last executing test programs: 634.239965ms ago: executing program 2 (id=717): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x8, 0x20000007}, 0x50) 588.641549ms ago: executing program 0 (id=718): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x101c08a, &(0x7f0000000000)=ANY=[], 0x0, 0x2d4, &(0x7f0000000c00)="$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") 554.476732ms ago: executing program 2 (id=719): syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {0x37}, &(0x7f0000000740)=""/13, 0xd, 0x0, 0x0}, 0x58) 476.800788ms ago: executing program 1 (id=721): syz_emit_ethernet(0x32, &(0x7f0000000040)={@random="e90c610faca2", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x2, 0xc, 0x100}}}}}}}, 0x0) 472.994449ms ago: executing program 0 (id=722): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000600)=ANY=[@ANYBLOB="91106f000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) 416.097364ms ago: executing program 1 (id=724): mount$tmpfs(0x0, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000f80), 0xc00, &(0x7f0000000140)={[{@mpol={'mpol', 0x3d, {'local', '=static', @void}}}]}) 396.597795ms ago: executing program 2 (id=725): perf_event_open(&(0x7f0000000700)={0x7, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0a40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x12201}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 396.472456ms ago: executing program 4 (id=726): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x20}}, &(0x7f0000000240)='GPL\x00', 0x4, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) 347.49118ms ago: executing program 3 (id=727): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x83}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xb5}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) 326.565072ms ago: executing program 0 (id=728): syz_emit_ethernet(0x86, &(0x7f0000000300)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x50, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x3, 0x2, 0x0, 0x0, {0x0, 0x6, "000810", 0x0, 0x11, 0x0, @private1, @empty, [@dstopts={0xbb, 0x0, '\x00', [@ra={0x5, 0x2f}]}], "fb36eeca6fad50b375a22a584d16ca55"}}}}}}}, 0x0) 326.373672ms ago: executing program 3 (id=729): acct(0xfffffffffffffffe) 307.999993ms ago: executing program 2 (id=730): file_setattr(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)={0x1ba8, 0xd9, 0x3, 0x1000c, 0x3f91}, 0x18, 0x1000) 301.573934ms ago: executing program 4 (id=731): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x1, 0x8}, {0x6, 0x2, 0xff, 0x1}]}) 241.065329ms ago: executing program 1 (id=732): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x94}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) 236.31783ms ago: executing program 3 (id=733): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x20, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0xfffffffffffffffe}]}, &(0x7f0000000100)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 195.561083ms ago: executing program 0 (id=734): syz_emit_ethernet(0x4a, &(0x7f0000000680)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0xa, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@timestamp_addr={0x44, 0x12, 0x8, 0x1, 0x0, [{@local}, {@dev}]}]}}, @timestamp}}}}, 0x0) 192.831953ms ago: executing program 2 (id=735): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x65, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa4}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 143.646938ms ago: executing program 4 (id=736): gettimeofday(0x0, &(0x7f0000000ac0)) 143.302168ms ago: executing program 3 (id=737): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000fffffff3180100006400000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000c800000095"], &(0x7f0000000300)='GPL\x00', 0x9, 0xff6, &(0x7f0000001e00)=""/4086}, 0x94) 129.719059ms ago: executing program 1 (id=738): syz_emit_ethernet(0x72, &(0x7f0000000080)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0xe, 0x6, "f22ada", 0x3c, 0x3a, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, @local, {[], @time_exceed={0x3, 0x0, 0x0, 0x1, '\x00', {0x2, 0x6, "020dca", 0x43, 0x2f, 0x1, @mcast1, @mcast1, [@fragment={0x3a, 0x0, 0x7, 0x0, 0x0, 0x3, 0x67}], "0e2888be"}}}}}}}, 0x0) 129.319059ms ago: executing program 2 (id=739): syz_clone(0x410a4400, 0x0, 0xfffffffffffffd56, 0x0, 0x0, 0xffffffffffffffff) 123.413609ms ago: executing program 0 (id=740): syz_clone3(&(0x7f0000000300)={0x20112000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 115.75362ms ago: executing program 4 (id=741): set_mempolicy(0x4, 0x0, 0x5) 87.274453ms ago: executing program 1 (id=742): prctl$PR_SCHED_CORE(0x47, 0x3, 0x0, 0x1, 0x0) 50.548056ms ago: executing program 0 (id=743): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='uni_xlate\x00\x00,iocharset=iso8859-5,shortname=winnt,nonumtail=0,uni_xlate=1,utf8=0,iocharset=maccroatian,iocharset=macgaelic,allow_utime=00000000000000000000527,nfs,nonumtail=0,iocharset=cp865,uid=', @ANYBLOB="dbebdec402a7b694b2b22189fe12bccd0da3a5fe7e5a", @ANYBLOB="2c636f64657061673835352c004c87a56b54e381762bf87fb98d86d772421a964d437fff01c5e125acb191c121f8030000000001009dba05feee081e91fc61a0fef55112510000"], 0x1, 0x238, &(0x7f0000000500)="$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") 50.457236ms ago: executing program 4 (id=744): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 50.159796ms ago: executing program 3 (id=745): bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x3, 0x13, &(0x7f0000000bc0)=ANY=[@ANYBLOB="18000000020000000000000000000000180200002020702500000000002020207b0af8ff00000000bda106000000000026010000f8ffffffb702000008000000b703000000000000850000000500000018010000202070250000000000202020c31af8ff01000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 9.379929ms ago: executing program 1 (id=746): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb0}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x60}, @exit={0x95, 0x0, 0x700}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6}, 0x70) 9.09876ms ago: executing program 4 (id=747): syslog(0x3, 0xfffffffffffffffc, 0x61) 0s ago: executing program 3 (id=748): socket$inet6(0xa, 0x3, 0x0) kernel console output (not intermixed with test programs): [ 23.019075][ T28] audit: type=1400 audit(1771612067.487:62): avc: denied { search } for pid=3193 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 23.041628][ T28] audit: type=1400 audit(1771612067.487:63): avc: denied { search } for pid=3193 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 23.064193][ T28] audit: type=1400 audit(1771612067.487:64): avc: denied { search } for pid=3193 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 23.087093][ T28] audit: type=1400 audit(1771612067.487:65): avc: denied { search } for pid=3193 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 23.110088][ T28] audit: type=1400 audit(1771612067.497:66): avc: denied { read open } for pid=3194 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.1.178' (ED25519) to the list of known hosts. [ 29.812361][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 29.812378][ T28] audit: type=1400 audit(1771612074.287:70): avc: denied { mounton } for pid=3299 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 29.841423][ T28] audit: type=1400 audit(1771612074.307:71): avc: denied { mount } for pid=3299 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.843653][ T3299] cgroup: Unknown subsys name 'net' [ 29.869174][ T28] audit: type=1400 audit(1771612074.337:72): avc: denied { unmount } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.982253][ T3299] cgroup: Unknown subsys name 'cpuset' [ 29.988485][ T3299] cgroup: Unknown subsys name 'rlimit' [ 30.100680][ T28] audit: type=1400 audit(1771612074.567:73): avc: denied { setattr } for pid=3299 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 30.123985][ T28] audit: type=1400 audit(1771612074.577:74): avc: denied { create } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 30.159140][ T28] audit: type=1400 audit(1771612074.577:75): avc: denied { write } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 30.168003][ T3302] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 30.180601][ T28] audit: type=1400 audit(1771612074.577:76): avc: denied { read } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 30.208528][ T28] audit: type=1400 audit(1771612074.597:77): avc: denied { mounton } for pid=3299 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 30.233449][ T28] audit: type=1400 audit(1771612074.597:78): avc: denied { mount } for pid=3299 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 30.256807][ T28] audit: type=1400 audit(1771612074.617:79): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 30.280586][ T3299] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 31.387849][ T3311] chnl_net:caif_netlink_parms(): no params data found [ 31.433590][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 31.458379][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.465631][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.472832][ T3311] bridge_slave_0: entered allmulticast mode [ 31.479375][ T3311] bridge_slave_0: entered promiscuous mode [ 31.490227][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.497321][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.504431][ T3311] bridge_slave_1: entered allmulticast mode [ 31.510940][ T3311] bridge_slave_1: entered promiscuous mode [ 31.537536][ T3319] chnl_net:caif_netlink_parms(): no params data found [ 31.547556][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.572983][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.639328][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.646506][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.653670][ T3314] bridge_slave_0: entered allmulticast mode [ 31.660284][ T3314] bridge_slave_0: entered promiscuous mode [ 31.669083][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.676182][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.683344][ T3314] bridge_slave_1: entered allmulticast mode [ 31.689856][ T3314] bridge_slave_1: entered promiscuous mode [ 31.696268][ T3317] chnl_net:caif_netlink_parms(): no params data found [ 31.705463][ T3311] team0: Port device team_slave_0 added [ 31.730038][ T3311] team0: Port device team_slave_1 added [ 31.762097][ T3319] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.769220][ T3319] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.776590][ T3319] bridge_slave_0: entered allmulticast mode [ 31.783105][ T3319] bridge_slave_0: entered promiscuous mode [ 31.792251][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.799486][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.825456][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.837757][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.848082][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.860276][ T3319] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.867440][ T3319] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.874655][ T3319] bridge_slave_1: entered allmulticast mode [ 31.881045][ T3319] bridge_slave_1: entered promiscuous mode [ 31.887806][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 31.897527][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.904612][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.930585][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.972116][ T3314] team0: Port device team_slave_0 added [ 31.987963][ T3319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.998476][ T3319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.012736][ T3314] team0: Port device team_slave_1 added [ 32.018359][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.025480][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.032679][ T3317] bridge_slave_0: entered allmulticast mode [ 32.039050][ T3317] bridge_slave_0: entered promiscuous mode [ 32.050215][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.057610][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.064883][ T3317] bridge_slave_1: entered allmulticast mode [ 32.071250][ T3317] bridge_slave_1: entered promiscuous mode [ 32.108753][ T3319] team0: Port device team_slave_0 added [ 32.134189][ T3319] team0: Port device team_slave_1 added [ 32.147295][ T3311] hsr_slave_0: entered promiscuous mode [ 32.153635][ T3311] hsr_slave_1: entered promiscuous mode [ 32.159883][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.167013][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.192966][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.205494][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.214722][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.221930][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.229120][ T3313] bridge_slave_0: entered allmulticast mode [ 32.235682][ T3313] bridge_slave_0: entered promiscuous mode [ 32.246984][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.254131][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.261286][ T3313] bridge_slave_1: entered allmulticast mode [ 32.267846][ T3313] bridge_slave_1: entered promiscuous mode [ 32.275063][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.282059][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.307977][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.319844][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.339129][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.346156][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.372625][ T3319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.388351][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.395447][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.421401][ T3319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.473660][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.484380][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.494304][ T3317] team0: Port device team_slave_0 added [ 32.526474][ T3317] team0: Port device team_slave_1 added [ 32.534219][ T3314] hsr_slave_0: entered promiscuous mode [ 32.540148][ T3314] hsr_slave_1: entered promiscuous mode [ 32.546155][ T3314] debugfs: 'hsr0' already exists in 'hsr' [ 32.551924][ T3314] Cannot create hsr debugfs directory [ 32.560894][ T3313] team0: Port device team_slave_0 added [ 32.571973][ T3313] team0: Port device team_slave_1 added [ 32.593028][ T3319] hsr_slave_0: entered promiscuous mode [ 32.599122][ T3319] hsr_slave_1: entered promiscuous mode [ 32.605176][ T3319] debugfs: 'hsr0' already exists in 'hsr' [ 32.610952][ T3319] Cannot create hsr debugfs directory [ 32.643549][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.650512][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.676548][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.687806][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.694800][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.720902][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.747307][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.754341][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.780329][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.791586][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.798539][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.824530][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.888890][ T3317] hsr_slave_0: entered promiscuous mode [ 32.894973][ T3317] hsr_slave_1: entered promiscuous mode [ 32.900813][ T3317] debugfs: 'hsr0' already exists in 'hsr' [ 32.906559][ T3317] Cannot create hsr debugfs directory [ 32.917594][ T3313] hsr_slave_0: entered promiscuous mode [ 32.923638][ T3313] hsr_slave_1: entered promiscuous mode [ 32.929577][ T3313] debugfs: 'hsr0' already exists in 'hsr' [ 32.935333][ T3313] Cannot create hsr debugfs directory [ 32.980055][ T3311] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 33.000543][ T3311] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 33.023028][ T3311] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 33.049335][ T3311] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 33.121431][ T3314] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 33.130867][ T3314] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 33.140367][ T3314] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 33.149252][ T3314] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 33.191350][ T3319] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 33.201109][ T3319] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 33.213597][ T3319] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 33.222701][ T3319] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 33.254422][ T3317] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 33.265116][ T3317] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 33.274809][ T3317] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 33.286723][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.294820][ T3317] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 33.331028][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.350547][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.362455][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.369558][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.379106][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.386220][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.397012][ T3313] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 33.406736][ T3313] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 33.429369][ T3313] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 33.438462][ T3313] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 33.468611][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.478145][ T417] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.485257][ T417] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.505029][ T417] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.512197][ T417] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.559179][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.569485][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.589444][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.612677][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.625208][ T3319] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.644414][ T309] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.651509][ T309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.676673][ T309] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.683937][ T309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.713085][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.721708][ T309] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.728792][ T309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.737915][ T309] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.745056][ T309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.811103][ T3311] veth0_vlan: entered promiscuous mode [ 33.819694][ T3311] veth1_vlan: entered promiscuous mode [ 33.828879][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.853204][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.876987][ T3311] veth0_macvtap: entered promiscuous mode [ 33.891440][ T3311] veth1_macvtap: entered promiscuous mode [ 33.905528][ T309] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.912658][ T309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.923112][ T309] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.930192][ T309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.943363][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.960749][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.984243][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.999559][ T3314] veth0_vlan: entered promiscuous mode [ 34.010325][ T3314] veth1_vlan: entered promiscuous mode [ 34.032344][ T309] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.054413][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.063587][ T309] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.073250][ T309] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.094806][ T309] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.133484][ T3314] veth0_macvtap: entered promiscuous mode [ 34.141182][ T3314] veth1_macvtap: entered promiscuous mode [ 34.152481][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.195493][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.215752][ T3319] veth0_vlan: entered promiscuous mode [ 34.227064][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.240337][ T3311] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 34.264374][ T309] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.281690][ T309] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.296054][ T309] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.318753][ T3319] veth1_vlan: entered promiscuous mode [ 34.336900][ T309] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.396366][ T3317] veth0_vlan: entered promiscuous mode [ 34.406115][ T3319] veth0_macvtap: entered promiscuous mode [ 34.423405][ T3319] veth1_macvtap: entered promiscuous mode [ 34.462915][ T3317] veth1_vlan: entered promiscuous mode [ 34.488822][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.533032][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.552893][ T3313] veth0_vlan: entered promiscuous mode [ 34.568159][ T3317] veth0_macvtap: entered promiscuous mode [ 34.587035][ T56] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.597657][ T56] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.615172][ T3317] veth1_macvtap: entered promiscuous mode [ 34.622775][ T3313] veth1_vlan: entered promiscuous mode [ 34.638492][ T56] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.664781][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.682573][ T56] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.713985][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.738458][ T56] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.764312][ T56] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.785285][ T56] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.820382][ T3313] veth0_macvtap: entered promiscuous mode [ 34.848826][ T56] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.859315][ T3313] veth1_macvtap: entered promiscuous mode [ 34.880812][ T3516] loop1: detected capacity change from 0 to 2048 [ 34.898305][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.909721][ T3516] EXT4-fs warning (device loop1): ext4_multi_mount_protect:288: Invalid MMP block in superblock [ 34.940082][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.988253][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.016669][ T3527] loop1: detected capacity change from 0 to 512 [ 35.023145][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.052214][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.062038][ T3527] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 35.078971][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.093905][ T3527] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 35.108692][ T3527] EXT4-fs (loop1): 1 truncate cleaned up [ 35.132305][ T3527] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.144627][ T28] kauditd_printk_skb: 28 callbacks suppressed [ 35.144642][ T28] audit: type=1400 audit(1771612079.617:108): avc: denied { mount } for pid=3524 comm="syz.1.23" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 35.208939][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.232534][ T28] audit: type=1400 audit(1771612079.707:109): avc: denied { create } for pid=3541 comm="syz.3.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 35.327320][ T28] audit: type=1400 audit(1771612079.787:110): avc: denied { kexec_image_load } for pid=3551 comm="syz.0.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 35.440772][ T28] audit: type=1400 audit(1771612079.907:111): avc: denied { open } for pid=3561 comm="syz.1.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 35.499288][ T3565] loop3: detected capacity change from 0 to 512 [ 35.508166][ T3557] loop2: detected capacity change from 0 to 8192 [ 35.525046][ T3565] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 35.530767][ T28] audit: type=1400 audit(1771612079.907:112): avc: denied { kernel } for pid=3561 comm="syz.1.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 35.559163][ T3565] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.40: invalid indirect mapped block 4294967295 (level 0) [ 35.592903][ T3565] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 35.594217][ T3565] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.40: invalid indirect mapped block 4294967295 (level 1) [ 35.603447][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 35.603470][ C1] EXT4-fs (loop3): initial error at time 1771612080: ext4_free_branches:1023: inode 16 [ 35.603505][ C1] EXT4-fs (loop3): last error at time 1771612080: ext4_free_branches:1023: inode 16 [ 35.603775][ T3303] loop2: p1 < > p3[EZD] [ 35.657056][ T3565] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 35.659005][ T3565] EXT4-fs (loop3): 1 orphan inode deleted [ 35.674833][ T3565] EXT4-fs (loop3): 1 truncate cleaned up [ 35.681295][ T3303] loop2: p3 start 3238002688 is beyond EOD, truncated [ 35.681788][ T3565] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.705770][ T3577] loop4: detected capacity change from 0 to 512 [ 35.721340][ T3557] loop2: p1 < > p3[EZD] [ 35.726815][ T3579] loop0: detected capacity change from 0 to 512 [ 35.738075][ T3557] loop2: p3 start 3238002688 is beyond EOD, truncated [ 35.745613][ T3579] ======================================================= [ 35.745613][ T3579] WARNING: The mand mount option has been deprecated and [ 35.745613][ T3579] and is ignored by this kernel. Remove the mand [ 35.745613][ T3579] option from the mount to silence this warning. [ 35.745613][ T3579] ======================================================= [ 35.788867][ T3577] EXT4-fs: Ignoring removed nobh option [ 35.821244][ T28] audit: type=1400 audit(1771612080.287:113): avc: denied { read write } for pid=3317 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 35.821308][ T3577] ------------[ cut here ]------------ [ 35.850936][ T3577] EA inode 11 i_nlink=1026 [ 35.850969][ T3577] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#1: syz.4.45/3577 [ 35.866216][ T3577] Modules linked in: [ 35.870161][ T3577] CPU: 1 UID: 0 PID: 3577 Comm: syz.4.45 Not tainted syzkaller #0 PREEMPT(full) [ 35.879614][ T3577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 35.889821][ T3577] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 35.896499][ T3577] Code: 04 5e 99 ff 4c 8d 2d fd ec 5d 05 49 8d 7e 40 e8 04 f1 b5 ff 49 8b 6e 40 4c 89 e7 e8 38 ec b5 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 5f 48 dd 03 66 66 66 66 66 66 2e [ 35.910505][ T3579] journal_path: Non-blockdev passed as './file2' [ 35.916293][ T3577] RSP: 0018:ffffc900019df5a8 EFLAGS: 00010246 [ 35.916313][ T3577] RAX: ffff888102385cf8 RBX: ffff88811b05e048 RCX: ffffffff81bff738 [ 35.916327][ T3577] RDX: 0000000000000402 RSI: 000000000000000b RDI: ffffffff871de420 [ 35.916342][ T3577] RBP: 000000000000000b R08: 000188811b05dffb R09: 0000000000000000 [ 35.941953][ T28] audit: type=1400 audit(1771612080.287:114): avc: denied { open } for pid=3317 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 35.944933][ T3577] R10: ffffc900019df4d8 R11: 0001c900019df4d8 R12: ffff88811b05dff8 [ 35.954096][ T28] audit: type=1400 audit(1771612080.287:115): avc: denied { ioctl } for pid=3317 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 35.976970][ T3577] R13: ffffffff871de420 R14: ffff88811b05dfb0 R15: 0000000000000001 [ 35.976988][ T3577] FS: 00007f6016b976c0(0000) GS:ffff8882ae9da000(0000) knlGS:0000000000000000 [ 35.977005][ T3577] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 36.007942][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 36.010631][ T3577] CR2: 00007fcc0df65000 CR3: 000000011b7fe000 CR4: 00000000003506f0 [ 36.051937][ T3577] Call Trace: [ 36.055230][ T3577] [ 36.058240][ T3577] ext4_xattr_set_entry+0x77c/0x1010 [ 36.063631][ T3577] ext4_xattr_ibody_set+0x184/0x3c0 [ 36.068903][ T3577] ext4_expand_extra_isize_ea+0xd7b/0x11a0 [ 36.074838][ T3577] __ext4_expand_extra_isize+0x246/0x280 [ 36.080585][ T3577] __ext4_mark_inode_dirty+0x29b/0x400 [ 36.086152][ T3586] loop2: detected capacity change from 0 to 512 [ 36.092514][ T3577] ext4_evict_inode+0x7c3/0xd60 [ 36.094297][ T3586] SELinux: security_context_str_to_sid () failed with errno=-22 [ 36.097407][ T3577] ? __pfx_ext4_evict_inode+0x10/0x10 [ 36.107142][ T3579] EXT4-fs: error: could not find journal device path [ 36.110459][ T3577] evict+0x2af/0x510 [ 36.121111][ T3577] ? __dquot_initialize+0x146/0x7c0 [ 36.126452][ T3577] iput+0x41a/0x580 [ 36.130315][ T3577] ext4_process_orphan+0x1a9/0x1c0 [ 36.135535][ T3577] ext4_orphan_cleanup+0x6a8/0xa00 [ 36.140769][ T3577] ext4_fill_super+0x3408/0x37c0 [ 36.142233][ T28] audit: type=1400 audit(1771612080.597:116): avc: denied { write } for pid=3583 comm="syz.1.49" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 36.145814][ T3577] ? set_blocksize+0x14c/0x270 [ 36.169378][ T3577] ? setup_bdev_super+0x30e/0x370 [ 36.174613][ T3577] ? __pfx_ext4_fill_super+0x10/0x10 [ 36.179931][ T3577] get_tree_bdev_flags+0x291/0x300 [ 36.185141][ T3577] ? __pfx_ext4_fill_super+0x10/0x10 [ 36.190533][ T3577] get_tree_bdev+0x1f/0x30 [ 36.195026][ T3577] ext4_get_tree+0x1c/0x30 [ 36.199463][ T3577] vfs_get_tree+0x57/0x1d0 [ 36.204024][ T3577] do_new_mount+0x288/0x8d0 [ 36.208646][ T3577] path_mount+0x4d0/0xbc0 [ 36.213073][ T3577] __se_sys_mount+0x28c/0x2e0 [ 36.217800][ T3577] __x64_sys_mount+0x67/0x80 [ 36.222469][ T3577] x64_sys_call+0x2d61/0x3020 [ 36.227185][ T3577] do_syscall_64+0x12c/0x370 [ 36.231865][ T3577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 36.237838][ T3577] RIP: 0033:0x7f601813d8ca [ 36.242318][ T3577] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 36.262068][ T3577] RSP: 002b:00007f6016b96e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 36.270567][ T3577] RAX: ffffffffffffffda RBX: 00007f6016b96ee0 RCX: 00007f601813d8ca [ 36.278690][ T3577] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 00007f6016b96ea0 [ 36.286759][ T3577] RBP: 0000200000000180 R08: 00007f6016b96ee0 R09: 0000000000800718 [ 36.294797][ T3577] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000140 [ 36.302848][ T3577] R13: 00007f6016b96ea0 R14: 00000000000004a3 R15: 00002000000003c0 [ 36.310929][ T3577] [ 36.314091][ T3577] ---[ end trace 0000000000000000 ]--- [ 36.320429][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.331910][ T3577] EXT4-fs (loop4): 1 orphan inode deleted [ 36.339828][ T3577] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.377534][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 36.466178][ T28] audit: type=1400 audit(1771612080.937:117): avc: denied { prog_run } for pid=3597 comm="syz.0.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 36.514467][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.559148][ T3605] loop1: detected capacity change from 0 to 512 [ 36.610265][ T3605] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 36.623514][ T3605] System zones: 1-12 [ 36.627818][ T3605] EXT4-fs error (device loop1): ext4_iget_extra_inode:5025: inode #15: comm syz.1.59: corrupted in-inode xattr: e_value size too large [ 36.654172][ T3605] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 36.655396][ T3605] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.59: couldn't read orphan inode 15 (err -117) [ 36.664603][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 36.664625][ C0] EXT4-fs (loop1): initial error at time 1771612081: ext4_iget_extra_inode:5025: inode 15 [ 36.664682][ C0] EXT4-fs (loop1): last error at time 1771612081: ext4_iget_extra_inode:5025: inode 15 [ 36.730593][ T3621] loop0: detected capacity change from 0 to 512 [ 36.770636][ T3605] loop1: lost filesystem error report for type 5 error -117 [ 36.771263][ T3605] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.795031][ T3621] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 36.828262][ T3621] EXT4-fs (loop0): orphan cleanup on readonly fs [ 36.836629][ T3621] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:517: comm syz.0.65: Block bitmap for bg 0 marked uninitialized [ 36.849865][ T3621] loop0: lost filesystem error report for type 5 error -117 [ 36.851707][ T3621] EXT4-fs (loop0): Remounting filesystem read-only [ 36.865564][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 36.865589][ C0] EXT4-fs (loop0): initial error at time 1771612081: ext4_read_block_bitmap_nowait:517 [ 36.865620][ C0] EXT4-fs (loop0): last error at time 1771612081: ext4_read_block_bitmap_nowait:517 [ 36.892371][ T3621] EXT4-fs (loop0): 1 orphan inode deleted [ 36.898672][ T3621] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 36.913476][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.955765][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.998617][ T3645] IPv6: addrconf: prefix option has invalid lifetime [ 37.085937][ T3659] loop4: detected capacity change from 0 to 164 [ 37.106754][ T3659] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 37.147148][ T3663] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 37.182638][ T3663] EXT4-fs error (device loop3): ext4_iget_extra_inode:5025: inode #15: comm syz.3.86: corrupted in-inode xattr: invalid ea_ino [ 37.210222][ T3663] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 37.211540][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 37.227146][ C1] EXT4-fs (loop3): initial error at time 1771612081: ext4_iget_extra_inode:5025: inode 15 [ 37.237109][ C1] EXT4-fs (loop3): last error at time 1771612081: ext4_iget_extra_inode:5025: inode 15 [ 37.247586][ T3663] EXT4-fs (loop3): Remounting filesystem read-only [ 37.286132][ T3663] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.325661][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.392514][ T3677] loop2: p2 p3 p4 [ 37.398137][ T3677] loop2: p2 size 9435648 extends beyond EOD, truncated [ 37.442180][ T3677] loop2: p3 start 67174144 is beyond EOD, truncated [ 37.449081][ T3677] loop2: p4 size 50331904 extends beyond EOD, truncated [ 37.476130][ T3694] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 37.520691][ T3694] EXT4-fs (loop3): orphan cleanup on readonly fs [ 37.531855][ T3305] loop1: p1 p3 p4 [ 37.535720][ T3305] loop1: p1 size 477167616 extends beyond EOD, truncated [ 37.548010][ T3694] EXT4-fs error (device loop3): ext4_orphan_get:1391: comm syz.3.101: inode #15: comm syz.3.101: iget: illegal inode # [ 37.555483][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 37.567415][ T3694] loop3: lost filesystem error report for type 5 error -117 [ 37.571525][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 37.581091][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 37.585305][ C1] EXT4-fs (loop3): initial error at time 1771612082: ext4_orphan_get:1391 [ 37.603598][ C1] EXT4-fs (loop3): last error at time 1771612082: ext4_orphan_get:1391 [ 37.612879][ T3305] loop1: p3 start 4294901760 is beyond EOD, truncated [ 37.619687][ T3305] loop1: p4 size 32768 extends beyond EOD, truncated [ 37.635299][ T3694] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.101: couldn't read orphan inode 15 (err -117) [ 37.647866][ T3694] loop3: lost filesystem error report for type 5 error -117 [ 37.648617][ T3694] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 37.682222][ T3683] loop1: p1 p3 p4 [ 37.686126][ T3683] loop1: p1 size 477167616 extends beyond EOD, truncated [ 37.694527][ T3683] loop1: p3 start 4294901760 is beyond EOD, truncated [ 37.716313][ T3683] loop1: p4 size 32768 extends beyond EOD, truncated [ 37.737290][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.853087][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 37.864235][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 37.906616][ T3723] FAT-fs (loop0): FAT read failed (blocknr 1056) [ 37.925095][ T3727] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 37.934403][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 37.949016][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 37.981594][ T3727] EXT4-fs (loop4): 1 orphan inode deleted [ 38.023497][ T3727] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.086928][ T3746] tmpfs: Bad value for 'mpol' [ 38.147156][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.236535][ T3763] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #11: block 530: comm syz.1.134: lblock 4 mapped to illegal pblock 530 (length 1) [ 38.292524][ T3763] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 38.292920][ T3763] EXT4-fs (loop1): 1 orphan inode deleted [ 38.302125][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 38.302156][ C1] EXT4-fs (loop1): initial error at time 1771612082: ext4_map_blocks:776: inode 11: block 530 [ 38.302203][ C1] EXT4-fs (loop1): last error at time 1771612082: ext4_map_blocks:776: inode 11: block 530 [ 38.305750][ T3767] EXT4-fs: Ignoring removed nomblk_io_submit option [ 38.309103][ T3763] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.371634][ T3767] ext4: Bad value for 'mb_optimize_scan' [ 38.394847][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.545015][ T3791] EXT4-fs (loop0): invalid inodes per group: 1 [ 38.545015][ T3791] [ 38.613158][ T3798] EXT4-fs: Ignoring removed nobh option [ 38.647209][ T3798] EXT4-fs (loop3): unsupported inode size: 4 [ 38.658496][ T3798] EXT4-fs (loop3): blocksize: 1024 [ 38.855634][ T3830] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 38.874798][ T3837] ------------[ cut here ]------------ [ 38.880298][ T3837] verifier bug: REG INVARIANTS VIOLATION (false_reg1): range bounds violation u64=[0x4000000, 0x0] s64=[0x4000000, 0x0] u32=[0x4000000, 0x0] s32=[0x4000000, 0x0] var_off=(0x0, 0x0) [ 38.892049][ T3830] EXT4-fs (loop1): orphan cleanup on readonly fs [ 38.898285][ T3837] WARNING: kernel/bpf/verifier.c:2769 at reg_bounds_sanity_check+0x15b/0x660, CPU#1: syz.2.170/3837 [ 38.915542][ T3837] Modules linked in: [ 38.919504][ T3837] CPU: 1 UID: 0 PID: 3837 Comm: syz.2.170 Tainted: G W syzkaller #0 PREEMPT(full) [ 38.930355][ T3837] Tainted: [W]=WARN [ 38.934224][ T3837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 38.944348][ T3837] RIP: 0010:reg_bounds_sanity_check+0x27d/0x660 [ 38.950628][ T3837] Code: 24 78 4c 8b 44 24 70 4c 8b 4c 24 60 41 ff 74 24 20 41 55 53 ff 74 24 68 ff 74 24 78 ff b4 24 90 00 00 00 ff b4 24 b0 00 00 00 <67> 48 0f b9 3a 48 83 c4 38 4c 8b ac 24 98 00 00 00 49 8d 85 80 08 [ 38.970364][ T3837] RSP: 0018:ffffc90001277368 EFLAGS: 00010246 [ 38.976555][ T3837] RAX: ffff888101c54c78 RBX: 0000000000000000 RCX: 0000000004000000 [ 38.984590][ T3837] RDX: ffffffff868172ca RSI: ffffffff867eb8b3 RDI: ffffffff871d3f90 [ 38.985100][ T3830] EXT4-fs error (device loop1): ext4_acquire_dquot:7003: comm syz.1.166: Failed to acquire dquot type 1 [ 38.992875][ T3837] RBP: ffff88811c1502e0 R08: 0000000000000000 R09: 0000000004000000 [ 39.012329][ T3837] R10: 00000000000000d0 R11: 0000000000000002 R12: ffff88811c1502a0 [ 39.020337][ T3837] R13: 0000000000000000 R14: ffff88811c1502ec R15: ffff88811c1502d8 [ 39.025736][ T3830] loop1: lost filesystem error report for type 5 error -5 [ 39.028403][ T3837] FS: 00007f28c21676c0(0000) GS:ffff8882ae9da000(0000) knlGS:0000000000000000 [ 39.029163][ T3830] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.166: bg 0: block 40: padding at end of block bitmap is not set [ 39.035617][ T3837] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 39.035620][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 39.035639][ T3837] CR2: 00007f28c37be9d3 CR3: 000000011bb2e000 CR4: 00000000003506f0 [ 39.035641][ C0] EXT4-fs (loop1): initial error at time 1771612083: ext4_acquire_dquot:7003 [ 39.035661][ T3837] Call Trace: [ 39.035663][ C0] [ 39.035671][ T3837] [ 39.035670][ C0] EXT4-fs (loop1): last error at time 1771612083: ext4_acquire_dquot:7003 [ 39.035690][ T3837] reg_set_min_max+0x21c/0x260 [ 39.035726][ T3837] check_cond_jmp_op+0x1355/0x1ab0 [ 39.084846][ T3840] ext4: Bad value for 'mb_optimize_scan' [ 39.089233][ T3837] do_check+0x4a9b/0x9860 [ 39.105718][ T3830] loop1: lost filesystem error report for type 5 error -117 [ 39.106079][ T3837] do_check_common+0xd0b/0x1630 [ 39.132590][ T3830] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6687: Corrupt filesystem [ 39.133204][ T3837] bpf_check+0x2f78/0xcc30 [ 39.151139][ T3837] ? __alloc_frozen_pages_noprof+0x18a/0x360 [ 39.156786][ T3830] loop1: lost filesystem error report for type 5 error -117 [ 39.157521][ T3830] EXT4-fs (loop1): 1 truncate cleaned up [ 39.157710][ T3837] ? alloc_pages_bulk_noprof+0x4aa/0x530 [ 39.176374][ T3837] ? __vmap_pages_range_noflush+0xb9c/0xcc0 [ 39.182343][ T3837] ? css_rstat_updated+0xbb/0x280 [ 39.187413][ T3837] ? try_charge_memcg+0x215/0xa10 [ 39.192515][ T3837] ? _find_next_zero_bit+0x64/0xa0 [ 39.197813][ T3837] ? pcpu_block_refresh_hint+0x10b/0x170 [ 39.202687][ T3830] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 39.203579][ T3837] ? pcpu_block_update_hint_alloc+0x640/0x660 [ 39.221982][ T3837] ? pcpu_block_update_hint_alloc+0x640/0x660 [ 39.228288][ T3837] ? css_rstat_updated+0xbb/0x280 [ 39.233664][ T3837] ? mod_memcg_state+0x182/0x270 [ 39.238662][ T3837] ? __rcu_read_unlock+0x4e/0x70 [ 39.243804][ T3837] ? avc_has_perm_noaudit+0xab/0x130 [ 39.249136][ T3837] ? avc_has_perm+0x101/0x190 [ 39.253961][ T3837] ? selinux_bpf_prog_load+0x197/0x1c0 [ 39.259443][ T3837] ? security_bpf_prog_load+0x9e/0x140 [ 39.265090][ T3837] bpf_prog_load+0xf76/0x1140 [ 39.269819][ T3837] ? security_bpf+0x2b/0x90 [ 39.274393][ T3837] __sys_bpf+0x505/0x7e0 [ 39.278687][ T3837] __x64_sys_bpf+0x41/0x50 [ 39.283228][ T3837] x64_sys_call+0x10cb/0x3020 [ 39.288023][ T3837] do_syscall_64+0x12c/0x370 [ 39.292695][ T3837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.298634][ T3837] RIP: 0033:0x7f28c370c629 [ 39.303202][ T3837] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 39.323465][ T3837] RSP: 002b:00007f28c2167028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 39.332300][ T3837] RAX: ffffffffffffffda RBX: 00007f28c3985fa0 RCX: 00007f28c370c629 [ 39.340383][ T3837] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 39.348567][ T3837] RBP: 00007f28c37a2b39 R08: 0000000000000000 R09: 0000000000000000 [ 39.356702][ T3837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 39.364722][ T3837] R13: 00007f28c3986038 R14: 00007f28c3985fa0 R15: 00007ffc4653a568 [ 39.372836][ T3837] [ 39.375899][ T3837] ---[ end trace 0000000000000000 ]--- [ 39.428571][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.521950][ T3852] FAT-fs (loop0): bogus logical sector size 2134 [ 39.529284][ T3852] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 39.538913][ T3852] FAT-fs (loop0): Can't find a valid FAT filesystem [ 39.649549][ T3863] EXT4-fs: Ignoring removed oldalloc option [ 39.686075][ T3863] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 39.693629][ T3837] syz.2.170 (3837) used greatest stack depth: 9976 bytes left [ 39.748662][ T3863] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.183: iget: bogus i_mode (4) [ 39.823136][ T3863] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 39.823304][ T3863] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.183: couldn't read orphan inode 15 (err -117) [ 39.832593][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 39.832634][ C0] EXT4-fs (loop1): initial error at time 1771614644: ext4_orphan_get:1391: inode 15 [ 39.832659][ C0] EXT4-fs (loop1): last error at time 1771614644: ext4_orphan_get:1391: inode 15 [ 39.901777][ T3863] loop1: lost filesystem error report for type 5 error -117 [ 39.922051][ T3863] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.981443][ T3889] set_capacity_and_notify: 16 callbacks suppressed [ 40.011268][ T3889] loop3: detected capacity change from 0 to 512 [ 40.055111][ T3889] EXT4-fs: user quota file already specified [ 40.065016][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.258468][ T3927] loop3: detected capacity change from 0 to 512 [ 40.294335][ T3927] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000101) [ 40.331137][ T3927] FAT-fs (loop3): Filesystem has been set read-only [ 40.344532][ T3936] loop0: detected capacity change from 0 to 512 [ 40.375375][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 40.375389][ T28] audit: type=1400 audit(1771614644.846:132): avc: denied { write } for pid=3937 comm="syz.2.218" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 40.407537][ T3936] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 40.423605][ T3936] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 40.432734][ T3936] EXT4-fs (loop0): orphan cleanup on readonly fs [ 40.439362][ T3936] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0 [ 40.449479][ T3936] EXT4-fs warning (device loop0): ext4_enable_quotas:7238: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 40.464268][ T3936] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 40.474732][ T3936] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.217: bg 0: block 40: padding at end of block bitmap is not set [ 40.490788][ T3936] loop0: lost filesystem error report for type 5 error -117 [ 40.497969][ T3936] EXT4-fs (loop0): Remounting filesystem read-only [ 40.505359][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 40.505384][ C0] EXT4-fs (loop0): initial error at time 1771614644: ext4_validate_block_bitmap:441 [ 40.505412][ C0] EXT4-fs (loop0): last error at time 1771614644: ext4_validate_block_bitmap:441 [ 40.537912][ T3936] EXT4-fs (loop0): 1 truncate cleaned up [ 40.544690][ T3936] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 40.572527][ T3943] loop3: detected capacity change from 0 to 1024 [ 40.590589][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.611951][ T3943] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 40.674978][ T3943] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.220: Invalid block bitmap block 0 in block_group 0 [ 40.735132][ T3943] loop3: lost filesystem error report for type 5 error -117 [ 40.735331][ T3943] Quota error (device loop3): write_blk: dquota write failed [ 40.742684][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 40.742703][ C0] EXT4-fs (loop3): initial error at time 1771614645: ext4_read_block_bitmap_nowait:483 [ 40.742730][ C0] EXT4-fs (loop3): last error at time 1771614645: ext4_read_block_bitmap_nowait:483 [ 40.850370][ T28] audit: type=1400 audit(1771614645.306:133): avc: denied { create } for pid=3964 comm="syz.1.231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 40.885304][ T3943] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 40.921565][ T3943] EXT4-fs error (device loop3): ext4_acquire_dquot:7003: comm syz.3.220: Failed to acquire dquot type 0 [ 40.938329][ T3978] futex_wake_op: syz.2.236 tries to shift op by 32; fix this program [ 40.961657][ T3943] EXT4-fs error (device loop3): ext4_free_blocks:6726: comm syz.3.220: Freeing blocks not in datazone - block = 0, count = 4096 [ 40.990674][ T3976] loop1: detected capacity change from 0 to 8192 [ 41.004990][ T3943] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.220: Invalid inode bitmap blk 0 in block_group 0 [ 41.018237][ T3943] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 41.027074][ T50] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-7 [ 41.057074][ T50] EXT4-fs error (device loop3): ext4_release_dquot:7039: comm kworker/u8:3: Failed to release dquot type 0 [ 41.068772][ T3943] EXT4-fs (loop3): 1 orphan inode deleted [ 41.076247][ T3943] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.089455][ T3300] loop1: p1 p2 p3 [ 41.114102][ T3300] loop1: p1 size 4719617 extends beyond EOD, truncated [ 41.117710][ T3943] syz.3.220 (3943) used greatest stack depth: 9256 bytes left [ 41.159395][ T3300] loop1: p3 start 117772289 is beyond EOD, truncated [ 41.174982][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.192349][ T3976] loop1: p1 p2 p3 [ 41.196311][ T3976] loop1: p1 size 4719617 extends beyond EOD, truncated [ 41.221620][ T3976] loop1: p3 start 117772289 is beyond EOD, truncated [ 41.372862][ T3915] udevd[3915]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 41.384026][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 41.434624][ T3915] udevd[3915]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 41.449328][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 41.583880][ T28] audit: type=1400 audit(1771614646.056:134): avc: denied { create } for pid=4034 comm="syz.2.263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 41.700503][ T28] audit: type=1400 audit(1771614646.166:135): avc: denied { allowed } for pid=4049 comm="syz.2.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 41.739805][ T4055] tmpfs: Bad value for 'mpol' [ 41.766547][ T28] audit: type=1400 audit(1771614646.196:136): avc: denied { sqpoll } for pid=4049 comm="syz.2.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 41.817415][ T28] audit: type=1400 audit(1771614646.196:137): avc: denied { create } for pid=4049 comm="syz.2.270" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 41.998249][ T4071] loop2: detected capacity change from 0 to 4096 [ 42.019231][ T4071] EXT4-fs (loop2): unsupported descriptor size 0 [ 42.093326][ T4078] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 42.099969][ T4078] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 42.122076][ T4084] loop2: detected capacity change from 0 to 512 [ 42.129311][ T4084] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 42.147838][ T4078] vhci_hcd vhci_hcd.0: Device attached [ 42.157700][ T4084] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 not in group (block 2)! [ 42.172676][ T4084] EXT4-fs (loop2): group descriptors corrupted! [ 42.183693][ T4080] vhci_hcd: connection closed [ 42.184146][ T309] vhci_hcd vhci_hcd.4: stop threads [ 42.206357][ T309] vhci_hcd vhci_hcd.4: release socket [ 42.226885][ T309] vhci_hcd vhci_hcd.4: disconnect device [ 42.261611][ T4089] SELinux: Context system_u:object is not valid (left unmapped). [ 42.279449][ T4056] syz.0.273 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 42.322520][ T4056] CPU: 1 UID: 0 PID: 4056 Comm: syz.0.273 Tainted: G W syzkaller #0 PREEMPT(full) [ 42.322590][ T4056] Tainted: [W]=WARN [ 42.322598][ T4056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 42.322640][ T4056] Call Trace: [ 42.322648][ T4056] [ 42.322657][ T4056] __dump_stack+0x1d/0x30 [ 42.322688][ T4056] dump_stack_lvl+0x95/0xd0 [ 42.322717][ T4056] dump_stack+0x15/0x1b [ 42.322745][ T4056] dump_header+0x80/0x240 [ 42.322795][ T4056] oom_kill_process+0x295/0x350 [ 42.322815][ T4056] out_of_memory+0x97d/0xb80 [ 42.322837][ T4056] try_charge_memcg+0x62e/0xa10 [ 42.323048][ T4056] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 42.323090][ T4056] __swap_cache_prepare_and_add+0x386/0x530 [ 42.323212][ T4056] swap_cache_alloc_folio+0xa2/0x120 [ 42.323239][ T4056] swap_cluster_readahead+0x26e/0x3d0 [ 42.323270][ T4056] swapin_readahead+0xde/0x840 [ 42.323346][ T4056] ? _raw_spin_unlock+0x9/0x30 [ 42.323372][ T4056] ? swap_put_entries_cluster+0x385/0x3a0 [ 42.323455][ T4056] ? swap_put_entries_cluster+0xe1/0x3a0 [ 42.323484][ T4056] ? __rcu_read_unlock+0x4e/0x70 [ 42.323508][ T4056] ? swap_cache_get_folio+0x26f/0x280 [ 42.323543][ T4056] do_swap_page+0x309/0x2210 [ 42.323676][ T4056] ? css_rstat_updated+0xbb/0x280 [ 42.323722][ T4056] ? __rcu_read_lock+0x36/0x50 [ 42.323817][ T4056] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 42.323851][ T4056] handle_mm_fault+0xb40/0x3020 [ 42.323888][ T4056] ? vma_start_read+0x1c7/0x2c0 [ 42.323922][ T4056] do_user_addr_fault+0x62f/0x1050 [ 42.324081][ T4056] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 42.324111][ T4056] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 42.324196][ T4056] ? trace_page_fault_user+0x1f/0xe0 [ 42.324238][ T4056] exc_page_fault+0x62/0xa0 [ 42.324272][ T4056] asm_exc_page_fault+0x26/0x30 [ 42.324372][ T4056] RIP: 0033:0x7f71c91477f8 [ 42.324387][ T4056] Code: 75 40 a8 10 75 3c 41 51 4c 8d 9b 08 03 00 00 49 89 c9 48 89 f1 41 50 48 8b 74 24 20 49 89 d0 48 89 fa 4c 89 df e8 a8 56 00 00 <8b> 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 [ 42.324413][ T4056] RSP: 002b:00007fff14d494f0 EFLAGS: 00010246 [ 42.324434][ T4056] RAX: 0000000000000000 RBX: 0000555577b75500 RCX: 00007f71c914cece [ 42.324451][ T4056] RDX: 00007fff14d49540 RSI: 0000000000000000 RDI: 0000000000000000 [ 42.324466][ T4056] RBP: 00007f71c9407da0 R08: 0000000000000000 R09: 0000000000000000 [ 42.324481][ T4056] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000a64d [ 42.324496][ T4056] R13: 00007f71c9405fac R14: 000000000000a360 R15: 00007fff14d49670 [ 42.324543][ T4056] [ 42.329009][ T4056] memory: usage 307200kB, limit 307200kB, failcnt 499 [ 42.425815][ T4094] loop3: detected capacity change from 0 to 512 [ 42.541359][ T4056] memory+swap: usage 307252kB, limit 9007199254740988kB, failcnt 0 [ 42.604493][ T4056] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 42.614559][ T4056] Memory cgroup stats for /syz0: [ 42.614924][ T4056] cache 0 [ 42.632077][ T4094] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #15: comm syz.3.289: corrupted inode contents [ 42.644405][ T4094] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 42.644608][ T4094] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 42.668890][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 42.668914][ C0] EXT4-fs (loop3): initial error at time 1771614647: ext4_do_update_inode:5569: inode 15 [ 42.668949][ C0] EXT4-fs (loop3): last error at time 1771614647: ext4_do_update_inode:5569: inode 15 [ 42.735519][ T4056] rss 0 [ 42.751360][ T4056] shmem 0 [ 42.771357][ T4056] mapped_file 0 [ 42.785269][ T4056] dirty 0 [ 42.788267][ T4056] writeback 0 [ 42.821474][ T4056] workingset_refault_anon 6 [ 42.834104][ T4094] fserror_report: 5 callbacks suppressed [ 42.834121][ T4094] loop3: lost filesystem error report for type 5 error -117 [ 42.859984][ T4056] workingset_refault_file 0 [ 42.872229][ T4094] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #15: comm syz.3.289: corrupted inode contents [ 42.921565][ T4056] swap 102400 [ 42.924894][ T4056] swapcached 106496 [ 42.935549][ T4094] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 42.937166][ T4094] EXT4-fs error (device loop3): ext4_evict_inode:303: inode #15: comm syz.3.289: mark_inode_dirty error [ 42.941318][ T4118] loop2: detected capacity change from 0 to 512 [ 42.966851][ T4094] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 42.969565][ T4094] EXT4-fs (loop3): 1 orphan inode deleted [ 42.978916][ T4056] pgpgin 3405 [ 42.988148][ T4056] pgpgout 3404 [ 42.991883][ T4056] pgfault 6454 [ 42.995287][ T4056] pgmajfault 4 [ 42.998850][ T4056] inactive_anon 4096 [ 43.003197][ T4056] active_anon 0 [ 43.006803][ T4056] inactive_file 0 [ 43.010602][ T4056] active_file 0 [ 43.014766][ T4117] loop4: detected capacity change from 0 to 512 [ 43.028190][ T4094] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.040552][ T4056] unevictable 0 [ 43.044300][ T4056] hierarchical_memory_limit 314572800 [ 43.049696][ T4056] hierarchical_memsw_limit 9223372036854771712 [ 43.067257][ T4056] total_cache 0 [ 43.070754][ T4056] total_rss 0 [ 43.077317][ T4118] EXT4-fs (loop2): orphan cleanup on readonly fs [ 43.089377][ T4117] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 43.097781][ T4118] EXT4-fs error (device loop2): ext4_acquire_dquot:7003: comm syz.2.300: Failed to acquire dquot type 1 [ 43.109176][ T4056] total_shmem 0 [ 43.112787][ T4056] total_mapped_file 0 [ 43.116786][ T4056] total_dirty 0 [ 43.120381][ T4118] loop2: lost filesystem error report for type 5 error -5 [ 43.120889][ T4118] EXT4-fs (loop2): 1 truncate cleaned up [ 43.121337][ T4056] total_writeback 0 [ 43.128053][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 43.143996][ C0] EXT4-fs (loop2): last error at time 1771614647: ext4_acquire_dquot:7003 [ 43.154247][ T4118] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 43.154626][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.188117][ T4117] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 43.197959][ T4056] total_workingset_refault_anon 6 [ 43.208420][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.217555][ T4056] total_workingset_refault_file 0 [ 43.224174][ T4056] total_swap 102400 [ 43.228654][ T4117] EXT4-fs (loop4): orphan cleanup on readonly fs [ 43.259251][ T4056] total_swapcached 106496 [ 43.281307][ T4056] total_pgpgin 3405 [ 43.286815][ T4056] total_pgpgout 3404 [ 43.290736][ T4056] total_pgfault 6454 [ 43.302693][ T4056] total_pgmajfault 4 [ 43.306677][ T4056] total_inactive_anon 4096 [ 43.311101][ T4056] total_active_anon 0 [ 43.311980][ T4117] EXT4-fs warning (device loop4): ext4_enable_quotas:7238: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 43.331798][ T4056] total_inactive_file 0 [ 43.335984][ T4056] total_active_file 0 [ 43.360231][ T4056] total_unevictable 0 [ 43.364340][ T4056] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.273,pid=4056,uid=0 [ 43.381992][ T4117] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 43.389027][ T4117] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.301: bg 0: block 40: padding at end of block bitmap is not set [ 43.403657][ T4117] loop4: lost filesystem error report for type 5 error -117 [ 43.403847][ T4117] EXT4-fs (loop4): Remounting filesystem read-only [ 43.411257][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 43.411278][ C1] EXT4-fs (loop4): initial error at time 1771614647: ext4_validate_block_bitmap:441 [ 43.411308][ C1] EXT4-fs (loop4): last error at time 1771614647: ext4_validate_block_bitmap:441 [ 43.414060][ T4056] Memory cgroup out of memory: Killed process 4056 (syz.0.273) total-vm:96076kB, anon-rss:1256kB, file-rss:21572kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:1000 [ 43.419559][ T4117] EXT4-fs (loop4): 1 truncate cleaned up [ 43.474747][ T4117] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 43.550369][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.589032][ T4146] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 43.609947][ T4146] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 43.647874][ T4146] jbd2_journal_init_inode: Cannot locate journal superblock [ 43.655611][ T4146] EXT4-fs (loop3): Could not load journal inode [ 43.690677][ T4154] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869) [ 43.705990][ T4154] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 43.720317][ T4154] EXT4-fs (loop4): invalid journal inode [ 43.942924][ T4177] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 43.949496][ T4177] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 43.991511][ T4177] vhci_hcd vhci_hcd.0: Device attached [ 44.015517][ T4178] vhci_hcd: connection closed [ 44.015813][ T36] vhci_hcd vhci_hcd.1: stop threads [ 44.026421][ T36] vhci_hcd vhci_hcd.1: release socket [ 44.036666][ T36] vhci_hcd vhci_hcd.1: disconnect device [ 44.174749][ T4199] isofs_fill_super: root inode is not a directory. Corrupted media? [ 44.481253][ T4225] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 44.684205][ T4250] vfat: Bad value for 'utf8' [ 44.760668][ T4258] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 44.781980][ T4258] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 44.801063][ T4258] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 44.811422][ T4258] EXT4-fs error (device loop1): ext4_get_journal_inode:5865: inode #32: comm syz.1.368: iget: special inode unallocated [ 44.825177][ T4258] loop1: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 44.825719][ T4258] EXT4-fs (loop1): no journal found [ 44.834964][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 44.834983][ C0] EXT4-fs (loop1): initial error at time 1771614649: ext4_get_journal_inode:5865: inode 32 [ 44.835011][ C0] EXT4-fs (loop1): last error at time 1771614649: ext4_get_journal_inode:5865: inode 32 [ 45.042948][ T4258] EXT4-fs (loop1): can't get journal size [ 45.099924][ T4281] set_capacity_and_notify: 6 callbacks suppressed [ 45.099962][ T4281] loop0: detected capacity change from 0 to 512 [ 45.126674][ T4283] loop2: detected capacity change from 0 to 1024 [ 45.142398][ T4283] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 45.167693][ T4283] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 45.178633][ T4283] EXT4-fs error (device loop2): ext4_get_journal_inode:5865: comm syz.2.380: inode #1: comm syz.2.380: iget: illegal inode # [ 45.193247][ T4283] loop2: lost filesystem error report for type 5 error -117 [ 45.196595][ T4286] loop4: detected capacity change from 0 to 512 [ 45.201056][ T4283] EXT4-fs (loop2): no journal found [ 45.215470][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 45.215492][ C0] EXT4-fs (loop2): initial error at time 1771614649: ext4_get_journal_inode:5865 [ 45.215526][ C0] EXT4-fs (loop2): last error at time 1771614649: ext4_get_journal_inode:5865 [ 45.244551][ T4281] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #17: comm syz.0.377: iget: immutable or append flags not allowed on symlinks [ 45.260610][ T4283] EXT4-fs (loop2): can't get journal size [ 45.268061][ T4283] EXT4-fs (loop2): failed to initialize system zone (-22) [ 45.275667][ T4258] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 45.285640][ T4283] EXT4-fs (loop2): mount failed [ 45.296350][ T4289] loop3: detected capacity change from 0 to 2048 [ 45.306116][ T4281] loop0: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117 [ 45.306535][ T4281] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.377: couldn't read orphan inode 17 (err -117) [ 45.310993][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 45.321027][ T4281] loop0: lost filesystem error report for type 5 error -117 [ 45.327512][ C1] EXT4-fs (loop0): initial error at time 1771614649: ext4_orphan_get:1391: inode 17 [ 45.350639][ C1] EXT4-fs (loop0): last error at time 1771614649: ext4_orphan_get:1391: inode 17 [ 45.371937][ T4286] EXT4-fs warning (device loop4): dx_probe:801: inode #2: comm syz.4.379: Unrecognised inode hash code 255 [ 45.404456][ T4289] loop3: p2 < > p3 < p5 > p4 [ 45.409214][ T4289] loop3: partition table partially beyond EOD, truncated [ 45.424893][ T4289] loop3: p2 start 4278190080 is beyond EOD, truncated [ 45.435220][ T4286] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.379: Corrupt directory, running e2fsck is recommended [ 45.454833][ T4281] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.482114][ T4289] loop3: p4 size 8192 extends beyond EOD, truncated [ 45.495769][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.511558][ T4289] loop3: p5 size 8192 extends beyond EOD, truncated [ 45.541429][ T3000] loop3: p2 < > p3 < p5 > p4 [ 45.546154][ T3000] loop3: partition table partially beyond EOD, truncated [ 45.571922][ T3000] loop3: p2 start 4278190080 is beyond EOD, truncated [ 45.585047][ T3000] loop3: p4 size 8192 extends beyond EOD, truncated [ 45.589388][ T4286] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 45.600056][ T3000] loop3: p5 size 8192 extends beyond EOD, truncated [ 45.616121][ T4299] loop1: detected capacity change from 0 to 512 [ 45.619580][ T4286] EXT4-fs error (device loop4): ext4_iget_extra_inode:5025: inode #15: comm syz.4.379: corrupted in-inode xattr: invalid ea_ino [ 45.627726][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.649532][ T4286] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 45.650895][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 45.666864][ C0] EXT4-fs (loop4): initial error at time 1771614650: ext4_iget_extra_inode:5025: inode 15 [ 45.676820][ C0] EXT4-fs (loop4): last error at time 1771614650: ext4_iget_extra_inode:5025: inode 15 [ 45.694937][ T4286] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.379: couldn't read orphan inode 15 (err -117) [ 45.708298][ T4299] EXT4-fs: Ignoring removed orlov option [ 45.728923][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 45.738816][ T4286] loop4: lost filesystem error report for type 5 error -117 [ 45.739457][ T4286] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.766084][ T3915] udevd[3915]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 45.775969][ T4299] EXT4-fs: Mount option(s) incompatible with ext2 [ 45.778546][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 45.841931][ T3915] udevd[3915]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 45.852803][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 45.852948][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 45.896569][ T4315] loop3: detected capacity change from 0 to 764 [ 45.931619][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.947895][ T4311] loop2: detected capacity change from 0 to 8192 [ 46.010730][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 46.010744][ T28] audit: type=1400 audit(1771614650.477:148): avc: denied { create } for pid=4321 comm="syz.0.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 46.037898][ T4326] tmpfs: Bad value for 'mpol' [ 46.153615][ T4335] loop0: detected capacity change from 0 to 512 [ 46.178415][ T4335] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 4294967295)! [ 46.215891][ T4335] EXT4-fs (loop0): group descriptors corrupted! [ 46.243010][ T4349] SELinux: Context u:r:untrusted_app:s0:c512,c768 is not valid (left unmapped). [ 46.293133][ T28] audit: type=1400 audit(1771614650.767:149): avc: denied { relabelto } for pid=4346 comm="syz.4.411" name="71" dev="tmpfs" ino=377 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 46.342265][ T4356] loop0: detected capacity change from 0 to 512 [ 46.363526][ T4356] EXT4-fs: Ignoring removed oldalloc option [ 46.370007][ T28] audit: type=1400 audit(1771614650.767:150): avc: denied { associate } for pid=4346 comm="syz.4.411" name="71" dev="tmpfs" ino=377 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="u:r:untrusted_app:s0:c512,c768" [ 46.421999][ T4356] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 46.525719][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.564634][ T28] audit: type=1400 audit(1771614650.817:151): avc: denied { remove_name } for pid=3313 comm="syz-executor" name="binderfs" dev="tmpfs" ino=381 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 46.610223][ T4376] futex_wake_op: syz.2.424 tries to shift op by -65; fix this program [ 46.666197][ T28] audit: type=1400 audit(1771614650.817:152): avc: denied { rmdir } for pid=3313 comm="syz-executor" name="71" dev="tmpfs" ino=377 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 46.735516][ T28] audit: type=1400 audit(1771614651.197:153): avc: denied { remount } for pid=4387 comm="syz.3.430" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 46.873154][ T28] audit: type=1326 audit(1771614651.347:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4402 comm="syz.4.438" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f601813c629 code=0x0 [ 46.956513][ T4410] loop3: detected capacity change from 0 to 1024 [ 47.029510][ T4410] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 47.060192][ T4421] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 47.091150][ T4410] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 47.130724][ T4410] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 47.142996][ T4421] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c841e018, mo2=0000] [ 47.143847][ T4410] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 47.179820][ T4421] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #3: comm syz.4.447: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 47.198428][ T4410] EXT4-fs error (device loop3): ext4_get_journal_inode:5865: inode #17: comm syz.3.442: iget: bad i_size value: 4398046511204 [ 47.274455][ T4410] loop3: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117 [ 47.274731][ T4410] EXT4-fs (loop3): no journal found [ 47.280711][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 47.290800][ T4421] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 47.295672][ C1] EXT4-fs (loop3): initial error at time 1771614651: ext4_get_journal_inode:5865 [ 47.295889][ T4421] EXT4-fs error (device loop4): ext4_quota_enable:7197: comm syz.4.447: Bad quota inode: 3, type: 0 [ 47.304740][ C1] : inode 17 [ 47.304752][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 47.304757][ C1] EXT4-fs (loop3): last error at time 1771614651: ext4_get_journal_inode:5865 [ 47.304770][ C0] EXT4-fs (loop4): initial error at time 1771614651: ext4_ext_check_inode:521 [ 47.304776][ C1] : inode 17 [ 47.304791][ C0] : inode 3 [ 47.304802][ C0] EXT4-fs (loop4): last error at time 1771614651: ext4_ext_check_inode:521: inode 3 [ 47.371742][ T4421] loop4: lost filesystem error report for type 5 error -117 [ 47.371842][ T4421] EXT4-fs warning (device loop4): ext4_enable_quotas:7238: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 47.395448][ T4421] EXT4-fs (loop4): mount failed [ 47.591547][ T4446] delete_channel: no stack [ 47.592972][ T28] audit: type=1400 audit(1771614652.067:155): avc: denied { create } for pid=4445 comm="syz.2.458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 47.610967][ T4446] delete_channel: no stack [ 47.670772][ T28] audit: type=1326 audit(1771614652.117:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4449 comm="syz.0.460" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f71c918c629 code=0x0 [ 47.698620][ T4452] EXT4-fs: inline encryption not supported [ 47.724991][ T4455] IPv6: addrconf: prefix option has invalid lifetime [ 47.806296][ T4452] EXT4-fs (loop1): orphan cleanup on readonly fs [ 47.817101][ T4452] Quota error (device loop1): v2_read_file_info: Block with free entry 9 out of range (1, 6). [ 47.849637][ T4452] EXT4-fs warning (device loop1): ext4_enable_quotas:7238: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 47.885316][ T4472] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (24670!=35945) [ 47.949991][ T4472] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 47.950371][ T4452] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 47.971298][ T4452] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.461: bad orphan inode 14 [ 47.981456][ T4452] loop1: lost filesystem error report for type 5 error -117 [ 47.981636][ T4452] ext4_test_bit(bit=13, block=18) = 1 [ 47.994356][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 47.994399][ C0] EXT4-fs (loop1): last error at time 1771614652: ext4_orphan_get:1417 [ 48.017902][ T4472] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 48.040729][ T4472] EXT4-fs (loop3): Can't support bigalloc feature without extents feature [ 48.040729][ T4472] [ 48.049339][ T4452] is_bad_inode(inode)=0 [ 48.055759][ T4452] NEXT_ORPHAN(inode)=0 [ 48.060001][ T4452] max_ino=32 [ 48.063311][ T4452] i_nlink=1 [ 48.066466][ T4452] EXT4-fs (loop1): 1 truncate cleaned up [ 48.072570][ T4452] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 48.080735][ T4472] EXT4-fs (loop3): Skipping orphan cleanup due to unknown ROCOMPAT features [ 48.120802][ T4483] capability: warning: `syz.2.475' uses deprecated v2 capabilities in a way that may be insecure [ 48.143390][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.151615][ T4472] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 48.281152][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.357651][ T4506] tmpfs: Bad value for 'mpol' [ 48.536363][ T4527] msdos: Bad value for 'errors' [ 48.803876][ T4559] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 48.820561][ T4559] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (12687!=20869) [ 48.861572][ T4559] EXT4-fs (loop0): invalid journal inode [ 48.867399][ T4559] EXT4-fs (loop0): can't get journal size [ 48.914018][ T4559] EXT4-fs error (device loop0): ext4_protect_reserved_inode:182: inode #2: comm syz.0.513: blocks 3-3 from inode overlap system zone [ 48.953139][ T4559] loop0: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 48.953419][ T4559] EXT4-fs (loop0): failed to initialize system zone (-117) [ 48.962579][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 48.962600][ C1] EXT4-fs (loop0): initial error at time 1771614653: ext4_protect_reserved_inode:182: inode 2 [ 48.962624][ C1] EXT4-fs (loop0): last error at time 1771614653: ext4_protect_reserved_inode:182: inode 2 [ 48.998275][ T4559] EXT4-fs (loop0): mount failed [ 49.187897][ T4593] EXT4-fs: quotafile must be on filesystem root [ 49.548177][ T4634] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 49.646387][ T4634] EXT4-fs (loop3): failed to open journal device unknown-block(11,127) -6 [ 49.662778][ T4652] tmpfs: Bad value for 'mpol' [ 49.805091][ T4672] delete_channel: no stack [ 49.809643][ T4672] delete_channel: no stack [ 49.846872][ T4671] EXT4-fs error (device loop3): ext4_quota_enable:7194: inode #4: comm syz.3.569: iget: bad i_size value: -72057594037921792 [ 49.899834][ T4671] loop3: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 49.899949][ T4671] EXT4-fs error (device loop3): ext4_quota_enable:7197: comm syz.3.569: Bad quota inode: 4, type: 1 [ 49.909133][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 49.909164][ C1] EXT4-fs (loop3): initial error at time 1771614654: ext4_quota_enable:7194: inode 4 [ 49.909212][ C1] EXT4-fs (loop3): last error at time 1771614654: ext4_quota_enable:7194: inode 4 [ 50.091275][ T4671] loop3: lost filesystem error report for type 5 error -117 [ 50.091380][ T4671] EXT4-fs warning (device loop3): ext4_enable_quotas:7238: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 50.167742][ T4671] EXT4-fs (loop3): mount failed [ 50.406018][ T4743] set_capacity_and_notify: 11 callbacks suppressed [ 50.406037][ T4743] loop1: detected capacity change from 0 to 512 [ 50.453790][ T4751] loop3: detected capacity change from 0 to 512 [ 50.501201][ T4743] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 50.509266][ T4743] System zones: 0-2, 18-18, 34-34 [ 50.520533][ T4751] EXT4-fs warning (device loop3): dx_probe:801: inode #2: comm syz.3.606: Unrecognised inode hash code 255 [ 50.560536][ T4751] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.606: Corrupt directory, running e2fsck is recommended [ 50.591784][ T4743] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 50.630554][ T4743] EXT4-fs (loop1): Remounting filesystem read-only [ 50.640264][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 50.646802][ C1] EXT4-fs (loop1): initial error at time 1771614655: ext4_mb_generate_buddy:1315 [ 50.655981][ C1] EXT4-fs (loop1): last error at time 1771614655: ext4_mb_generate_buddy:1315 [ 50.672327][ T4743] EXT4-fs (loop1): 1 truncate cleaned up [ 50.690882][ T4743] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.703591][ T12] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 50.728799][ T12] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 50.750128][ T4743] ext4 filesystem being mounted at /114/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.761621][ T4751] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 50.771177][ T12] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 50.803680][ T4751] EXT4-fs error (device loop3): ext4_iget_extra_inode:5025: inode #15: comm syz.3.606: corrupted in-inode xattr: invalid ea_ino [ 50.864600][ T4751] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 50.865117][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.880268][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 50.889789][ C0] EXT4-fs (loop3): initial error at time 1771614655: ext4_iget_extra_inode:5025: inode 15 [ 50.899924][ C0] EXT4-fs (loop3): last error at time 1771614655: ext4_iget_extra_inode:5025: inode 15 [ 50.917381][ T4751] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.606: couldn't read orphan inode 15 (err -117) [ 50.975679][ T4751] loop3: lost filesystem error report for type 5 error -117 [ 50.976446][ T4751] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.150534][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.218942][ T4810] loop4: detected capacity change from 0 to 512 [ 51.268272][ T4810] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #15: comm syz.4.632: corrupted inode contents [ 51.280509][ T4810] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 51.280694][ T4810] EXT4-fs (loop4): Remounting filesystem read-only [ 51.296525][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 51.296555][ C0] EXT4-fs (loop4): initial error at time 1771614655: ext4_do_update_inode:5569: inode 15 [ 51.296584][ C0] EXT4-fs (loop4): last error at time 1771614655: ext4_do_update_inode:5569: inode 15 [ 51.326271][ T4810] EXT4-fs warning (device loop4): ext4_evict_inode:275: xattr delete (err -30) [ 51.338233][ T4817] loop3: detected capacity change from 0 to 512 [ 51.344739][ T4810] EXT4-fs (loop4): 1 orphan inode deleted [ 51.351806][ T4810] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.377280][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.206033][ T4857] SELinux: Context system_u:object_r:v4l_device_t:s0 is not valid (left unmapped). [ 52.217314][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 52.217330][ T28] audit: type=1400 audit(1771614656.697:163): avc: denied { relabelto } for pid=4853 comm="syz.3.654" name="cgroup" dev="tmpfs" ino=597 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 trawcon="system_u:object_r:v4l_device_t:s0" [ 52.276524][ T28] audit: type=1400 audit(1771614656.727:164): avc: denied { associate } for pid=4853 comm="syz.3.654" name="cgroup" dev="tmpfs" ino=597 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:v4l_device_t:s0" [ 52.353797][ T28] audit: type=1400 audit(1771614656.737:165): avc: denied { unlink } for pid=3319 comm="syz-executor" name="cgroup" dev="tmpfs" ino=597 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 trawcon="system_u:object_r:v4l_device_t:s0" [ 52.583530][ T4896] tmpfs: Bad value for 'mpol' [ 52.650760][ T4903] loop2: detected capacity change from 0 to 2048 [ 52.718697][ T28] audit: type=1400 audit(1771614657.187:166): avc: denied { read write } for pid=4914 comm="syz.0.683" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 52.792837][ T28] audit: type=1400 audit(1771614657.187:167): avc: denied { open } for pid=4914 comm="syz.0.683" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 52.845047][ T4925] loop2: detected capacity change from 0 to 512 [ 52.886257][ T4925] EXT4-fs (loop2): 1 orphan inode deleted [ 52.907413][ T4925] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.927428][ T4925] ext4 filesystem being mounted at /146/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.988052][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.121472][ T4956] loop0: detected capacity change from 0 to 512 [ 53.151092][ T4956] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 53.183541][ T4956] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 53.191691][ T4956] System zones: 1-12 [ 53.195730][ T4956] EXT4-fs (loop0): orphan cleanup on readonly fs [ 53.203973][ T4956] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.703: bg 0: block 361: padding at end of block bitmap is not set [ 53.218605][ T4956] loop0: lost filesystem error report for type 5 error -117 [ 53.218735][ T4956] EXT4-fs (loop0): Remounting filesystem read-only [ 53.226131][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 53.226151][ C1] EXT4-fs (loop0): initial error at time 1771614657: ext4_validate_block_bitmap:441 [ 53.226180][ C1] EXT4-fs (loop0): last error at time 1771614657: ext4_validate_block_bitmap:441 [ 53.261819][ T4956] EXT4-fs (loop0): 1 truncate cleaned up [ 53.267845][ T4956] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 53.297021][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 53.356770][ T4958] loop1: detected capacity change from 0 to 8192 [ 53.441349][ T3300] loop1: p1 < > p2 p3 < p5 p6 > p4 [ 53.456672][ T3300] loop1: partition table partially beyond EOD, truncated [ 53.471017][ T3300] loop1: p1 start 100663296 is beyond EOD, truncated [ 53.480275][ T3300] loop1: p2 size 134217732 extends beyond EOD, truncated [ 53.498896][ T3300] loop1: p4 size 14876672 extends beyond EOD, truncated [ 53.520352][ T3300] loop1: p5 size 134217732 extends beyond EOD, truncated [ 53.529306][ T3300] loop1: p6 size 14876672 extends beyond EOD, truncated [ 53.547699][ T4983] capability: warning: `syz.4.716' uses 32-bit capabilities (legacy support in use) [ 53.560011][ T4958] loop1: p1 < > p2 p3 < p5 p6 > p4 [ 53.565241][ T4958] loop1: partition table partially beyond EOD, truncated [ 53.580373][ T4958] loop1: p1 start 100663296 is beyond EOD, truncated [ 53.587360][ T4958] loop1: p2 size 134217732 extends beyond EOD, truncated [ 53.596309][ T4958] loop1: p4 size 14876672 extends beyond EOD, truncated [ 53.620097][ T4987] loop0: detected capacity change from 0 to 256 [ 53.629527][ T4958] loop1: p5 size 134217732 extends beyond EOD, truncated [ 53.657935][ T4958] loop1: p6 size 14876672 extends beyond EOD, truncated [ 53.755941][ T3915] udevd[3915]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 53.762086][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 53.778536][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 53.792650][ T5000] tmpfs: Bad value for 'mpol' [ 53.794947][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 53.808719][ T3740] udevd[3740]: inotify_add_watch(7, /dev/loop1p6, 10) failed: No such file or directory [ 53.871721][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 53.887497][ T28] audit: type=1326 audit(1771614658.358:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5013 comm="syz.4.731" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f601813c629 code=0x0 [ 53.913807][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop1p6, 10) failed: No such file or directory [ 53.930683][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 53.940840][ T3740] udevd[3740]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 53.960960][ T5007] udevd[5007]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 54.099519][ T5038] loop0: detected capacity change from 0 to 256 [ 54.138707][ T5038] FAT-fs (loop0): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 54.176223][ T3000] ================================================================== [ 54.184352][ T3000] BUG: KCSAN: data-race in d_make_discardable / lookup_fast [ 54.191766][ T3000] [ 54.194112][ T3000] write to 0xffff888105ce26c0 of 4 bytes by task 3304 on cpu 1: [ 54.201764][ T3000] d_make_discardable+0x4f/0xa0 [ 54.206650][ T3000] simple_unlink+0x68/0x80 [ 54.211112][ T3000] shmem_unlink+0x12d/0x140 [ 54.215647][ T3000] vfs_unlink+0x1c7/0x490 [ 54.219997][ T3000] filename_unlinkat+0x1e2/0x410 [ 54.224968][ T3000] __se_sys_unlink+0x2b/0xe0 [ 54.229595][ T3000] __x64_sys_unlink+0x1f/0x30 [ 54.234294][ T3000] x64_sys_call+0x2eb6/0x3020 [ 54.239006][ T3000] do_syscall_64+0x12c/0x370 [ 54.243660][ T3000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.249593][ T3000] [ 54.251943][ T3000] read to 0xffff888105ce26c0 of 4 bytes by task 3000 on cpu 0: [ 54.259493][ T3000] lookup_fast+0xf0/0x320 [ 54.263847][ T3000] path_lookupat+0x15c/0x500 [ 54.268464][ T3000] filename_lookup+0x190/0x390 [ 54.273256][ T3000] do_readlinkat+0x74/0x2f0 [ 54.277789][ T3000] __x64_sys_readlink+0x47/0x60 [ 54.282661][ T3000] x64_sys_call+0x2b51/0x3020 [ 54.287360][ T3000] do_syscall_64+0x12c/0x370 [ 54.291977][ T3000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.297894][ T3000] [ 54.300230][ T3000] value changed: 0x08300080 -> 0x00004080 [ 54.305964][ T3000] [ 54.308301][ T3000] Reported by Kernel Concurrency Sanitizer on: [ 54.314461][ T3000] CPU: 0 UID: 0 PID: 3000 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(full) [ 54.324891][ T3000] Tainted: [W]=WARN [ 54.328708][ T3000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 54.338776][ T3000] ==================================================================