last executing test programs: 737.209225ms ago: executing program 4 (id=7095): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f00000005c0)=@ethtool_cmd={0x18, 0x5, 0x710, 0x0, 0x4, 0x9, 0x3, 0x6, 0x8, 0x6, 0xf, 0x1, 0x1, 0x25, 0x1, 0x0, [0xb, 0xffffffff]}}) 690.968217ms ago: executing program 4 (id=7099): unshare(0x12000100) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 615.780338ms ago: executing program 2 (id=7107): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="0206000002"], 0x10}}, 0x0) 597.391868ms ago: executing program 4 (id=7108): unshare(0xc020680) syz_read_part_table(0x5eb, &(0x7f0000000f00)="$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") 568.456899ms ago: executing program 2 (id=7111): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x5}, @IFLA_BOND_TLB_DYNAMIC_LB={0x5}]}}}]}, 0x44}}, 0x0) 454.703021ms ago: executing program 2 (id=7116): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) rt_sigaction(0x19, 0x0, 0x0, 0x8, &(0x7f0000000440)) 454.561391ms ago: executing program 2 (id=7118): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x29, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815001b001105142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) 418.260292ms ago: executing program 2 (id=7121): r0 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0xffffafff, 0x1000, 0x2, 0x33d}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 393.053343ms ago: executing program 1 (id=7122): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 342.662583ms ago: executing program 1 (id=7126): r0 = openat$null(0xffffffffffffff9c, &(0x7f0000001640), 0x101000, 0x0) read$qrtrtun(r0, 0x0, 0x0) 275.911785ms ago: executing program 1 (id=7130): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x2, 0xd, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_lifetime={0x4, 0x4}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x6e6bbb, 0x0, {0x6, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_lifetime={0x4, 0x3, 0x6, 0x4, 0x9, 0x4}]}, 0xe0}}, 0x0) 270.507615ms ago: executing program 2 (id=7131): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syslog(0x2, &(0x7f0000000040)=""/45, 0x2d) 220.132246ms ago: executing program 1 (id=7133): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x500}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 220.056956ms ago: executing program 3 (id=7134): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x1a1) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x2d60, 0x2000, 0x8, 0xadea}) 219.974346ms ago: executing program 0 (id=7135): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x80, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x1, 0x2, 0x2}, 0x8, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0}) 219.945536ms ago: executing program 3 (id=7136): r0 = socket$vsock_stream(0x28, 0x1, 0x0) vmsplice(r0, &(0x7f0000000240)=[{&(0x7f0000000080)="96", 0x1}, {0x0}], 0x2, 0x2) 180.012116ms ago: executing program 0 (id=7137): r0 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000004780)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) lseek(r0, 0x8b6c, 0x1) 179.712707ms ago: executing program 0 (id=7138): r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_coalesce={0xe, 0x5, 0x3, 0xb91, 0x8001, 0x5, 0x6, 0x4, 0x5, 0x1, 0x2, 0x8, 0x0, 0x2f90dd86, 0xb, 0x2, 0xdfea, 0x0, 0x9, 0xd8, 0x1, 0x3271d2ac, 0x8}}) 146.823507ms ago: executing program 3 (id=7139): r0 = syz_open_procfs(0x0, &(0x7f0000000340)='attr\x00') unlinkat(r0, &(0x7f0000000040)='./file0\x00', 0x200) 146.525677ms ago: executing program 0 (id=7140): r0 = socket(0x22, 0x2, 0x3) getpeername(r0, 0x0, 0x0) 108.363768ms ago: executing program 3 (id=7141): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000a000000000000000000000b02000000000000000300000d000000000300000003000000000000000300000004000000030000000000000000000005000000000000002e5f"], &(0x7f0000000b80)=""/4090, 0x5e, 0xffa, 0x1}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000a00)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x400, '\x00', 0x0, r0, 0x1, 0x2}, 0x50) 108.226498ms ago: executing program 1 (id=7142): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xb, 0x0, 0x700, 0x0, [@sadb_key={0x1, 0x9}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x58}, 0x1, 0x7}, 0x0) 107.976378ms ago: executing program 4 (id=7143): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newlink={0x34, 0x10, 0x401, 0xfffffffc, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1503, 0x4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 71.124629ms ago: executing program 0 (id=7144): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x7}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x4020080) 71.015649ms ago: executing program 4 (id=7145): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f00000001c0)=@name={0x1e, 0x2, 0x3, {{0x0, 0xfffffffd}}}, 0x10) 70.901919ms ago: executing program 1 (id=7146): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r0, 0x0, 0x0}, 0x10) 14.91771ms ago: executing program 3 (id=7147): r0 = socket(0x80000000000000a, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1f, 0x0, &(0x7f00000001c0)) 14.7787ms ago: executing program 0 (id=7148): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0xa, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x95bda107d86ebb57, @perf_bp={0x0, 0x4}, 0x101001, 0x10000, 0x0, 0x1, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x7fffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mq_open(0x0, 0x1, 0x0, 0x0) 14.68555ms ago: executing program 4 (id=7149): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0000200, @private=0xffffffff}, 0x10) 0s ago: executing program 3 (id=7150): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e24, 0x3, @ipv4={'\x00', '\xff\xff', @local}, 0x23}, 0x13) kernel console output (not intermixed with test programs): 86.197829][ T9832] loop0: detected capacity change from 0 to 8192 [ 86.216904][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.279671][ T29] audit: type=1326 audit(2000000021.640:11214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9849 comm="syz.3.3039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe409feeba9 code=0x7ffc0000 [ 86.355665][ T9861] delete_channel: no stack [ 86.369197][ T9860] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3046'. [ 86.378270][ T9860] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3046'. [ 86.387300][ T9860] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3046'. [ 86.417257][ T9871] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3050'. [ 86.461794][ T9860] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3046'. [ 86.470927][ T9860] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3046'. [ 86.489344][ T9871] 0XD: renamed from gretap0 (while UP) [ 86.510253][ T9871] A link change request failed with some changes committed already. Interface 30XD may have been left with an inconsistent configuration, please check. [ 86.530358][ T9884] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3056'. [ 86.551345][ T9885] delete_channel: no stack [ 86.628761][ T9898] loop1: detected capacity change from 0 to 512 [ 86.670929][ T9898] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.3064: casefold flag without casefold feature [ 86.686572][ T9898] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.3064: couldn't read orphan inode 15 (err -117) [ 86.700679][ T9898] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.725204][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.786376][ T9919] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3071'. [ 86.795387][ T9919] validate_nla: 3 callbacks suppressed [ 86.795401][ T9919] netlink: 'syz.1.3071': attribute type 6 has an invalid length. [ 86.919690][ T9939] loop0: detected capacity change from 0 to 1024 [ 86.926764][ T9939] EXT4-fs: Ignoring removed oldalloc option [ 86.941778][ T9939] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 86.951151][ T9943] sctp: [Deprecated]: syz.4.3085 (pid 9943) Use of struct sctp_assoc_value in delayed_ack socket option. [ 86.951151][ T9943] Use struct sctp_sack_info instead [ 86.968311][ T9939] System zones: 0-1, 3-12 [ 86.978977][ T9939] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.029550][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.071107][ T9955] tunl0: entered promiscuous mode [ 87.109876][ T9961] loop4: detected capacity change from 0 to 1024 [ 87.111814][ T9955] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 87.134181][ T9961] EXT4-fs: Ignoring removed nomblk_io_submit option [ 87.154097][ T9966] netlink: 'syz.3.3096': attribute type 7 has an invalid length. [ 87.156776][ T9967] IPVS: Error connecting to the multicast addr [ 87.173308][ T9961] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 87.181512][ T9961] System zones: 0-1, 3-36 [ 87.188653][ T9961] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.235129][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.268296][ T9978] netlink: 'syz.0.3102': attribute type 2 has an invalid length. [ 87.276155][ T9978] netlink: 'syz.0.3102': attribute type 1 has an invalid length. [ 87.398194][ T9997] openvswitch: netlink: Message has 6 unknown bytes. [ 87.611158][T10025] vti0: entered allmulticast mode [ 87.740597][T10044] loop2: detected capacity change from 0 to 512 [ 87.771005][T10044] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 87.796182][T10044] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.3135: invalid indirect mapped block 2683928664 (level 1) [ 87.812795][T10044] EXT4-fs (loop2): Remounting filesystem read-only [ 87.824124][T10044] EXT4-fs (loop2): 1 truncate cleaned up [ 87.830250][T10044] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.938349][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.151648][T10103] gre0: left allmulticast mode [ 88.171845][T10104] erspan1: entered allmulticast mode [ 88.217769][T10113] netlink: 'syz.3.3167': attribute type 4 has an invalid length. [ 88.286288][T10121] netlink: 'syz.3.3172': attribute type 3 has an invalid length. [ 88.368888][T10135] loop3: detected capacity change from 0 to 512 [ 88.396061][T10135] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 88.438022][T10135] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.486153][T10135] ext4 filesystem being mounted at /615/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.526835][T10135] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 88.597411][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.893857][T10211] syz_tun: entered allmulticast mode [ 89.084851][T10238] loop4: detected capacity change from 0 to 128 [ 89.318017][T10268] SELinux: Context system_u:object_r:framebuf_device_t:s0 is not valid (left unmapped). [ 89.592269][T10306] loop4: detected capacity change from 0 to 256 [ 89.637623][T10306] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 89.859051][T10342] ------------[ cut here ]------------ [ 89.864635][T10342] verifier bug: scc exit: no visit info for call chain (1)(1) [ 89.872357][T10342] WARNING: CPU: 0 PID: 10342 at kernel/bpf/verifier.c:1950 do_check+0x78e4/0x7a10 [ 89.881702][T10342] Modules linked in: [ 89.885688][T10342] CPU: 0 UID: 0 PID: 10342 Comm: syz.2.3280 Not tainted syzkaller #0 PREEMPT(voluntary) [ 89.895546][T10342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 89.905765][T10342] RIP: 0010:do_check+0x78e4/0x7a10 [ 89.910986][T10342] Code: d4 86 e8 ff f3 0c 00 c6 05 1b 7d 6e 05 01 90 4c 89 ef 4c 89 f6 e8 3c 4a 00 00 48 c7 c7 78 9d 45 86 48 89 c6 e8 5d e7 bb ff 90 <0f> 0b 90 90 e9 12 fd ff ff e8 6e 95 02 04 e8 59 43 f2 ff 48 c7 c7 [ 89.930686][T10342] RSP: 0018:ffffc900102fb608 EFLAGS: 00010246 [ 89.936853][T10342] RAX: 05a767aefb5abf00 RBX: ffff888117150220 RCX: 0000000000080000 [ 89.944850][T10342] RDX: ffffc9000349e000 RSI: 0000000000001d7c RDI: 0000000000001d7d [ 89.952947][T10342] RBP: 0000000000000001 R08: 0001c900102fb47f R09: 0000000000000000 [ 89.961031][T10342] R10: 00000000ffffffff R11: 0000000000000002 R12: ffff888117167cc0 [ 89.969046][T10342] R13: ffff88810a430000 R14: ffff88810a436328 R15: 0000000000000000 [ 89.977202][T10342] FS: 00007f12774af6c0(0000) GS:ffff8882aee40000(0000) knlGS:0000000000000000 [ 89.986188][T10342] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 89.992801][T10342] CR2: 0000200000003000 CR3: 0000000124710000 CR4: 00000000003506f0 [ 90.000878][T10342] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 90.008606][T10352] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 90.008932][T10342] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 90.025495][T10342] Call Trace: [ 90.028820][T10342] [ 90.031780][T10342] ? __rcu_read_unlock+0x4f/0x70 [ 90.036787][T10342] do_check_common+0xc3a/0x12a0 [ 90.041680][T10342] bpf_check+0x942b/0xd9e0 [ 90.046159][T10342] ? __rcu_read_unlock+0x4f/0x70 [ 90.051191][T10342] ? __alloc_frozen_pages_noprof+0x188/0x360 [ 90.057238][T10342] ? alloc_pages_bulk_noprof+0x4b8/0x540 [ 90.062908][T10342] ? __vmap_pages_range_noflush+0xbc4/0xcf0 [ 90.068899][T10342] ? pcpu_block_update+0x232/0x3b0 [ 90.074075][T10342] ? _find_next_zero_bit+0x64/0xa0 [ 90.079358][T10342] ? pcpu_block_refresh_hint+0x157/0x170 [ 90.085017][T10342] ? pcpu_block_update_hint_alloc+0x63d/0x660 [ 90.091147][T10342] ? pcpu_block_update_hint_alloc+0x63d/0x660 [ 90.097433][T10342] ? css_rstat_updated+0xb7/0x240 [ 90.102558][T10342] ? __rcu_read_unlock+0x4f/0x70 [ 90.107543][T10342] ? pcpu_memcg_post_alloc_hook+0xf1/0x150 [ 90.113496][T10342] ? should_fail_ex+0x30/0x280 [ 90.118337][T10342] ? selinux_bpf_prog_load+0x36/0xf0 [ 90.123637][T10342] ? should_failslab+0x8c/0xb0 [ 90.128547][T10342] ? __kmalloc_cache_noprof+0x189/0x320 [ 90.134155][T10342] ? selinux_bpf_prog_load+0xbf/0xf0 [ 90.139586][T10342] ? security_bpf_prog_load+0x2c/0xa0 [ 90.144984][T10342] bpf_prog_load+0xedd/0x1070 [ 90.149877][T10342] ? security_bpf+0x2b/0x90 [ 90.154476][T10342] __sys_bpf+0x462/0x7b0 [ 90.158792][T10342] __x64_sys_bpf+0x41/0x50 [ 90.163280][T10342] x64_sys_call+0x2aea/0x2ff0 [ 90.168034][T10342] do_syscall_64+0xd2/0x200 [ 90.172577][T10342] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 90.178781][T10342] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 90.184572][T10342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.190528][T10342] RIP: 0033:0x7f1278a4eba9 [ 90.195025][T10342] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.214784][T10342] RSP: 002b:00007f12774af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 90.223249][T10342] RAX: ffffffffffffffda RBX: 00007f1278c95fa0 RCX: 00007f1278a4eba9 [ 90.231288][T10342] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 90.239292][T10342] RBP: 00007f1278ad1e19 R08: 0000000000000000 R09: 0000000000000000 [ 90.247316][T10342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 90.255317][T10342] R13: 00007f1278c96038 R14: 00007f1278c95fa0 R15: 00007ffc37d68bb8 [ 90.263349][T10342] [ 90.266422][T10342] ---[ end trace 0000000000000000 ]--- [ 90.271184][T10365] netlink: 'syz.3.3289': attribute type 46 has an invalid length. [ 90.490917][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 90.490956][ T29] audit: type=1400 audit(2000000025.850:11235): avc: denied { accept } for pid=10396 comm="syz.2.3304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 90.671845][ T29] audit: type=1326 audit(2000000026.030:11236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10420 comm="syz.0.3318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75833deba9 code=0x7ffc0000 [ 90.762991][ T29] audit: type=1326 audit(2000000026.050:11237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10420 comm="syz.0.3318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75833deba9 code=0x7ffc0000 [ 90.786730][ T29] audit: type=1326 audit(2000000026.060:11238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10420 comm="syz.0.3318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7f75833deba9 code=0x7ffc0000 [ 90.810418][ T29] audit: type=1326 audit(2000000026.060:11239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10420 comm="syz.0.3318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75833deba9 code=0x7ffc0000 [ 90.834027][ T29] audit: type=1326 audit(2000000026.060:11240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10420 comm="syz.0.3318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75833deba9 code=0x7ffc0000 [ 90.973701][T10457] netlink: 'syz.2.3336': attribute type 7 has an invalid length. [ 90.981655][T10457] netlink: 'syz.2.3336': attribute type 8 has an invalid length. [ 91.067622][T10470] loop2: detected capacity change from 0 to 1024 [ 91.105790][T10470] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.211749][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.446482][T10521] SELinux: security_context_str_to_sid (xvZE6cbo(&|Y!Zݲ:18Jo3OLQr^.LOɹ!Qj|ף) failed with errno=-22 [ 91.446734][ T29] audit: type=1400 audit(2000000026.810:11241): avc: denied { mounton } for pid=10519 comm="syz.4.3363" path="/syzcgroup/cpu/syz4/cgroup.procs" dev="cgroup" ino=151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 91.526132][T10527] __nla_validate_parse: 17 callbacks suppressed [ 91.526149][T10527] netlink: 512 bytes leftover after parsing attributes in process `syz.1.3368'. [ 91.550013][ T29] audit: type=1400 audit(2000000026.910:11242): avc: denied { lock } for pid=10528 comm="syz.2.3369" path="socket:[27850]" dev="sockfs" ino=27850 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 91.629789][ T29] audit: type=1400 audit(2000000026.970:11243): avc: denied { ioctl } for pid=10537 comm="syz.0.3372" path="socket:[27869]" dev="sockfs" ino=27869 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 91.649978][T10543] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3375'. [ 91.782740][T10547] loop0: detected capacity change from 0 to 8192 [ 91.822771][T10561] netlink: 'syz.3.3384': attribute type 1 has an invalid length. [ 91.830616][T10561] netlink: 228 bytes leftover after parsing attributes in process `syz.3.3384'. [ 91.898762][ T29] audit: type=1400 audit(2000000027.260:11244): avc: denied { map } for pid=10564 comm="syz.4.3387" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 91.997196][T10586] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3395'. [ 92.116269][T10605] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 92.138521][T10610] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3408'. [ 92.233145][T10624] netlink: 7 bytes leftover after parsing attributes in process `syz.2.3415'. [ 92.271583][T10624] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3415'. [ 92.300952][T10634] bond0: Error: Cannot enslave bond to itself. [ 92.487476][T10664] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3435'. [ 92.496492][T10664] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3435'. [ 92.510020][T10664] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3435'. [ 92.601770][T10677] SELinux: Context @ is not valid (left unmapped). [ 93.053441][T10753] loop4: detected capacity change from 0 to 164 [ 93.079898][T10753] ISOFS: unable to read i-node block [ 93.079912][T10753] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 93.270555][T10782] loop2: detected capacity change from 0 to 1024 [ 93.293570][T10789] netlink: 'syz.3.3494': attribute type 3 has an invalid length. [ 93.298470][T10782] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.347213][T10793] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 93.355434][T10793] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 93.377420][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.760766][T10853] netlink: 'syz.1.3526': attribute type 21 has an invalid length. [ 94.019688][T10885] netlink: 'syz.0.3542': attribute type 1 has an invalid length. [ 94.041990][T10887] loop1: detected capacity change from 0 to 764 [ 94.069683][T10887] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 94.664624][T10962] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 95.124694][T11018] loop4: detected capacity change from 0 to 1024 [ 95.182067][T11018] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.3607: Failed to acquire dquot type 0 [ 95.230344][T11031] netlink: 'syz.2.3611': attribute type 22 has an invalid length. [ 95.259985][T11018] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 95.329048][T11018] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.3607: corrupted inode contents [ 95.355651][T11018] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #13: comm syz.4.3607: mark_inode_dirty error [ 95.369403][T11018] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.3607: corrupted inode contents [ 95.381670][T11018] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #13: comm syz.4.3607: mark_inode_dirty error [ 95.408716][T11018] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.3607: corrupted inode contents [ 95.420987][T11018] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 95.439630][T11018] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.3607: corrupted inode contents [ 95.476314][T11018] EXT4-fs error (device loop4): ext4_truncate:4666: inode #13: comm syz.4.3607: mark_inode_dirty error [ 95.524079][T11018] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 95.566810][T11018] EXT4-fs (loop4): 1 truncate cleaned up [ 95.583419][T11018] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.656515][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 95.656593][ T29] audit: type=1400 audit(2000000031.020:11251): avc: denied { read } for pid=11016 comm="syz.4.3607" name="file1" dev="loop4" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 95.702093][ T29] audit: type=1400 audit(2000000031.050:11252): avc: denied { listen } for pid=11075 comm="syz.2.3634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 95.727834][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.806096][ T29] audit: type=1400 audit(2000000031.150:11253): avc: denied { mount } for pid=11085 comm="syz.2.3640" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 95.900312][T11095] bridge_slave_0: left allmulticast mode [ 95.906140][T11095] bridge_slave_0: left promiscuous mode [ 95.911935][T11095] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.944089][T11095] bridge_slave_1: left allmulticast mode [ 95.949852][T11095] bridge_slave_1: left promiscuous mode [ 95.955503][T11095] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.970885][T11095] bond0: (slave bond_slave_0): Releasing backup interface [ 95.982222][T11095] bond0: (slave bond_slave_1): Releasing backup interface [ 96.020502][T11095] team0: Port device team_slave_0 removed [ 96.026523][ T29] audit: type=1400 audit(2000000031.380:11254): avc: denied { setopt } for pid=11105 comm="syz.4.3649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 96.048377][T11095] team0: Port device team_slave_1 removed [ 96.057418][T11095] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.064900][T11095] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.077152][T11112] loop0: detected capacity change from 0 to 164 [ 96.093495][T11095] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.101063][T11095] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.458078][T11156] netlink: 'syz.2.3674': attribute type 21 has an invalid length. [ 96.584961][ T29] audit: type=1400 audit(2000000031.940:11255): avc: denied { block_suspend } for pid=11170 comm="syz.4.3683" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 96.772633][ T29] audit: type=1326 audit(2000000032.130:11256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11200 comm="syz.4.3697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd87129eba9 code=0x7ffc0000 [ 96.796331][ T29] audit: type=1326 audit(2000000032.130:11257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11200 comm="syz.4.3697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd87129eba9 code=0x7ffc0000 [ 96.829469][T11201] __nla_validate_parse: 23 callbacks suppressed [ 96.829482][T11201] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3696'. [ 96.844708][T11201] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3696'. [ 96.846798][ T29] audit: type=1326 audit(2000000032.190:11258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11200 comm="syz.4.3697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd87129eba9 code=0x7ffc0000 [ 96.877379][ T29] audit: type=1326 audit(2000000032.190:11259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11200 comm="syz.4.3697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd87129eba9 code=0x7ffc0000 [ 96.896215][T11211] cgroup: subsys name conflicts with all [ 96.901262][ T29] audit: type=1326 audit(2000000032.190:11260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11200 comm="syz.4.3697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd87129eba9 code=0x7ffc0000 [ 96.927954][T11213] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3704'. [ 96.996374][T11224] netlink: 'syz.2.3708': attribute type 21 has an invalid length. [ 97.117374][T11244] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (247) [ 97.175746][T11253] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3722'. [ 97.187276][T11254] netlink: 'syz.0.3721': attribute type 3 has an invalid length. [ 97.449438][T11293] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3741'. [ 97.564464][T11315] bridge_slave_0: left allmulticast mode [ 97.570408][T11315] bridge_slave_0: left promiscuous mode [ 97.576153][T11315] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.597631][T11315] bridge_slave_1: left allmulticast mode [ 97.603565][T11315] bridge_slave_1: left promiscuous mode [ 97.609373][T11315] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.632807][T11315] bond0: (slave bond_slave_0): Releasing backup interface [ 97.649283][T11315] bond0: (slave bond_slave_1): Releasing backup interface [ 97.674739][T11315] team0: Port device team_slave_0 removed [ 97.689973][T11315] team0: Port device team_slave_1 removed [ 97.696157][T11315] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.704695][T11315] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.716680][T11315] team0: Port device geneve1 removed [ 97.722921][T11315] bond0: (slave netdevsim1): Releasing backup interface [ 97.874510][T11357] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3769'. [ 97.883529][T11357] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3769'. [ 97.892619][T11357] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3769'. [ 97.988987][T11373] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3776'. [ 98.285154][T11409] geneve3: entered promiscuous mode [ 98.290504][T11409] geneve3: entered allmulticast mode [ 98.319749][ T31] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 98.357035][ T51] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 98.403542][ T51] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 98.419439][ T51] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 98.490649][T11423] team0: Port device dummy0 removed [ 98.510291][T11423] bond0: (slave bond_slave_0): Releasing backup interface [ 98.520343][T11423] bond0: (slave bond_slave_1): Releasing backup interface [ 98.538376][T11423] team0: Port device team_slave_0 removed [ 98.560631][T11423] team0: Port device team_slave_1 removed [ 98.576569][T11423] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.616627][T11423] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.630073][T11423] bond0: (slave macvlan1): Releasing backup interface [ 98.641049][T11423] team0: Port device geneve1 removed [ 99.236022][T11492] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 99.242628][T11492] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 99.250247][T11492] vhci_hcd vhci_hcd.0: Device attached [ 99.267645][T11502] loop2: detected capacity change from 0 to 512 [ 99.290981][T11497] vhci_hcd: connection closed [ 99.291322][ T37] vhci_hcd: stop threads [ 99.300326][ T37] vhci_hcd: release socket [ 99.304815][ T37] vhci_hcd: disconnect device [ 99.317252][T11502] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.3834: bad orphan inode 13 [ 99.358271][T11502] ext4_test_bit(bit=12, block=4) = 1 [ 99.363700][T11502] is_bad_inode(inode)=0 [ 99.367944][T11502] NEXT_ORPHAN(inode)=0 [ 99.372242][T11502] max_ino=32 [ 99.375527][T11502] i_nlink=1 [ 99.395631][T11502] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.436707][T11502] EXT4-fs warning (device loop2): dx_probe:801: inode #2: comm syz.2.3834: Unrecognised inode hash code 20 [ 99.448213][T11502] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.3834: Corrupt directory, running e2fsck is recommended [ 99.472191][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.604886][T11545] wireguard0: entered promiscuous mode [ 99.610467][T11545] wireguard0: entered allmulticast mode [ 99.829441][T11582] gtp0: entered allmulticast mode [ 99.916133][T11596] netlink: 'syz.3.3882': attribute type 21 has an invalid length. [ 99.928913][T11598] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 99.965004][T11596] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3882'. [ 100.438406][T11640] loop2: detected capacity change from 0 to 128 [ 100.455024][T11640] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 100.469358][T11640] ext4 filesystem being mounted at /723/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.510681][ T3308] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 100.671965][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 100.671984][ T29] audit: type=1400 audit(2000000036.030:11279): avc: denied { getopt } for pid=11669 comm="syz.2.3917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 100.881207][T11698] netlink: 'syz.2.3931': attribute type 6 has an invalid length. [ 101.024688][T11714] loop0: detected capacity change from 0 to 1764 [ 101.138003][T11736] loop0: detected capacity change from 0 to 764 [ 101.250132][T11758] netlink: 'syz.0.3961': attribute type 2 has an invalid length. [ 101.396819][ T29] audit: type=1400 audit(2000000036.760:11280): avc: denied { getopt } for pid=11779 comm="syz.3.3972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 101.629787][T11802] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 101.636501][T11802] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 101.644138][T11802] vhci_hcd vhci_hcd.0: Device attached [ 101.750044][T11804] vhci_hcd: connection closed [ 101.750242][ T377] vhci_hcd: stop threads [ 101.759336][ T377] vhci_hcd: release socket [ 101.763783][ T377] vhci_hcd: disconnect device [ 101.832145][T11820] loop3: detected capacity change from 0 to 164 [ 101.880511][T11820] Unable to read rock-ridge attributes [ 102.057719][ T29] audit: type=1400 audit(2000000037.380:11281): avc: denied { connect } for pid=11833 comm="syz.0.3996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 102.140890][ T29] audit: type=1326 audit(2000000037.500:11282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11843 comm="syz.1.4000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc56918eba9 code=0x7ffc0000 [ 102.232937][ T29] audit: type=1326 audit(2000000037.520:11283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11843 comm="syz.1.4000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fc56918eba9 code=0x7ffc0000 [ 102.246096][ T5401] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 102.257362][ T29] audit: type=1326 audit(2000000037.530:11284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11843 comm="syz.1.4000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc56918eba9 code=0x7ffc0000 [ 102.288030][ T29] audit: type=1326 audit(2000000037.530:11285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11843 comm="syz.1.4000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc56918eba9 code=0x7ffc0000 [ 102.311709][ T29] audit: type=1326 audit(2000000037.530:11286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11843 comm="syz.1.4000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fc56918eba9 code=0x7ffc0000 [ 102.335422][ T29] audit: type=1326 audit(2000000037.530:11287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11843 comm="syz.1.4000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fc56918eba9 code=0x7ffc0000 [ 102.445748][T11865] __nla_validate_parse: 4 callbacks suppressed [ 102.445766][T11865] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4010'. [ 102.589566][T11891] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4019'. [ 102.598626][T11891] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4019'. [ 102.725169][T11914] netlink: 'syz.0.4027': attribute type 21 has an invalid length. [ 102.744340][T11916] loop2: detected capacity change from 0 to 1024 [ 102.763137][T11916] EXT4-fs: Ignoring removed nobh option [ 102.779218][ T51] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 102.796933][T11916] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 102.818172][T11916] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #11: comm syz.2.4029: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 102.886528][T11916] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.4029: couldn't read orphan inode 11 (err -117) [ 102.907921][T11916] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.958300][T11943] loop3: detected capacity change from 0 to 128 [ 102.972279][T11916] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.4029: Invalid block bitmap block 0 in block_group 0 [ 102.982731][ T29] audit: type=1400 audit(2000000038.330:11288): avc: denied { create } for pid=11915 comm="syz.2.4029" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 103.011483][T11916] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.4029: Failed to acquire dquot type 0 [ 103.029972][T11943] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 103.038706][T11943] FAT-fs (loop3): Filesystem has been set read-only [ 103.061821][ T3419] IPVS: starting estimator thread 0... [ 103.075051][T11956] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4047'. [ 103.106004][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.116096][ T5399] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 103.156111][T11953] IPVS: using max 2352 ests per chain, 117600 per kthread [ 103.258168][T11980] bond0: (slave veth0_macvtap): Error: Device is in use and cannot be enslaved [ 103.490551][T12009] IPv6: sit3: Disabled Multicast RS [ 103.564272][T12021] loop1: detected capacity change from 0 to 512 [ 103.602562][T12021] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 103.843728][T12057] loop4: detected capacity change from 0 to 512 [ 103.851432][ T37] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 103.859368][ T37] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 103.870405][T12057] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 103.927263][T12057] EXT4-fs (loop4): 1 truncate cleaned up [ 103.927667][T12057] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.038291][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.217381][T12093] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4113'. [ 104.371502][T12112] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4123'. [ 104.429790][T12121] netlink: 'syz.0.4128': attribute type 29 has an invalid length. [ 104.485148][T12126] netlink: 'syz.2.4131': attribute type 1 has an invalid length. [ 104.492947][T12126] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4131'. [ 104.608417][T12138] netlink: 'syz.4.4136': attribute type 1 has an invalid length. [ 104.661640][T12148] netlink: 'syz.1.4140': attribute type 12 has an invalid length. [ 104.772280][T12165] cgroup: none used incorrectly [ 104.876050][ T5399] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 104.914115][T12181] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4159'. [ 104.939792][T12189] ieee802154 phy0 wpan0: encryption failed: -22 [ 105.320979][T12239] netlink: 'syz.1.4186': attribute type 1 has an invalid length. [ 105.392441][T12251] netlink: 'syz.0.4191': attribute type 2 has an invalid length. [ 105.624161][T12286] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4210'. [ 105.776062][T12295] loop0: detected capacity change from 0 to 8192 [ 105.816691][ T9225] loop0: p3 p4 < > [ 105.820628][ T9225] loop0: p3 size 33554432 extends beyond EOD, truncated [ 105.870427][T12295] loop0: p3 p4 < > [ 105.874368][T12295] loop0: p3 size 33554432 extends beyond EOD, truncated [ 105.990285][T12343] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 106.003171][ T9091] udevd[9091]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 106.003971][ T9225] udevd[9225]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 106.025134][T12343] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 106.040951][ T9225] udevd[9225]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 106.041828][ T9091] udevd[9091]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 106.130024][T12351] loop1: detected capacity change from 0 to 8192 [ 106.163377][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 106.163395][ T29] audit: type=1326 audit(2000000041.520:11306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12360 comm="syz.0.4244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75833deba9 code=0x7ffc0000 [ 106.203287][T12364] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 106.214014][ T29] audit: type=1326 audit(2000000041.550:11307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12360 comm="syz.0.4244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f75833deba9 code=0x7ffc0000 [ 106.242484][ T29] audit: type=1326 audit(2000000041.550:11308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12360 comm="syz.0.4244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75833deba9 code=0x7ffc0000 [ 106.266098][ T29] audit: type=1326 audit(2000000041.550:11309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12360 comm="syz.0.4244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75833deba9 code=0x7ffc0000 [ 106.268055][T12370] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4250'. [ 106.339084][T12375] loop0: detected capacity change from 0 to 764 [ 106.425317][ T29] audit: type=1400 audit(2000000041.580:11310): avc: denied { bind } for pid=12367 comm="syz.1.4247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 106.580167][T12405] loop1: detected capacity change from 0 to 1024 [ 106.591966][T12411] tipc: Can't bind to reserved service type 0 [ 106.600857][ T29] audit: type=1400 audit(2000000041.950:11311): avc: denied { bind } for pid=12410 comm="syz.0.4268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 106.611375][T12405] EXT4-fs: Ignoring removed nobh option [ 106.628736][T12405] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 106.644390][T12413] loop2: detected capacity change from 0 to 512 [ 106.654409][T12413] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 106.662816][T12413] EXT4-fs (loop2): orphan cleanup on readonly fs [ 106.670096][T12405] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #11: comm syz.1.4266: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 106.686733][T12413] Quota error (device loop2): dq_insert_tree: Quota tree root isn't allocated! [ 106.697633][T12413] Quota error (device loop2): qtree_write_dquot: Error -5 occurred while creating quota [ 106.707480][T12413] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.4269: Failed to acquire dquot type 1 [ 106.729963][T12405] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.4266: couldn't read orphan inode 11 (err -117) [ 106.744978][T12405] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.798159][T12413] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4269: bg 0: block 40: padding at end of block bitmap is not set [ 106.815622][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.816252][T12413] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 106.836483][T12413] EXT4-fs (loop2): 1 truncate cleaned up [ 106.842500][T12413] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 106.934239][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.185766][T12481] netlink: 'syz.3.4300': attribute type 8 has an invalid length. [ 107.431035][T12512] netlink: 'syz.4.4315': attribute type 32 has an invalid length. [ 107.670035][T12553] loop1: detected capacity change from 0 to 512 [ 107.699639][T12553] EXT4-fs: Ignoring removed bh option [ 107.706623][T12553] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 107.715713][T12553] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 107.756011][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 107.763840][T12553] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 107.794926][T12553] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 107.804058][T12553] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.819644][T12553] EXT4-fs error (device loop1): ext4_find_dest_de:2052: inode #2: block 3: comm syz.1.4334: bad entry in directory: inode out of bounds - offset=24, inode=134217739, rec_len=20, size=2048 fake=0 [ 107.863954][T12572] netlink: 'syz.4.4345': attribute type 21 has an invalid length. [ 107.899481][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.165265][T12628] __nla_validate_parse: 2 callbacks suppressed [ 108.165282][T12628] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4367'. [ 108.244977][T12636] netlink: 'syz.1.4369': attribute type 1 has an invalid length. [ 108.252807][T12636] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.4369'. [ 108.293780][T12644] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 108.427845][T12667] netlink: 'syz.1.4386': attribute type 21 has an invalid length. [ 108.435905][T12667] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4386'. [ 108.512553][T12681] IPVS: Unknown mcast interface: macvlan0 [ 108.516472][ T29] audit: type=1326 audit(2000000043.870:11312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12682 comm="syz.1.4394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc56918eba9 code=0x7ffc0000 [ 108.542025][ T29] audit: type=1326 audit(2000000043.870:11313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12682 comm="syz.1.4394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc56918eba9 code=0x7ffc0000 [ 108.676185][T12701] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4402'. [ 109.112892][T12767] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4434'. [ 109.232829][ T377] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.265865][T12786] netlink: 'syz.0.4442': attribute type 10 has an invalid length. [ 109.273904][T12786] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4442'. [ 109.299318][T12786] dummy0: entered promiscuous mode [ 109.304570][T12786] dummy0: left allmulticast mode [ 109.310920][T12790] netlink: 252 bytes leftover after parsing attributes in process `syz.1.4445'. [ 109.372160][T12799] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4450'. [ 109.402005][T12803] netlink: 'syz.1.4451': attribute type 3 has an invalid length. [ 109.414332][T12803] netlink: 'syz.1.4451': attribute type 3 has an invalid length. [ 109.854646][T12855] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 110.172066][T12885] bond3: entered promiscuous mode [ 110.177194][T12885] bond3: entered allmulticast mode [ 110.188511][T12885] 8021q: adding VLAN 0 to HW filter on device bond3 [ 110.227456][T12885] bond3 (unregistering): Released all slaves [ 110.442798][T12920] netlink: 'syz.1.4506': attribute type 12 has an invalid length. [ 110.751677][T12961] netlink: 'syz.2.4528': attribute type 21 has an invalid length. [ 110.759639][T12961] netlink: 'syz.2.4528': attribute type 1 has an invalid length. [ 110.767532][T12961] netlink: 100 bytes leftover after parsing attributes in process `syz.2.4528'. [ 110.813780][T12969] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 110.824471][T12969] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 110.831645][T12971] netlink: 'syz.2.4533': attribute type 21 has an invalid length. [ 110.831856][T12971] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4533'. [ 111.032432][T13002] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 111.248527][T13032] openvswitch: netlink: Flow key attr not present in new flow. [ 111.533235][T13075] loop3: detected capacity change from 0 to 764 [ 111.841369][T13104] loop1: detected capacity change from 0 to 512 [ 111.903527][T13104] EXT4-fs (loop1): orphan cleanup on readonly fs [ 111.943803][T13104] EXT4-fs warning (device loop1): ext4_xattr_inode_get:556: inode #11: comm syz.1.4598: EA inode hash validation failed [ 111.971371][T13104] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 111.984576][T13104] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #15: comm syz.1.4598: corrupted inode contents [ 112.005964][T13104] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #15: comm syz.1.4598: mark_inode_dirty error [ 112.030679][T13104] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #15: comm syz.1.4598: corrupted inode contents [ 112.095020][T13104] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2991: inode #15: comm syz.1.4598: mark_inode_dirty error [ 112.153541][T13104] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2994: inode #15: comm syz.1.4598: mark inode dirty (error -117) [ 112.180600][T13104] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 112.211978][T13104] EXT4-fs (loop1): 1 orphan inode deleted [ 112.237597][T13104] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 112.310086][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.387087][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 112.387104][ T29] audit: type=1400 audit(2000000047.750:11327): avc: denied { connect } for pid=13182 comm="syz.3.4638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 112.488910][T13198] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 112.497674][T13200] loop4: detected capacity change from 0 to 512 [ 112.501042][T13198] bond0: (slave lo): Error: Device can not be enslaved while up [ 112.509039][T13200] EXT4-fs: Ignoring removed nobh option [ 112.561657][T13200] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.4646: corrupted inode contents [ 112.588158][T13200] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #3: comm syz.4.4646: mark_inode_dirty error [ 112.626185][T13200] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.4646: corrupted inode contents [ 112.651643][T13200] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #3: comm syz.4.4646: mark_inode_dirty error [ 112.675770][T13200] Quota error (device loop4): write_blk: dquota write failed [ 112.688839][T13228] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 112.689575][T13200] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 112.696163][T13228] IPv6: NLM_F_CREATE should be set when creating new route [ 112.739563][T13200] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.4646: Failed to acquire dquot type 0 [ 112.756582][T13200] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.4646: corrupted inode contents [ 112.777047][T13200] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #16: comm syz.4.4646: mark_inode_dirty error [ 112.795455][T13237] loop2: detected capacity change from 0 to 512 [ 112.806289][ T29] audit: type=1400 audit(2000000048.150:11328): avc: denied { view } for pid=13241 comm="syz.0.4665" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 112.839326][T13200] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.4646: corrupted inode contents [ 112.861049][T13237] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 112.861088][T13237] System zones: 0-2, 18-18, 34-34 [ 112.885577][T13237] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 112.887063][T13200] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.4646: mark_inode_dirty error [ 112.913184][T13200] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.4646: corrupted inode contents [ 112.925505][T13200] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 112.925675][T13200] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.4646: corrupted inode contents [ 112.946467][T13237] EXT4-fs (loop2): Remounting filesystem read-only [ 112.948378][T13237] EXT4-fs (loop2): 1 truncate cleaned up [ 112.953087][T13200] EXT4-fs error (device loop4): ext4_truncate:4666: inode #16: comm syz.4.4646: mark_inode_dirty error [ 112.969952][ T2848] Quota error (device loop2): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 112.970007][ T2848] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 112.982842][T13237] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.992881][ T2848] Quota error (device loop2): write_blk: dquota write failed [ 112.992898][ T2848] Quota error (device loop2): remove_free_dqentry: Can't write block (5) with free entries [ 113.005536][T13237] ext4 filesystem being mounted at /870/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.012784][ T2848] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 113.012808][ T2848] Quota error (device loop2): write_blk: dquota write failed [ 113.051333][ T2848] Quota error (device loop2): free_dqentry: Can't move quota data block (5) to free list [ 113.061828][ T2848] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 113.061927][ T2848] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 113.064690][T13200] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 113.118246][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.142959][T13200] EXT4-fs (loop4): 1 truncate cleaned up [ 113.143367][T13200] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.143442][T13200] ext4 filesystem being mounted at /942/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.236427][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.450070][T13307] __nla_validate_parse: 4 callbacks suppressed [ 113.450091][T13307] netlink: 228 bytes leftover after parsing attributes in process `syz.3.4696'. [ 113.661515][T13337] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4711'. [ 113.714487][T13343] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4714'. [ 113.750010][T13349] netlink: 7 bytes leftover after parsing attributes in process `syz.1.4717'. [ 113.789912][T13349] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4717'. [ 113.812373][T13354] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 113.861842][T13360] delete_channel: no stack [ 114.367169][T13438] tipc: Trying to set illegal importance in message [ 114.749588][T13499] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4791'. [ 114.758661][T13499] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4791'. [ 114.767746][T13499] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4791'. [ 114.820721][T13507] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4794'. [ 114.893975][T13516] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4799'. [ 114.932022][T13521] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 115.064000][T13543] unsupported nla_type 65024 [ 115.266134][T13574] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 115.342848][T13581] validate_nla: 7 callbacks suppressed [ 115.342866][T13581] netlink: 'syz.0.4833': attribute type 7 has an invalid length. [ 115.675976][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 115.687636][T13623] loop2: detected capacity change from 0 to 256 [ 115.694491][T13623] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 115.772049][T13623] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 115.993999][T13671] netlink: 'syz.2.4875': attribute type 4 has an invalid length. [ 116.020337][T13674] netlink: 'syz.1.4876': attribute type 11 has an invalid length. [ 116.055275][T13680] tmpfs: Bad value for 'mpol' [ 116.259368][T13706] ieee802154 phy0 wpan0: encryption failed: -22 [ 116.480693][T13736] netlink: 'syz.2.4907': attribute type 1 has an invalid length. [ 116.500594][T13740] IPv6: Can't replace route, no match found [ 116.509413][T13738] loop3: detected capacity change from 0 to 1024 [ 116.542706][T13738] EXT4-fs (loop3): Can't support bigalloc feature without extents feature [ 116.542706][T13738] [ 116.553571][T13738] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 116.812158][T13790] netlink: 'syz.1.4932': attribute type 1 has an invalid length. [ 116.823314][T13792] loop2: detected capacity change from 0 to 128 [ 117.038958][T13826] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 117.038958][T13826] program syz.4.4950 not setting count and/or reply_len properly [ 117.067051][T13827] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 117.086081][T13827] block device autoloading is deprecated and will be removed. [ 117.200864][T13851] syz.2.4965 (13851): attempted to duplicate a private mapping with mremap. This is not supported. [ 117.479349][T13905] SELinux: failed to load policy [ 117.545892][T13920] netlink: 'syz.0.4997': attribute type 2 has an invalid length. [ 117.553793][T13920] netlink: 'syz.0.4997': attribute type 1 has an invalid length. [ 117.617455][T13933] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 117.700220][T13942] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 117.921256][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 117.921274][ T29] audit: type=1326 audit(2000000053.280:11345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13970 comm="syz.2.5021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1278a4eba9 code=0x7ffc0000 [ 117.973599][ T29] audit: type=1326 audit(2000000053.310:11346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13970 comm="syz.2.5021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1278a4eba9 code=0x7ffc0000 [ 117.997304][ T29] audit: type=1326 audit(2000000053.310:11347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13970 comm="syz.2.5021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=79 compat=0 ip=0x7f1278a4eba9 code=0x7ffc0000 [ 118.020977][ T29] audit: type=1326 audit(2000000053.310:11348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13970 comm="syz.2.5021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1278a4eba9 code=0x7ffc0000 [ 118.044649][ T29] audit: type=1326 audit(2000000053.310:11349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13970 comm="syz.2.5021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1278a4eba9 code=0x7ffc0000 [ 118.288479][T14004] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 118.296137][ T29] audit: type=1400 audit(2000000053.650:11350): avc: denied { create } for pid=14002 comm="syz.0.5038" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 118.304488][T14005] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 118.371348][ T29] audit: type=1400 audit(2000000053.690:11351): avc: denied { relabelto } for pid=14002 comm="syz.0.5038" name="file0" dev="tmpfs" ino=5519 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 118.398631][ T29] audit: type=1400 audit(2000000053.690:11352): avc: denied { associate } for pid=14002 comm="syz.0.5038" name="file0" dev="tmpfs" ino=5519 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 118.449291][ T29] audit: type=1400 audit(2000000053.800:11353): avc: denied { unlink } for pid=3309 comm="syz-executor" name="file0" dev="tmpfs" ino=5519 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 118.482816][ T29] audit: type=1400 audit(2000000053.840:11354): avc: denied { remount } for pid=14022 comm="syz.0.5046" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 118.549116][T14030] __nla_validate_parse: 16 callbacks suppressed [ 118.549171][T14030] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5049'. [ 118.564585][T14030] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5049'. [ 118.579502][T14037] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5053'. [ 118.702360][T14055] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5063'. [ 118.893169][T14091] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5077'. [ 118.902239][T14091] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5077'. [ 118.972419][T14105] netlink: 'syz.0.5087': attribute type 5 has an invalid length. [ 118.980366][T14105] netlink: 168 bytes leftover after parsing attributes in process `syz.0.5087'. [ 118.989723][T14103] netlink: 'syz.2.5086': attribute type 4 has an invalid length. [ 119.022780][T14109] netlink: 'syz.0.5088': attribute type 1 has an invalid length. [ 119.327134][T14162] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5) [ 119.456896][T14182] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5124'. [ 119.476963][T14182] netlink: 3 bytes leftover after parsing attributes in process `syz.3.5124'. [ 119.541057][T14202] ------------[ cut here ]------------ [ 119.546714][T14202] verifier bug: REG INVARIANTS VIOLATION (false_reg1): range bounds violation u64=[0x10000008, 0x10000008] s64=[0x10000008, 0x10000008] u32=[0x10000008, 0x10000000] s32=[0x10000008, 0x10000008] var_off=(0x10000008, 0x0)(1) [ 119.568479][T14202] WARNING: CPU: 0 PID: 14202 at kernel/bpf/verifier.c:2728 reg_bounds_sanity_check+0x673/0x680 [ 119.579043][T14202] Modules linked in: [ 119.583014][T14202] CPU: 0 UID: 0 PID: 14202 Comm: syz.1.5133 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 119.594513][T14202] Tainted: [W]=WARN [ 119.598414][T14202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 119.608580][T14202] RIP: 0010:reg_bounds_sanity_check+0x673/0x680 [ 119.614935][T14202] Code: 7c 24 18 41 ff 74 24 20 55 41 56 4d 89 ee 53 48 8b 5c 24 30 ff 74 24 40 ff 74 24 50 ff 74 24 30 e8 e2 81 ba ff 48 83 c4 38 90 <0f> 0b 90 90 e9 02 fb ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 [ 119.634621][T14202] RSP: 0018:ffffc90010317440 EFLAGS: 00010292 [ 119.640756][T14202] RAX: 4beb57e5dabee600 RBX: ffff888124dc6c78 RCX: 0000000000080000 [ 119.648837][T14202] RDX: ffffc90001de1000 RSI: 0000000000009a74 RDI: 0000000000009a75 [ 119.656918][T14202] RBP: 0000000010000008 R08: 0001c9001031727f R09: 0000000000000000 [ 119.664908][T14202] R10: 00000000ffffffff R11: 0000000000000002 R12: ffff888124dc6c38 [ 119.672939][T14202] R13: ffff888122df0000 R14: ffff888122df0000 R15: ffff888124dc6c70 [ 119.681015][T14202] FS: 00007fc567bf76c0(0000) GS:ffff8882aee40000(0000) knlGS:0000000000000000 [ 119.690013][T14202] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 119.696655][T14202] CR2: 0000200000002000 CR3: 0000000128eb6000 CR4: 00000000003506f0 [ 119.704700][T14202] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 119.712726][T14202] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 119.720833][T14202] Call Trace: [ 119.724223][T14202] [ 119.727214][T14202] reg_set_min_max+0x215/0x260 [ 119.732028][T14202] check_cond_jmp_op+0x1013/0x16e0 [ 119.737282][T14202] do_check+0x332a/0x7a10 [ 119.741705][T14202] ? __account_obj_stock+0x2cc/0x350 [ 119.747069][T14202] ? __rcu_read_unlock+0x4f/0x70 [ 119.752114][T14202] ? __pfx_verbose+0x10/0x10 [ 119.756754][T14202] ? __pfx_disasm_kfunc_name+0x10/0x10 [ 119.762308][T14202] do_check_common+0xc3a/0x12a0 [ 119.767308][T14202] ? __pfx_disasm_kfunc_name+0x10/0x10 [ 119.772808][T14202] bpf_check+0x942b/0xd9e0 [ 119.777362][T14202] ? __rcu_read_unlock+0x4f/0x70 [ 119.782339][T14202] ? __alloc_frozen_pages_noprof+0x188/0x360 [ 119.788469][T14202] ? alloc_pages_bulk_noprof+0x4b8/0x540 [ 119.794191][T14202] ? __vmap_pages_range_noflush+0xbc4/0xcf0 [ 119.800169][T14202] ? try_charge_memcg+0x200/0x9e0 [ 119.805296][T14202] ? pcpu_block_update_hint_alloc+0x63d/0x660 [ 119.811441][T14202] ? pcpu_block_update_hint_alloc+0x63d/0x660 [ 119.817643][T14202] ? css_rstat_updated+0xb7/0x240 [ 119.822728][T14202] ? __rcu_read_unlock+0x4f/0x70 [ 119.827756][T14202] ? pcpu_memcg_post_alloc_hook+0xf1/0x150 [ 119.833595][T14202] ? should_fail_ex+0x30/0x280 [ 119.838256][T14227] loop2: detected capacity change from 0 to 256 [ 119.838439][T14202] ? selinux_bpf_prog_load+0x36/0xf0 [ 119.850104][T14202] ? should_failslab+0x8c/0xb0 [ 119.854941][T14202] ? __kmalloc_cache_noprof+0x189/0x320 [ 119.860586][T14202] ? selinux_bpf_prog_load+0xbf/0xf0 [ 119.866032][T14202] ? security_bpf_prog_load+0x2c/0xa0 [ 119.871437][T14202] bpf_prog_load+0xedd/0x1070 [ 119.876254][T14202] ? security_bpf+0x2b/0x90 [ 119.880861][T14202] __sys_bpf+0x462/0x7b0 [ 119.882426][T14237] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5151'. [ 119.885223][T14202] __x64_sys_bpf+0x41/0x50 [ 119.898583][T14202] x64_sys_call+0x2aea/0x2ff0 [ 119.903283][T14202] do_syscall_64+0xd2/0x200 [ 119.907870][T14202] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 119.914040][T14202] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 119.919840][T14202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.925757][T14202] RIP: 0033:0x7fc56918eba9 [ 119.930238][T14202] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.949888][T14202] RSP: 002b:00007fc567bf7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 119.958337][T14202] RAX: ffffffffffffffda RBX: 00007fc5693d5fa0 RCX: 00007fc56918eba9 [ 119.966338][T14202] RDX: 0000000000000094 RSI: 0000200000000180 RDI: 0000000000000005 [ 119.974413][T14202] RBP: 00007fc569211e19 R08: 0000000000000000 R09: 0000000000000000 [ 119.982619][T14202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 119.990931][T14202] R13: 00007fc5693d6038 R14: 00007fc5693d5fa0 R15: 00007ffde4327d68 [ 119.998982][T14202] [ 120.002032][T14202] ---[ end trace 0000000000000000 ]--- [ 120.174299][T14264] loop2: detected capacity change from 0 to 1024 [ 120.186987][T14264] EXT4-fs: Ignoring removed oldalloc option [ 120.216595][T14264] EXT4-fs: inline encryption not supported [ 120.225768][T14264] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 120.242371][T14264] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 2: comm syz.2.5163: lblock 2 mapped to illegal pblock 2 (length 1) [ 120.259063][T14264] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.5163: lblock 0 mapped to illegal pblock 48 (length 1) [ 120.277408][T14264] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.5163: Failed to acquire dquot type 0 [ 120.305431][T14264] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 120.336043][T14264] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.5163: mark_inode_dirty error [ 120.372264][T14290] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 120.397406][T14264] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 120.408151][T14264] EXT4-fs (loop2): 1 orphan inode deleted [ 120.414483][T14264] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.427156][ T377] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 120.448054][ T377] EXT4-fs error (device loop2): ext4_release_dquot:6973: comm kworker/u8:5: Failed to release dquot type 0 [ 120.466016][T14264] EXT4-fs error (device loop2): __ext4_get_inode_loc:4861: comm syz.2.5163: Invalid inode table block 1 in block_group 0 [ 120.488119][T14264] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 120.517742][T14304] bond3: entered promiscuous mode [ 120.522884][T14304] bond3: entered allmulticast mode [ 120.528409][T14304] 8021q: adding VLAN 0 to HW filter on device bond3 [ 120.537303][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.557512][ T377] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 120.614931][ T377] EXT4-fs error (device loop2): ext4_release_dquot:6973: comm kworker/u8:5: Failed to release dquot type 0 [ 120.632416][ T3308] EXT4-fs error (device loop2): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 120.659363][ T3308] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 120.676021][ T3308] EXT4-fs error (device loop2): ext4_quota_off:7221: inode #3: comm syz-executor: mark_inode_dirty error [ 120.772620][T14349] tunl0: left promiscuous mode [ 120.777523][T14349] tunl0: left allmulticast mode [ 120.800561][T14349] gre0: left allmulticast mode [ 120.806737][T14349] 0XD: left allmulticast mode [ 120.822365][T14349] erspan0: left allmulticast mode [ 120.843751][T14349] ip_vti0: left allmulticast mode [ 120.867149][T14349] ip6_vti0: left allmulticast mode [ 120.874694][T14349] sit0: left allmulticast mode [ 120.880747][T14349] ip6tnl0: left allmulticast mode [ 120.896236][T14349] ip6gre0: left allmulticast mode [ 120.913826][T14349] syz_tun: left allmulticast mode [ 120.926944][T14349] ip6gretap0: left allmulticast mode [ 120.935523][T14349] bridge0: left allmulticast mode [ 120.942659][T14349] vcan0: left allmulticast mode [ 120.949057][T14349] $X: left promiscuous mode [ 120.953862][T14349] bond_slave_0: left promiscuous mode [ 120.959457][T14349] bond_slave_1: left promiscuous mode [ 120.965062][T14349] $X: left allmulticast mode [ 120.970010][T14349] bond_slave_0: left allmulticast mode [ 120.975482][T14349] bond_slave_1: left allmulticast mode [ 120.981120][T14349] macvlan1: left allmulticast mode [ 120.986296][T14349] veth1_vlan: left allmulticast mode [ 120.997510][T14349] team0: left allmulticast mode [ 121.002445][T14349] team_slave_0: left allmulticast mode [ 121.008172][T14349] team_slave_1: left allmulticast mode [ 121.016187][T14349] dummy0: left promiscuous mode [ 121.021082][T14349] dummy0: left allmulticast mode [ 121.027350][T14349] nlmon0: left allmulticast mode [ 121.035041][T14349] caif0: left allmulticast mode [ 121.040047][T14349] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 121.159291][T14400] validate_nla: 3 callbacks suppressed [ 121.159306][T14400] netlink: 'syz.2.5228': attribute type 3 has an invalid length. [ 121.364632][T14434] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 121.430180][T14440] gre1: entered allmulticast mode [ 121.544799][T14463] loop3: detected capacity change from 0 to 512 [ 121.561083][T14463] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 121.573147][T14463] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 121.573387][T14463] EXT4-fs (loop3): 1 truncate cleaned up [ 121.573762][T14463] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.606972][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.627279][T14470] ip6gretap3: entered allmulticast mode [ 121.666986][T14475] loop1: detected capacity change from 0 to 736 [ 121.769083][T14486] ip6gre1: entered allmulticast mode [ 121.910227][T14508] loop3: detected capacity change from 0 to 1024 [ 121.924187][T14508] EXT4-fs: Ignoring removed oldalloc option [ 121.933585][T14508] EXT4-fs: inline encryption not supported [ 121.960483][T14508] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 121.996188][T14508] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 2: comm syz.3.5279: lblock 2 mapped to illegal pblock 2 (length 1) [ 122.010701][T14508] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.5279: lblock 0 mapped to illegal pblock 48 (length 1) [ 122.027944][T14508] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.5279: Failed to acquire dquot type 0 [ 122.046073][T14508] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 122.056398][T14508] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.5279: mark_inode_dirty error [ 122.071998][T14532] loop1: detected capacity change from 0 to 764 [ 122.081318][T14508] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 122.091672][T14508] EXT4-fs (loop3): 1 orphan inode deleted [ 122.107003][ T377] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 122.121827][T14532] Symlink component flag not implemented [ 122.127735][T14532] Symlink component flag not implemented (116) [ 122.134717][T14508] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.152419][ T377] EXT4-fs error (device loop3): ext4_release_dquot:6973: comm kworker/u8:5: Failed to release dquot type 0 [ 122.154816][T14538] netlink: 'syz.4.5295': attribute type 21 has an invalid length. [ 122.180309][T14538] netlink: 'syz.4.5295': attribute type 1 has an invalid length. [ 122.189616][T14508] EXT4-fs error (device loop3): __ext4_get_inode_loc:4861: comm syz.3.5279: Invalid inode table block 1 in block_group 0 [ 122.211478][T14508] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 122.241756][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.256454][ T377] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 122.296585][ T377] EXT4-fs error (device loop3): ext4_release_dquot:6973: comm kworker/u8:5: Failed to release dquot type 0 [ 122.326196][ T3315] EXT4-fs error (device loop3): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 122.352735][ T3315] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 122.364132][ T3315] EXT4-fs error (device loop3): ext4_quota_off:7221: inode #3: comm syz-executor: mark_inode_dirty error [ 122.447744][T14579] Unsupported ieee802154 address type: 0 [ 122.513822][T14595] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.521357][T14595] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.533765][T14601] netlink: 'syz.4.5321': attribute type 8 has an invalid length. [ 122.545281][T14595] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.552756][T14595] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.603637][T14617] netlink: 'syz.4.5326': attribute type 24 has an invalid length. [ 123.006208][T14686] netlink: 'syz.1.5352': attribute type 1 has an invalid length. [ 123.167022][T14725] netlink: 'syz.3.5368': attribute type 1 has an invalid length. [ 123.174889][T14725] netlink: 'syz.3.5368': attribute type 1 has an invalid length. [ 123.182742][T14725] netlink: 'syz.3.5368': attribute type 2 has an invalid length. [ 123.240889][T14736] loop3: detected capacity change from 0 to 512 [ 123.280856][T14736] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 123.298565][T14736] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.347052][T14736] ext4 filesystem being mounted at /1046/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.389118][T14736] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.5372: corrupted xattr block 19: overlapping e_value [ 123.418722][T14776] netlink: 'syz.4.5388': attribute type 3 has an invalid length. [ 123.443457][T14736] EXT4-fs (loop3): Remounting filesystem read-only [ 123.450207][T14736] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 123.457392][T14783] SELinux: Context :syz3:M:18446744073709551614:{ jᴒw`+K2 -~(D@ is not valid (left unmapped). [ 123.459908][T14736] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 123.483855][T14784] (unnamed net_device) (uninitialized): option ad_select: invalid value (34) [ 123.526703][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.594957][T14818] (unnamed net_device) (uninitialized): option lacp_active: invalid value (3) [ 123.622809][T14824] __nla_validate_parse: 16 callbacks suppressed [ 123.622829][T14824] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5401'. [ 123.876711][T14882] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5424'. [ 123.886397][T14883] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 123.905271][T14883] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 123.923119][T14889] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5425'. [ 123.982227][T14912] IPVS: set_ctl: invalid protocol: 196 172.20.20.187:20000 [ 124.097368][T14939] usb usb1: usbfs: process 14939 (syz.2.5442) did not claim interface 0 before use [ 124.174919][T14956] netlink: 92 bytes leftover after parsing attributes in process `syz.3.5450'. [ 124.184000][T14956] netlink: 92 bytes leftover after parsing attributes in process `syz.3.5450'. [ 124.323091][ T29] kauditd_printk_skb: 42 callbacks suppressed [ 124.323107][ T29] audit: type=1326 audit(2000000059.680:11389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14994 comm="syz.3.5464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe409feeba9 code=0x7ffc0000 [ 124.355754][T14998] IPVS: length: 166 != 8 [ 124.380799][ T29] audit: type=1326 audit(2000000059.710:11390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14994 comm="syz.3.5464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe409feeba9 code=0x7ffc0000 [ 124.404464][ T29] audit: type=1326 audit(2000000059.710:11391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14994 comm="syz.3.5464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=260 compat=0 ip=0x7fe409feeba9 code=0x7ffc0000 [ 124.428080][ T29] audit: type=1326 audit(2000000059.710:11392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14994 comm="syz.3.5464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe409feeba9 code=0x7ffc0000 [ 124.451718][ T29] audit: type=1326 audit(2000000059.710:11393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14994 comm="syz.3.5464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe409feeba9 code=0x7ffc0000 [ 124.570255][T15035] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5477'. [ 124.588585][T15035] veth1_vlan: left promiscuous mode [ 124.596463][T15035] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 124.713012][T15063] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5488'. [ 124.734955][T15063] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5488'. [ 124.744112][T15063] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5488'. [ 124.848742][ T29] audit: type=1400 audit(2000000060.210:11394): avc: denied { ioctl } for pid=15085 comm="syz.0.5496" path="socket:[43172]" dev="sockfs" ino=43172 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 124.912006][ T29] audit: type=1400 audit(2000000060.260:11395): avc: denied { getopt } for pid=15090 comm="syz.4.5498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 124.940117][T15098] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5501'. [ 124.961408][T15098] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 125.472520][T15232] loop2: detected capacity change from 0 to 512 [ 125.500168][T15232] EXT4-fs: Ignoring removed bh option [ 125.510816][T15232] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 125.520099][T15232] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 125.538480][T15232] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 125.549160][T15232] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 125.559776][T15232] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.581961][ T29] audit: type=1400 audit(2000000060.940:11396): avc: denied { link } for pid=15231 comm="syz.2.5552" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 125.604681][T15232] EXT4-fs error (device loop2): ext4_find_dest_de:2052: inode #2: block 3: comm syz.2.5552: bad entry in directory: inode out of bounds - offset=24, inode=134217739, rec_len=20, size=2048 fake=0 [ 125.700057][T15273] $H: renamed from bond0 (while UP) [ 125.703742][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.717537][T15273] $H: entered promiscuous mode [ 125.857042][T15307] program syz.4.5577 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 126.395651][T15437] $H: renamed from bond0 [ 126.405066][T15437] $H: entered promiscuous mode [ 126.437290][T15449] nfs: Unexpected value for 'lock' [ 126.438207][T15450] validate_nla: 10 callbacks suppressed [ 126.438224][T15450] netlink: 'syz.3.5630': attribute type 2 has an invalid length. [ 126.485191][T15456] bridge6: entered promiscuous mode [ 126.568583][T15507] loop2: detected capacity change from 0 to 1024 [ 126.569483][ T29] audit: type=1400 audit(2000000061.910:11397): avc: denied { setattr } for pid=15504 comm="syz.0.5639" name="ptmx" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ptmx_t tclass=chr_file permissive=1 [ 126.577414][T15507] EXT4-fs: Ignoring removed nomblk_io_submit option [ 126.633561][T15507] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 126.649982][T15507] System zones: 0-1, 3-12 [ 126.654804][T15507] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.702389][T15507] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.5640: bg 0: block 88: padding at end of block bitmap is not set [ 126.757084][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.949222][ T29] audit: type=1400 audit(2000000062.300:11398): avc: denied { read } for pid=15578 comm="syz.1.5665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 127.095578][T15615] netlink: 'syz.2.5680': attribute type 1 has an invalid length. [ 127.166732][T15635] netlink: 'syz.3.5687': attribute type 1 has an invalid length. [ 127.305630][T15669] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744072817436012) [ 127.315939][T15669] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 127.327040][T15658] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 127.334356][T15658] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 127.407992][T15688] netlink: 'syz.1.5707': attribute type 12 has an invalid length. [ 127.488941][T15699] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 127.496458][T15699] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 127.568848][ T31] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 127.590874][ T31] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 127.611899][ T31] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 127.620854][ T31] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 127.716593][T15750] netlink: 'syz.2.5729': attribute type 21 has an invalid length. [ 127.928611][T15815] netlink: 'syz.0.5752': attribute type 16 has an invalid length. [ 128.052444][T15850] netlink: 'syz.4.5761': attribute type 21 has an invalid length. [ 128.212188][T15887] : renamed from vlan0 (while UP) [ 128.320944][T15918] loop3: detected capacity change from 0 to 512 [ 128.491304][T15963] qrtr: Invalid version 183 [ 128.497414][T15962] netlink: 'syz.0.5804': attribute type 10 has an invalid length. [ 128.620951][T15992] netlink: 'syz.1.5814': attribute type 1 has an invalid length. [ 128.629137][T15993] random: crng reseeded on system resumption [ 128.657684][T15999] __nla_validate_parse: 28 callbacks suppressed [ 128.657702][T15999] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5817'. [ 128.779491][T16023] veth2: entered allmulticast mode [ 128.877924][T16051] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 128.885039][T16051] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 128.892728][T16051] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 128.997275][T16077] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5848'. [ 129.006315][T16077] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5848'. [ 129.015674][T16078] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 129.028093][T16078] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 129.277312][T16171] netlink: 'syz.1.5870': attribute type 20 has an invalid length. [ 129.384520][T16191] netlink: 212 bytes leftover after parsing attributes in process `syz.4.5879'. [ 129.558445][T16233] netlink: 400 bytes leftover after parsing attributes in process `syz.0.5895'. [ 129.845146][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 129.845165][ T29] audit: type=1400 audit(2000000065.200:11423): avc: denied { accept } for pid=16305 comm="syz.0.5922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 129.906084][ T5399] IPVS: starting estimator thread 0... [ 129.964322][T16328] gre2: entered promiscuous mode [ 129.996028][T16315] IPVS: using max 2448 ests per chain, 122400 per kthread [ 130.027156][T16345] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5935'. [ 130.049462][T16345] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5935'. [ 130.125879][T16368] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5944'. [ 130.137773][T16373] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.5946'. [ 130.161487][T16368] bridge8: entered promiscuous mode [ 130.166790][T16368] bridge8: entered allmulticast mode [ 130.186156][T16370] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 130.199988][T16386] loop2: detected capacity change from 0 to 512 [ 130.207800][T16370] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 130.253611][ T29] audit: type=1326 audit(2000000065.610:11424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16393 comm="syz.4.5953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd87129eba9 code=0x7ffc0000 [ 130.288618][T16386] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.5950: error while reading EA inode 32 err=-116 [ 130.303612][ T29] audit: type=1326 audit(2000000065.640:11425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16393 comm="syz.4.5953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd87129eba9 code=0x7ffc0000 [ 130.327383][ T29] audit: type=1326 audit(2000000065.640:11426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16393 comm="syz.4.5953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7fd87129eba9 code=0x7ffc0000 [ 130.344722][T16386] EXT4-fs (loop2): Remounting filesystem read-only [ 130.351203][ T29] audit: type=1326 audit(2000000065.640:11427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16393 comm="syz.4.5953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd87129eba9 code=0x7ffc0000 [ 130.357642][T16386] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 130.391396][ T29] audit: type=1326 audit(2000000065.640:11428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16393 comm="syz.4.5953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd87129eba9 code=0x7ffc0000 [ 130.393560][T16386] EXT4-fs (loop2): 1 orphan inode deleted [ 130.415043][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 130.444617][T16386] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.498936][T16386] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.647223][T16459] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5976'. [ 130.994772][T16546] batadv0: entered promiscuous mode [ 131.000912][T16546] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.019720][ T29] audit: type=1400 audit(2000000066.380:11429): avc: denied { read } for pid=3032 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 131.076202][ T29] audit: type=1400 audit(2000000066.430:11430): avc: denied { search } for pid=3032 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 131.097770][ T29] audit: type=1400 audit(2000000066.430:11431): avc: denied { search } for pid=3032 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 131.119585][ T29] audit: type=1400 audit(2000000066.430:11432): avc: denied { search } for pid=3032 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 131.303460][T16614] random: crng reseeded on system resumption [ 131.367548][T16628] loop1: detected capacity change from 0 to 512 [ 131.382835][T16628] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 131.394530][T16628] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.6027: bg 0: block 4: invalid block bitmap [ 131.407517][T16628] EXT4-fs (loop1): Remounting filesystem read-only [ 131.414210][T16628] EXT4-fs (loop1): 1 truncate cleaned up [ 131.420496][T16628] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.448969][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.550683][T16660] loop1: detected capacity change from 0 to 128 [ 132.061352][T16788] validate_nla: 3 callbacks suppressed [ 132.061367][T16788] netlink: 'syz.3.6057': attribute type 3 has an invalid length. [ 132.200353][T16811] netlink: 'syz.2.6066': attribute type 4 has an invalid length. [ 132.528673][T16868] netlink: 'syz.0.6087': attribute type 10 has an invalid length. [ 133.157208][T16947] __vm_enough_memory: pid: 16947, comm: syz.0.6119, bytes: 4503599627366400 not enough memory for the allocation [ 133.271572][T16961] netlink: 'syz.3.6124': attribute type 39 has an invalid length. [ 133.341478][T16973] loop2: detected capacity change from 0 to 512 [ 133.399203][T16973] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 133.437151][T16973] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.454561][T16994] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 133.515289][T17010] sctp: [Deprecated]: syz.1.6140 (pid 17010) Use of int in maxseg socket option. [ 133.515289][T17010] Use struct sctp_assoc_value instead [ 133.541738][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.551660][T17014] netlink: 'syz.4.6141': attribute type 5 has an invalid length. [ 133.852542][T17085] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 133.871143][T17086] netlink: 'syz.4.6166': attribute type 1 has an invalid length. [ 133.981475][T17108] program syz.1.6177 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 134.334991][T17189] netlink: 'syz.1.6207': attribute type 1 has an invalid length. [ 134.342897][T17189] __nla_validate_parse: 6 callbacks suppressed [ 134.342961][T17189] netlink: 228 bytes leftover after parsing attributes in process `syz.1.6207'. [ 134.386799][T17198] loop2: detected capacity change from 0 to 128 [ 134.436362][T17204] loop3: detected capacity change from 0 to 512 [ 134.454907][T17204] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 134.502509][T17204] EXT4-fs (loop3): 1 orphan inode deleted [ 134.508319][T17204] EXT4-fs (loop3): 1 truncate cleaned up [ 134.525514][T17204] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.571012][T17232] loop4: detected capacity change from 0 to 128 [ 134.587761][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.624677][T17232] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 134.648104][T17240] tmpfs: Bad value for 'mpol' [ 134.659444][T17232] ext4 filesystem being mounted at /1278/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 134.826240][T17232] EXT4-fs error (device loop4): ext4_validate_block_bitmap:423: comm syz.4.6219: bg 0: bad block bitmap checksum [ 134.858681][T17268] loop1: detected capacity change from 0 to 512 [ 134.875334][ T3311] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 134.896866][T17268] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.6231: Invalid inode bitmap blk 4 in block_group 0 [ 134.944675][T17268] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.947377][T17287] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6238'. [ 134.993540][T17268] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 135.022591][T17335] loop2: detected capacity change from 0 to 512 [ 135.034989][T17337] SELinux: failed to load policy [ 135.047746][T17335] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 135.051369][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.064392][T17335] EXT4-fs (loop2): 1 truncate cleaned up [ 135.079011][T17335] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.080312][T17343] netlink: 'syz.3.6244': attribute type 5 has an invalid length. [ 135.093460][T17335] EXT4-fs error (device loop2): ext4_append:79: inode #2: comm syz.2.6241: Logical block already allocated [ 135.111360][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 135.111377][ T29] audit: type=1400 audit(2000000070.450:11452): avc: denied { create } for pid=17333 comm="syz.2.6241" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=blk_file permissive=1 [ 135.160297][T17356] netlink: 'syz.1.6243': attribute type 6 has an invalid length. [ 135.173501][T17335] EXT4-fs (loop2): Remounting filesystem read-only [ 135.208780][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.231269][T17368] Option 'ڼeF 2͂ K*Ϫ,۟nyB6f[A [ 135.231269][T17368] Q׿2:[kz' to dns_resolver key: bad/missing value [ 135.389808][T17407] netlink: 'syz.4.6263': attribute type 29 has an invalid length. [ 135.561847][T17440] loop4: detected capacity change from 0 to 512 [ 135.570130][T17431] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.577355][T17431] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.611104][T17450] loop3: detected capacity change from 0 to 512 [ 135.638651][T17450] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.6278: corrupted in-inode xattr: invalid ea_ino [ 135.662535][T17450] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.6278: couldn't read orphan inode 15 (err -117) [ 135.675467][T17450] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.740952][T17431] vlan0: left allmulticast mode [ 135.745961][T17431] veth0_vlan: left allmulticast mode [ 135.777175][T17431] macvlan1: left promiscuous mode [ 135.804832][T17431] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 135.816911][T17431] bond1: left allmulticast mode [ 135.866463][T17431] gre2: left promiscuous mode [ 136.016507][T17501] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6295'. [ 136.077492][ T3419] syz1: Port: 1 Link DOWN [ 136.081960][ T377] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.119286][ T377] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.163764][ T377] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.257826][T17529] netlink: 288 bytes leftover after parsing attributes in process `syz.2.6304'. [ 136.404658][T17552] loop2: detected capacity change from 0 to 1024 [ 136.419971][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.434452][T17552] EXT4-fs: Ignoring removed bh option [ 136.448418][T17552] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.486805][T17572] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6316'. [ 136.513994][ T29] audit: type=1400 audit(2000000071.870:11453): avc: denied { rename } for pid=17548 comm="syz.2.6312" name="file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 136.563430][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.573518][T17585] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 136.584758][T17585] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 136.636299][ T29] audit: type=1400 audit(2000000071.990:11454): avc: denied { listen } for pid=17596 comm="syz.4.6327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 136.816142][T17641] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6341'. [ 136.841294][T17644] kernel profiling enabled (shift: 9) [ 136.869001][T17649] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6343'. [ 136.894182][T17649] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (40192) [ 136.991431][T17677] loop4: detected capacity change from 0 to 512 [ 137.016974][ T29] audit: type=1400 audit(2000000072.370:11455): avc: denied { bind } for pid=17685 comm="syz.3.6357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 137.105334][T17703] netlink: 84 bytes leftover after parsing attributes in process `syz.1.6362'. [ 137.114687][T17703] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6362'. [ 137.123696][T17703] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6362'. [ 137.133513][T17677] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.169127][T17677] ext4 filesystem being mounted at /1320/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.215627][T17677] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 137.295718][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.395833][ T29] audit: type=1326 audit(2000000072.750:11456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17762 comm="syz.4.6386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd87129eba9 code=0x7ffc0000 [ 137.454702][ T29] audit: type=1326 audit(2000000072.780:11457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17762 comm="syz.4.6386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7fd87129eba9 code=0x7ffc0000 [ 137.478425][ T29] audit: type=1326 audit(2000000072.780:11458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17762 comm="syz.4.6386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd87129eba9 code=0x7ffc0000 [ 137.478999][T17781] ip6tnl0: entered promiscuous mode [ 137.502015][ T29] audit: type=1326 audit(2000000072.780:11459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17762 comm="syz.4.6386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd87129eba9 code=0x7ffc0000 [ 137.539480][T17777] validate_nla: 1 callbacks suppressed [ 137.539494][T17777] netlink: 'syz.4.6389': attribute type 1 has an invalid length. [ 137.656984][T17810] netlink: 'syz.1.6400': attribute type 1 has an invalid length. [ 137.736205][T17819] loop2: detected capacity change from 0 to 2048 [ 137.792500][T17830] 0XD: left allmulticast mode [ 137.802076][ T9225] loop2: p1 < > p4 [ 137.808152][ T9225] loop2: p4 size 8388608 extends beyond EOD, truncated [ 137.831598][T17819] loop2: p1 < > p4 [ 137.836297][T17819] loop2: p4 size 8388608 extends beyond EOD, truncated [ 137.856037][ T29] audit: type=1400 audit(2000000073.210:11460): avc: denied { read } for pid=17818 comm="syz.2.6403" name="loop2p4" dev="devtmpfs" ino=1048 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 137.879214][ T29] audit: type=1400 audit(2000000073.210:11461): avc: denied { open } for pid=17818 comm="syz.2.6403" path="/dev/loop2p4" dev="devtmpfs" ino=1048 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 137.917270][ T9091] udevd[9091]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 137.917567][ T9225] udevd[9225]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 137.930562][T17830] $H: left promiscuous mode [ 137.947252][ T9225] udevd[9225]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 137.958551][ T9091] udevd[9091]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 138.032577][T17830] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 138.044919][T17878] loop1: detected capacity change from 0 to 512 [ 138.051567][T17830] geneve2: left promiscuous mode [ 138.056589][T17830] geneve2: left allmulticast mode [ 138.063889][T17878] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.6420: bg 0: block 16: invalid block bitmap [ 138.076582][T17830] bond1: left allmulticast mode [ 138.076885][T17878] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 138.090345][T17830] bond2: left allmulticast mode [ 138.090541][T17878] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.6420: attempt to clear invalid blocks 1669132790 len 1 [ 138.096407][T17830] ip6gre1: left promiscuous mode [ 138.110821][T17878] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.6420: invalid indirect mapped block 4294967295 (level 1) [ 138.128756][T17878] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.6420: invalid indirect mapped block 4294967295 (level 2) [ 138.142837][T17830] bridge2: left promiscuous mode [ 138.143435][T17878] EXT4-fs (loop1): 1 truncate cleaned up [ 138.154160][T17878] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.166294][T17830] bond3: left promiscuous mode [ 138.171186][T17830] bond3: left allmulticast mode [ 138.177133][T17830] ip6gretap3: left allmulticast mode [ 138.183479][ T51] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.192421][ T51] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 49733 - 0 [ 138.201545][ T51] netdevsim netdevsim3 netdevsim0: unset [1, 2] type 2 family 0 port 60982 - 0 [ 138.212060][ T51] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.220989][ T51] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 49733 - 0 [ 138.230043][ T51] netdevsim netdevsim3 netdevsim1: unset [1, 2] type 2 family 0 port 60982 - 0 [ 138.239193][ T51] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.248179][ T51] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 49733 - 0 [ 138.257179][ T51] netdevsim netdevsim3 netdevsim2: unset [1, 2] type 2 family 0 port 60982 - 0 [ 138.273527][ T51] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.282632][ T51] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 49733 - 0 [ 138.291785][ T51] netdevsim netdevsim3 netdevsim3: unset [1, 2] type 2 family 0 port 60982 - 0 [ 138.310147][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.322128][T17888] loop2: detected capacity change from 0 to 1024 [ 138.365773][T17888] EXT4-fs: Ignoring removed bh option [ 138.396222][T17888] EXT4-fs: inline encryption not supported [ 138.410875][T17888] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 138.440672][T17888] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 2: comm syz.2.6421: lblock 2 mapped to illegal pblock 2 (length 1) [ 138.467374][T17888] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.6421: lblock 0 mapped to illegal pblock 48 (length 1) [ 138.482075][T17888] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.6421: Failed to acquire dquot type 0 [ 138.494605][T17888] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 138.507018][T17888] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.6421: mark_inode_dirty error [ 138.558868][T17888] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 138.574563][T17888] EXT4-fs (loop2): 1 orphan inode deleted [ 138.584206][T17888] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.597097][ T51] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 138.616119][ T51] EXT4-fs error (device loop2): ext4_release_dquot:6973: comm kworker/u8:3: Failed to release dquot type 0 [ 138.645388][T17888] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.655847][T17888] EXT4-fs error (device loop2): __ext4_get_inode_loc:4861: comm syz.2.6421: Invalid inode table block 1 in block_group 0 [ 138.679648][T17888] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 138.710936][T17888] EXT4-fs error (device loop2): ext4_quota_off:7221: inode #3: comm syz.2.6421: mark_inode_dirty error [ 138.930590][T18010] loop1: detected capacity change from 0 to 1024 [ 138.974198][T18010] EXT4-fs: Ignoring removed bh option [ 138.996214][T18010] EXT4-fs: inline encryption not supported [ 139.015252][T18010] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 139.077580][T18010] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 2: comm syz.1.6463: lblock 2 mapped to illegal pblock 2 (length 1) [ 139.115945][T18010] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.6463: lblock 0 mapped to illegal pblock 48 (length 1) [ 139.131904][T18010] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.6463: Failed to acquire dquot type 0 [ 139.146918][T18010] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 139.170719][T18010] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.6463: mark_inode_dirty error [ 139.203199][T18010] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 139.241554][T18010] EXT4-fs (loop1): 1 orphan inode deleted [ 139.255766][T18010] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.268322][ T2848] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 139.268559][ T2848] EXT4-fs error (device loop1): ext4_release_dquot:6973: comm kworker/u8:6: Failed to release dquot type 0 [ 139.307394][T18010] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.317721][T18010] EXT4-fs error (device loop1): __ext4_get_inode_loc:4861: comm syz.1.6463: Invalid inode table block 1 in block_group 0 [ 139.360603][T18010] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 139.381795][T18010] EXT4-fs error (device loop1): ext4_quota_off:7221: inode #3: comm syz.1.6463: mark_inode_dirty error [ 139.639482][T18163] loop2: detected capacity change from 0 to 512 [ 139.818632][T18209] netlink: 'syz.4.6529': attribute type 5 has an invalid length. [ 140.038578][T18260] __nla_validate_parse: 13 callbacks suppressed [ 140.038594][T18260] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6547'. [ 140.054009][T18260] tc_dump_action: action bad kind [ 140.096374][T18273] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6553'. [ 140.105458][T18273] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6553'. [ 140.114474][T18273] netlink: 5 bytes leftover after parsing attributes in process `syz.2.6553'. [ 140.244712][T18301] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6561'. [ 140.321318][T18313] loop1: detected capacity change from 0 to 512 [ 140.362177][T18313] EXT4-fs (loop1): 1 orphan inode deleted [ 140.377037][ T377] __quota_error: 22 callbacks suppressed [ 140.377051][ T377] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 140.392676][ T377] EXT4-fs error (device loop1): ext4_release_dquot:6973: comm kworker/u8:5: Failed to release dquot type 1 [ 140.409434][T18313] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.423176][T18313] ext4 filesystem being mounted at /1286/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.479247][T18333] netlink: 'syz.2.6569': attribute type 21 has an invalid length. [ 140.497014][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.531412][T18333] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6569'. [ 140.743261][T18387] lo: left promiscuous mode [ 140.767768][T18387] $H: left promiscuous mode [ 140.775599][T18387] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 140.785396][T18387] geneve2: left allmulticast mode [ 140.792677][T18387] gtp0: left allmulticast mode [ 140.799185][T18387] ip6gre1: left allmulticast mode [ 140.805756][T18387] bridge6: left promiscuous mode [ 140.812340][ T377] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.822441][ T377] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.835593][ T377] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.866328][ T51] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.893670][ T29] audit: type=1326 audit(2000000076.250:11478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18400 comm="syz.1.6592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc56918eba9 code=0x7ffc0000 [ 140.947946][ T29] audit: type=1326 audit(2000000076.250:11479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18400 comm="syz.1.6592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7fc56918eba9 code=0x7ffc0000 [ 140.971870][ T29] audit: type=1326 audit(2000000076.250:11480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18400 comm="syz.1.6592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc56918eba9 code=0x7ffc0000 [ 140.995867][ T29] audit: type=1326 audit(2000000076.250:11481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18400 comm="syz.1.6592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc56918eba9 code=0x7ffc0000 [ 141.222597][ T29] audit: type=1326 audit(2000000076.580:11482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18467 comm="syz.0.6615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75833deba9 code=0x7ffc0000 [ 141.246279][ T29] audit: type=1326 audit(2000000076.580:11483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18467 comm="syz.0.6615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75833deba9 code=0x7ffc0000 [ 141.270185][ T29] audit: type=1326 audit(2000000076.580:11484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18467 comm="syz.0.6615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7f75833deba9 code=0x7ffc0000 [ 141.297088][ T29] audit: type=1326 audit(2000000076.580:11485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18467 comm="syz.0.6615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75833deba9 code=0x7ffc0000 [ 141.320848][ T29] audit: type=1326 audit(2000000076.580:11486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18467 comm="syz.0.6615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75833deba9 code=0x7ffc0000 [ 141.346222][T18479] veth7: entered allmulticast mode [ 141.495760][T18523] netlink: 'syz.0.6634': attribute type 3 has an invalid length. [ 141.503763][T18523] netlink: 'syz.0.6634': attribute type 3 has an invalid length. [ 141.512432][T18523] netlink: 'syz.0.6634': attribute type 3 has an invalid length. [ 141.524987][T18523] netlink: 'syz.0.6634': attribute type 3 has an invalid length. [ 141.525106][T18523] netlink: 'syz.0.6634': attribute type 3 has an invalid length. [ 141.525142][T18523] netlink: 'syz.0.6634': attribute type 3 has an invalid length. [ 141.654110][T18551] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 141.660676][T18551] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 141.668332][T18551] vhci_hcd vhci_hcd.0: Device attached [ 142.080923][T18632] openvswitch: netlink: Message has 6 unknown bytes. [ 142.137386][T18650] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6682'. [ 142.145089][T18652] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6683'. [ 142.198900][T18552] vhci_hcd: connection closed [ 142.200538][ T377] vhci_hcd: stop threads [ 142.209584][ T377] vhci_hcd: release socket [ 142.214038][ T377] vhci_hcd: disconnect device [ 142.234741][T18668] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6689'. [ 142.243707][T18668] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6689'. [ 142.376732][T18699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.401473][T18699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.410752][T18705] ip6tnl2: entered allmulticast mode [ 143.007704][T18835] syz.3.6749 (18835): /proc/18833/oom_adj is deprecated, please use /proc/18833/oom_score_adj instead. [ 143.135771][T18865] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 143.204264][T18882] validate_nla: 12 callbacks suppressed [ 143.204284][T18882] netlink: 'syz.0.6764': attribute type 4 has an invalid length. [ 143.468694][T18948] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (4) [ 143.505439][T18958] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 143.566855][T18965] bridge7: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 143.636864][T18989] loop1: detected capacity change from 0 to 256 [ 143.647405][T18989] FAT-fs (loop1): Directory bread(block 1285) failed [ 143.658174][T18989] FAT-fs (loop1): Directory bread(block 1285) failed [ 143.677435][T18989] FAT-fs (loop1): FAT read failed (blocknr 1281) [ 143.730455][T19008] loop3: detected capacity change from 0 to 764 [ 143.767979][T19008] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 143.817255][T19028] bridge_slave_0: left allmulticast mode [ 143.822980][T19028] bridge_slave_0: left promiscuous mode [ 143.828800][T19028] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.856504][T19028] bridge_slave_1: left allmulticast mode [ 143.862288][T19028] bridge_slave_1: left promiscuous mode [ 143.867981][T19028] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.881986][T19028] $X: (slave bond_slave_0): Releasing backup interface [ 143.892918][T19028] $X: (slave bond_slave_1): Releasing backup interface [ 143.905430][T19028] team0: Port device team_slave_0 removed [ 143.912329][T19028] team0: Port device team_slave_1 removed [ 143.919749][T19028] $X: (slave macvlan1): Releasing backup interface [ 143.936920][T19045] ipvlan1: entered promiscuous mode [ 143.942236][T19045] ipvlan1: entered allmulticast mode [ 144.388633][ T5399] IPVS: starting estimator thread 0... [ 144.476065][T19164] IPVS: using max 2352 ests per chain, 117600 per kthread [ 144.665430][T19234] loop1: detected capacity change from 0 to 512 [ 144.676690][T19234] EXT4-fs: Ignoring removed bh option [ 144.706694][T19234] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 144.715944][T19234] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 144.746218][T19234] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 144.790156][T19234] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 144.839672][T19234] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.910641][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.417056][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 145.417110][ T29] audit: type=1326 audit(2000000080.780:11510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19341 comm="syz.0.6922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75833deba9 code=0x7ffc0000 [ 145.453075][T19351] netlink: 'syz.2.6923': attribute type 4 has an invalid length. [ 145.461131][T19351] __nla_validate_parse: 6 callbacks suppressed [ 145.461143][T19351] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6923'. [ 145.492906][T19356] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6925'. [ 145.511285][ T29] audit: type=1326 audit(2000000080.820:11511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19341 comm="syz.0.6922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7f75833deba9 code=0x7ffc0000 [ 145.535010][ T29] audit: type=1326 audit(2000000080.820:11512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19341 comm="syz.0.6922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75833deba9 code=0x7ffc0000 [ 145.536571][T19351] A link change request failed with some changes committed already. Interface $H may have been left with an inconsistent configuration, please check. [ 145.558969][ T29] audit: type=1326 audit(2000000080.820:11513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19341 comm="syz.0.6922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75833deba9 code=0x7ffc0000 [ 145.685604][T19377] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6931'. [ 145.776236][T19403] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6942'. [ 145.905503][T19433] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6952'. [ 145.961216][T19441] loop3: detected capacity change from 0 to 4096 [ 145.976269][T19451] veth0_to_bridge: entered promiscuous mode [ 145.984145][T19451] A link change request failed with some changes committed already. Interface veth0_to_bridge may have been left with an inconsistent configuration, please check. [ 146.001077][T19447] netlink: 232 bytes leftover after parsing attributes in process `syz.4.6957'. [ 146.043438][T19441] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.151384][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.239884][T19502] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 146.282676][ T29] audit: type=1400 audit(2000000081.640:11514): avc: denied { mount } for pid=19510 comm="syz.0.6979" name="/" dev="mqueue" ino=589 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 146.381541][T19531] netlink: 'syz.0.6989': attribute type 1 has an invalid length. [ 146.389443][T19531] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6989'. [ 146.416950][T19537] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 146.440992][T19548] netlink: 'syz.3.6992': attribute type 1 has an invalid length. [ 146.574782][T19580] netlink: 'syz.4.7004': attribute type 1 has an invalid length. [ 146.582620][T19580] netlink: 'syz.4.7004': attribute type 2 has an invalid length. [ 146.605374][T19580] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7004'. [ 146.621249][T19585] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7007'. [ 146.639143][T19589] netlink: 'syz.0.7006': attribute type 21 has an invalid length. [ 146.839848][T19646] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7023'. [ 146.986768][T19684] netlink: 'syz.2.7038': attribute type 21 has an invalid length. [ 147.208379][T19741] wg1: entered promiscuous mode [ 147.213402][T19741] wg1: entered allmulticast mode [ 147.232489][T19745] loop4: detected capacity change from 0 to 256 [ 147.242203][ T29] audit: type=1326 audit(2000000082.590:11515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19744 comm="syz.1.7061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc56918eba9 code=0x7ffc0000 [ 147.265994][ T29] audit: type=1326 audit(2000000082.590:11516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19744 comm="syz.1.7061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc56918eba9 code=0x7ffc0000 [ 147.293221][ T29] audit: type=1326 audit(2000000082.600:11517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19744 comm="syz.1.7061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7fc56918eba9 code=0x7ffc0000 [ 147.316871][ T29] audit: type=1326 audit(2000000082.600:11518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19744 comm="syz.1.7061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc56918eba9 code=0x7ffc0000 [ 147.340892][ T29] audit: type=1326 audit(2000000082.600:11519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19744 comm="syz.1.7061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc56918eba9 code=0x7ffc0000 [ 147.397175][T19745] FAT-fs (loop4): Directory bread(block 64) failed [ 147.404915][T19745] FAT-fs (loop4): Directory bread(block 65) failed [ 147.432615][T19745] FAT-fs (loop4): Directory bread(block 66) failed [ 147.450287][T19771] loop1: detected capacity change from 0 to 512 [ 147.458575][T19771] EXT4-fs: Ignoring removed oldalloc option [ 147.465513][T19745] FAT-fs (loop4): Directory bread(block 67) failed [ 147.472833][T19771] EXT4-fs (loop1): 1 truncate cleaned up [ 147.476118][T19745] FAT-fs (loop4): Directory bread(block 68) failed [ 147.479076][T19771] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.489652][T19745] FAT-fs (loop4): Directory bread(block 69) failed [ 147.503567][T19778] loop2: detected capacity change from 0 to 128 [ 147.511336][T19778] FAT-fs (loop2): Invalid FSINFO signature: 0x41610000, 0x61417272 (sector = 1) [ 147.522774][T19778] FAT-fs (loop2): Directory bread(block 162) failed [ 147.529521][T19778] FAT-fs (loop2): Directory bread(block 163) failed [ 147.536387][T19778] FAT-fs (loop2): Directory bread(block 164) failed [ 147.543081][T19778] FAT-fs (loop2): Directory bread(block 165) failed [ 147.549968][T19778] FAT-fs (loop2): Directory bread(block 166) failed [ 147.556634][T19778] FAT-fs (loop2): Directory bread(block 167) failed [ 147.563463][T19778] FAT-fs (loop2): Directory bread(block 168) failed [ 147.566161][T19745] FAT-fs (loop4): Directory bread(block 70) failed [ 147.570122][T19778] FAT-fs (loop2): Directory bread(block 169) failed [ 147.586031][T19778] FAT-fs (loop2): Directory bread(block 162) failed [ 147.592690][T19778] FAT-fs (loop2): Directory bread(block 163) failed [ 147.594846][T19745] FAT-fs (loop4): Directory bread(block 71) failed [ 147.606462][T19778] syz.2.7073: attempt to access beyond end of device [ 147.606462][T19778] loop2: rw=3, sector=210, nr_sectors = 6 limit=128 [ 147.619831][T19778] syz.2.7073: attempt to access beyond end of device [ 147.619831][T19778] loop2: rw=2051, sector=216, nr_sectors = 2 limit=128 [ 147.626217][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.645376][T19745] FAT-fs (loop4): Directory bread(block 72) failed [ 147.655681][T19745] FAT-fs (loop4): Directory bread(block 73) failed [ 147.656049][ T2848] FAT-fs (loop2): Invalid FSINFO signature: 0x41610000, 0x61417272 (sector = 1) [ 147.689244][T19795] tc_dump_action: action bad kind [ 147.702908][T19745] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 147.711577][T19745] FAT-fs (loop4): Filesystem has been set read-only [ 148.094613][T19886] loop4: detected capacity change from 0 to 2048 [ 148.109779][T19892] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.197013][T19945] netlink: 'syz.2.7118': attribute type 27 has an invalid length. [ 148.204888][T19945] netlink: 'syz.2.7118': attribute type 3 has an invalid length. [ 148.226697][ T9091] loop4: unable to read partition table [ 148.240668][ T9091] loop4: partition table beyond EOD, truncated [ 148.312820][T19886] loop4: unable to read partition table [ 148.325555][T19886] loop4: partition table beyond EOD, truncated [ 148.331881][T19886] loop_reread_partitions: partition scan of loop4 () failed (rc=-5) [ 148.449045][ T2993] loop4: unable to read partition table [ 148.462396][T19984] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 148.470030][ T2993] loop4: partition table beyond EOD, truncated [ 148.604476][ T2993] ================================================================== [ 148.612654][ T2993] BUG: KCSAN: data-race in dont_mount / lookup_fast [ 148.619295][ T2993] [ 148.621630][ T2993] read-write to 0xffff8881057eea80 of 4 bytes by task 3883 on cpu 1: [ 148.629722][ T2993] dont_mount+0x2a/0x40 [ 148.631345][T20026] dvmrp0: entered allmulticast mode [ 148.633896][ T2993] vfs_unlink+0x28f/0x420 [ 148.643440][ T2993] do_unlinkat+0x24e/0x480 [ 148.647896][ T2993] __x64_sys_unlink+0x2e/0x40 [ 148.652624][ T2993] x64_sys_call+0x2dc0/0x2ff0 [ 148.657329][ T2993] do_syscall_64+0xd2/0x200 [ 148.661874][ T2993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.667787][ T2993] [ 148.670122][ T2993] read to 0xffff8881057eea80 of 4 bytes by task 2993 on cpu 0: [ 148.677676][ T2993] lookup_fast+0xf0/0x320 [ 148.682024][ T2993] walk_component+0x3f/0x220 [ 148.686629][ T2993] path_lookupat+0xfe/0x2a0 [ 148.691149][ T2993] filename_lookup+0x147/0x340 [ 148.695956][ T2993] do_readlinkat+0x7d/0x320 [ 148.700460][ T2993] __x64_sys_readlink+0x47/0x60 [ 148.705368][ T2993] x64_sys_call+0x28da/0x2ff0 [ 148.710063][ T2993] do_syscall_64+0xd2/0x200 [ 148.714690][ T2993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.720606][ T2993] [ 148.722932][ T2993] value changed: 0x00300080 -> 0x00004080 [ 148.728652][ T2993] [ 148.730976][ T2993] Reported by Kernel Concurrency Sanitizer on: [ 148.737142][ T2993] CPU: 0 UID: 0 PID: 2993 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 148.748010][ T2993] Tainted: [W]=WARN [ 148.751826][ T2993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 148.761900][ T2993] ==================================================================