last executing test programs: 34.973876865s ago: executing program 4 (id=870): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000a00)={0x14, r1, 0x13, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x48404) 34.937863058s ago: executing program 4 (id=875): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001200000008000800000001000800090000000000180001801400020076657468305f746f5f626f6e640000000800070000000000080006"], 0x4c}}, 0x0) 34.873585805s ago: executing program 4 (id=878): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@getlink={0x3c, 0x12, 0x1, 0x70bd25, 0x0, {0x7}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_virt_wifi\x00'}, @IFLA_MTU={0x8, 0x4, 0xfffffffc}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 34.801547982s ago: executing program 4 (id=883): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x7}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = inotify_init1(0x800) fcntl$setown(r0, 0x8, 0xffffffffffffffff) 34.613427161s ago: executing program 4 (id=892): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) 34.567617266s ago: executing program 4 (id=898): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x318}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 19.497896577s ago: executing program 32 (id=898): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x318}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 7.662483056s ago: executing program 1 (id=2136): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000380)=0x2) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x20, 0x0}) 7.531914889s ago: executing program 1 (id=2142): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$TCSBRK(r0, 0x5409, 0x1) 7.473792545s ago: executing program 1 (id=2143): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, &(0x7f0000002b80), 0x41000004, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000) 7.059043796s ago: executing program 1 (id=2170): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x67, 0x52e, &(0x7f0000000480)="$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") r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000440)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x32) 6.898360422s ago: executing program 1 (id=2175): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r1, @ANYBLOB="01000000000000000000170000000c00060001000000010000"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) 3.461951855s ago: executing program 1 (id=2302): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001480)={0x8, {"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", 0x1000}}, 0x1006) 3.461864285s ago: executing program 33 (id=2302): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001480)={0x8, {"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", 0x1000}}, 0x1006) 671.147023ms ago: executing program 0 (id=2414): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a85}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) chroot(&(0x7f0000000000)='./file0/../file0\x00') 602.27145ms ago: executing program 0 (id=2418): unshare(0x22020600) r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000000)='./mnt\x00', 0x2000000, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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") ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40e8662e, &(0x7f0000000040)={0x15fff, 0x100000000, 0x7fffffffffefffff, 0x3, 0xffffffff}) 425.540467ms ago: executing program 0 (id=2423): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0xffff0000, 0xf0, 0x0, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 369.049713ms ago: executing program 5 (id=2426): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) msync(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4) 332.572177ms ago: executing program 6 (id=2427): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') getdents64(r0, &(0x7f0000000100)=""/64, 0x27) getdents(r0, 0x0, 0x3b) 291.561771ms ago: executing program 5 (id=2429): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000dc0)={&(0x7f0000000c80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const]}}, 0x0, 0x26}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1400000004000000040000000400000004000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00u'], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) 281.067572ms ago: executing program 2 (id=2430): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002880)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x80000000, 0x25dfdbff, {0xa, 0x80}, [@RTA_DPORT={0x6, 0x1d, 0x4e24}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000004}, 0x20000050) 270.268403ms ago: executing program 3 (id=2431): perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0xd3, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000640)='cpu&08\n&\f0\xed') 261.872973ms ago: executing program 6 (id=2432): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x1, 0x4, 0x0, 0xe7}}) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, 0x0) 245.053045ms ago: executing program 5 (id=2433): socket$nl_route(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="183f0000000000000000000003000000950000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) 239.371926ms ago: executing program 2 (id=2434): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xb, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000061188b000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a}, 0x94) 219.619448ms ago: executing program 2 (id=2435): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0x77bc, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r0, 0x5, &(0x7f0000000180)={0x0, 0x1, 0x86, 0x80000000}) 205.786639ms ago: executing program 6 (id=2436): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000aa4000000060a0b0400000000000000000200000078000480740001800a0001006d617463680000006400028008000240000000000c00010072617465657374004c0003007e6b92c43235dc7e977221f83c3f179e65022fc067b787cd67b6d9983b1bddaf0200000000000000d2ee94b31d2ec330ce34cc676c0783a4bcc1e966554b0470582e870b81e92a630900010073797a30000000000900020073797a32"], 0xcc}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800) 192.056331ms ago: executing program 5 (id=2437): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x0, 0x0) 187.281711ms ago: executing program 6 (id=2438): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x401}, 0x11) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="0900000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 165.530284ms ago: executing program 3 (id=2439): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/key-users\x00', 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) sendfile(r1, r0, 0x0, 0x1) 135.289836ms ago: executing program 3 (id=2440): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000002c0000001d0a010300000000000000000a0000000900010073797a31000000000c0010"], 0x90}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 127.574637ms ago: executing program 0 (id=2441): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xfffe}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x9020cc2dd4ff75a0}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x14, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x850}, 0xc3c) 126.453057ms ago: executing program 2 (id=2442): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) process_madvise(r1, &(0x7f0000000340)=[{&(0x7f0000000080)='S', 0x1}], 0x1, 0xe, 0x0) 116.521778ms ago: executing program 5 (id=2443): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="0248060002200000140012800900010076657468000e00000000028008001300", @ANYRES32=r1], 0x3c}}, 0x0) 96.22341ms ago: executing program 3 (id=2444): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) lchown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 90.929281ms ago: executing program 6 (id=2445): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x4, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/148, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x8b63bfea1a14a3c7}, 0x16) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001280)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x368, 0x8, 0x7f02ae, 0x368, 0x200, 0x460, 0x2e8, 0x2e8, 0x460, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x340, 0x368, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @fd={0x2, 0x0, r1}}, @common=@inet=@iprange={{0x68}, {@ipv4=@empty, @ipv4=@remote, @ipv6=@mcast2, @ipv4=@remote}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x6}}}, {{@ipv6={@private2, @loopback, [], [], 'veth0_to_team\x00', 'netdevsim0\x00', {}, {0xff}, 0x0, 0x0, 0x3}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"84c9"}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x2, 0x1}, {0x2, 0x1, 0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) 90.160441ms ago: executing program 2 (id=2446): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000380)='.\x00', &(0x7f0000000040), 0x800048, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 64.775233ms ago: executing program 0 (id=2447): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x8132, 0x800005, 0xfffffffe, 0x2e69a, 0x7, "001221d608f5000004b5450080c90a808000"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000480)=0xa) 54.671645ms ago: executing program 3 (id=2448): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000040)="e1", 0x1) getsockopt$inet_opts(r0, 0x0, 0x9, 0xffffffffffffffff, &(0x7f0000000340)=0x10) 28.338507ms ago: executing program 0 (id=2449): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000010850000006d00000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r0}, 0x10) setitimer(0x2, 0x0, &(0x7f0000000d80)) 28.031907ms ago: executing program 2 (id=2450): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='.\x02\x00', 0x2000844, &(0x7f0000000100)={[{@dots}, {@fat=@errors_remount}, {}, {@nodots}, {@dots}, {@fat=@nocase}, {@fat=@sys_immutable}, {@dots}, {@fat=@quiet}, {@dots}, {@fat=@nfs_stale_rw}, {@fat=@tz_utc}, {@fat=@check_strict}, {@fat=@debug}, {@fat=@check_strict}, {@nodots}, {@dots}]}, 0x21, 0x263, &(0x7f0000000540)="$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") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000002d80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000080)=@file={0x1, '.\x02\x00'}, 0x6e, 0x0}}], 0x2, 0xc0c4) 22.784448ms ago: executing program 3 (id=2451): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r0) utimensat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x0, 0x0) 10.404009ms ago: executing program 6 (id=2452): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000140)=0x2, 0x2) 0s ago: executing program 5 (id=2453): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x80, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) kernel console output (not intermixed with test programs): 58][ T3715] loop0: detected capacity change from 0 to 128 [ 35.621726][ T3715] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 35.642079][ T3723] tipc: Started in network mode [ 35.646982][ T3723] tipc: Node identity , cluster identity 4711 [ 35.653090][ T3723] tipc: Failed to set node id, please configure manually [ 35.660157][ T3723] tipc: Enabling of bearer rejected, failed to enable media [ 35.669075][ T3715] ext4 filesystem being mounted at /21/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 35.750014][ T3312] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 35.784353][ T3738] netlink: 'syz.3.117': attribute type 10 has an invalid length. [ 35.798205][ T3738] team0: Port device dummy0 added [ 35.811524][ T3738] netlink: 'syz.3.117': attribute type 10 has an invalid length. [ 35.843587][ T3738] team0: Port device dummy0 removed [ 35.859689][ T3738] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 35.894393][ T3738] syz.3.117 (3738) used greatest stack depth: 10672 bytes left [ 35.903376][ T3750] loop2: detected capacity change from 0 to 164 [ 35.915514][ T3750] Unable to read rock-ridge attributes [ 35.943179][ T3750] Unable to read rock-ridge attributes [ 36.016252][ T3764] loop0: detected capacity change from 0 to 1764 [ 36.064940][ T3771] netlink: 8 bytes leftover after parsing attributes in process `syz.3.133'. [ 36.136453][ T3784] loop3: detected capacity change from 0 to 128 [ 36.285713][ T3805] netlink: 12 bytes leftover after parsing attributes in process `syz.1.150'. [ 36.347038][ T3815] netlink: 8 bytes leftover after parsing attributes in process `syz.2.155'. [ 36.359389][ T3815] Zero length message leads to an empty skb [ 36.400858][ T3822] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 36.458593][ T3831] loop2: detected capacity change from 0 to 512 [ 36.479727][ T3831] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 36.571509][ T3393] tipc: Node number set to 2886997162 [ 36.634150][ T3854] Illegal XDP return value 4294967274 on prog (id 23) dev N/A, expect packet loss! [ 36.644063][ T3856] loop0: detected capacity change from 0 to 2048 [ 36.650890][ T3856] EXT4-fs: Ignoring removed bh option [ 36.670583][ T3856] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.707804][ T3867] netlink: 56 bytes leftover after parsing attributes in process `syz.3.180'. [ 36.817005][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.849467][ T3883] loop2: detected capacity change from 0 to 2048 [ 36.904748][ T3883] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.982232][ T1719] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 37.004176][ T1719] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 37.016587][ T1719] EXT4-fs (loop2): This should not happen!! Data will be lost [ 37.016587][ T1719] [ 37.026263][ T1719] EXT4-fs (loop2): Total free blocks count 0 [ 37.032272][ T1719] EXT4-fs (loop2): Free/Dirty block details [ 37.038261][ T1719] EXT4-fs (loop2): free_blocks=4096 [ 37.043557][ T1719] EXT4-fs (loop2): dirty_blocks=512 [ 37.048753][ T1719] EXT4-fs (loop2): Block reservation details [ 37.054800][ T1719] EXT4-fs (loop2): i_reserved_data_blocks=32 [ 37.055818][ T3917] netlink: 'syz.4.204': attribute type 12 has an invalid length. [ 37.062107][ T1719] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 480 with error 28 [ 37.068557][ T3917] netlink: 'syz.4.204': attribute type 11 has an invalid length. [ 37.230413][ T3924] loop2: detected capacity change from 0 to 8192 [ 37.272743][ T3942] vhci_hcd: invalid port number 65 [ 37.277977][ T3942] vhci_hcd: invalid port number 65 [ 37.457821][ T3969] loop3: detected capacity change from 0 to 512 [ 37.511477][ T3969] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 37.523112][ T3969] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 37.533304][ T3969] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.227: Corrupt directory, running e2fsck is recommended [ 37.602663][ T3969] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 37.610903][ T3969] EXT4-fs error (device loop3): ext4_iget_extra_inode:5075: inode #15: comm syz.3.227: corrupted in-inode xattr: invalid ea_ino [ 37.631421][ T3969] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.227: couldn't read orphan inode 15 (err -117) [ 37.653223][ T3969] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.714681][ T3969] EXT4-fs error (device loop3): ext4_xattr_set_entry:1665: inode #2: comm syz.3.227: corrupted xattr entries [ 37.766704][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.866651][ T4004] loop1: detected capacity change from 0 to 1024 [ 37.903252][ T4004] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.933224][ T4004] EXT4-fs (loop1): Online resizing not supported with bigalloc [ 37.981104][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.093857][ T4019] loop1: detected capacity change from 0 to 1024 [ 38.106587][ T4019] EXT4-fs: Ignoring removed i_version option [ 38.112688][ T4019] EXT4-fs: Ignoring removed nomblk_io_submit option [ 38.152752][ T4019] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.167117][ T4029] loop4: detected capacity change from 0 to 512 [ 38.218140][ T4029] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.271368][ T4029] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 38.304642][ T4040] loop0: detected capacity change from 0 to 512 [ 38.333770][ T4040] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 38.344640][ T4029] EXT4-fs (loop4): Remounting filesystem read-only [ 38.360196][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.391511][ T4040] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a057c11c, mo2=0002] [ 38.399449][ T4040] System zones: 1-12 [ 38.425190][ T4047] loop2: detected capacity change from 0 to 1024 [ 38.428463][ T4029] syz.4.254 (4029) used greatest stack depth: 9784 bytes left [ 38.449464][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.458755][ T4040] EXT4-fs error (device loop0): ext4_iget_extra_inode:5075: inode #15: comm syz.0.259: corrupted in-inode xattr: e_value size too large [ 38.474543][ T4047] EXT4-fs: Ignoring removed mblk_io_submit option [ 38.488241][ T4040] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.259: couldn't read orphan inode 15 (err -117) [ 38.545831][ T4047] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.582126][ T4040] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.602661][ T4047] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 38.640217][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.710835][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.909469][ T29] kauditd_printk_skb: 93 callbacks suppressed [ 38.909486][ T29] audit: type=1400 audit(38.875:211): avc: denied { map } for pid=4061 comm="syz.3.268" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 39.023723][ T29] audit: type=1326 audit(38.985:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4095 comm="syz.0.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa51c39f6c9 code=0x7ffc0000 [ 39.046406][ T29] audit: type=1326 audit(38.985:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4095 comm="syz.0.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa51c39f6c9 code=0x7ffc0000 [ 39.069079][ T29] audit: type=1326 audit(38.985:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4095 comm="syz.0.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa51c39f6c9 code=0x7ffc0000 [ 39.091670][ T29] audit: type=1400 audit(38.985:215): avc: denied { open } for pid=4097 comm="syz.2.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 39.110293][ T29] audit: type=1400 audit(38.985:216): avc: denied { read } for pid=4095 comm="syz.0.283" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 39.132496][ T29] audit: type=1400 audit(38.985:217): avc: denied { open } for pid=4095 comm="syz.0.283" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 39.155053][ T29] audit: type=1326 audit(38.985:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4095 comm="syz.0.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa51c39f6c9 code=0x7ffc0000 [ 39.177674][ T29] audit: type=1400 audit(38.985:219): avc: denied { perfmon } for pid=4097 comm="syz.2.284" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 39.197668][ T29] audit: type=1400 audit(38.985:220): avc: denied { kernel } for pid=4097 comm="syz.2.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 39.255431][ T4106] __nla_validate_parse: 4 callbacks suppressed [ 39.255443][ T4106] netlink: 20 bytes leftover after parsing attributes in process `syz.0.289'. [ 39.341591][ T4116] netlink: 24 bytes leftover after parsing attributes in process `syz.0.292'. [ 39.501498][ T4136] loop4: detected capacity change from 0 to 1024 [ 39.520766][ T4136] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 39.550057][ T4136] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 39.560658][ T4136] EXT4-fs (loop4): invalid journal inode [ 39.567763][ T4136] EXT4-fs (loop4): can't get journal size [ 39.575793][ T4136] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 39.666229][ T4136] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 64: comm syz.4.304: path (unknown): bad entry in directory: rec_len is too small for name_len - offset=0, inode=11, rec_len=12, size=1024 fake=0 [ 39.707264][ T4136] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 73: comm syz.4.304: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=83886080, rec_len=0, size=1024 fake=0 [ 39.712275][ T4157] random: crng reseeded on system resumption [ 39.755651][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.778427][ T4163] loop0: detected capacity change from 0 to 512 [ 39.786097][ T4165] syz.3.318 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 39.813392][ T4163] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.316: inode has both inline data and extents flags [ 39.834766][ T4167] netlink: 64 bytes leftover after parsing attributes in process `syz.1.319'. [ 39.858449][ T4163] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.316: couldn't read orphan inode 15 (err -117) [ 39.879110][ T4163] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.962274][ T4185] loop3: detected capacity change from 0 to 128 [ 39.971000][ T4188] loop1: detected capacity change from 0 to 512 [ 39.972027][ T4186] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 40.007437][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.019192][ T4185] FAT-fs (loop3): bogus sectors per cluster 0 [ 40.025314][ T4185] FAT-fs (loop3): Can't find a valid FAT filesystem [ 40.050758][ T4188] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.086883][ T4188] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #4: comm syz.1.328: corrupted inode contents [ 40.131672][ T4188] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #4: comm syz.1.328: mark_inode_dirty error [ 40.163421][ T4188] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #4: comm syz.1.328: corrupted inode contents [ 40.202177][ T4188] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #4: comm syz.1.328: mark_inode_dirty error [ 40.247434][ T4188] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.328: Failed to acquire dquot type 1 [ 40.247563][ T4199] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #4: comm syz.1.328: corrupted inode contents [ 40.247649][ T4199] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #4: comm syz.1.328: mark_inode_dirty error [ 40.247778][ T4199] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #4: comm syz.1.328: corrupted inode contents [ 40.247850][ T4199] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #4: comm syz.1.328: mark_inode_dirty error [ 40.248000][ T4199] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.328: Failed to acquire dquot type 1 [ 40.250543][ T4199] syz.1.328 (4199) used greatest stack depth: 9552 bytes left [ 40.351786][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.486123][ T4228] netlink: 'syz.3.345': attribute type 1 has an invalid length. [ 40.520756][ T4233] loop4: detected capacity change from 0 to 1024 [ 40.552955][ T4236] SELinux: Context system_u:object_r:auditd_etc_t:s0 is not valid (left unmapped). [ 40.579148][ T4233] EXT4-fs: Ignoring removed mblk_io_submit option [ 40.587149][ T4233] EXT4-fs: Ignoring removed oldalloc option [ 40.616650][ T4243] $Hÿ: renamed from bond0 (while UP) [ 40.629465][ T4233] EXT4-fs: Ignoring removed bh option [ 40.631036][ T4243] $Hÿ: entered promiscuous mode [ 40.637310][ T4247] netlink: 'syz.1.354': attribute type 3 has an invalid length. [ 40.640026][ T4243] bond_slave_0: entered promiscuous mode [ 40.653478][ T4243] bond_slave_1: entered promiscuous mode [ 40.662278][ T4233] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.727446][ T4255] netlink: 'syz.1.357': attribute type 1 has an invalid length. [ 40.732765][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.735254][ T4255] netlink: 204 bytes leftover after parsing attributes in process `syz.1.357'. [ 40.753055][ T4255] netlink: 'syz.1.357': attribute type 1 has an invalid length. [ 40.879865][ T4276] loop1: detected capacity change from 0 to 1024 [ 40.897920][ T4276] EXT4-fs: inline encryption not supported [ 40.903810][ T4276] EXT4-fs: Ignoring removed i_version option [ 40.953121][ T4276] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 40.993754][ T4276] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 2: comm syz.1.366: lblock 2 mapped to illegal pblock 2 (length 1) [ 41.021565][ T4276] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.366: lblock 0 mapped to illegal pblock 48 (length 1) [ 41.041882][ T4276] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.366: Failed to acquire dquot type 0 [ 41.079669][ T4276] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 41.099143][ T4276] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.366: mark_inode_dirty error [ 41.120596][ T4276] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 41.139244][ T4303] loop4: detected capacity change from 0 to 512 [ 41.143656][ T4276] EXT4-fs (loop1): 1 orphan inode deleted [ 41.161834][ T4276] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.165848][ T87] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 41.190639][ T4303] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 41.205322][ T4307] loop2: detected capacity change from 0 to 512 [ 41.221009][ T4309] loop0: detected capacity change from 0 to 1024 [ 41.237283][ T4303] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 41.252993][ T87] EXT4-fs error (device loop1): ext4_release_dquot:6981: comm kworker/u8:4: Failed to release dquot type 0 [ 41.253264][ T4309] EXT4-fs: Ignoring removed nomblk_io_submit option [ 41.275293][ T4307] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.288449][ T4309] EXT4-fs (loop0): stripe (32767) is not aligned with cluster size (16), stripe is disabled [ 41.291660][ T4313] loop3: detected capacity change from 0 to 1024 [ 41.312200][ T4307] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 41.314759][ T4313] EXT4-fs: Ignoring removed nomblk_io_submit option [ 41.331317][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.340271][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 41.349332][ T3314] EXT4-fs error (device loop1): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 41.358118][ T4309] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.371220][ T3314] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 41.386469][ T4313] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 41.390283][ T4309] EXT4-fs (loop0): resizing filesystem from 512 to 0 blocks [ 41.394667][ T4307] EXT4-fs (loop2): Remounting filesystem read-only [ 41.395039][ T4313] System zones: [ 41.402013][ T4309] EXT4-fs warning (device loop0): ext4_resize_fs:2042: can't shrink FS - resize aborted [ 41.408473][ T4313] 0-1 [ 41.412630][ T3314] EXT4-fs error (device loop1): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 41.421788][ T4313] , 3-36 [ 41.451285][ T4313] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.470562][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.519711][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.525342][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.614054][ T4336] loop2: detected capacity change from 0 to 1024 [ 41.629682][ T4340] $Hÿ: renamed from bond0 (while UP) [ 41.636138][ T4336] EXT4-fs: Ignoring removed i_version option [ 41.642307][ T4336] EXT4-fs: Ignoring removed nomblk_io_submit option [ 41.652298][ T4340] $Hÿ: entered promiscuous mode [ 41.657358][ T4340] bond_slave_0: entered promiscuous mode [ 41.663464][ T4340] bond_slave_1: entered promiscuous mode [ 41.671148][ T4340] dummy0: entered promiscuous mode [ 41.731581][ T4351] loop4: detected capacity change from 0 to 128 [ 41.743756][ T4336] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.814414][ T4359] netlink: 24 bytes leftover after parsing attributes in process `syz.1.402'. [ 41.875570][ T23] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x4 [ 41.883280][ T23] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x2 [ 41.901593][ T23] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x3 [ 41.923564][ T23] hid-generic 0000:3000000:0000.0001: hidraw0: HID v0.00 Device [sy] on syz0 [ 41.976973][ T4367] fido_id[4367]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 42.102482][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.175726][ T4402] loop4: detected capacity change from 0 to 128 [ 42.199427][ T4402] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 42.217164][ T4405] loop2: detected capacity change from 0 to 512 [ 42.217881][ T4405] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 42.234984][ T3320] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 42.253557][ T4405] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 42.310924][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 42.411068][ T4429] netlink: 12 bytes leftover after parsing attributes in process `syz.4.431'. [ 42.435885][ T4424] loop0: detected capacity change from 0 to 1024 [ 42.436464][ T4424] EXT4-fs: Ignoring removed i_version option [ 42.448487][ T4424] EXT4-fs: Ignoring removed nomblk_io_submit option [ 42.509090][ T4437] loop3: detected capacity change from 0 to 128 [ 42.529236][ T4424] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.537189][ T4437] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 42.594565][ T3318] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 42.738943][ T4455] loop4: detected capacity change from 0 to 512 [ 42.779340][ T4455] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.893733][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.970729][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.074038][ T4486] loop4: detected capacity change from 0 to 1024 [ 43.087838][ T4486] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 43.112484][ T4486] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #3: block 1: comm syz.4.454: lblock 1 mapped to illegal pblock 1 (length 1) [ 43.145493][ T4497] loop0: detected capacity change from 0 to 128 [ 43.153495][ T4486] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.454: Failed to acquire dquot type 0 [ 43.169720][ T4486] EXT4-fs error (device loop4): ext4_free_blocks:6706: comm syz.4.454: Freeing blocks not in datazone - block = 0, count = 4096 [ 43.184416][ T4499] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 43.231108][ T4486] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.454: Invalid inode bitmap blk 0 in block_group 0 [ 43.251597][ T87] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 43.280286][ T87] EXT4-fs error (device loop4): ext4_release_dquot:6981: comm kworker/u8:4: Failed to release dquot type 0 [ 43.294056][ T4486] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 43.303780][ T4506] netlink: 4 bytes leftover after parsing attributes in process `syz.1.463'. [ 43.307974][ T4486] EXT4-fs (loop4): 1 orphan inode deleted [ 43.341499][ T4486] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.404929][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.472937][ T4528] loop1: detected capacity change from 0 to 2048 [ 43.501727][ T4528] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.548194][ T4528] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 43.599673][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.657702][ T4554] netlink: 12 bytes leftover after parsing attributes in process `syz.4.486'. [ 43.800474][ T4575] netlink: 24 bytes leftover after parsing attributes in process `syz.0.494'. [ 43.831296][ T4581] netlink: 320 bytes leftover after parsing attributes in process `syz.1.498'. [ 43.842419][ T4579] vhci_hcd: invalid port number 96 [ 43.847543][ T4579] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 43.998368][ T29] kauditd_printk_skb: 133 callbacks suppressed [ 43.998383][ T29] audit: type=1400 audit(43.965:343): avc: denied { create } for pid=4596 comm="syz.4.506" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=pppox_socket permissive=1 [ 44.047309][ T29] audit: type=1400 audit(44.015:344): avc: denied { read } for pid=4606 comm="syz.3.511" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 44.047430][ T29] audit: type=1400 audit(44.015:345): avc: denied { open } for pid=4606 comm="syz.3.511" path="/dev/input/event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 44.047778][ T29] audit: type=1400 audit(44.015:346): avc: denied { ioctl } for pid=4606 comm="syz.3.511" path="/dev/input/event2" dev="devtmpfs" ino=245 ioctlcmd=0x4504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 44.111564][ T29] audit: type=1400 audit(44.075:347): avc: denied { validate_trans } for pid=4610 comm="syz.4.514" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 44.135062][ T29] audit: type=1400 audit(44.095:348): avc: denied { create } for pid=4615 comm="syz.0.515" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=rawip_socket permissive=1 [ 44.299627][ T4635] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 44.397348][ T29] audit: type=1400 audit(44.365:349): avc: denied { setopt } for pid=4654 comm="syz.4.532" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 44.421920][ T4647] loop0: detected capacity change from 0 to 2048 [ 44.461894][ T3525] loop0: p1 < > p4 [ 44.466648][ T3525] loop0: p4 size 722688 extends beyond EOD, truncated [ 44.475889][ T4647] loop0: p1 < > p4 [ 44.480320][ T4647] loop0: p4 size 722688 extends beyond EOD, truncated [ 44.495397][ T29] audit: type=1400 audit(44.465:350): avc: denied { append } for pid=4646 comm="syz.0.528" name="loop0p4" dev="devtmpfs" ino=685 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 44.517424][ T29] audit: type=1400 audit(44.465:351): avc: denied { open } for pid=4646 comm="syz.0.528" path="/dev/loop0p4" dev="devtmpfs" ino=685 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 44.525141][ C0] operation not supported error, dev loop0, sector 32 op 0x9:(WRITE_ZEROES) flags 0x20000800 phys_seg 0 prio class 2 [ 44.540073][ T29] audit: type=1400 audit(44.485:352): avc: denied { create } for pid=4665 comm="syz.4.538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 44.607993][ T3525] udevd[3525]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 44.619738][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 44.666973][ T4676] loop4: detected capacity change from 0 to 512 [ 44.691300][ T4676] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #12: comm syz.4.543: missing EA_INODE flag [ 44.704928][ T4676] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.543: error while reading EA inode 12 err=-117 [ 44.717350][ T4676] EXT4-fs (loop4): 1 orphan inode deleted [ 44.723583][ T4676] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.745741][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.868749][ T4705] loop3: detected capacity change from 0 to 512 [ 44.885485][ T4705] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 44.885497][ T4705] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 44.899985][ T4705] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.556: inode has both inline data and extents flags [ 44.932339][ T4705] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.556: couldn't read orphan inode 15 (err -117) [ 44.946506][ T4710] netlink: 4 bytes leftover after parsing attributes in process `syz.4.558'. [ 44.971902][ T4705] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.978386][ T4713] loop4: detected capacity change from 0 to 512 [ 45.005852][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.028440][ T4713] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.054104][ T4713] EXT4-fs error (device loop4): ext4_add_entry:2417: inode #12: comm syz.4.560: Directory hole found for htree leaf block 0 [ 45.096979][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.148281][ T4731] netlink: 196 bytes leftover after parsing attributes in process `syz.0.567'. [ 45.177052][ T4733] usb usb1: check_ctrlrecip: process 4733 (syz.4.569) requesting ep 01 but needs 81 [ 45.186585][ T4733] usb usb1: usbfs: process 4733 (syz.4.569) did not claim interface 0 before use [ 45.302047][ T4747] netlink: 64 bytes leftover after parsing attributes in process `syz.2.575'. [ 45.342886][ T4753] loop2: detected capacity change from 0 to 512 [ 45.359022][ T4753] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 45.368107][ T4753] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 45.384897][ T4753] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 45.397898][ T4753] System zones: 0-2, 18-18, 34-34 [ 45.403388][ T4753] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.577: iget: bad i_size value: 360287970189639680 [ 45.416583][ T4753] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.577: couldn't read orphan inode 15 (err -117) [ 45.429298][ T4753] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.460330][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.516526][ T4771] netlink: 16 bytes leftover after parsing attributes in process `syz.3.585'. [ 45.605487][ T4784] loop2: detected capacity change from 0 to 2048 [ 45.625669][ T4784] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.658104][ T4794] 9pnet_fd: Insufficient options for proto=fd [ 45.686344][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.698490][ T4798] netlink: 8 bytes leftover after parsing attributes in process `syz.0.598'. [ 45.725329][ T4800] loop2: detected capacity change from 0 to 2048 [ 45.743404][ T4800] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.760480][ T4800] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 45.769354][ T4807] loop0: detected capacity change from 0 to 512 [ 45.786479][ T4807] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.799531][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.819072][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.012360][ T4837] loop0: detected capacity change from 0 to 2048 [ 46.042597][ T4837] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.065819][ T4837] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 46.107753][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.214752][ T4858] loop4: detected capacity change from 0 to 1024 [ 46.232240][ T4858] EXT4-fs: Ignoring removed orlov option [ 46.246203][ T4858] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.262568][ T4862] loop0: detected capacity change from 0 to 512 [ 46.264077][ T4858] SELinux: Context @ is not valid (left unmapped). [ 46.286821][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.308200][ T4862] EXT4-fs (loop0): 1 orphan inode deleted [ 46.318391][ T4866] netlink: 19 bytes leftover after parsing attributes in process `syz.4.625'. [ 46.330891][ T3449] EXT4-fs error (device loop0): ext4_release_dquot:6981: comm kworker/u8:8: Failed to release dquot type 1 [ 46.343368][ T4862] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.387590][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.401646][ T4649] Bluetooth: hci0: command 0x1003 tx timeout [ 46.407793][ T4050] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 46.588629][ T4877] loop3: detected capacity change from 0 to 2048 [ 46.622744][ T4877] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.651057][ T4877] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 46.689754][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.705287][ T4885] random: crng reseeded on system resumption [ 46.758514][ T4890] loop0: detected capacity change from 0 to 512 [ 46.783339][ T4890] ------------[ cut here ]------------ [ 46.788849][ T4890] EA inode 11 i_nlink=2 [ 46.789131][ T4890] WARNING: CPU: 1 PID: 4890 at fs/ext4/xattr.c:1058 ext4_xattr_inode_update_ref+0x36a/0x380 [ 46.803549][ T4890] Modules linked in: [ 46.807530][ T4890] CPU: 1 UID: 0 PID: 4890 Comm: syz.0.633 Not tainted syzkaller #0 PREEMPT(voluntary) [ 46.817200][ T4890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 46.827393][ T4890] RIP: 0010:ext4_xattr_inode_update_ref+0x36a/0x380 [ 46.834017][ T4890] Code: 90 49 8d 7e 40 e8 e6 f9 b8 ff 4d 8b 6e 40 4c 89 e7 e8 fa f4 b8 ff 41 8b 56 48 48 c7 c7 66 d4 55 86 4c 89 ee e8 a7 f5 67 ff 90 <0f> 0b 90 90 e9 ff fe ff ff e8 28 f4 b5 03 0f 1f 84 00 00 00 00 00 [ 46.853652][ T4890] RSP: 0018:ffffc9001097b5a0 EFLAGS: 00010246 [ 46.859731][ T4890] RAX: 697bb18ce5958300 RBX: ffff888119c868c0 RCX: 0000000000080000 [ 46.867803][ T4890] RDX: ffffc90002212000 RSI: 0000000000004173 RDI: 0000000000004174 [ 46.875796][ T4890] RBP: 0000000000000002 R08: 0001c9001097b427 R09: 0000000000000000 [ 46.883805][ T4890] R10: 00000000ffffffff R11: 0000000000000002 R12: ffff888119c86870 [ 46.891877][ T4890] R13: 000000000000000b R14: ffff888119c86828 R15: 0000000000000001 [ 46.899848][ T4890] FS: 00007fa51adff6c0(0000) GS:ffff8882aef11000(0000) knlGS:0000000000000000 [ 46.908802][ T4890] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 46.915502][ T4890] CR2: 00007f81506d12f8 CR3: 000000011a62e000 CR4: 00000000003506f0 [ 46.923543][ T4890] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 46.931594][ T4890] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 46.939608][ T4890] Call Trace: [ 46.942986][ T4890] [ 46.945951][ T4890] ext4_xattr_set_entry+0x77f/0x1020 [ 46.951294][ T4890] ext4_xattr_ibody_set+0x184/0x3c0 [ 46.956701][ T4890] ext4_expand_extra_isize_ea+0xcbb/0x11f0 [ 46.962592][ T4890] __ext4_expand_extra_isize+0x246/0x280 [ 46.968311][ T4890] __ext4_mark_inode_dirty+0x29d/0x3f0 [ 46.973948][ T4890] ext4_evict_inode+0x80e/0xd90 [ 46.978830][ T4890] ? __pfx_ext4_evict_inode+0x10/0x10 [ 46.984255][ T4890] evict+0x2e3/0x550 [ 46.988179][ T4890] ? __dquot_initialize+0x146/0x7c0 [ 46.993429][ T4890] iput+0x4ed/0x650 [ 46.995408][ T4901] loop2: detected capacity change from 0 to 2048 [ 46.997334][ T4890] ext4_process_orphan+0x1a9/0x1c0 [ 47.008786][ T4890] ext4_orphan_cleanup+0x6a8/0xa00 [ 47.013934][ T4890] ext4_fill_super+0x3483/0x3810 [ 47.018871][ T4890] ? snprintf+0x86/0xb0 [ 47.023101][ T4890] ? set_blocksize+0x1a8/0x310 [ 47.027960][ T4890] ? sb_set_blocksize+0xe3/0x100 [ 47.032917][ T4890] ? setup_bdev_super+0x30e/0x370 [ 47.038015][ T4890] ? __pfx_ext4_fill_super+0x10/0x10 [ 47.043364][ T4890] get_tree_bdev_flags+0x291/0x300 [ 47.048489][ T4890] ? __pfx_ext4_fill_super+0x10/0x10 [ 47.053797][ T4890] get_tree_bdev+0x1f/0x30 [ 47.058231][ T4890] ext4_get_tree+0x1c/0x30 [ 47.062707][ T4890] vfs_get_tree+0x57/0x1d0 [ 47.067170][ T4890] do_new_mount+0x24d/0x660 [ 47.071732][ T4890] path_mount+0x4a5/0xb70 [ 47.076070][ T4890] ? user_path_at+0x109/0x130 [ 47.080798][ T4890] __se_sys_mount+0x28c/0x2e0 [ 47.085500][ T4890] __x64_sys_mount+0x67/0x80 [ 47.090167][ T4890] x64_sys_call+0x2b51/0x3000 [ 47.094863][ T4890] do_syscall_64+0xd2/0x200 [ 47.099376][ T4890] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 47.105556][ T4890] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 47.111318][ T4890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.117251][ T4890] RIP: 0033:0x7fa51c3a0e6a [ 47.122478][ T4890] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 47.142691][ T4890] RSP: 002b:00007fa51adfee68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 47.151142][ T4890] RAX: ffffffffffffffda RBX: 00007fa51adfeef0 RCX: 00007fa51c3a0e6a [ 47.159167][ T4890] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007fa51adfeeb0 [ 47.167183][ T4890] RBP: 0000200000000180 R08: 00007fa51adfeef0 R09: 0000000000800700 [ 47.175167][ T4890] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 47.183218][ T4890] R13: 00007fa51adfeeb0 R14: 000000000000046f R15: 000000000000002c [ 47.191196][ T4890] [ 47.194233][ T4890] ---[ end trace 0000000000000000 ]--- [ 47.202754][ T4890] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #18: comm syz.0.633: iget: bad extra_isize 90 (inode size 256) [ 47.218976][ T4890] EXT4-fs (loop0): Remounting filesystem read-only [ 47.225911][ T4890] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -30) [ 47.231189][ T4901] loop2: p1 < > p4 [ 47.239097][ T4903] loop3: detected capacity change from 0 to 136 [ 47.245869][ T4890] EXT4-fs (loop0): 1 orphan inode deleted [ 47.251706][ T4901] loop2: p4 size 722688 extends beyond EOD, truncated [ 47.261374][ T3004] loop2: p1 < > p4 [ 47.271445][ T4903] Attempt to read inode for relocated directory [ 47.271977][ T3004] loop2: p4 size 722688 extends beyond EOD, truncated [ 47.352308][ T23] kernel write not supported for file /snd/seq (pid: 23 comm: kworker/1:0) [ 47.368387][ T3525] udevd[3525]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 47.380395][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 47.411146][ T4917] loop1: detected capacity change from 0 to 512 [ 47.440170][ T4923] loop0: detected capacity change from 0 to 512 [ 47.443297][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 47.474503][ T4923] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 47.522481][ T4923] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.649: inode has both inline data and extents flags [ 47.522634][ T4923] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.649: couldn't read orphan inode 15 (err -117) [ 47.590289][ T4941] process 'syz.2.659' launched '/dev/fd/3' with NULL argv: empty string added [ 47.595669][ T4939] loop1: detected capacity change from 0 to 512 [ 47.612188][ T4939] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 47.621230][ T4939] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 47.652881][ T4939] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 47.660976][ T4939] System zones: 0-2, 18-18, 34-34 [ 47.678203][ T4939] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.656: iget: bad i_size value: 360287970189639680 [ 47.693363][ T4939] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.656: couldn't read orphan inode 15 (err -117) [ 47.702747][ T4951] netlink: 19 bytes leftover after parsing attributes in process `syz.4.663'. [ 47.781687][ T4960] netlink: 12 bytes leftover after parsing attributes in process `syz.1.665'. [ 47.926333][ T4984] netlink: 12 bytes leftover after parsing attributes in process `syz.4.679'. [ 47.982041][ T4989] usb usb8: usbfs: process 4989 (syz.0.681) did not claim interface 0 before use [ 48.003509][ T4998] netlink: 19 bytes leftover after parsing attributes in process `syz.2.684'. [ 48.003900][ T4997] loop1: detected capacity change from 0 to 1024 [ 48.004185][ T4997] EXT4-fs: Ignoring removed orlov option [ 48.261035][ T5024] loop2: detected capacity change from 0 to 512 [ 48.312088][ T5024] EXT4-fs (loop2): 1 orphan inode deleted [ 48.331638][ T291] EXT4-fs error (device loop2): ext4_release_dquot:6981: comm kworker/u8:5: Failed to release dquot type 1 [ 48.353861][ T5034] loop1: detected capacity change from 0 to 512 [ 48.368294][ T5034] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 48.400144][ T5034] EXT4-fs (loop1): 1 truncate cleaned up [ 49.092326][ T5107] loop0: detected capacity change from 0 to 1024 [ 49.102084][ T5107] EXT4-fs: inline encryption not supported [ 49.132033][ T5111] loop2: detected capacity change from 0 to 1024 [ 49.191061][ T29] kauditd_printk_skb: 64 callbacks suppressed [ 49.191075][ T29] audit: type=1400 audit(49.155:415): avc: denied { setopt } for pid=5120 comm="syz.3.741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 49.220740][ T5126] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5126 comm=syz.3.744 [ 49.233223][ T5126] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=5126 comm=syz.3.744 [ 49.246174][ T29] audit: type=1400 audit(49.155:416): avc: denied { read } for pid=5120 comm="syz.3.741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 49.265145][ T29] audit: type=1400 audit(49.165:417): avc: denied { mounton } for pid=5123 comm="syz.0.743" path="/syzcgroup/cpu/syz0/cgroup.procs" dev="cgroup" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 49.417536][ T29] audit: type=1400 audit(49.385:418): avc: denied { create } for pid=5150 comm="syz.3.756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 49.436301][ T29] audit: type=1400 audit(49.385:419): avc: denied { listen } for pid=5150 comm="syz.3.756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 49.454994][ T29] audit: type=1400 audit(49.385:420): avc: denied { ioctl } for pid=5150 comm="syz.3.756" path="socket:[9581]" dev="sockfs" ino=9581 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 49.483447][ T29] audit: type=1326 audit(49.455:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5153 comm="syz.3.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f108985f6c9 code=0x7ffc0000 [ 49.506124][ T29] audit: type=1326 audit(49.455:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5153 comm="syz.3.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f108985f6c9 code=0x7ffc0000 [ 49.529247][ T29] audit: type=1326 audit(49.455:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5153 comm="syz.3.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f108985f6c9 code=0x7ffc0000 [ 49.551814][ T29] audit: type=1326 audit(49.455:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5153 comm="syz.3.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f108985f6c9 code=0x7ffc0000 [ 50.127567][ T5246] loop4: detected capacity change from 0 to 1024 [ 50.157911][ T5250] program syz.1.804 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 50.188320][ T5253] netlink: 'syz.0.803': attribute type 10 has an invalid length. [ 50.206676][ T5257] __nla_validate_parse: 5 callbacks suppressed [ 50.206694][ T5257] netlink: 131668 bytes leftover after parsing attributes in process `syz.1.807'. [ 50.231480][ T5246] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 50.242418][ T5246] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 50.255426][ T5257] netlink: zone id is out of range [ 50.260549][ T5257] netlink: zone id is out of range [ 50.265769][ T5257] netlink: zone id is out of range [ 50.270882][ T5257] netlink: zone id is out of range [ 50.360391][ T5246] JBD2: no valid journal superblock found [ 50.366249][ T5246] EXT4-fs (loop4): Could not load journal inode [ 50.490217][ T5289] xt_l2tp: v2 tid > 0xffff: 37482740 [ 50.625440][ T5310] netlink: 'syz.4.830': attribute type 1 has an invalid length. [ 50.673943][ T5317] netlink: 32 bytes leftover after parsing attributes in process `syz.1.837'. [ 50.682967][ T5317] tipc: Invalid UDP bearer configuration [ 50.682976][ T5317] tipc: Enabling of bearer rejected, failed to enable media [ 51.236637][ T5390] loop2: detected capacity change from 0 to 256 [ 51.369655][ T5407] netlink: 4 bytes leftover after parsing attributes in process `syz.0.881'. [ 51.875292][ T5476] loop1: detected capacity change from 0 to 512 [ 51.883272][ T23] kernel read not supported for file /447/status (pid: 23 comm: kworker/1:0) [ 52.787297][ T5528] loop0: detected capacity change from 0 to 512 [ 52.874675][ T5528] EXT4-fs (loop0): external journal device major/minor numbers have changed [ 53.051415][ T5528] EXT4-fs (loop0): failed to open journal device unknown-block(8,3) -6 [ 53.350429][ T5560] netlink: 4 bytes leftover after parsing attributes in process `syz.3.953'. [ 53.408420][ T5568] loop0: detected capacity change from 0 to 512 [ 53.415298][ T5568] EXT4-fs: Ignoring removed nomblk_io_submit option [ 53.421938][ T5568] EXT4-fs: Ignoring removed bh option [ 53.428371][ T5568] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 53.453294][ T5568] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.957: bg 0: block 255: padding at end of block bitmap is not set [ 53.471462][ T5568] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 53.491026][ T5568] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.957: invalid indirect mapped block 1 (level 1) [ 53.538523][ T5568] EXT4-fs (loop0): 1 truncate cleaned up [ 53.766094][ T5605] tipc: Enabling of bearer rejected, failed to enable media [ 53.825926][ T5611] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 53.876913][ T5611] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 53.947583][ T5626] netlink: 816 bytes leftover after parsing attributes in process `syz.1.984'. [ 53.955586][ T5628] netlink: 8 bytes leftover after parsing attributes in process `syz.2.985'. [ 54.075148][ T5638] vhci_hcd: invalid port number 224 [ 54.122774][ T5649] netlink: 'syz.2.994': attribute type 8 has an invalid length. [ 54.263055][ T29] kauditd_printk_skb: 88 callbacks suppressed [ 54.263070][ T29] audit: type=1400 audit(54.235:513): avc: denied { connect } for pid=5664 comm="syz.3.1004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 54.324107][ T5672] ip6t_srh: unknown srh match flags 4000 [ 54.411315][ T5682] SELinux: Context system_u:object is not valid (left unmapped). [ 54.419859][ T29] audit: type=1400 audit(54.395:514): avc: denied { relabelto } for pid=5681 comm="syz.3.1013" name="cgroup.procs" dev="cgroup" ino=151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object" [ 54.445272][ T29] audit: type=1400 audit(54.395:515): avc: denied { associate } for pid=5681 comm="syz.3.1013" name="cgroup.procs" dev="cgroup" ino=151 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object" [ 54.521575][ T29] audit: type=1326 audit(54.485:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5691 comm="syz.1.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cef6af6c9 code=0x7ffc0000 [ 54.544957][ T29] audit: type=1326 audit(54.485:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5691 comm="syz.1.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cef6af6c9 code=0x7ffc0000 [ 54.580733][ T5697] loop3: detected capacity change from 0 to 512 [ 54.630808][ T29] audit: type=1326 audit(54.495:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5691 comm="syz.1.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f4cef6af6c9 code=0x7ffc0000 [ 54.654040][ T29] audit: type=1400 audit(54.515:519): avc: denied { setopt } for pid=5695 comm="syz.2.1019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 54.672740][ T29] audit: type=1400 audit(54.515:520): avc: denied { connect } for pid=5695 comm="syz.2.1019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 54.692198][ T29] audit: type=1326 audit(54.545:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5691 comm="syz.1.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cef6af6c9 code=0x7ffc0000 [ 54.714817][ T29] audit: type=1326 audit(54.545:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5691 comm="syz.1.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cef6af6c9 code=0x7ffc0000 [ 54.742353][ T5697] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 54.768673][ T5697] EXT4-fs (loop3): orphan cleanup on readonly fs [ 54.791560][ T5697] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.1018: iget: bad i_size value: 360287970189639680 [ 54.837165][ T5697] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.1018: couldn't read orphan inode 15 (err -117) [ 55.320366][ T5769] loop3: detected capacity change from 0 to 512 [ 55.677404][ T5808] loop2: detected capacity change from 0 to 512 [ 55.714382][ T5808] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 55.724625][ T5808] EXT4-fs (loop2): failed to open journal device unknown-block(8,3) -6 [ 55.819354][ T5826] loop2: detected capacity change from 0 to 512 [ 55.848533][ T5826] EXT4-fs: Ignoring removed nomblk_io_submit option [ 55.868902][ T5831] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1082'. [ 55.872408][ T5826] EXT4-fs: Ignoring removed oldalloc option [ 55.908354][ T5826] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: comm syz.2.1078: Parent and EA inode have the same ino 15 [ 55.941978][ T5826] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: comm syz.2.1078: Parent and EA inode have the same ino 15 [ 55.976933][ T5826] EXT4-fs (loop2): 1 orphan inode deleted [ 56.033128][ T5842] loop0: detected capacity change from 0 to 512 [ 56.101571][ T5842] EXT4-fs error (device loop0): ext4_get_first_dir_block:3537: inode #12: block 32: comm syz.0.1087: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0 [ 56.131613][ T5842] EXT4-fs error (device loop0): ext4_get_first_dir_block:3540: inode #12: comm syz.0.1087: directory missing '.' [ 56.161442][ T5853] loop3: detected capacity change from 0 to 128 [ 56.176185][ T5853] EXT4-fs warning (device loop3): ext4_init_metadata_csum:4635: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 56.189644][ T5853] EXT4-fs (loop3): Couldn't mount because of unsupported optional features (fffc1829) [ 56.579763][ T5896] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1112'. [ 56.698735][ T5907] loop3: detected capacity change from 0 to 512 [ 56.791168][ T5918] netlink: 'syz.2.1122': attribute type 1 has an invalid length. [ 56.854168][ T5922] loop3: detected capacity change from 0 to 512 [ 56.871202][ T5922] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 57.001603][ T5933] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1129'. [ 57.081710][ T5937] random: crng reseeded on system resumption [ 57.182566][ T5951] loop2: detected capacity change from 0 to 128 [ 57.312450][ T5961] vhci_hcd: invalid port number 96 [ 57.317676][ T5961] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 57.353777][ T5971] loop2: detected capacity change from 0 to 256 [ 57.389772][ T5971] FAT-fs (loop2): Directory bread(block 64) failed [ 57.398946][ T5971] FAT-fs (loop2): Directory bread(block 65) failed [ 57.421431][ T5971] FAT-fs (loop2): Directory bread(block 66) failed [ 57.429815][ T5971] FAT-fs (loop2): Directory bread(block 67) failed [ 57.443894][ T5971] FAT-fs (loop2): Directory bread(block 68) failed [ 57.468614][ T5971] FAT-fs (loop2): Directory bread(block 69) failed [ 57.484574][ T5971] FAT-fs (loop2): Directory bread(block 70) failed [ 57.501704][ T5971] FAT-fs (loop2): Directory bread(block 71) failed [ 57.520446][ T5971] FAT-fs (loop2): Directory bread(block 72) failed [ 57.530379][ T5971] FAT-fs (loop2): Directory bread(block 73) failed [ 57.540999][ T5989] netlink: 47 bytes leftover after parsing attributes in process `syz.1.1157'. [ 57.615853][ T5995] netlink: 'syz.0.1159': attribute type 1 has an invalid length. [ 57.751578][ T6011] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1167'. [ 57.760565][ T6011] tipc: Invalid UDP bearer configuration [ 57.760575][ T6011] tipc: Enabling of bearer rejected, failed to enable media [ 57.789343][ T6016] netlink: 790 bytes leftover after parsing attributes in process `syz.2.1169'. [ 57.828424][ T6020] loop0: detected capacity change from 0 to 128 [ 57.894211][ T6029] loop3: detected capacity change from 0 to 512 [ 57.896508][ T6026] netlink: 268 bytes leftover after parsing attributes in process `syz.2.1173'. [ 57.933066][ T6029] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 57.982721][ T6029] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.1175: Failed to acquire dquot type 0 [ 58.533709][ T6124] vhci_hcd: invalid port number 96 [ 58.538871][ T6124] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 58.728914][ T6160] loop1: detected capacity change from 0 to 128 [ 58.861122][ T6182] loop3: detected capacity change from 0 to 512 [ 58.882715][ T6182] SELinux: security_context_str_to_sid (sta) failed with errno=-22 [ 58.922018][ T6175] loop2: detected capacity change from 0 to 8192 [ 58.957483][ T6175] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 2068) [ 58.966412][ T6175] FAT-fs (loop2): Filesystem has been set read-only [ 59.003072][ T6175] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 2068) [ 59.021771][ T6175] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 2068) [ 59.072733][ T6204] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1222'. [ 59.227853][ T6227] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1229'. [ 59.260444][ T6230] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1230'. [ 59.514382][ T29] kauditd_printk_skb: 42 callbacks suppressed [ 59.514398][ T29] audit: type=1400 audit(59.485:563): avc: denied { getopt } for pid=6264 comm="syz.2.1238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 59.592543][ T29] audit: type=1400 audit(59.565:564): avc: denied { create } for pid=6274 comm="syz.2.1241" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key_socket permissive=1 [ 59.693784][ T29] audit: type=1400 audit(59.665:565): avc: denied { create } for pid=6288 comm="syz.3.1244" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=rds_socket permissive=1 [ 59.914363][ T6316] loop3: detected capacity change from 0 to 128 [ 60.164203][ T6348] loop2: detected capacity change from 0 to 512 [ 60.188015][ T6348] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 60.336120][ T6367] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 60.389476][ T6372] loop1: detected capacity change from 0 to 1024 [ 60.557659][ T6385] loop1: detected capacity change from 0 to 512 [ 60.960937][ T6442] loop1: detected capacity change from 0 to 1024 [ 60.985430][ T6442] EXT4-fs: inline encryption not supported [ 61.052559][ T6452] loop2: detected capacity change from 0 to 128 [ 61.074533][ T6455] __nla_validate_parse: 1 callbacks suppressed [ 61.074547][ T6455] netlink: 816 bytes leftover after parsing attributes in process `syz.0.1307'. [ 61.106743][ T6452] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.1305: No space for directory leaf checksum. Please run e2fsck -D. [ 61.122672][ T6452] EXT4-fs error (device loop2): htree_dirblock_to_tree:1051: inode #2: comm syz.2.1305: Directory block failed checksum [ 61.171278][ T29] audit: type=1400 audit(61.135:566): avc: denied { write } for pid=6460 comm="syz.1.1310" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 61.315912][ T6472] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1314'. [ 61.385480][ T29] audit: type=1400 audit(61.355:567): avc: denied { mount } for pid=6480 comm="syz.0.1319" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 61.453157][ T6489] netlink: 'syz.3.1321': attribute type 1 has an invalid length. [ 61.453238][ T6489] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1321'. [ 61.464804][ T29] audit: type=1400 audit(61.395:568): avc: denied { unmount } for pid=3312 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 61.496122][ T29] audit: type=1400 audit(61.465:569): avc: denied { search } for pid=3043 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 61.496156][ T29] audit: type=1400 audit(61.465:570): avc: denied { search } for pid=3043 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 61.496274][ T29] audit: type=1400 audit(61.465:571): avc: denied { search } for pid=3043 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 61.496368][ T29] audit: type=1400 audit(61.465:572): avc: denied { read } for pid=3043 comm="dhcpcd" name="n29" dev="tmpfs" ino=6641 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 61.591749][ T6494] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 61.740270][ T6513] loop1: detected capacity change from 0 to 128 [ 61.776471][ T6519] veth1_macvtap: left promiscuous mode [ 61.776490][ T6519] macsec0: entered promiscuous mode [ 61.797759][ T6519] veth1_macvtap: entered promiscuous mode [ 61.797921][ T6519] macsec0: left promiscuous mode [ 61.975309][ T6537] loop3: detected capacity change from 0 to 512 [ 62.017829][ T6537] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.1344: inode has both inline data and extents flags [ 62.051502][ T6537] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.1344: couldn't read orphan inode 15 (err -117) [ 62.195597][ T6553] loop3: detected capacity change from 0 to 512 [ 62.216564][ T6553] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 62.216660][ T6553] EXT4-fs (loop3): orphan cleanup on readonly fs [ 62.216818][ T6553] EXT4-fs warning (device loop3): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 62.217066][ T6553] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 62.217141][ T6553] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #16: comm syz.3.1352: inode has both inline data and extents flags [ 62.217282][ T6553] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.1352: couldn't read orphan inode 16 (err -117) [ 62.220786][ T6556] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1353'. [ 62.408534][ T6568] loop1: detected capacity change from 0 to 512 [ 62.415264][ T6568] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.1358: error while reading EA inode 32 err=-116 [ 62.415384][ T6568] EXT4-fs (loop1): Remounting filesystem read-only [ 62.415397][ T6568] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 62.415457][ T6568] EXT4-fs (loop1): 1 orphan inode deleted [ 62.542651][ T6581] loop1: detected capacity change from 0 to 512 [ 62.581951][ T6581] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c01c, mo2=0002] [ 62.593765][ T6581] System zones: 1-3, 19-19, 35-38 [ 62.645473][ T6581] EXT4-fs warning (device loop1): ext4_group_extend:1886: will only finish group (8193 blocks, 7937 new) [ 62.660586][ T6581] EXT4-fs warning (device loop1): ext4_group_extend:1891: can't read last block, resize aborted [ 63.051530][ T6618] loop1: detected capacity change from 0 to 512 [ 63.074385][ T6618] EXT4-fs (loop1): 1 orphan inode deleted [ 63.092190][ T1719] EXT4-fs error (device loop1): ext4_release_dquot:6981: comm kworker/u8:6: Failed to release dquot type 1 [ 63.243724][ T6639] loop0: detected capacity change from 0 to 256 [ 63.397065][ T6656] loop0: detected capacity change from 0 to 512 [ 63.414448][ T6656] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.1398: invalid indirect mapped block 4294967295 (level 1) [ 63.436841][ T6656] EXT4-fs (loop0): Remounting filesystem read-only [ 63.458301][ T6656] EXT4-fs (loop0): 2 truncates cleaned up [ 63.475739][ T6664] loop1: detected capacity change from 0 to 512 [ 63.484175][ T6664] EXT4-fs: Ignoring removed nomblk_io_submit option [ 63.490938][ T6664] EXT4-fs: Ignoring removed oldalloc option [ 63.507203][ T6666] loop3: detected capacity change from 0 to 164 [ 63.514110][ T6666] rock: corrupted directory entry. extent=32, offset=0, size=65773 [ 63.546375][ T6664] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: comm syz.1.1401: Parent and EA inode have the same ino 15 [ 63.632204][ T6664] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: comm syz.1.1401: Parent and EA inode have the same ino 15 [ 63.668635][ T6679] loop2: detected capacity change from 0 to 164 [ 63.677766][ T6681] ALSA: seq fatal error: cannot create timer (-22) [ 63.716972][ T6664] EXT4-fs (loop1): 1 orphan inode deleted [ 63.848870][ T6699] IPv6: Can't replace route, no match found [ 63.875505][ T6701] loop1: detected capacity change from 0 to 1024 [ 63.890541][ T6701] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.1418: Failed to acquire dquot type 0 [ 63.910813][ T6701] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 63.928251][ T6705] loop2: detected capacity change from 0 to 128 [ 63.937807][ T6701] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #13: comm syz.1.1418: corrupted inode contents [ 63.957551][ T6708] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1421'. [ 64.013401][ T6701] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #13: comm syz.1.1418: mark_inode_dirty error [ 64.031858][ T6701] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #13: comm syz.1.1418: corrupted inode contents [ 64.045759][ T6701] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #13: comm syz.1.1418: mark_inode_dirty error [ 64.060725][ T6701] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #13: comm syz.1.1418: corrupted inode contents [ 64.106087][ T6701] EXT4-fs error (device loop1) in ext4_orphan_del:301: Corrupt filesystem [ 64.144746][ T6701] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #13: comm syz.1.1418: corrupted inode contents [ 64.181770][ T6701] EXT4-fs error (device loop1): ext4_truncate:4637: inode #13: comm syz.1.1418: mark_inode_dirty error [ 64.221525][ T6732] loop2: detected capacity change from 0 to 512 [ 64.229504][ T6734] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 64.244508][ T6701] EXT4-fs error (device loop1) in ext4_process_orphan:343: Corrupt filesystem [ 64.251637][ T6732] EXT4-fs: Ignoring removed bh option [ 64.304896][ T6737] loop0: detected capacity change from 0 to 512 [ 64.325080][ T6701] EXT4-fs (loop1): 1 truncate cleaned up [ 64.340734][ T6732] EXT4-fs error (device loop2): ext4_resize_begin:60: comm syz.2.1433: resize_inode disabled but reserved GDT blocks non-zero [ 64.510357][ T6753] loop2: detected capacity change from 0 to 512 [ 64.535158][ T6753] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.1441: error while reading EA inode 32 err=-116 [ 64.558603][ T6753] EXT4-fs (loop2): Remounting filesystem read-only [ 64.560501][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 64.560516][ T29] audit: type=1326 audit(64.525:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6759 comm="syz.0.1444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa51c39f6c9 code=0x7ffc0000 [ 64.566234][ T6753] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 64.604870][ T6753] EXT4-fs (loop2): 1 orphan inode deleted [ 64.614139][ T29] audit: type=1326 audit(64.575:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6759 comm="syz.0.1444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fa51c39f6c9 code=0x7ffc0000 [ 64.636846][ T29] audit: type=1326 audit(64.575:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6759 comm="syz.0.1444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa51c39f6c9 code=0x7ffc0000 [ 64.659552][ T29] audit: type=1326 audit(64.575:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6759 comm="syz.0.1444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa51c39f6c9 code=0x7ffc0000 [ 64.682245][ T29] audit: type=1326 audit(64.575:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6759 comm="syz.0.1444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7fa51c39f6c9 code=0x7ffc0000 [ 64.710871][ T29] audit: type=1326 audit(64.675:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6759 comm="syz.0.1444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa51c39f6c9 code=0x7ffc0000 [ 64.733550][ T29] audit: type=1326 audit(64.675:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6759 comm="syz.0.1444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa51c39f6c9 code=0x7ffc0000 [ 64.781092][ T6764] loop1: detected capacity change from 0 to 512 [ 64.866388][ T6764] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.1446: inode has both inline data and extents flags [ 64.910425][ T6782] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1452'. [ 64.922728][ T6764] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.1446: couldn't read orphan inode 15 (err -117) [ 65.017151][ T10] IPVS: starting estimator thread 0... [ 65.101965][ T29] audit: type=1400 audit(65.075:600): avc: denied { ioctl } for pid=6798 comm="syz.1.1462" path="socket:[14019]" dev="sockfs" ino=14019 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 65.128827][ T6803] tmpfs: Cannot enable swap on remount if it was disabled on first mount [ 65.135649][ T6789] IPVS: using max 2208 ests per chain, 110400 per kthread [ 65.183944][ T29] audit: type=1400 audit(65.105:601): avc: denied { create } for pid=6799 comm="syz.2.1463" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=ieee802154_socket permissive=1 [ 65.221689][ T6811] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 65.263997][ T6815] loop2: detected capacity change from 0 to 512 [ 65.301018][ T6815] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.1470: inode has both inline data and extents flags [ 65.377825][ T29] audit: type=1400 audit(65.335:602): avc: denied { mount } for pid=6822 comm="syz.1.1474" name="/" dev="hugetlbfs" ino=14073 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 65.400854][ T6823] hugetlbfs: Bad value 'Ì' for mount option 'size' [ 65.400854][ T6823] [ 65.410764][ T6825] netlink: 47 bytes leftover after parsing attributes in process `syz.0.1473'. [ 65.422372][ T6815] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.1470: couldn't read orphan inode 15 (err -117) [ 65.453130][ T6827] loop8: detected capacity change from 0 to 7 [ 65.459528][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 65.468695][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 65.476989][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 65.486148][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 65.493998][ T6827] loop8: unable to read partition table [ 65.510942][ T6827] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5) [ 65.512378][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 65.529311][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 65.565215][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 65.574415][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 65.591453][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 65.600601][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 65.611462][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 65.620602][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 65.630210][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 65.639355][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 65.870355][ T6866] loop3: detected capacity change from 0 to 512 [ 65.898470][ T6866] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 65.906656][ T6866] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 65.925719][ T6866] EXT4-fs (loop3): orphan cleanup on readonly fs [ 65.932135][ T6866] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #13: comm syz.3.1493: iget: bad i_size value: 12154761577498 [ 66.008875][ T6866] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.1493: couldn't read orphan inode 13 (err -117) [ 66.102459][ T6866] EXT4-fs warning (device loop3): dx_probe:861: inode #2: comm syz.3.1493: dx entry: limit 65535 != root limit 120 [ 66.115327][ T6866] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.1493: Corrupt directory, running e2fsck is recommended [ 66.154892][ T6866] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 3: comm syz.3.1493: path /362/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 66.340258][ T6910] vhci_hcd: invalid port number 9 [ 66.345352][ T6910] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 66.367291][ T6912] 9pnet_fd: Insufficient options for proto=fd [ 66.600001][ T6942] loop2: detected capacity change from 0 to 512 [ 66.824048][ T6978] qrtr: Invalid version 255 [ 66.842073][ T6983] loop0: detected capacity change from 0 to 128 [ 66.908006][ T291] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.957520][ T6997] loop0: detected capacity change from 0 to 512 [ 67.035907][ T291] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.084366][ T291] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.099940][ T7014] loop0: detected capacity change from 0 to 512 [ 67.119446][ T7014] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 67.146296][ T7014] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c119, mo2=0002] [ 67.182713][ T291] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.198652][ T7014] System zones: 1-12 [ 67.222578][ T7014] EXT4-fs error (device loop0): ext4_iget_extra_inode:5075: inode #15: comm syz.0.1560: corrupted in-inode xattr: e_value size too large [ 67.252124][ T7014] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.1560: couldn't read orphan inode 15 (err -117) [ 67.270749][ T6972] chnl_net:caif_netlink_parms(): no params data found [ 67.276569][ T7035] loop1: detected capacity change from 0 to 1024 [ 67.292207][ T7035] EXT4-fs: inline encryption not supported [ 67.360659][ T7044] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 67.405007][ T7052] mmap: syz.1.1572 (7052) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 67.463274][ T291] bridge_slave_1: left allmulticast mode [ 67.468944][ T291] bridge_slave_1: left promiscuous mode [ 67.474797][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.487316][ T291] bridge_slave_0: left allmulticast mode [ 67.493715][ T291] bridge_slave_0: left promiscuous mode [ 67.499446][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.624008][ T291] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 67.641675][ T291] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 67.655812][ T291] bond0 (unregistering): Released all slaves [ 67.693280][ T6972] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.700351][ T6972] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.711030][ T6972] bridge_slave_0: entered allmulticast mode [ 67.730245][ T6972] bridge_slave_0: entered promiscuous mode [ 67.737288][ T6972] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.737359][ T6972] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.737434][ T6972] bridge_slave_1: entered allmulticast mode [ 67.752966][ T6972] bridge_slave_1: entered promiscuous mode [ 67.754876][ T7091] loop3: detected capacity change from 0 to 1024 [ 67.778084][ T291] hsr_slave_0: left promiscuous mode [ 67.785132][ T291] hsr_slave_1: left promiscuous mode [ 67.791049][ T291] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.798579][ T291] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 67.809484][ T291] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.816911][ T291] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 67.834265][ T291] veth1_macvtap: left promiscuous mode [ 67.840287][ T291] veth0_macvtap: left promiscuous mode [ 67.848817][ T291] veth1_vlan: left promiscuous mode [ 67.858833][ T291] veth0_vlan: left promiscuous mode [ 67.886529][ T7101] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1589'. [ 67.962601][ T291] team0 (unregistering): Port device team_slave_1 removed [ 67.973673][ T291] team0 (unregistering): Port device team_slave_0 removed [ 68.033320][ T6972] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.079977][ T6972] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.192461][ T6972] team0: Port device team_slave_0 added [ 68.199195][ T6972] team0: Port device team_slave_1 added [ 68.266873][ T7138] loop0: detected capacity change from 0 to 1024 [ 68.278773][ T6972] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.285758][ T6972] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.312420][ T6972] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.323285][ T7138] EXT4-fs: Ignoring removed orlov option [ 68.328990][ T7138] EXT4-fs: Ignoring removed orlov option [ 68.354475][ T7146] loop1: detected capacity change from 0 to 1024 [ 68.374112][ T7146] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 68.396989][ T7138] EXT4-fs mount: 84 callbacks suppressed [ 68.397005][ T7138] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.420405][ T6972] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.427989][ T6972] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.454450][ T6972] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.480980][ T7146] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 68.503840][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.515027][ T7146] EXT4-fs (loop1): orphan cleanup on readonly fs [ 68.542540][ T7146] EXT4-fs warning (device loop1): ext4_enable_quotas:7180: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 68.557088][ T7146] EXT4-fs (loop1): Cannot turn on quotas: error -5 [ 68.579152][ T7159] loop3: detected capacity change from 0 to 2048 [ 68.585173][ T7146] EXT4-fs (loop1): 1 truncate cleaned up [ 68.592668][ T7146] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 68.617033][ T7159] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.618422][ T6972] hsr_slave_0: entered promiscuous mode [ 68.648481][ T6972] hsr_slave_1: entered promiscuous mode [ 68.654395][ T6972] debugfs: 'hsr0' already exists in 'hsr' [ 68.660141][ T6972] Cannot create hsr debugfs directory [ 68.677216][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.713629][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.733669][ T7173] vlan2: entered promiscuous mode [ 68.738722][ T7173] hsr0: entered promiscuous mode [ 68.744570][ T7173] vlan2: entered allmulticast mode [ 68.749710][ T7173] hsr0: entered allmulticast mode [ 68.754810][ T7173] hsr_slave_0: entered allmulticast mode [ 68.760472][ T7173] hsr_slave_1: entered allmulticast mode [ 68.807251][ T7184] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1618'. [ 68.816912][ T7184] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1618'. [ 68.868662][ T7196] hugetlbfs: Bad value 'g' for mount option 'nr_inodes' [ 68.868662][ T7196] [ 68.956549][ T6972] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 68.969205][ T6972] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 68.992978][ T6972] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 69.005855][ T6972] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 69.133542][ T6972] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.170050][ T6972] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.207263][ T1719] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.214416][ T1719] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.250161][ T7259] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.265437][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.272511][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.305046][ T7259] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.375253][ T7259] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.424627][ T7259] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.454033][ T6972] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.476673][ T3448] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.497511][ T3448] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.524575][ T3448] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.538994][ T3448] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.599552][ T7309] netlink: 131740 bytes leftover after parsing attributes in process `syz.0.1655'. [ 69.612268][ T7309] netlink: zone id is out of range [ 69.617400][ T7309] netlink: zone id is out of range [ 69.623709][ T7309] netlink: del zone limit has 8 unknown bytes [ 69.667605][ T6972] veth0_vlan: entered promiscuous mode [ 69.677571][ T6972] veth1_vlan: entered promiscuous mode [ 69.690708][ T7316] loop2: detected capacity change from 0 to 128 [ 69.695840][ T6972] veth0_macvtap: entered promiscuous mode [ 69.710050][ T6972] veth1_macvtap: entered promiscuous mode [ 69.743548][ T6972] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.755732][ T6972] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.774397][ T37] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.800348][ T37] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.813260][ T29] kauditd_printk_skb: 67 callbacks suppressed [ 69.813272][ T29] audit: type=1400 audit(69.785:669): avc: denied { mounton } for pid=6972 comm="syz-executor" path="/root/syzkaller.dSmTJs/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 69.819234][ T37] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.819600][ T29] audit: type=1400 audit(69.785:670): avc: denied { mount } for pid=6972 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 69.873058][ T29] audit: type=1400 audit(69.785:671): avc: denied { mounton } for pid=6972 comm="syz-executor" path="/root/syzkaller.dSmTJs/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 69.882171][ T87] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.899325][ T29] audit: type=1400 audit(69.785:672): avc: denied { mounton } for pid=6972 comm="syz-executor" path="/root/syzkaller.dSmTJs/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=17075 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 69.970616][ T29] audit: type=1400 audit(69.885:673): avc: denied { mounton } for pid=6972 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 69.993342][ T29] audit: type=1400 audit(69.885:674): avc: denied { mount } for pid=6972 comm="syz-executor" name="/" dev="gadgetfs" ino=3672 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 70.054682][ T7348] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1670'. [ 70.111247][ T7358] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1676'. [ 70.166941][ T29] audit: type=1400 audit(70.125:675): avc: denied { connect } for pid=7362 comm="syz.5.1680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 70.186576][ T29] audit: type=1400 audit(70.125:676): avc: denied { ioctl } for pid=7362 comm="syz.5.1680" path="socket:[16368]" dev="sockfs" ino=16368 ioctlcmd=0xb100 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 70.238816][ T29] audit: type=1326 audit(70.205:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7369 comm="syz.2.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76081bf6c9 code=0x7ffc0000 [ 70.261516][ T29] audit: type=1326 audit(70.205:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7369 comm="syz.2.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76081bf6c9 code=0x7ffc0000 [ 70.286759][ T7371] loop2: detected capacity change from 0 to 512 [ 70.330569][ T7371] EXT4-fs (loop2): orphan cleanup on readonly fs [ 70.351607][ T7371] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.1678: bad orphan inode 13 [ 70.362479][ T7371] ext4_test_bit(bit=12, block=18) = 1 [ 70.367868][ T7371] is_bad_inode(inode)=0 [ 70.372089][ T7371] NEXT_ORPHAN(inode)=2130706432 [ 70.376970][ T7371] max_ino=32 [ 70.380168][ T7371] i_nlink=1 [ 70.384818][ T7371] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 70.423518][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.477841][ T7399] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1694'. [ 70.663163][ T7428] tipc: Can't bind to reserved service type 2 [ 70.693182][ T7434] loop3: detected capacity change from 0 to 1024 [ 70.726147][ T7434] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.738798][ T7442] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 70.800915][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.086406][ T7506] loop2: detected capacity change from 0 to 1024 [ 71.097065][ T7506] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 71.124127][ T7506] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 71.125656][ T7508] loop0: detected capacity change from 0 to 128 [ 71.153022][ T7506] EXT4-fs (loop2): invalid journal inode [ 71.220530][ T7510] loop5: detected capacity change from 0 to 8192 [ 71.234998][ T7510] syz.5.1744: attempt to access beyond end of device [ 71.234998][ T7510] loop5: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 71.296815][ T7510] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000e1b1) [ 71.304730][ T7510] FAT-fs (loop5): Filesystem has been set read-only [ 71.318741][ T7510] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000e1b1) [ 71.341544][ T7510] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000e1b1) [ 71.422385][ T7539] loop0: detected capacity change from 0 to 512 [ 71.435631][ T7539] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 71.466076][ T7539] EXT4-fs (loop0): 1 truncate cleaned up [ 71.484122][ T7539] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.514325][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.673105][ T7584] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1778'. [ 71.742927][ T7593] SELinux: security_context_str_to_sid (u´‰^„që„ å½Mò#û ¹Ç9­dÏÏÒÔ˜°ñVöÄtË—|™¶¼‡2Šæ+|à6_'Ô´£ÔÇл'?@nÍK&É1QÃZ&™‘@-›ì±¹ºü²´~”) failed with errno=-22 [ 71.763967][ T7595] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1784'. [ 71.795670][ T7598] loop0: detected capacity change from 0 to 512 [ 71.855965][ T7609] netlink: 'syz.5.1788': attribute type 6 has an invalid length. [ 71.863755][ T7609] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.1788'. [ 71.888616][ T7612] loop0: detected capacity change from 0 to 256 [ 71.899540][ T7612] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 72.076618][ T7631] loop0: detected capacity change from 0 to 2048 [ 72.093308][ T7631] EXT4-fs (loop0): failed to initialize system zone (-117) [ 72.101003][ T7631] EXT4-fs (loop0): mount failed [ 72.192747][ T7645] loop0: detected capacity change from 0 to 2048 [ 72.200316][ T7647] loop5: detected capacity change from 0 to 512 [ 72.215891][ T7647] EXT4-fs error (device loop5): ext4_iget_extra_inode:5075: inode #15: comm syz.5.1805: corrupted in-inode xattr: invalid ea_ino [ 72.216253][ T7645] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.229592][ T7647] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.1805: couldn't read orphan inode 15 (err -117) [ 72.253725][ T7647] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.298301][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.298516][ T6972] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.486100][ T7679] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.602151][ T7691] netlink: 'syz.0.1824': attribute type 36 has an invalid length. [ 72.785940][ T7679] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.854525][ T7679] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.918705][ T7679] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.968965][ T291] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.981017][ T291] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.989315][ T291] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.989356][ T291] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.047413][ T7709] __nla_validate_parse: 2 callbacks suppressed [ 73.047591][ T7709] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1833'. [ 73.130318][ T7715] loop5: detected capacity change from 0 to 1024 [ 73.143438][ T7717] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1837'. [ 73.182221][ T7715] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.206797][ T6972] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.305682][ T7734] loop1: detected capacity change from 0 to 512 [ 73.568945][ T7766] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1859'. [ 73.589171][ T7766] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1859'. [ 73.600685][ T7770] openvswitch: netlink: Missing key (keys=40, expected=80) [ 73.691146][ T7779] macvlan2: entered promiscuous mode [ 73.696516][ T7779] macvlan2: entered allmulticast mode [ 73.701937][ T7779] gretap0: entered allmulticast mode [ 73.774304][ T7794] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1872'. [ 73.903830][ T7814] netlink: 144 bytes leftover after parsing attributes in process `syz.5.1882'. [ 73.925648][ T7818] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1884'. [ 74.007965][ T7830] loop1: detected capacity change from 0 to 512 [ 74.017670][ T7830] EXT4-fs (loop1): orphan cleanup on readonly fs [ 74.025854][ T7830] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.1890: bad orphan inode 13 [ 74.042718][ T7830] ext4_test_bit(bit=12, block=18) = 1 [ 74.048226][ T7830] is_bad_inode(inode)=0 [ 74.052523][ T7830] NEXT_ORPHAN(inode)=2130706432 [ 74.057501][ T7830] max_ino=32 [ 74.060784][ T7830] i_nlink=1 [ 74.064872][ T7830] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 74.086963][ T7837] loop0: detected capacity change from 0 to 164 [ 74.093757][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.266452][ T7872] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1905'. [ 74.379887][ T7892] team_slave_0: entered promiscuous mode [ 74.385612][ T7892] team_slave_1: entered promiscuous mode [ 74.394812][ T7892] team0: Device vlan1 is already an upper device of the team interface [ 74.411278][ T7892] team_slave_0: left promiscuous mode [ 74.416731][ T7892] team_slave_1: left promiscuous mode [ 74.503767][ T7911] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1914'. [ 74.801639][ T7951] netlink: 'syz.2.1923': attribute type 1 has an invalid length. [ 75.361274][ T8049] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in; [ 75.361274][ T8049] program syz.1.1953 not setting count and/or reply_len properly [ 75.406056][ T8056] loop1: detected capacity change from 0 to 128 [ 75.488262][ T8068] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1948'. [ 75.538298][ T8078] loop1: detected capacity change from 0 to 128 [ 75.621241][ T8093] tipc: Started in network mode [ 75.626317][ T8093] tipc: Node identity ac14140f, cluster identity 4711 [ 75.646090][ T8093] tipc: New replicast peer: 255.255.255.255 [ 75.652778][ T8093] tipc: Enabled bearer , priority 10 [ 75.833362][ T29] kauditd_printk_skb: 69 callbacks suppressed [ 75.833418][ T29] audit: type=1400 audit(75.795:748): avc: denied { append } for pid=8123 comm="syz.3.1968" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 76.082726][ T8160] loop3: detected capacity change from 0 to 512 [ 76.101136][ T8160] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 76.136092][ T8160] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.193398][ T8160] EXT4-fs: Ignoring removed orlov option [ 76.202319][ T8160] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 76.236665][ T8160] EXT4-fs (loop3): can't enable nombcache during remount [ 76.293857][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.454791][ T8210] loop3: detected capacity change from 0 to 512 [ 76.485365][ T8210] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c098, mo2=0002] [ 76.485755][ T29] audit: type=1400 audit(76.455:749): avc: denied { getopt } for pid=8217 comm="syz.2.2011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 76.536723][ T8210] System zones: 1-2, 4-12, 8-8 [ 76.549256][ T8210] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.2007: bad orphan inode 11 [ 76.565058][ T8210] ext4_test_bit(bit=10, block=4) = 1 [ 76.570380][ T8210] is_bad_inode(inode)=0 [ 76.574577][ T8210] NEXT_ORPHAN(inode)=822083584 [ 76.579471][ T8210] max_ino=32 [ 76.582727][ T8210] i_nlink=0 [ 76.591717][ T8210] EXT4-fs (loop3): 1 truncate cleaned up [ 76.599283][ T8226] loop2: detected capacity change from 0 to 128 [ 76.603929][ T8210] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.630845][ T8226] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 76.662099][ T23] tipc: Node number set to 2886997007 [ 76.672757][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.702900][ T3321] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 76.948191][ T8281] loop0: detected capacity change from 0 to 512 [ 76.979648][ T29] audit: type=1400 audit(76.945:750): avc: denied { bind } for pid=8284 comm="syz.2.2042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 77.038052][ T8281] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.081153][ T8299] loop3: detected capacity change from 0 to 128 [ 77.123932][ T8303] netlink: 'syz.2.2050': attribute type 1 has an invalid length. [ 77.132450][ T8303] NCSI netlink: No device for ifindex 0 [ 77.144846][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.226160][ T29] audit: type=1326 audit(77.195:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8318 comm="syz.2.2058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76081bf6c9 code=0x7ffc0000 [ 77.258653][ T29] audit: type=1326 audit(77.195:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8318 comm="syz.2.2058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76081bf6c9 code=0x7ffc0000 [ 77.281894][ T29] audit: type=1326 audit(77.195:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8318 comm="syz.2.2058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f76081bf6c9 code=0x7ffc0000 [ 77.305180][ T29] audit: type=1326 audit(77.195:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8318 comm="syz.2.2058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76081bf6c9 code=0x7ffc0000 [ 77.328316][ T29] audit: type=1326 audit(77.195:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8318 comm="syz.2.2058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f76081bf6c9 code=0x7ffc0000 [ 77.347168][ T8330] usb usb8: selecting invalid altsetting 2047 [ 77.351621][ T29] audit: type=1326 audit(77.195:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8318 comm="syz.2.2058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76081bf6c9 code=0x7ffc0000 [ 77.699142][ T29] audit: type=1400 audit(77.665:757): avc: denied { create } for pid=8381 comm="syz.3.2089" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_dgram_socket permissive=1 [ 77.762157][ T8391] SELinux: policydb table sizes (0,0) do not match mine (6,6) [ 77.770299][ T8391] SELinux: failed to load policy [ 77.810681][ T8394] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.894413][ T8394] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.955792][ T8394] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.024757][ T8394] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.102346][ T87] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.116211][ T8432] __nla_validate_parse: 5 callbacks suppressed [ 78.116225][ T8432] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2114'. [ 78.135353][ T87] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.171182][ T87] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.206511][ T87] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.297916][ T8448] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2121'. [ 78.369365][ T8459] loop3: detected capacity change from 0 to 256 [ 78.442986][ T8470] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.461035][ T8476] loop5: detected capacity change from 0 to 512 [ 78.474886][ T8476] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 78.494071][ T8476] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.509634][ T8470] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.529953][ T8476] EXT4-fs: Ignoring removed orlov option [ 78.536522][ T8476] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 78.545722][ T8476] EXT4-fs (loop5): can't enable nombcache during remount [ 78.556035][ T8470] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.577889][ T6972] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.597376][ T8470] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.646963][ T8493] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2141'. [ 78.697287][ T1719] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.724669][ T8504] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2146'. [ 78.733682][ T1719] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.755242][ T1719] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.766691][ T1719] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.861302][ T8517] ucma_write: process 1048 (syz.3.2152) changed security contexts after opening file descriptor, this is not allowed. [ 79.012351][ T8536] tmpfs: Bad value for 'mpol' [ 79.095246][ T8548] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2167'. [ 79.126953][ T8552] loop5: detected capacity change from 0 to 1024 [ 79.137499][ T8554] loop1: detected capacity change from 0 to 512 [ 79.170316][ T8552] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.185215][ T8554] EXT4-fs (loop1): orphan cleanup on readonly fs [ 79.190081][ T8560] loop0: detected capacity change from 0 to 1024 [ 79.204080][ T8554] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.2170: bad orphan inode 13 [ 79.215319][ T6972] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.226243][ T8554] ext4_test_bit(bit=12, block=18) = 1 [ 79.232315][ T8554] is_bad_inode(inode)=0 [ 79.236492][ T8554] NEXT_ORPHAN(inode)=2130706432 [ 79.241348][ T8554] max_ino=32 [ 79.244580][ T8554] i_nlink=1 [ 79.248297][ T8554] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 79.261908][ T8560] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 79.288972][ T3314] EXT4-fs error (device loop1): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 12 [ 79.308165][ T3314] EXT4-fs error (device loop1): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 12 [ 79.337110][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 79.438664][ T8585] loop0: detected capacity change from 0 to 512 [ 79.451908][ T8585] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 79.475465][ T8585] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.493815][ T8585] EXT4-fs: Ignoring removed orlov option [ 79.499546][ T8585] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 79.508567][ T8585] EXT4-fs (loop0): can't enable nombcache during remount [ 79.524265][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.594688][ T8596] loop5: detected capacity change from 0 to 512 [ 79.601417][ T4050] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 79.601436][ T4649] Bluetooth: hci0: command 0x1003 tx timeout [ 79.623163][ T8596] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2189: bg 0: block 248: padding at end of block bitmap is not set [ 79.644419][ T8598] loop0: detected capacity change from 0 to 512 [ 79.652817][ T8596] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.2189: Failed to acquire dquot type 1 [ 79.664988][ T8596] EXT4-fs (loop5): 1 truncate cleaned up [ 79.671193][ T8596] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.721243][ T8596] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 79.759535][ T8596] syz.5.2189 (8596) used greatest stack depth: 9400 bytes left [ 79.767818][ T6972] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.898209][ T8622] loop5: detected capacity change from 0 to 512 [ 79.924142][ T8622] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.963523][ T8622] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #2: comm syz.5.2199: corrupted inode contents [ 79.975630][ T8622] EXT4-fs error (device loop5): ext4_dirty_inode:6517: inode #2: comm syz.5.2199: mark_inode_dirty error [ 79.987653][ T8622] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #2: comm syz.5.2199: corrupted inode contents [ 80.001945][ T8622] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #2: comm syz.5.2199: corrupted inode contents [ 80.014060][ T8622] EXT4-fs error (device loop5): ext4_dirty_inode:6517: inode #2: comm syz.5.2199: mark_inode_dirty error [ 80.033860][ T8622] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #2: comm syz.5.2199: corrupted inode contents [ 80.046048][ T8622] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #2: comm syz.5.2199: mark_inode_dirty error [ 80.057932][ T8622] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #2: comm syz.5.2199: corrupted inode contents [ 80.070665][ T8622] EXT4-fs error (device loop5): ext4_dirty_inode:6517: inode #2: comm syz.5.2199: mark_inode_dirty error [ 80.098936][ T6972] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.295856][ T8640] loop3: detected capacity change from 0 to 256 [ 81.166323][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 81.166340][ T29] audit: type=1400 audit(81.135:774): avc: denied { connect } for pid=8747 comm="syz.5.2244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 81.230124][ T29] audit: type=1400 audit(81.165:775): avc: denied { write } for pid=8747 comm="syz.5.2244" path="socket:[21544]" dev="sockfs" ino=21544 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 81.230321][ T8762] netlink: 552 bytes leftover after parsing attributes in process `syz.2.2247'. [ 81.272844][ T8759] loop3: detected capacity change from 0 to 2048 [ 81.304708][ T8759] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.413577][ T8781] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2250'. [ 81.432688][ T8786] loop5: detected capacity change from 0 to 164 [ 81.561776][ T8797] loop2: detected capacity change from 0 to 128 [ 81.570512][ T8799] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2255'. [ 81.608837][ T8797] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 81.664723][ T29] audit: type=1400 audit(81.635:776): avc: denied { setattr } for pid=8796 comm="syz.2.2254" name="bus" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 81.693241][ T3321] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 81.713580][ T8804] loop5: detected capacity change from 0 to 512 [ 81.732453][ T8804] EXT4-fs: Ignoring removed mblk_io_submit option [ 81.760237][ T8804] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 81.781727][ T8804] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c118, mo2=0002] [ 81.789640][ T8804] System zones: 1-12 [ 81.809043][ T8804] EXT4-fs error (device loop5): ext4_iget_extra_inode:5075: inode #15: comm syz.5.2258: corrupted in-inode xattr: e_value size too large [ 81.827129][ T8804] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.2258: couldn't read orphan inode 15 (err -117) [ 81.843197][ T8804] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.868952][ T6972] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.909220][ T8813] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.919988][ T1719] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm kworker/u8:6: bg 0: block 345: padding at end of block bitmap is not set [ 81.942445][ T1719] EXT4-fs (loop3): Remounting filesystem read-only [ 81.952095][ T8819] loop5: detected capacity change from 0 to 128 [ 81.958461][ T8817] loop0: detected capacity change from 0 to 512 [ 81.977379][ T8817] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.2263: invalid indirect mapped block 4294967295 (level 1) [ 82.004802][ T8813] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.011451][ T8817] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.2263: invalid indirect mapped block 4294967295 (level 1) [ 82.037498][ T8817] EXT4-fs (loop0): 2 truncates cleaned up [ 82.052572][ T8817] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.061311][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.074388][ T8817] EXT4-fs error (device loop0): ext4_get_parent:1834: inode #11: comm syz.0.2263: bad parent inode number: 3 [ 82.106071][ T8813] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.125279][ T8827] bridge0: entered promiscuous mode [ 82.130783][ T8827] macsec1: entered promiscuous mode [ 82.134529][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.174682][ T8813] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.187351][ T8834] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2269'. [ 82.238492][ T3448] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.253601][ T3448] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.269882][ T3448] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.280900][ T3448] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.299173][ T8847] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2278'. [ 82.318861][ T8847] netlink: 'syz.3.2278': attribute type 22 has an invalid length. [ 82.459147][ T8872] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 82.542213][ T29] audit: type=1326 audit(82.515:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8883 comm="syz.0.2296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa51c39f6c9 code=0x7ffc0000 [ 82.567704][ T29] audit: type=1326 audit(82.525:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8883 comm="syz.0.2296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fa51c39f6c9 code=0x7ffc0000 [ 82.590997][ T29] audit: type=1326 audit(82.525:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8883 comm="syz.0.2296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa51c39f6c9 code=0x7ffc0000 [ 82.614233][ T29] audit: type=1326 audit(82.525:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8883 comm="syz.0.2296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa51c39f6c9 code=0x7ffc0000 [ 82.637691][ T29] audit: type=1326 audit(82.525:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8883 comm="syz.0.2296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7fa51c39f6c9 code=0x7ffc0000 [ 82.661094][ T29] audit: type=1326 audit(82.525:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8883 comm="syz.0.2296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa51c39f6c9 code=0x7ffc0000 [ 82.684386][ T29] audit: type=1326 audit(82.525:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8883 comm="syz.0.2296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa51c39f6c9 code=0x7ffc0000 [ 82.712426][ T8888] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.764294][ T1719] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.791148][ T8888] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.809222][ T8906] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 82.835389][ T1719] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.864433][ T8888] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.880514][ T8915] netlink: 'syz.0.2309': attribute type 21 has an invalid length. [ 82.892687][ T1719] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.922776][ T8888] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.954166][ T1719] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.019664][ T3448] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.041226][ T3448] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.060044][ T8937] loop2: detected capacity change from 0 to 164 [ 83.131973][ T3448] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.140354][ T1719] bridge_slave_1: left allmulticast mode [ 83.146038][ T1719] bridge_slave_1: left promiscuous mode [ 83.151802][ T1719] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.201158][ T1719] bridge_slave_0: left allmulticast mode [ 83.206977][ T1719] bridge_slave_0: left promiscuous mode [ 83.213011][ T1719] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.253748][ T8954] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 83.409884][ T8972] loop2: detected capacity change from 0 to 512 [ 83.433772][ T8972] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 83.450155][ T8972] System zones: 1-12 [ 83.454709][ T8972] EXT4-fs error (device loop2): ext4_iget_extra_inode:5075: inode #15: comm syz.2.2335: corrupted in-inode xattr: e_value size too large [ 83.474036][ T1719] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 83.483999][ T8972] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.2335: couldn't read orphan inode 15 (err -117) [ 83.496090][ T8984] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 83.496311][ T1719] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 83.507733][ T8972] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.528768][ T1719] bond0 (unregistering): Released all slaves [ 83.539874][ T3448] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.592642][ T1719] hsr_slave_0: left promiscuous mode [ 83.611560][ T1719] hsr_slave_1: left promiscuous mode [ 83.617402][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.626715][ T1719] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.634144][ T1719] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 83.648426][ T1719] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.655886][ T1719] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.663705][ T8994] xt_policy: output policy not valid in PREROUTING and INPUT [ 83.679472][ T1719] veth1_macvtap: left promiscuous mode [ 83.689250][ T1719] veth0_macvtap: left promiscuous mode [ 83.695257][ T1719] veth1_vlan: left promiscuous mode [ 83.699072][ T9004] __nla_validate_parse: 2 callbacks suppressed [ 83.699086][ T9004] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2346'. [ 83.702664][ T1719] veth0_vlan: left promiscuous mode [ 83.787754][ T9016] loop0: detected capacity change from 0 to 512 [ 83.814644][ T9016] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.838087][ T1719] team0 (unregistering): Port device team_slave_1 removed [ 83.847323][ T1719] team0 (unregistering): Port device team_slave_0 removed [ 83.883193][ T8907] chnl_net:caif_netlink_parms(): no params data found [ 83.905798][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.999313][ T9038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.008332][ T9038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.016561][ T8907] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.024249][ T8907] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.042799][ T8907] bridge_slave_0: entered allmulticast mode [ 84.049314][ T8907] bridge_slave_0: entered promiscuous mode [ 84.063079][ T9032] loop0: detected capacity change from 0 to 8192 [ 84.070249][ T8907] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.077386][ T8907] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.085219][ T8907] bridge_slave_1: entered allmulticast mode [ 84.091231][ T9032] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 84.103675][ T8907] bridge_slave_1: entered promiscuous mode [ 84.137248][ T8907] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.175898][ T8907] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.226294][ T8907] team0: Port device team_slave_0 added [ 84.275671][ T8907] team0: Port device team_slave_1 added [ 84.307589][ T8907] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.315201][ T8907] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.341136][ T8907] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.357247][ T8907] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.364281][ T8907] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.390233][ T8907] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.556613][ T8907] hsr_slave_0: entered promiscuous mode [ 84.568842][ T8907] hsr_slave_1: entered promiscuous mode [ 84.653472][ T9101] netlink: 124 bytes leftover after parsing attributes in process `syz.3.2373'. [ 84.804752][ T8907] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 84.817993][ T8907] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 84.860267][ T8907] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 84.890668][ T8907] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 84.932779][ T8907] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.939844][ T8907] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.037564][ T8907] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.068183][ T3449] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.087300][ T8907] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.098203][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.105316][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.135213][ T8907] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 85.145625][ T8907] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.171038][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.178192][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.194625][ T9183] loop2: detected capacity change from 0 to 512 [ 85.208575][ T9183] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 85.242248][ T9183] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.2401: bad orphan inode 131083 [ 85.261720][ T9183] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.295833][ T9198] loop3: detected capacity change from 0 to 512 [ 85.304849][ T8907] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.324667][ T9201] loop0: detected capacity change from 0 to 512 [ 85.376059][ T9198] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 85.390345][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.400982][ T9198] EXT4-fs (loop3): 1 truncate cleaned up [ 85.455241][ T9218] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 85.455241][ T9218] program syz.2.2410 not setting count and/or reply_len properly [ 85.478882][ T9198] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.567154][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.598741][ T8907] veth0_vlan: entered promiscuous mode [ 85.605330][ T9237] loop0: detected capacity change from 0 to 128 [ 85.620221][ T8907] veth1_vlan: entered promiscuous mode [ 85.634822][ T8907] veth0_macvtap: entered promiscuous mode [ 85.656419][ T9237] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 85.666429][ T8907] veth1_macvtap: entered promiscuous mode [ 85.699633][ T8907] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.713564][ T9237] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 85.731894][ T8907] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.750394][ T291] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.778424][ T291] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.825130][ T291] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.843494][ T291] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.873960][ T9265] program syz.3.2425 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 86.078579][ T9296] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2443'. [ 86.111906][ T9304] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 86.179040][ T9310] loop2: detected capacity change from 0 to 512 [ 86.188858][ T9310] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 86.213141][ T7053] ================================================================== [ 86.221242][ T7053] BUG: KCSAN: data-race in fill_mg_cmtime / shmem_unlink [ 86.228286][ T7053] [ 86.230609][ T7053] write to 0xffff8881010480f4 of 4 bytes by task 3004 on cpu 0: [ 86.231454][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 86.231466][ T29] audit: type=1400 audit(86.167:807): avc: denied { write } for pid=3302 comm="syz-executor" path="pipe:[2489]" dev="pipefs" ino=2489 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 86.238228][ T7053] shmem_unlink+0x13c/0x170 [ 86.271069][ T7053] vfs_unlink+0x26c/0x420 [ 86.275408][ T7053] do_unlinkat+0x24e/0x480 [ 86.279824][ T7053] __x64_sys_unlink+0x2e/0x40 [ 86.284497][ T7053] x64_sys_call+0x2dcf/0x3000 [ 86.289177][ T7053] do_syscall_64+0xd2/0x200 [ 86.293681][ T7053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.299572][ T7053] [ 86.301913][ T7053] read to 0xffff8881010480f4 of 4 bytes by task 7053 on cpu 1: [ 86.309455][ T7053] fill_mg_cmtime+0x5b/0x260 [ 86.314049][ T7053] generic_fillattr+0x24a/0x340 [ 86.318903][ T7053] shmem_getattr+0x181/0x200 [ 86.323491][ T7053] vfs_getattr_nosec+0x146/0x1e0 [ 86.328438][ T7053] vfs_statx+0x113/0x390 [ 86.332703][ T7053] vfs_fstatat+0x115/0x170 [ 86.337121][ T7053] __se_sys_newfstatat+0x55/0x260 [ 86.342162][ T7053] __x64_sys_newfstatat+0x55/0x70 [ 86.347221][ T7053] x64_sys_call+0x135a/0x3000 [ 86.351902][ T7053] do_syscall_64+0xd2/0x200 [ 86.356417][ T7053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.362313][ T7053] [ 86.364649][ T7053] value changed: 0x0929c32d -> 0x0938106e [ 86.370361][ T7053] [ 86.372677][ T7053] Reported by Kernel Concurrency Sanitizer on: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 86.378819][ T7053] CPU: 1 UID: 0 PID: 7053 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 86.389663][ T7053] Tainted: [W]=WARN [ 86.393489][ T7053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 86.403537][ T7053] ================================================================== [ 86.756530][ T87] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.827792][ T87] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.869558][ T87] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.961328][ T87] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.028179][ T87] bridge_slave_1: left allmulticast mode [ 87.033857][ T87] bridge_slave_1: left promiscuous mode [ 87.039541][ T87] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.047281][ T87] bridge_slave_0: left allmulticast mode [ 87.053502][ T87] bridge_slave_0: left promiscuous mode [ 87.059158][ T87] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.189031][ T87] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface [ 87.197790][ T87] bond_slave_0: left promiscuous mode [ 87.204145][ T87] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface [ 87.213561][ T87] bond_slave_1: left promiscuous mode [ 87.220320][ T87] $Hÿ (unregistering): Released all slaves [ 87.273333][ T87] tipc: Disabling bearer [ 87.278585][ T87] tipc: Left network mode [ 87.286831][ T87] hsr_slave_0: left promiscuous mode [ 87.292509][ T87] hsr_slave_1: left promiscuous mode [ 87.298143][ T87] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.305582][ T87] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.313400][ T87] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.320850][ T87] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.331448][ T87] veth1_macvtap: left promiscuous mode [ 87.336997][ T87] veth0_macvtap: left promiscuous mode [ 87.342725][ T87] veth1_vlan: left promiscuous mode [ 87.347957][ T87] veth0_vlan: left promiscuous mode [ 87.409304][ T87] team0 (unregistering): Port device team_slave_1 removed [ 87.420448][ T87] team0 (unregistering): Port device team_slave_0 removed [ 87.673215][ T87] IPVS: stop unused estimator thread 0... [ 87.725390][ T87] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.925463][ T87] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.976248][ T87] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.017742][ T87] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.085388][ T87] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.118938][ T87] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.171309][ T87] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.221763][ T87] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.296345][ T87] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.335092][ T87] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.385731][ T87] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.437784][ T87] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.512518][ T87] bridge_slave_1: left allmulticast mode [ 89.518942][ T87] bridge_slave_1: left promiscuous mode [ 89.524582][ T87] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.532193][ T87] bridge_slave_0: left allmulticast mode [ 89.538456][ T87] bridge_slave_0: left promiscuous mode [ 89.544143][ T87] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.552357][ T87] bridge_slave_1: left allmulticast mode [ 89.557985][ T87] bridge_slave_1: left promiscuous mode [ 89.564228][ T87] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.571800][ T87] bridge_slave_0: left allmulticast mode [ 89.577429][ T87] bridge_slave_0: left promiscuous mode [ 89.583057][ T87] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.591400][ T87] bridge_slave_1: left allmulticast mode [ 89.597031][ T87] bridge_slave_1: left promiscuous mode [ 89.603128][ T87] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.611109][ T87] bridge_slave_0: left allmulticast mode [ 89.616736][ T87] bridge_slave_0: left promiscuous mode [ 89.622447][ T87] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.734710][ T87] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 89.745123][ T87] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 89.754488][ T87] bond0 (unregistering): Released all slaves [ 89.857546][ T87] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface [ 89.866868][ T87] bond_slave_0: left promiscuous mode [ 89.873377][ T87] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface [ 89.882011][ T87] bond_slave_1: left promiscuous mode [ 89.889056][ T87] $Hÿ (unregistering): (slave dummy0): Releasing backup interface [ 89.897471][ T87] dummy0: left promiscuous mode [ 89.903010][ T87] $Hÿ (unregistering): Released all slaves [ 89.951799][ T87] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 89.961292][ T87] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 89.970544][ T87] bond0 (unregistering): Released all slaves [ 90.015254][ T87] tipc: Disabling bearer [ 90.020241][ T87] tipc: Left network mode [ 90.032243][ T87] IPVS: stopping master sync thread 8906 ... [ 90.040375][ T87] hsr_slave_0: left promiscuous mode [ 90.046109][ T87] hsr_slave_1: left promiscuous mode [ 90.052325][ T87] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.059757][ T87] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.068068][ T87] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.075548][ T87] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 90.085149][ T87] hsr_slave_0: left promiscuous mode [ 90.090839][ T87] hsr_slave_1: left promiscuous mode [ 90.096948][ T87] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.104383][ T87] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.111943][ T87] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.119307][ T87] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 90.128662][ T87] hsr_slave_0: left promiscuous mode [ 90.134169][ T87] hsr_slave_1: left promiscuous mode [ 90.139824][ T87] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.147301][ T87] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.154696][ T87] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.162129][ T87] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 90.175759][ T87] veth1_macvtap: left promiscuous mode [ 90.181310][ T87] veth0_macvtap: left promiscuous mode [ 90.186815][ T87] veth1_vlan: left promiscuous mode [ 90.192096][ T87] veth0_vlan: left promiscuous mode [ 90.198361][ T87] veth1_macvtap: left promiscuous mode [ 90.203819][ T87] veth0_macvtap: left promiscuous mode [ 90.209951][ T87] veth1_macvtap: left promiscuous mode [ 90.215597][ T87] veth0_macvtap: left promiscuous mode [ 90.221126][ T87] veth1_vlan: left promiscuous mode [ 90.226425][ T87] veth0_vlan: left promiscuous mode [ 90.343506][ T87] team0 (unregistering): Port device team_slave_1 removed [ 90.352881][ T87] team0 (unregistering): Port device team_slave_0 removed [ 90.398384][ T87] team0 (unregistering): Port device team_slave_1 removed [ 90.407800][ T87] team0 (unregistering): Port device team_slave_0 removed [ 90.459621][ T87] team0 (unregistering): Port device team_slave_1 removed [ 90.469136][ T87] team0 (unregistering): Port device team_slave_0 removed [ 91.159905][ T87] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.210147][ T87] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.259587][ T87] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.321028][ T87] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.408360][ T87] bridge_slave_1: left allmulticast mode [ 91.414050][ T87] bridge_slave_1: left promiscuous mode [ 91.419651][ T87] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.427378][ T87] bridge_slave_0: left allmulticast mode [ 91.433042][ T87] bridge_slave_0: left promiscuous mode [ 91.438701][ T87] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.556443][ T87] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 91.565964][ T87] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 91.575634][ T87] bond0 (unregistering): Released all slaves [ 91.609327][ T87] hsr_slave_0: left promiscuous mode [ 91.614913][ T87] hsr_slave_1: left promiscuous mode [ 91.620910][ T87] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.628325][ T87] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 91.635929][ T87] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.643346][ T87] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 91.653911][ T87] veth1_macvtap: left promiscuous mode [ 91.659928][ T87] veth0_macvtap: left promiscuous mode [ 91.665481][ T87] veth1_vlan: left promiscuous mode [ 91.671950][ T87] veth0_vlan: left promiscuous mode [ 91.735619][ T87] team0 (unregistering): Port device team_slave_1 removed [ 91.745021][ T87] team0 (unregistering): Port device team_slave_0 removed