel write not supported for file /input/event2 (pid: 4260 comm: kworker/1:9) [ 83.753785][ T7651] net_ratelimit: 12 callbacks suppressed [ 83.753806][ T7651] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 83.811121][ T7660] loop3: detected capacity change from 0 to 1024 [ 83.819239][ T7660] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 83.830857][ T7660] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 83.841544][ T7660] EXT4-fs (loop3): orphan cleanup on readonly fs [ 83.848263][ T7660] EXT4-fs error (device loop3): ext4_free_blocks:6728: comm syz.3.1808: Freeing blocks not in datazone - block = 0, count = 4096 [ 83.861954][ T7660] EXT4-fs (loop3): 1 orphan inode deleted [ 83.890894][ T7669] loop2: detected capacity change from 0 to 512 [ 83.909460][ T7669] ext4 filesystem being mounted at /401/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 83.920992][ T7671] tun0: tun_chr_ioctl cmd 1074025675 [ 83.926470][ T7671] tun0: persist enabled [ 83.975096][ T7665] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 83.987385][ T7679] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 84.004300][ T7679] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 84.029430][ T7681] netlink: 'syz.3.1818': attribute type 1 has an invalid length. [ 84.177452][ T29] kauditd_printk_skb: 245 callbacks suppressed [ 84.177468][ T29] audit: type=1400 audit(1767988201.658:2272): avc: denied { ioctl } for pid=7694 comm="syz.2.1827" path="socket:[17301]" dev="sockfs" ino=17301 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 84.274537][ T7706] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 84.283228][ T29] audit: type=1400 audit(1767988201.708:2273): avc: denied { setcurrent } for pid=7699 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 84.303704][ T29] audit: type=1401 audit(1767988201.708:2274): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 84.308610][ T7706] EXT4-fs (loop2): 1 truncate cleaned up [ 84.336064][ T7704] syzkaller1: entered promiscuous mode [ 84.341658][ T7704] syzkaller1: entered allmulticast mode [ 84.442985][ T7711] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 84.509398][ T7729] vhci_hcd vhci_hcd.4: invalid port number 236 [ 84.598552][ T29] audit: type=1326 audit(1767988202.078:2275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7740 comm="syz.0.1858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b2beff749 code=0x7ffc0000 [ 84.599124][ T29] audit: type=1326 audit(1767988202.078:2276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7740 comm="syz.0.1858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b2beff749 code=0x7ffc0000 [ 84.599696][ T29] audit: type=1326 audit(1767988202.078:2277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7740 comm="syz.0.1858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7f1b2beff749 code=0x7ffc0000 [ 84.600082][ T29] audit: type=1326 audit(1767988202.078:2278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7740 comm="syz.0.1858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b2beff749 code=0x7ffc0000 [ 84.600117][ T29] audit: type=1326 audit(1767988202.078:2279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7740 comm="syz.0.1858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b2beff749 code=0x7ffc0000 [ 84.886832][ T7777] ext4 filesystem being mounted at /387/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.998809][ T7791] ext4 filesystem being mounted at /414/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.036081][ T7803] rdma_op ffff8881048e9d80 conn xmit_rdma 0000000000000000 [ 85.047544][ T7791] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 85.065605][ T7791] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1 with error 28 [ 85.077924][ T7791] EXT4-fs (loop2): This should not happen!! Data will be lost [ 85.077924][ T7791] [ 85.087811][ T7791] EXT4-fs (loop2): Total free blocks count 0 [ 85.093867][ T7791] EXT4-fs (loop2): Free/Dirty block details [ 85.099827][ T7791] EXT4-fs (loop2): free_blocks=65280 [ 85.105143][ T7791] EXT4-fs (loop2): dirty_blocks=1 [ 85.110297][ T7791] EXT4-fs (loop2): Block reservation details [ 85.116323][ T7791] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 85.130846][ T7807] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 85.144903][ T7807] EXT4-fs (loop3): 1 orphan inode deleted [ 85.150736][ T7807] EXT4-fs (loop3): 1 truncate cleaned up [ 85.160702][ T29] audit: type=1107 audit(1767988202.638:2280): pid=7804 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 85.271175][ T5761] Bluetooth: hci0: Frame reassembly failed (-84) [ 85.342200][ T7837] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 85.353541][ T7837] EXT4-fs (loop1): 1 truncate cleaned up [ 85.387328][ T7844] netlink: zone id is out of range [ 85.392531][ T7844] netlink: zone id is out of range [ 85.409242][ T7844] netlink: set zone limit has 8 unknown bytes [ 85.567366][ T29] audit: type=1326 audit(1767988203.048:2281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7863 comm="syz.0.1900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b2beff749 code=0x7ffc0000 [ 86.132221][ T7880] set_capacity_and_notify: 7 callbacks suppressed [ 86.132241][ T7880] loop5: detected capacity change from 0 to 512 [ 86.158072][ T7880] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 86.169187][ T7880] EXT4-fs (loop5): 1 truncate cleaned up [ 86.307989][ T7893] __nla_validate_parse: 7 callbacks suppressed [ 86.308083][ T7893] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1923'. [ 86.494686][ T7915] Invalid argument reading file caps for ./file0 [ 86.504426][ T7917] netlink: 268 bytes leftover after parsing attributes in process `syz.0.1924'. [ 86.546180][ T7921] syz.1.1927 (7921) used greatest stack depth: 9176 bytes left [ 86.621939][ T7931] netlink: 'syz.1.1932': attribute type 1 has an invalid length. [ 86.708952][ T7946] Invalid argument reading file caps for ./file0 [ 86.723213][ T7945] loop1: detected capacity change from 0 to 512 [ 86.732666][ T7945] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 86.742529][ T7945] EXT4-fs (loop1): group descriptors corrupted! [ 86.751057][ T4260] kernel read not supported for file 853/task/854/setgroups (pid: 4260 comm: kworker/1:9) [ 86.866485][ T7969] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1951'. [ 86.901071][ T7973] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1953'. [ 87.021456][ T7987] loop0: detected capacity change from 0 to 512 [ 87.028934][ T7987] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 87.038822][ T7987] EXT4-fs (loop0): group descriptors corrupted! [ 87.120362][ T8001] loop0: detected capacity change from 0 to 512 [ 87.158078][ T8008] Invalid argument reading file caps for ./file0 [ 87.182601][ T8001] ext4 filesystem being mounted at /399/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.204684][ T8001] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 87.221947][ T8001] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 87.234447][ T8001] EXT4-fs (loop0): This should not happen!! Data will be lost [ 87.234447][ T8001] [ 87.244390][ T8001] EXT4-fs (loop0): Total free blocks count 0 [ 87.250501][ T8001] EXT4-fs (loop0): Free/Dirty block details [ 87.256546][ T8001] EXT4-fs (loop0): free_blocks=65280 [ 87.261864][ T8001] EXT4-fs (loop0): dirty_blocks=33 [ 87.267054][ T8001] EXT4-fs (loop0): Block reservation details [ 87.273060][ T8001] EXT4-fs (loop0): i_reserved_data_blocks=33 [ 87.277710][ T8018] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1970'. [ 87.325565][ T4023] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 87.625758][ T8061] loop5: detected capacity change from 0 to 128 [ 87.682863][ T8067] loop5: detected capacity change from 0 to 512 [ 87.713511][ T8067] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 87.736503][ T8067] EXT4-fs (loop5): 1 truncate cleaned up [ 87.807257][ T8080] openvswitch: netlink: Missing key (keys=40, expected=100) [ 87.833849][ T8082] loop0: detected capacity change from 0 to 512 [ 87.841623][ T8082] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 87.859207][ T8082] EXT4-fs (loop0): 1 truncate cleaned up [ 87.889520][ T8090] loop1: detected capacity change from 0 to 512 [ 87.907900][ T8090] ext4 filesystem being mounted at /486/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.926078][ T8090] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 87.941012][ T8090] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 87.953491][ T8090] EXT4-fs (loop1): This should not happen!! Data will be lost [ 87.953491][ T8090] [ 87.963204][ T8090] EXT4-fs (loop1): Total free blocks count 0 [ 87.969241][ T8090] EXT4-fs (loop1): Free/Dirty block details [ 87.975163][ T8090] EXT4-fs (loop1): free_blocks=65280 [ 87.980517][ T8090] EXT4-fs (loop1): dirty_blocks=33 [ 87.985663][ T8090] EXT4-fs (loop1): Block reservation details [ 87.991670][ T8090] EXT4-fs (loop1): i_reserved_data_blocks=33 [ 88.012149][ T8098] loop0: detected capacity change from 0 to 128 [ 88.044382][ T8100] loop1: detected capacity change from 0 to 2048 [ 88.079768][ T8100] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 88.094847][ T8100] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 88.107234][ T8100] EXT4-fs (loop1): This should not happen!! Data will be lost [ 88.107234][ T8100] [ 88.117078][ T8100] EXT4-fs (loop1): Total free blocks count 0 [ 88.123110][ T8100] EXT4-fs (loop1): Free/Dirty block details [ 88.129247][ T8100] EXT4-fs (loop1): free_blocks=2415919504 [ 88.135033][ T8100] EXT4-fs (loop1): dirty_blocks=16 [ 88.140279][ T8100] EXT4-fs (loop1): Block reservation details [ 88.146333][ T8100] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 88.193789][ T8112] openvswitch: netlink: Missing key (keys=40, expected=100) [ 88.254823][ T8118] dummy0: entered allmulticast mode [ 88.260432][ T8118] dummy0: left allmulticast mode [ 88.265629][ T7826] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 88.501455][ T8143] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 88.530240][ T8143] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 88.542550][ T8143] EXT4-fs (loop3): This should not happen!! Data will be lost [ 88.542550][ T8143] [ 88.552296][ T8143] EXT4-fs (loop3): Total free blocks count 0 [ 88.558331][ T8143] EXT4-fs (loop3): Free/Dirty block details [ 88.564253][ T8143] EXT4-fs (loop3): free_blocks=2415919504 [ 88.570074][ T8143] EXT4-fs (loop3): dirty_blocks=16 [ 88.575201][ T8143] EXT4-fs (loop3): Block reservation details [ 88.581237][ T8143] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 88.652659][ T8156] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 88.687732][ T8156] EXT4-fs (loop2): 1 truncate cleaned up [ 88.736882][ T8168] dummy0: entered allmulticast mode [ 88.740121][ T8165] openvswitch: netlink: Missing key (keys=40, expected=100) [ 88.764612][ T8168] dummy0: left allmulticast mode [ 88.794833][ T8169] ext4 filesystem being mounted at /191/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.852087][ T8178] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 88.860527][ T8169] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 88.875627][ T8169] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 88.888262][ T8169] EXT4-fs (loop5): This should not happen!! Data will be lost [ 88.888262][ T8169] [ 88.897962][ T8169] EXT4-fs (loop5): Total free blocks count 0 [ 88.904022][ T8169] EXT4-fs (loop5): Free/Dirty block details [ 88.910022][ T8169] EXT4-fs (loop5): free_blocks=65280 [ 88.915414][ T8169] EXT4-fs (loop5): dirty_blocks=33 [ 88.920640][ T8169] EXT4-fs (loop5): Block reservation details [ 88.926682][ T8169] EXT4-fs (loop5): i_reserved_data_blocks=33 [ 89.133444][ T8202] dummy0: entered allmulticast mode [ 89.160781][ T8202] dummy0: left allmulticast mode [ 89.224741][ T29] kauditd_printk_skb: 174 callbacks suppressed [ 89.224758][ T29] audit: type=1400 audit(1767988206.698:2456): avc: denied { relabelfrom } for pid=8212 comm="syz.3.2052" name="" dev="pipefs" ino=19965 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 89.254751][ T29] audit: type=1400 audit(1767988206.698:2457): avc: denied { tracepoint } for pid=8211 comm="syz.1.2051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 89.274661][ T29] audit: type=1400 audit(1767988206.738:2458): avc: denied { mac_admin } for pid=8212 comm="syz.3.2052" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 89.295949][ T29] audit: type=1400 audit(1767988206.738:2459): avc: denied { relabelto } for pid=8212 comm="syz.3.2052" name="" dev="pipefs" ino=19965 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:run_init_exec_t:s0" [ 89.345825][ T8222] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2055'. [ 89.357403][ T29] audit: type=1400 audit(1767988206.838:2460): avc: denied { create } for pid=8217 comm="syz.0.2053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 89.395590][ T29] audit: type=1400 audit(1767988206.838:2461): avc: denied { write } for pid=8217 comm="syz.0.2053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 89.415168][ T29] audit: type=1400 audit(1767988206.858:2462): avc: denied { mount } for pid=8224 comm="syz.3.2056" name="/" dev="loop3" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 89.438240][ T29] audit: type=1400 audit(1767988206.868:2463): avc: denied { unmount } for pid=3320 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 89.477954][ T29] audit: type=1326 audit(1767988206.948:2464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8227 comm="syz.2.2059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe49c04f749 code=0x7ffc0000 [ 89.501521][ T29] audit: type=1326 audit(1767988206.948:2465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8227 comm="syz.2.2059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7fe49c04f749 code=0x7ffc0000 [ 89.678561][ T8250] netlink: 277 bytes leftover after parsing attributes in process `syz.1.2068'. [ 89.746409][ T8256] vlan2: entered allmulticast mode [ 89.751586][ T8256] batadv0: entered allmulticast mode [ 89.801428][ T8258] Alternate GPT is invalid, using primary GPT. [ 89.808017][ T8258] loop3: p2 p3 p7 [ 89.874315][ T8269] EXT4-fs: Ignoring removed orlov option [ 89.874404][ T23] IPVS: starting estimator thread 0... [ 89.881330][ T8269] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 89.887847][ T8275] IPVS: lc: FWM 3 0x00000003 - no destination available [ 89.902672][ C1] IPVS: lc: FWM 3 0x00000003 - no destination available [ 89.941920][ T8282] vlan2: entered allmulticast mode [ 89.947147][ T8282] batadv0: entered allmulticast mode [ 89.975825][ T8276] IPVS: using max 2208 ests per chain, 110400 per kthread [ 90.989516][ T8414] bond0: entered promiscuous mode [ 91.000178][ T8414] batadv0: entered promiscuous mode [ 91.007850][ T8414] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 91.018204][ T8414] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 91.027983][ T8414] bond0: left promiscuous mode [ 91.033577][ T8414] batadv0: left promiscuous mode [ 91.507220][ T8429] set_capacity_and_notify: 8 callbacks suppressed [ 91.507255][ T8429] loop5: detected capacity change from 0 to 512 [ 91.536065][ T8434] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2152'. [ 91.544103][ T8429] ext4: Unknown parameter 'hash' [ 91.601767][ T8443] loop5: detected capacity change from 0 to 512 [ 91.609828][ T8443] EXT4-fs: Ignoring removed mblk_io_submit option [ 91.616861][ T8441] tap0: tun_chr_ioctl cmd 1074812118 [ 91.623684][ T8443] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.2157: bad orphan inode 15 [ 91.634504][ T8443] ext4_test_bit(bit=14, block=5) = 0 [ 91.647589][ T8443] EXT4-fs error (device loop5): __ext4_new_inode:1073: comm syz.5.2157: reserved inode found cleared - inode=1 [ 91.680140][ T8450] netlink: 'syz.5.2159': attribute type 10 has an invalid length. [ 91.713922][ T8450] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.730378][ T8450] team0: Port device bond0 added [ 91.767425][ T8450] team0: Port device bond0 removed [ 91.778271][ T8456] loop0: detected capacity change from 0 to 512 [ 91.790407][ T8456] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 91.800660][ T8450] bridge_slave_0: left allmulticast mode [ 91.806594][ T8450] bridge_slave_0: left promiscuous mode [ 91.812369][ T8450] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.823110][ T8450] bridge_slave_1: left allmulticast mode [ 91.829003][ T8450] bridge_slave_1: left promiscuous mode [ 91.834911][ T8450] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.845858][ T311] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 91.858073][ T8450] bond0: (slave bond_slave_0): Releasing backup interface [ 91.878085][ T8450] bond0: (slave bond_slave_1): Releasing backup interface [ 91.928510][ T8450] team0: Port device team_slave_0 removed [ 91.987107][ T8450] team0: Port device team_slave_1 removed [ 91.995012][ T8450] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.002601][ T8450] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.012283][ T8450] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.019783][ T8450] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.037008][ T8450] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 92.057004][ T8464] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2166'. [ 92.115287][ T8466] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2168'. [ 92.117720][ T8470] bond0: entered promiscuous mode [ 92.130626][ T8470] batadv0: entered promiscuous mode [ 92.136766][ T8470] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 92.147242][ T8470] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 92.156171][ T8470] bond0: left promiscuous mode [ 92.161397][ T8470] batadv0: left promiscuous mode [ 92.232592][ T8480] loop2: detected capacity change from 0 to 512 [ 92.245972][ T8480] EXT4-fs (loop2): 1 truncate cleaned up [ 92.290684][ T8489] loop1: detected capacity change from 0 to 512 [ 92.298007][ T8489] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 92.320291][ T311] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 92.436402][ T8493] loop3: detected capacity change from 0 to 128 [ 92.487943][ T24] I/O error, dev loop1, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 2 [ 92.535253][ T8506] loop1: detected capacity change from 0 to 512 [ 92.655311][ T8520] loop1: detected capacity change from 0 to 512 [ 92.667255][ T8520] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #18: comm syz.1.2202: iget: bad extra_isize 90 (inode size 256) [ 92.682027][ T8520] EXT4-fs (loop1): Remounting filesystem read-only [ 92.689311][ T8520] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -30) [ 92.698547][ T8520] EXT4-fs (loop1): 1 orphan inode deleted [ 92.805898][ T8534] netlink: 116376 bytes leftover after parsing attributes in process `syz.1.2195'. [ 92.821753][ T8534] netlink: zone id is out of range [ 92.827011][ T8534] netlink: zone id is out of range [ 92.832243][ T8534] netlink: zone id is out of range [ 92.837447][ T8534] netlink: zone id is out of range [ 92.842576][ T8534] netlink: zone id is out of range [ 92.847761][ T8534] netlink: zone id is out of range [ 92.852639][ T8536] loop0: detected capacity change from 0 to 1024 [ 92.862186][ T8536] EXT4-fs: inline encryption not supported [ 92.868084][ T8536] EXT4-fs: Ignoring removed orlov option [ 92.874377][ T8536] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 92.886548][ T8536] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840c018, mo2=0002] [ 92.894853][ T8536] System zones: 0-1, 3-12 [ 92.925809][ T8536] EXT4-fs (loop0): Online defrag not supported with bigalloc [ 92.964470][ T8550] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2205'. [ 93.002760][ T8557] netlink: 'syz.1.2208': attribute type 2 has an invalid length. [ 93.022929][ T8561] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2209'. [ 93.050975][ T8565] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2210'. [ 93.124016][ T8574] loop1: detected capacity change from 0 to 128 [ 93.145357][ T8574] ext4 filesystem being mounted at /532/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 93.178375][ T8579] netlink: 'syz.5.2216': attribute type 4 has an invalid length. [ 93.286669][ T8594] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2235'. [ 93.295736][ T8594] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2235'. [ 93.360502][ T3505] Process accounting resumed [ 93.436952][ T8621] xt_hashlimit: max too large, truncated to 1048576 [ 93.611828][ T8639] bridge_slave_0: left allmulticast mode [ 93.617621][ T8639] bridge_slave_0: left promiscuous mode [ 93.623616][ T8639] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.644229][ T8639] bridge_slave_1: left allmulticast mode [ 93.650062][ T8639] bridge_slave_1: left promiscuous mode [ 93.655763][ T8639] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.678344][ T8639] bond0: (slave bond_slave_0): Releasing backup interface [ 93.711606][ T8639] bond0: (slave bond_slave_1): Releasing backup interface [ 93.727623][ T8639] team0: Port device team_slave_0 removed [ 93.760955][ T8639] team0: Port device team_slave_1 removed [ 93.784334][ T8648] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2245'. [ 93.794906][ T8639] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.802474][ T8639] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.822099][ T8639] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.829670][ T8639] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.955752][ T8668] bond0: entered promiscuous mode [ 93.962252][ T8668] batadv0: entered promiscuous mode [ 93.968332][ T8668] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 93.980281][ T8668] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 93.995208][ T8668] bond0: left promiscuous mode [ 94.008027][ T8668] batadv0: left promiscuous mode [ 94.136989][ T8680] EXT4-fs (loop0): 1 truncate cleaned up [ 94.425697][ T29] kauditd_printk_skb: 194 callbacks suppressed [ 94.425714][ T29] audit: type=1326 audit(1767988211.898:2660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8711 comm="syz.5.2269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7c0e9f749 code=0x7ffc0000 [ 94.455556][ T29] audit: type=1326 audit(1767988211.908:2661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8711 comm="syz.5.2269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=232 compat=0 ip=0x7ff7c0e9f749 code=0x7ffc0000 [ 94.479081][ T29] audit: type=1326 audit(1767988211.908:2662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8711 comm="syz.5.2269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7c0e9f749 code=0x7ffc0000 [ 94.502635][ T29] audit: type=1326 audit(1767988211.908:2663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8711 comm="syz.5.2269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7c0e9f749 code=0x7ffc0000 [ 94.539791][ T1002] kworker/u8:9: attempt to access beyond end of device [ 94.539791][ T1002] loop2: rw=1, sector=129, nr_sectors = 8 limit=128 [ 94.563155][ T1002] kworker/u8:9: attempt to access beyond end of device [ 94.563155][ T1002] loop2: rw=1, sector=145, nr_sectors = 8 limit=128 [ 94.585923][ T1002] kworker/u8:9: attempt to access beyond end of device [ 94.585923][ T1002] loop2: rw=1, sector=161, nr_sectors = 8 limit=128 [ 94.602747][ T1002] kworker/u8:9: attempt to access beyond end of device [ 94.602747][ T1002] loop2: rw=1, sector=177, nr_sectors = 8 limit=128 [ 94.617172][ T1002] kworker/u8:9: attempt to access beyond end of device [ 94.617172][ T1002] loop2: rw=1, sector=193, nr_sectors = 8 limit=128 [ 94.630731][ T29] audit: type=1400 audit(1767988212.098:2664): avc: denied { write } for pid=8713 comm="syz.5.2272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 94.650237][ T29] audit: type=1400 audit(1767988212.098:2665): avc: denied { connect } for pid=8713 comm="syz.5.2272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 94.669984][ T29] audit: type=1400 audit(1767988212.098:2666): avc: denied { name_connect } for pid=8713 comm="syz.5.2272" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 94.678124][ T1002] kworker/u8:9: attempt to access beyond end of device [ 94.678124][ T1002] loop2: rw=1, sector=209, nr_sectors = 8 limit=128 [ 94.707596][ T29] audit: type=1400 audit(1767988212.188:2667): avc: denied { listen } for pid=8713 comm="syz.5.2272" lport=34979 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 94.728216][ T29] audit: type=1400 audit(1767988212.188:2668): avc: denied { accept } for pid=8713 comm="syz.5.2272" lport=34979 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 94.761064][ T8720] EXT4-fs: inline encryption not supported [ 94.767019][ T8720] EXT4-fs: Ignoring removed orlov option [ 94.773412][ T8720] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 94.789520][ T8720] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840c018, mo2=0002] [ 94.798002][ T8720] System zones: 0-1, 3-12 [ 94.807846][ T8720] EXT4-fs (loop2): Online defrag not supported with bigalloc [ 94.878762][ T8729] Invalid argument reading file caps for ./file0 [ 94.880768][ T29] audit: type=1400 audit(1767988212.348:2669): avc: denied { firmware_load } for pid=8724 comm="syz.1.2286" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 94.973237][ T3486] kernel read not supported for file 1012/task/1013/setgroups (pid: 3486 comm: kworker/1:5) [ 95.145603][ T8744] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 95.167021][ T8743] ext4 filesystem being mounted at /480/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.180053][ T8744] EXT4-fs (loop1): 1 truncate cleaned up [ 95.203748][ T8743] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 95.218946][ T8743] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 95.231436][ T8743] EXT4-fs (loop2): This should not happen!! Data will be lost [ 95.231436][ T8743] [ 95.241227][ T8743] EXT4-fs (loop2): Total free blocks count 0 [ 95.247298][ T8743] EXT4-fs (loop2): Free/Dirty block details [ 95.253237][ T8743] EXT4-fs (loop2): free_blocks=65280 [ 95.258627][ T8743] EXT4-fs (loop2): dirty_blocks=33 [ 95.263766][ T8743] EXT4-fs (loop2): Block reservation details [ 95.269818][ T8743] EXT4-fs (loop2): i_reserved_data_blocks=33 [ 95.463217][ T5763] kworker/u8:19: attempt to access beyond end of device [ 95.463217][ T5763] loop0: rw=1, sector=129, nr_sectors = 8 limit=128 [ 95.477423][ T5763] kworker/u8:19: attempt to access beyond end of device [ 95.477423][ T5763] loop0: rw=1, sector=145, nr_sectors = 8 limit=128 [ 95.491573][ T5763] kworker/u8:19: attempt to access beyond end of device [ 95.491573][ T5763] loop0: rw=1, sector=161, nr_sectors = 8 limit=128 [ 95.527567][ T5763] kworker/u8:19: attempt to access beyond end of device [ 95.527567][ T5763] loop0: rw=1, sector=177, nr_sectors = 8 limit=128 [ 95.597332][ T8778] netlink: 'syz.1.2306': attribute type 10 has an invalid length. [ 95.620649][ T8778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.636650][ T8778] team0: Port device bond0 added [ 95.690258][ T8786] EXT4-fs: inline encryption not supported [ 95.696259][ T8786] EXT4-fs: Ignoring removed orlov option [ 95.704803][ T8784] team0: Port device bond0 removed [ 95.737220][ T8786] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 95.737646][ T8784] net_ratelimit: 12 callbacks suppressed [ 95.737722][ T8784] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 95.815639][ T8786] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840c018, mo2=0002] [ 95.824156][ T8786] System zones: 0-1, 3-12 [ 95.832834][ T8786] EXT4-fs (loop3): Online defrag not supported with bigalloc [ 96.270397][ T8820] Invalid logical block size (2051) [ 96.396566][ T8832] vhci_hcd vhci_hcd.2: invalid port number 96 [ 96.402757][ T8832] vhci_hcd vhci_hcd.2: default hub control req: 2000 vfffc i0060 l7 [ 96.751125][ T8846] set_capacity_and_notify: 10 callbacks suppressed [ 96.751144][ T8846] loop3: detected capacity change from 0 to 128 [ 96.808391][ T8852] Invalid logical block size (2051) [ 97.624458][ T8865] netlink: 'syz.2.2334': attribute type 10 has an invalid length. [ 97.633733][ T8866] netem: incorrect ge model size [ 97.638769][ T8866] netem: change failed [ 97.668016][ T8865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.686498][ T8865] team0: Port device bond0 added [ 97.753441][ T8876] netlink: 'syz.5.2339': attribute type 1 has an invalid length. [ 97.767730][ T8865] team0: Port device bond0 removed [ 97.815204][ T8865] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 97.850338][ T8887] loop1: detected capacity change from 0 to 512 [ 97.868714][ T8887] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 97.896471][ T8887] EXT4-fs (loop1): invalid journal inode [ 97.904474][ T8887] EXT4-fs (loop1): can't get journal size [ 97.945074][ T8887] EXT4-fs (loop1): 1 truncate cleaned up [ 99.263245][ T8979] dvmrp1: entered allmulticast mode [ 99.270805][ T8979] dvmrp1: left allmulticast mode [ 99.347293][ T8986] SELinux: failed to load policy [ 99.363882][ T8993] __nla_validate_parse: 3 callbacks suppressed [ 99.363901][ T8993] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2382'. [ 99.379269][ T8993] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2382'. [ 99.437039][ T9002] loop2: detected capacity change from 0 to 128 [ 99.445256][ T9002] EXT4-fs mount: 62 callbacks suppressed [ 99.445269][ T9002] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 99.464087][ T9002] ext4 filesystem being mounted at /500/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.479026][ T29] kauditd_printk_skb: 48 callbacks suppressed [ 99.479045][ T29] audit: type=1400 audit(1767988216.958:2718): avc: denied { setattr } for pid=9000 comm="syz.2.2396" path="/500/file1/file1" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 99.542548][ T29] audit: type=1400 audit(1767988217.018:2719): avc: denied { kexec_image_load } for pid=9008 comm="syz.1.2399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 99.576938][ T3322] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 99.661582][ T9019] loop1: detected capacity change from 0 to 512 [ 99.685259][ T9019] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 99.710948][ T9019] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e002c01c, mo2=0002] [ 99.720343][ T9019] System zones: 1-12 [ 99.724753][ T9019] EXT4-fs error (device loop1): __ext4_iget:5426: inode #15: block 1803188595: comm syz.1.2402: invalid block [ 99.745301][ T9019] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.2402: couldn't read orphan inode 15 (err -117) [ 99.765821][ T9019] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.794896][ T29] audit: type=1326 audit(1767988217.268:2720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9032 comm="syz.5.2400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7c0e9f749 code=0x7ffc0000 [ 99.818449][ T29] audit: type=1326 audit(1767988217.268:2721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9032 comm="syz.5.2400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7c0e9f749 code=0x7ffc0000 [ 99.841933][ T29] audit: type=1326 audit(1767988217.268:2722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9032 comm="syz.5.2400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7c0e9f749 code=0x7ffc0000 [ 99.865545][ T29] audit: type=1326 audit(1767988217.268:2723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9032 comm="syz.5.2400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7c0e9f749 code=0x7ffc0000 [ 99.879967][ T9035] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 99.889065][ T29] audit: type=1326 audit(1767988217.268:2724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9032 comm="syz.5.2400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7ff7c0e9f749 code=0x7ffc0000 [ 99.904108][ T9035] SELinux: failed to load policy [ 99.922250][ T29] audit: type=1326 audit(1767988217.268:2725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9032 comm="syz.5.2400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7c0e9f749 code=0x7ffc0000 [ 99.950849][ T29] audit: type=1326 audit(1767988217.268:2726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9032 comm="syz.5.2400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7c0e9f749 code=0x7ffc0000 [ 99.974321][ T29] audit: type=1326 audit(1767988217.268:2727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9032 comm="syz.5.2400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff7c0e9f749 code=0x7ffc0000 [ 100.009594][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.023139][ T9037] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2403'. [ 100.213947][ T9053] loop2: detected capacity change from 0 to 1024 [ 100.224584][ T9057] loop5: detected capacity change from 0 to 512 [ 100.233783][ T9053] EXT4-fs: Ignoring removed nobh option [ 100.239545][ T9053] EXT4-fs: inline encryption not supported [ 100.253781][ T9057] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 100.262656][ T9057] EXT4-fs (loop5): orphan cleanup on readonly fs [ 100.282749][ T9053] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.296326][ T9057] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.2411: Failed to acquire dquot type 1 [ 100.308317][ T9057] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2411: bg 0: block 40: padding at end of block bitmap is not set [ 100.322943][ T9057] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 100.332154][ T9057] EXT4-fs (loop5): 1 truncate cleaned up [ 100.338378][ T9057] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 100.359355][ T9053] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.2410: Allocating blocks 385-513 which overlap fs metadata [ 100.398829][ T9053] EXT4-fs (loop2): pa ffff888107a517e0: logic 16, phys. 129, len 24 [ 100.406957][ T9053] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 100.417483][ T5915] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.434375][ T9073] loop3: detected capacity change from 0 to 512 [ 100.448025][ T9053] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 100.460521][ T9053] EXT4-fs (loop2): This should not happen!! Data will be lost [ 100.460521][ T9053] [ 100.470222][ T9053] EXT4-fs (loop2): Total free blocks count 0 [ 100.476313][ T9053] EXT4-fs (loop2): Free/Dirty block details [ 100.482778][ T9053] EXT4-fs (loop2): free_blocks=128 [ 100.488063][ T9053] EXT4-fs (loop2): dirty_blocks=0 [ 100.493116][ T9053] EXT4-fs (loop2): Block reservation details [ 100.499238][ T9053] EXT4-fs (loop2): i_reserved_data_blocks=0 [ 100.506834][ T9073] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #18: comm syz.3.2417: iget: bad extra_isize 90 (inode size 256) [ 100.520638][ T9073] EXT4-fs (loop3): Remounting filesystem read-only [ 100.530793][ T9073] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -30) [ 100.539903][ T9073] EXT4-fs (loop3): 1 orphan inode deleted [ 100.546382][ T9073] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.578059][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.593830][ T9078] loop0: detected capacity change from 0 to 1024 [ 100.608252][ T9078] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.637126][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.658936][ T9092] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 100.710452][ T9097] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2429'. [ 100.760308][ T9110] loop1: detected capacity change from 0 to 1024 [ 100.788048][ T9110] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.818230][ T9110] ext4 filesystem being mounted at /575/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.842717][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.855167][ T9116] IPv6: NLM_F_CREATE should be specified when creating new route [ 100.906683][ T9114] SELinux: failed to load policy [ 100.955284][ T9126] atomic_op ffff88811e255d28 conn xmit_atomic 0000000000000000 [ 101.030055][ T9137] loop0: detected capacity change from 0 to 1024 [ 101.045942][ T9142] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2449'. [ 101.045978][ T9142] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2449'. [ 101.048423][ T9142] geneve2: entered promiscuous mode [ 101.048440][ T9142] geneve2: entered allmulticast mode [ 101.056363][ T9137] EXT4-fs: Ignoring removed nomblk_io_submit option [ 101.092487][ T9141] netlink: 256 bytes leftover after parsing attributes in process `syz.5.2447'. [ 101.108672][ T9137] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 101.126729][ T9137] System zones: 0-1, 3-36 [ 101.146204][ T9137] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.223348][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.233535][ T9163] atomic_op ffff88810406b128 conn xmit_atomic 0000000000000000 [ 101.286590][ T9170] serio: Serial port ptm0 [ 101.323293][ T9179] SET target dimension over the limit! [ 101.363768][ T9184] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2467'. [ 101.403339][ T9173] SELinux: failed to load policy [ 101.483864][ T9202] EXT4-fs: Ignoring removed orlov option [ 101.499829][ T9202] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.514949][ T9208] atomic_op ffff88811e255528 conn xmit_atomic 0000000000000000 [ 101.573565][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.688340][ T9227] SELinux: failed to load policy [ 101.694079][ T9231] EXT4-fs: Ignoring removed nobh option [ 101.699772][ T9231] EXT4-fs: inline encryption not supported [ 101.729237][ T9231] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.776920][ T9231] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.2482: Allocating blocks 385-513 which overlap fs metadata [ 101.796474][ T9245] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2495'. [ 101.805607][ T9245] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2495'. [ 101.820262][ T9237] SELinux: failed to load policy [ 101.837988][ T9231] EXT4-fs (loop3): pa ffff888107a51850: logic 16, phys. 129, len 24 [ 101.846163][ T9231] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 101.856947][ T9231] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 101.869202][ T9231] EXT4-fs (loop3): This should not happen!! Data will be lost [ 101.869202][ T9231] [ 101.878899][ T9231] EXT4-fs (loop3): Total free blocks count 0 [ 101.884929][ T9231] EXT4-fs (loop3): Free/Dirty block details [ 101.890900][ T9231] EXT4-fs (loop3): free_blocks=128 [ 101.896075][ T9231] EXT4-fs (loop3): dirty_blocks=0 [ 101.901131][ T9231] EXT4-fs (loop3): Block reservation details [ 101.907222][ T9231] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 101.925098][ T9250] IPv6: NLM_F_CREATE should be specified when creating new route [ 101.966259][ T9258] SELinux: failed to load policy [ 102.100740][ T9280] geneve2: entered promiscuous mode [ 102.106104][ T9280] geneve2: entered allmulticast mode [ 102.213057][ T9298] set_capacity_and_notify: 2 callbacks suppressed [ 102.213075][ T9298] loop0: detected capacity change from 0 to 1024 [ 102.227425][ T9298] EXT4-fs: Ignoring removed nobh option [ 102.233060][ T9298] EXT4-fs: inline encryption not supported [ 102.273035][ T9298] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.368569][ T9301] SELinux: failed to load policy [ 102.378308][ T9298] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.2502: Allocating blocks 385-513 which overlap fs metadata [ 102.435171][ T9298] EXT4-fs (loop0): pa ffff888107a518c0: logic 16, phys. 129, len 24 [ 102.443593][ T9298] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 102.466833][ T9298] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 102.479161][ T9298] EXT4-fs (loop0): This should not happen!! Data will be lost [ 102.479161][ T9298] [ 102.489029][ T9298] EXT4-fs (loop0): Total free blocks count 0 [ 102.495272][ T9298] EXT4-fs (loop0): Free/Dirty block details [ 102.501275][ T9298] EXT4-fs (loop0): free_blocks=128 [ 102.506429][ T9298] EXT4-fs (loop0): dirty_blocks=0 [ 102.511479][ T9298] EXT4-fs (loop0): Block reservation details [ 102.517517][ T9298] EXT4-fs (loop0): i_reserved_data_blocks=0 [ 102.526759][ T9322] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 102.764010][ T9351] SELinux: failed to load policy [ 102.827071][ T9360] loop5: detected capacity change from 0 to 1024 [ 102.847187][ T9360] EXT4-fs: Ignoring removed nobh option [ 102.852886][ T9360] EXT4-fs: inline encryption not supported [ 102.887846][ T9360] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.918091][ T9369] loop1: detected capacity change from 0 to 1024 [ 102.918804][ T9371] loop0: detected capacity change from 0 to 512 [ 102.925899][ T9369] EXT4-fs: Ignoring removed orlov option [ 102.941798][ T9369] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.957439][ T9360] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4215: comm syz.5.2529: Allocating blocks 385-513 which overlap fs metadata [ 102.979140][ T9371] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.991952][ T9371] ext4 filesystem being mounted at /505/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.005244][ T9371] EXT4-fs error (device loop0): ext4_lookup:1785: inode #12: comm syz.0.2536: iget: bad i_size value: 2533274857506816 [ 103.035271][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.049670][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.059047][ T9360] EXT4-fs (loop5): pa ffff888107a51620: logic 16, phys. 129, len 24 [ 103.067244][ T9360] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 103.077946][ T9360] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 103.090327][ T9360] EXT4-fs (loop5): This should not happen!! Data will be lost [ 103.090327][ T9360] [ 103.100205][ T9360] EXT4-fs (loop5): Total free blocks count 0 [ 103.106326][ T9360] EXT4-fs (loop5): Free/Dirty block details [ 103.112251][ T9360] EXT4-fs (loop5): free_blocks=128 [ 103.117659][ T9360] EXT4-fs (loop5): dirty_blocks=0 [ 103.122783][ T9360] EXT4-fs (loop5): Block reservation details [ 103.128888][ T9360] EXT4-fs (loop5): i_reserved_data_blocks=0 [ 103.230368][ T9397] SELinux: failed to load policy [ 103.255291][ T9398] serio: Serial port ptm0 [ 103.418304][ T9419] syzkaller1: entered promiscuous mode [ 103.423930][ T9419] syzkaller1: entered allmulticast mode [ 103.434046][ T9421] SET target dimension over the limit! [ 103.631474][ T9454] loop3: detected capacity change from 0 to 1024 [ 103.645995][ T9459] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 103.676712][ T9454] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.703520][ T9454] ext4 filesystem being mounted at /526/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.765982][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.783645][ T9475] loop5: detected capacity change from 0 to 512 [ 103.818575][ T9475] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.841204][ T9475] ext4 filesystem being mounted at /295/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.855005][ T9475] EXT4-fs error (device loop5): ext4_lookup:1785: inode #12: comm syz.5.2579: iget: bad i_size value: 2533274857506816 [ 103.909721][ T5915] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.958316][ T9495] loop3: detected capacity change from 0 to 512 [ 103.978724][ T9495] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.994846][ T9495] ext4 filesystem being mounted at /529/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 104.023503][ T9495] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #2: comm syz.3.2593: corrupted inode contents [ 104.055652][ T9495] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #2: comm syz.3.2593: mark_inode_dirty error [ 104.092726][ T9495] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #2: comm syz.3.2593: corrupted inode contents [ 104.139515][ T9495] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.2593: mark_inode_dirty error [ 104.159376][ T9524] sd 0:0:1:0: device reset [ 104.165786][ T9528] SELinux: policydb version 1953507643 does not match my version range 15-35 [ 104.208012][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.338969][ T9542] loop5: detected capacity change from 0 to 8192 [ 104.388062][ T9548] sel_write_load: 2 callbacks suppressed [ 104.388080][ T9548] SELinux: failed to load policy [ 104.507513][ T9578] __nla_validate_parse: 11 callbacks suppressed [ 104.507533][ T9578] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2632'. [ 104.534031][ T29] kauditd_printk_skb: 196 callbacks suppressed [ 104.534046][ T29] audit: type=1400 audit(1767988222.008:2922): avc: denied { ioctl } for pid=9573 comm="syz.2.2630" path="socket:[24066]" dev="sockfs" ino=24066 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 104.588478][ T29] audit: type=1400 audit(1767988222.058:2923): avc: denied { create } for pid=9582 comm="syz.1.2634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 104.608165][ T29] audit: type=1400 audit(1767988222.058:2924): avc: denied { connect } for pid=9582 comm="syz.1.2634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 104.659781][ T29] audit: type=1326 audit(1767988222.138:2925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9589 comm="syz.3.2639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22cbe7f749 code=0x7ffc0000 [ 104.683587][ T29] audit: type=1326 audit(1767988222.138:2926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9589 comm="syz.3.2639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22cbe7f749 code=0x7ffc0000 [ 104.709743][ T29] audit: type=1326 audit(1767988222.138:2927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9589 comm="syz.3.2639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f22cbe7f749 code=0x7ffc0000 [ 104.733383][ T29] audit: type=1326 audit(1767988222.138:2928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9589 comm="syz.3.2639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22cbe7f749 code=0x7ffc0000 [ 104.757090][ T29] audit: type=1326 audit(1767988222.138:2929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9589 comm="syz.3.2639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f22cbe7f749 code=0x7ffc0000 [ 104.780707][ T29] audit: type=1326 audit(1767988222.138:2930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9589 comm="syz.3.2639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22cbe7f749 code=0x7ffc0000 [ 104.804649][ T29] audit: type=1326 audit(1767988222.138:2931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9589 comm="syz.3.2639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f22cbe7f749 code=0x7ffc0000 [ 104.843606][ T9597] loop1: detected capacity change from 0 to 1024 [ 104.850989][ T9597] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 104.861994][ T9597] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 104.875463][ T9597] JBD2: no valid journal superblock found [ 104.881324][ T9597] EXT4-fs (loop1): Could not load journal inode [ 104.891998][ T9597] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 104.970567][ T9603] SELinux: failed to load policy [ 105.030406][ T9607] sd 0:0:1:0: device reset [ 105.291951][ T9623] loop1: detected capacity change from 0 to 256 [ 105.309571][ T3483] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 105.317837][ T3483] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz0 [ 105.368052][ T9636] sd 0:0:1:0: device reset [ 105.396911][ T9639] SELinux: Context system_u:object_r:fonts_cache_t:s0 is not valid (left unmapped). [ 105.429183][ T9642] SELinux: failed to load policy [ 105.454104][ T9643] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 105.465338][ T9643] EXT4-fs (loop2): orphan cleanup on readonly fs [ 105.472461][ T9643] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2663: bg 0: block 248: padding at end of block bitmap is not set [ 105.490590][ T9643] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.2663: Failed to acquire dquot type 1 [ 105.504374][ T9643] EXT4-fs (loop2): 1 truncate cleaned up [ 105.513334][ T9643] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 105.527611][ T9650] netlink: 'syz.1.2666': attribute type 1 has an invalid length. [ 105.570176][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.623547][ T3505] IPVS: starting estimator thread 0... [ 105.715649][ T9663] IPVS: using max 2208 ests per chain, 110400 per kthread [ 105.838833][ T9697] sd 0:0:1:0: device reset [ 105.916428][ T9671] loop1: p1 p2 p3 < > p4 < p5 p6 > [ 105.921842][ T9671] loop1: p1 start 460800 is beyond EOD, truncated [ 105.928539][ T9671] loop1: p2 size 83886080 extends beyond EOD, truncated [ 105.937912][ T9671] loop1: p5 start 460800 is beyond EOD, truncated [ 105.944712][ T9671] loop1: p6 size 83886080 extends beyond EOD, truncated [ 105.978838][ T9707] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2689'. [ 106.275615][ T9733] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 106.286738][ T9733] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 106.299012][ T9733] JBD2: no valid journal superblock found [ 106.304811][ T9733] EXT4-fs (loop5): Could not load journal inode [ 106.319907][ T9730] Alternate GPT is invalid, using primary GPT. [ 106.326445][ T9730] loop0: p2 p3 p7 [ 106.331214][ T3483] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 106.331680][ T9733] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 106.347007][ T3483] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz0 [ 106.517729][ T9757] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2713'. [ 106.608644][ T9765] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 106.977294][ T9797] netlink: 'syz.3.2731': attribute type 21 has an invalid length. [ 106.985331][ T9797] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2731'. [ 107.139576][ T9821] Buffer I/O error on dev loop9, logical block 0, async page read [ 107.149564][ T9821] Buffer I/O error on dev loop9, logical block 0, async page read [ 107.157627][ T9821] loop9: unable to read partition table [ 107.163348][ T9821] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 107.163348][ T9821] ) failed (rc=-5) [ 107.279357][ T9837] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 107.325157][ T9844] set_capacity_and_notify: 8 callbacks suppressed [ 107.325178][ T9844] loop7: detected capacity change from 0 to 8 [ 107.457349][ T9865] loop3: detected capacity change from 0 to 2048 [ 107.518203][ T9865] Alternate GPT is invalid, using primary GPT. [ 107.524623][ T9865] loop3: p2 p3 p7 [ 107.566335][ T3483] IPVS: starting estimator thread 0... [ 107.655506][ T9882] IPVS: using max 1776 ests per chain, 88800 per kthread [ 108.025227][ T9925] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9925 comm=syz.1.2788 [ 108.073669][ T9929] netlink: 'syz.3.2790': attribute type 29 has an invalid length. [ 108.271839][ T9955] loop1: detected capacity change from 0 to 512 [ 108.281287][ T9955] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 108.295630][ T5036] IPVS: ip_vs_send_async error -22 [ 108.321398][ T9955] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 108.337370][ T9955] ext4 filesystem being mounted at /661/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.392766][ T9971] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.2807'. [ 108.421934][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 108.480542][ T3391] IPVS: starting estimator thread 0... [ 108.533984][ T9992] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 108.556661][ T9998] SELinux: Context system_u:object_r:pam_console_exec_t:s0 is not valid (left unmapped). [ 108.585664][ T9986] IPVS: using max 2208 ests per chain, 110400 per kthread [ 108.631889][ T5761] Bluetooth: hci0: Frame reassembly failed (-84) [ 108.799051][T10021] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 108.867300][T10019] loop2: detected capacity change from 0 to 32768 [ 108.915990][T10019] loop2: p1 p2 p3 < > p4 < p5 p6 > [ 108.923428][T10019] loop2: p1 start 460800 is beyond EOD, truncated [ 108.930034][T10019] loop2: p2 size 83886080 extends beyond EOD, truncated [ 108.939660][T10019] loop2: p5 start 460800 is beyond EOD, truncated [ 108.946197][T10019] loop2: p6 size 83886080 extends beyond EOD, truncated [ 109.328025][T10066] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 109.584239][T10099] loop2: detected capacity change from 0 to 512 [ 109.591750][T10099] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 109.601253][ T29] kauditd_printk_skb: 139 callbacks suppressed [ 109.601269][ T29] audit: type=1400 audit(1767988227.078:3069): avc: denied { setopt } for pid=10100 comm="syz.3.2869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 109.649218][T10099] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 109.665544][T10099] ext4 filesystem being mounted at /590/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.702307][T10111] loop1: detected capacity change from 0 to 128 [ 109.758657][ T29] audit: type=1400 audit(1767988227.218:3070): avc: denied { bind } for pid=10112 comm="syz.3.2874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 109.778216][ T29] audit: type=1400 audit(1767988227.218:3071): avc: denied { node_bind } for pid=10112 comm="syz.3.2874" saddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 109.821029][T10111] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 109.834030][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 109.843505][T10111] ext4 filesystem being mounted at /684/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 109.940553][ T29] audit: type=1400 audit(1767988227.398:3072): avc: denied { name_bind } for pid=10119 comm="syz.3.2878" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 109.965751][T10111] EXT4-fs (loop1): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 110.038270][ T3314] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 110.154915][ T29] audit: type=1400 audit(1767988227.628:3073): avc: denied { audit_write } for pid=10133 comm="syz.2.2884" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 110.176488][ T29] audit: type=1107 audit(1767988227.628:3074): pid=10133 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='s%' [ 110.223845][ T29] audit: type=1326 audit(1767988227.698:3075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10138 comm="syz.1.2886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f173dc7f749 code=0x7ffc0000 [ 110.258506][ T29] audit: type=1326 audit(1767988227.728:3076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10138 comm="syz.1.2886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7f173dc7f749 code=0x7ffc0000 [ 110.282239][ T29] audit: type=1326 audit(1767988227.728:3077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10138 comm="syz.1.2886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f173dc7f749 code=0x7ffc0000 [ 110.324380][T10145] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2889'. [ 110.376852][T10150] loop2: detected capacity change from 0 to 512 [ 110.388691][T10151] loop5: detected capacity change from 0 to 1024 [ 110.406226][T10150] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 110.412611][T10151] EXT4-fs: Ignoring removed nobh option [ 110.423795][T10151] EXT4-fs: Ignoring removed bh option [ 110.466954][T10151] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.495974][T10151] EXT4-fs (loop5): pa ffff888107a51620: logic 1, phys. 129, len 4 [ 110.503871][T10151] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5466: group 0, free 2, pa_free 3 [ 110.514234][ T29] audit: type=1400 audit(1767988227.968:3078): avc: denied { read write } for pid=10148 comm="syz.5.2892" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 110.614358][ T5915] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.686765][ T4023] Bluetooth: hci0: command 0x1003 tx timeout [ 110.693003][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 110.729764][T10166] loop5: detected capacity change from 0 to 764 [ 110.760274][T10166] rock: directory entry would overflow storage [ 110.766554][T10166] rock: sig=0x5245, size=8, remaining=5 [ 110.914427][T10178] loop0: detected capacity change from 0 to 1024 [ 110.955991][T10178] EXT4-fs: Ignoring removed bh option [ 110.967642][T10178] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.018255][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.076915][T10193] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2909'. [ 111.086121][T10193] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2909'. [ 111.100449][T10193] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2909'. [ 111.130438][T10193] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2909'. [ 111.139432][T10193] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2909'. [ 111.155554][T10193] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2909'. [ 111.205698][T10193] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2909'. [ 111.214779][T10193] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2909'. [ 111.256012][T10193] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2909'. [ 111.583636][T10225] EXT4-fs: Ignoring removed nobh option [ 111.589404][T10225] EXT4-fs: inline encryption not supported [ 111.609338][T10221] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 111.628765][T10227] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 111.646610][T10221] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8801e118, mo2=0000] [ 111.655913][T10225] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.667524][T10221] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 2: comm syz.1.2920: lblock 2 mapped to illegal pblock 2 (length 1) [ 111.694228][T10225] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.2922: Allocating blocks 385-513 which overlap fs metadata [ 111.709976][T10221] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 48: comm syz.1.2920: lblock 0 mapped to illegal pblock 48 (length 1) [ 111.728626][T10232] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 111.739745][T10221] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.2920: Failed to acquire dquot type 0 [ 111.751672][T10221] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 111.761990][T10232] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.2924: Invalid block bitmap block 0 in block_group 0 [ 111.777555][T10225] EXT4-fs (loop2): pa ffff88810795e310: logic 16, phys. 129, len 24 [ 111.785657][T10225] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 7 [ 111.796588][T10221] EXT4-fs error (device loop1): ext4_evict_inode:253: inode #11: comm syz.1.2920: mark_inode_dirty error [ 111.805985][T10232] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 111.817916][T10221] EXT4-fs warning (device loop1): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 111.835630][T10221] EXT4-fs (loop1): 1 orphan inode deleted [ 111.841862][T10221] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.855553][ T5759] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:15: lblock 1 mapped to illegal pblock 1 (length 1) [ 111.870288][T10232] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #11: comm syz.5.2924: attempt to clear invalid blocks 983261 len 1 [ 111.875790][ T5759] EXT4-fs error (device loop1): ext4_release_dquot:7022: comm kworker/u8:15: Failed to release dquot type 0 [ 111.905823][T10232] EXT4-fs error (device loop5): __ext4_get_inode_loc:4830: comm syz.5.2924: Invalid inode table block 0 in block_group 0 [ 111.917505][T10221] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.929842][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.945865][T10232] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 111.946012][T10221] EXT4-fs error (device loop1): __ext4_get_inode_loc:4830: comm syz.1.2920: Invalid inode table block 1 in block_group 0 [ 111.957695][T10232] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 111.979543][T10221] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 111.996375][T10232] EXT4-fs error (device loop5): __ext4_get_inode_loc:4830: comm syz.5.2924: Invalid inode table block 0 in block_group 0 [ 112.009267][T10221] EXT4-fs error (device loop1): ext4_quota_off:7270: inode #3: comm syz.1.2920: mark_inode_dirty error [ 112.020502][T10232] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 112.030298][T10232] EXT4-fs error (device loop5): ext4_truncate:4635: inode #11: comm syz.5.2924: mark_inode_dirty error [ 112.092811][T10232] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 112.113094][T10232] EXT4-fs error (device loop5): __ext4_get_inode_loc:4830: comm syz.5.2924: Invalid inode table block 0 in block_group 0 [ 112.135986][T10232] EXT4-fs (loop5): 1 truncate cleaned up [ 112.142172][T10232] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.231591][ T5915] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.243686][T10254] Invalid argument reading file caps for ./file0 [ 112.332451][T10259] set_capacity_and_notify: 3 callbacks suppressed [ 112.332467][T10259] loop0: detected capacity change from 0 to 1764 [ 112.346954][T10264] SELinux: Context @ is not valid (left unmapped). [ 112.390633][T10259] iso9660: Unknown parameter 'de' [ 112.458277][T10272] netlink: 'gtp': attribute type 1 has an invalid length. [ 112.510604][T10276] Process accounting resumed [ 112.613853][T10291] loop1: detected capacity change from 0 to 512 [ 112.642940][T10291] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 112.682089][T10291] EXT4-fs (loop1): 1 truncate cleaned up [ 112.694967][T10291] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.904757][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.978354][T10315] Process accounting resumed [ 113.010912][T10321] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10321 comm=syz.1.2963 [ 113.111137][T10333] loop5: detected capacity change from 0 to 512 [ 113.120256][T10333] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 113.158139][T10333] EXT4-fs (loop5): 1 truncate cleaned up [ 113.164195][T10333] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.400029][ T5915] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.536348][ T5759] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.556060][ T5759] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.565126][ T5759] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.586844][ T5759] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.740504][T10357] Invalid argument reading file caps for ./file0 [ 113.759396][T10359] netlink: 'syz.0.2989': attribute type 13 has an invalid length. [ 113.772243][T10359] gretap0: refused to change device tx_queue_len [ 113.778806][T10359] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 113.801387][T10361] loop5: detected capacity change from 0 to 1024 [ 113.808970][T10361] EXT4-fs: Ignoring removed nobh option [ 113.814719][T10361] EXT4-fs: inline encryption not supported [ 113.827167][T10361] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.854723][T10361] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4215: comm syz.5.2978: Allocating blocks 385-513 which overlap fs metadata [ 113.870799][T10365] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10365 comm=syz.0.2979 [ 113.893056][T10361] EXT4-fs (loop5): pa ffff888107a518c0: logic 16, phys. 129, len 24 [ 113.901325][T10361] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 7 [ 113.942171][ T5915] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.965992][T10367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.974929][T10367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.023426][T10371] netlink: 'gtp': attribute type 1 has an invalid length. [ 114.428519][T10410] SELinux: Context is not valid (left unmapped). [ 114.471799][T10422] loop1: detected capacity change from 0 to 512 [ 114.480273][T10424] bridge_slave_1: entered promiscuous mode [ 114.481094][T10422] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 114.498686][T10422] EXT4-fs (loop1): 1 truncate cleaned up [ 114.514131][T10422] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.556085][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.683097][T10455] bridge_slave_1: entered promiscuous mode [ 114.700354][T10456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.709220][ T29] kauditd_printk_skb: 94 callbacks suppressed [ 114.709234][ T29] audit: type=1326 audit(1767988232.188:3170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10449 comm="syz.0.3033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b2beff749 code=0x7ffc0000 [ 114.747531][T10452] sit0: left promiscuous mode [ 114.752390][T10456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.821602][ T29] audit: type=1326 audit(1767988232.218:3171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10449 comm="syz.0.3033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7f1b2beff749 code=0x7ffc0000 [ 114.845168][ T29] audit: type=1326 audit(1767988232.218:3172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10449 comm="syz.0.3033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b2beff749 code=0x7ffc0000 [ 114.868828][ T29] audit: type=1400 audit(1767988232.288:3173): avc: denied { relabelto } for pid=10459 comm="syz.5.3024" name="cgroup.procs" dev="cgroup" ino=396 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:netutils_exec_t:s0" [ 114.896788][ T29] audit: type=1400 audit(1767988232.288:3174): avc: denied { associate } for pid=10459 comm="syz.5.3024" name="cgroup.procs" dev="cgroup" ino=396 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:netutils_exec_t:s0" [ 114.963276][T10452] vlan2: left allmulticast mode [ 114.968248][T10452] batadv0: left allmulticast mode [ 114.974521][T10452] geneve2: left promiscuous mode [ 114.979673][T10452] geneve2: left allmulticast mode [ 114.990864][ T5762] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.000663][ T5762] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.015548][ T5762] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.029725][ T5762] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.040303][ T29] audit: type=1326 audit(1767988232.518:3175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10480 comm="syz.5.3036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7c0e9f749 code=0x7ffc0000 [ 115.065153][ T29] audit: type=1326 audit(1767988232.518:3176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10480 comm="syz.5.3036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7c0e9f749 code=0x7ffc0000 [ 115.088851][ T29] audit: type=1326 audit(1767988232.548:3177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10480 comm="syz.5.3036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7c0e9f749 code=0x7ffc0000 [ 115.112543][ T29] audit: type=1326 audit(1767988232.548:3178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10480 comm="syz.5.3036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7c0e9f749 code=0x7ffc0000 [ 115.136146][ T29] audit: type=1326 audit(1767988232.548:3179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10480 comm="syz.5.3036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff7c0e9f749 code=0x7ffc0000 [ 115.187236][T10479] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 115.199480][T10486] loop1: detected capacity change from 0 to 1024 [ 115.206990][T10486] EXT4-fs: Ignoring removed nobh option [ 115.212641][T10486] EXT4-fs: inline encryption not supported [ 115.237547][T10486] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.254038][T10486] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.3047: Allocating blocks 385-513 which overlap fs metadata [ 115.282178][T10486] EXT4-fs (loop1): pa ffff88810795e3f0: logic 16, phys. 129, len 24 [ 115.290337][T10486] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 7 [ 115.338238][T10493] IPv6: NLM_F_CREATE should be specified when creating new route [ 115.349340][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.391769][T10499] tap0: tun_chr_ioctl cmd 1074025678 [ 115.397191][T10499] tap0: group set to 0 [ 115.625989][T10512] vlan2: left allmulticast mode [ 115.631028][T10512] batadv0: left allmulticast mode [ 115.639070][T10521] __nla_validate_parse: 8 callbacks suppressed [ 115.639091][T10521] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3046'. [ 115.665790][T10507] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3046'. [ 115.691185][ T5758] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.724393][ T5758] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.740841][ T5758] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.765837][ T5758] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.890505][T10567] sctp: [Deprecated]: syz.1.3070 (pid 10567) Use of struct sctp_assoc_value in delayed_ack socket option. [ 115.890505][T10567] Use struct sctp_sack_info instead [ 116.014749][T10573] sit0: left promiscuous mode [ 116.278930][T10573] geneve2: left promiscuous mode [ 116.284092][T10573] geneve2: left allmulticast mode [ 116.322218][T10595] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 116.329714][ T311] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.374279][ T311] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.383656][ T311] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.392964][ T311] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.416408][T10607] loop3: detected capacity change from 0 to 256 [ 116.424103][T10605] loop5: detected capacity change from 0 to 1024 [ 116.430975][T10607] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 116.442347][T10605] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 116.453682][T10605] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8801e118, mo2=0000] [ 116.481901][T10605] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 2: comm syz.5.3082: lblock 2 mapped to illegal pblock 2 (length 1) [ 116.496398][T10605] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 48: comm syz.5.3082: lblock 0 mapped to illegal pblock 48 (length 1) [ 116.519196][T10605] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.3082: Failed to acquire dquot type 0 [ 116.531040][T10605] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 116.540778][T10605] EXT4-fs error (device loop5): ext4_evict_inode:253: inode #11: comm syz.5.3082: mark_inode_dirty error [ 116.552307][T10605] EXT4-fs warning (device loop5): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 116.562811][T10605] EXT4-fs (loop5): 1 orphan inode deleted [ 116.569506][T10605] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.599433][T10615] netlink: 'syz.3.3086': attribute type 13 has an invalid length. [ 116.620381][ T311] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 116.649845][ T311] EXT4-fs error (device loop5): ext4_release_dquot:7022: comm kworker/u8:5: Failed to release dquot type 0 [ 116.663152][T10605] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.683383][T10605] EXT4-fs error (device loop5): __ext4_get_inode_loc:4830: comm syz.5.3082: Invalid inode table block 1 in block_group 0 [ 116.724028][T10605] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 116.740195][T10623] netlink: 'syz.3.3091': attribute type 21 has an invalid length. [ 116.749258][T10605] EXT4-fs error (device loop5): ext4_quota_off:7270: inode #3: comm syz.5.3082: mark_inode_dirty error [ 116.749685][T10623] netlink: 'syz.3.3091': attribute type 1 has an invalid length. [ 116.768251][T10623] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3091'. [ 116.917619][T10651] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3104'. [ 116.926758][T10651] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3104'. [ 117.037779][T10669] netlink: 'syz.0.3113': attribute type 3 has an invalid length. [ 117.126379][T10687] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3123'. [ 117.135519][T10687] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3123'. [ 117.234226][T10704] sctp: [Deprecated]: syz.0.3127 (pid 10704) Use of struct sctp_assoc_value in delayed_ack socket option. [ 117.234226][T10704] Use struct sctp_sack_info instead [ 117.646013][T10733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.654509][T10733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.825099][T10751] netlink: 'syz.0.3148': attribute type 13 has an invalid length. [ 118.012675][T10769] macvtap1: entered promiscuous mode [ 118.018200][T10769] team0: entered promiscuous mode [ 118.023659][T10769] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 118.031226][T10769] team0: Device macvtap1 is already an upper device of the team interface [ 118.049976][T10769] team0: left promiscuous mode [ 118.449063][T10806] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 118.483478][T10811] macvtap1: entered promiscuous mode [ 118.488874][T10811] team0: entered promiscuous mode [ 118.494478][T10811] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 118.502487][T10811] team0: Device macvtap1 is already an upper device of the team interface [ 118.513405][T10811] team0: left promiscuous mode [ 118.647227][T10834] random: crng reseeded on system resumption [ 118.763779][T10854] macvtap1: entered promiscuous mode [ 118.769252][T10854] team0: entered promiscuous mode [ 118.782824][T10854] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 118.790283][T10854] team0: Device macvtap1 is already an upper device of the team interface [ 118.801139][T10859] binfmt_misc: register: failed to install interpreter file ./file0 [ 118.829064][T10854] team0: left promiscuous mode [ 118.854936][T10864] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3203'. [ 118.895194][T10872] random: crng reseeded on system resumption [ 118.959739][T10880] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3211'. [ 118.968859][T10880] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3211'. [ 119.149616][T10907] xt_CT: You must specify a L4 protocol and not use inversions on it [ 119.699283][T10977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.732741][ T29] kauditd_printk_skb: 190 callbacks suppressed [ 119.732759][ T29] audit: type=1400 audit(1767988237.208:3367): avc: denied { compute_member } for pid=10978 comm="syz.0.3254" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 119.776187][T10977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.865880][ T29] audit: type=1400 audit(1767988237.348:3368): avc: denied { setopt } for pid=10985 comm="syz.0.3257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 119.942972][ T29] audit: type=1400 audit(1767988237.408:3369): avc: denied { setopt } for pid=10989 comm="syz.0.3259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 119.975639][T10992] macvtap1: entered promiscuous mode [ 119.981029][T10992] team0: entered promiscuous mode [ 119.987403][T10992] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 119.994823][T10992] team0: Device macvtap1 is already an upper device of the team interface [ 120.007261][T10992] team0: left promiscuous mode [ 120.047348][ T29] audit: type=1400 audit(1767988237.528:3370): avc: denied { bind } for pid=10998 comm="syz.0.3263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 120.050485][T11000] netlink: 'syz.0.3263': attribute type 10 has an invalid length. [ 120.089938][T11000] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 120.337748][ T29] audit: type=1326 audit(1767988237.808:3371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11032 comm="syz.5.3279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7c0e9f749 code=0x7ffc0000 [ 120.361482][ T29] audit: type=1326 audit(1767988237.808:3372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11032 comm="syz.5.3279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff7c0e9f749 code=0x7ffc0000 [ 120.385211][ T29] audit: type=1326 audit(1767988237.808:3373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11032 comm="syz.5.3279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7c0e9f749 code=0x7ffc0000 [ 120.408969][ T29] audit: type=1326 audit(1767988237.818:3374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11032 comm="syz.5.3279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7ff7c0e9f749 code=0x7ffc0000 [ 120.432502][ T29] audit: type=1326 audit(1767988237.818:3375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11032 comm="syz.5.3279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7c0e9f749 code=0x7ffc0000 [ 120.517343][T11041] netlink: 'syz.5.3281': attribute type 10 has an invalid length. [ 120.537310][T11041] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 120.765662][ T29] audit: type=1326 audit(1767988238.238:3376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11064 comm="syz.0.3293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b2beff749 code=0x7ffc0000 [ 120.888351][T11080] netlink: 'syz.2.3301': attribute type 13 has an invalid length. [ 120.902182][T11080] gretap0: refused to change device tx_queue_len [ 120.916220][T11080] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 120.976335][T11086] loop1: detected capacity change from 0 to 128 [ 121.036386][T11090] ALSA: seq fatal error: cannot create timer (-19) [ 121.105697][T11096] ALSA: seq fatal error: cannot create timer (-19) [ 121.181599][T11106] netlink: 'syz.1.3310': attribute type 10 has an invalid length. [ 121.192977][T11106] bond0: (slave netdevsim1): Enslaving as an active interface with a down link [ 121.216058][T11110] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3312'. [ 121.246629][T11114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.255258][T11114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.296734][T11117] loop2: detected capacity change from 0 to 128 [ 121.332913][T11123] netlink: 'syz.5.3320': attribute type 1 has an invalid length. [ 121.353963][T11123] bond1: entered promiscuous mode [ 121.371158][T11123] 8021q: adding VLAN 0 to HW filter on device bond1 [ 121.382204][T11129] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3323'. [ 121.391360][T11129] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3323'. [ 121.416749][T11123] 8021q: adding VLAN 0 to HW filter on device bond1 [ 121.431290][T11123] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 121.441454][T11123] bond1: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 121.450589][T11123] bond1: (slave gre1): making interface the new active one [ 121.450614][T11123] gre1: entered promiscuous mode [ 121.452605][T11123] bond1: (slave gre1): Enslaving as an active interface with an up link [ 121.626672][T11150] loop5: detected capacity change from 0 to 128 [ 121.930893][T11194] netlink: 'syz.2.3350': attribute type 1 has an invalid length. [ 121.946616][T11194] bond1: entered promiscuous mode [ 121.951961][T11194] 8021q: adding VLAN 0 to HW filter on device bond1 [ 121.977578][T11194] 8021q: adding VLAN 0 to HW filter on device bond1 [ 121.984812][T11194] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 121.994964][T11194] bond1: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 122.006670][T11194] bond1: (slave gre1): making interface the new active one [ 122.013920][T11194] gre1: entered promiscuous mode [ 122.021014][T11194] bond1: (slave gre1): Enslaving as an active interface with an up link [ 122.105316][T11202] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3352'. [ 123.024160][T10596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.113684][T11240] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3371'. [ 123.153170][T11242] netlink: 'syz.0.3372': attribute type 1 has an invalid length. [ 123.236922][T11255] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.245319][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.451738][T11258] ================================================================== [ 123.459916][T11258] BUG: KCSAN: data-race in ep_poll_callback / ep_try_send_events [ 123.459960][T11258] [ 123.459966][T11258] write to 0xffff88811c1eb6e8 of 4 bytes by task 11257 on cpu 0: [ 123.459982][T11258] ep_try_send_events+0x4f2/0x710 [ 123.460009][T11258] do_epoll_wait+0x371/0x940 [ 123.460036][T11258] do_epoll_pwait+0x54/0x150 [ 123.460065][T11258] __x64_sys_epoll_pwait+0x17d/0x1b0 [ 123.460092][T11258] x64_sys_call+0x153d/0x3000 [ 123.460117][T11258] do_syscall_64+0xca/0x2b0 [ 123.460148][T11258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.460169][T11258] [ 123.460174][T11258] read to 0xffff88811c1eb6e8 of 4 bytes by task 11258 on cpu 1: [ 123.460188][T11258] ep_poll_callback+0x4a7/0x580 [ 123.460216][T11258] __wake_up+0x66/0xb0 [ 123.460240][T11258] do_notify_parent+0x18c/0x560 [ 123.460266][T11258] do_exit+0xbbc/0x1590 [ 123.460287][T11258] __x64_sys_exit+0x1f/0x20 [ 123.460309][T11258] x64_sys_call+0x2fe7/0x3000 [ 123.460332][T11258] do_syscall_64+0xca/0x2b0 [ 123.460363][T11258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.460382][T11258] [ 123.460386][T11258] value changed: 0xe000203b -> 0xe0000000 [ 123.460396][T11258] [ 123.460400][T11258] Reported by Kernel Concurrency Sanitizer on: [ 123.460424][T11258] CPU: 1 UID: 0 PID: 11258 Comm: syz.1.3379 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 123.460453][T11258] Tainted: [W]=WARN [ 123.460460][T11258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 123.460476][T11258] ================================================================== [ 123.536379][T11295] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3392'. [ 124.045715][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.605898][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.085587][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.125701][T10596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.165950][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.645584][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.205609][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.245714][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.285597][T10596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.688366][ T3391] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.325591][T10596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.365724][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.405591][T10596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog