last executing test programs: 50.170283232s ago: executing program 0 (id=1603): renameat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000800000002"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, &(0x7f0000000080), 0x0}, 0x20) 50.169354192s ago: executing program 0 (id=1605): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x60, r1, 0x731, 0x0, 0x0, {0x38}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x73}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2000000}}}]}, 0x60}, 0x1, 0x2, 0x0, 0x1bb5818a0d1752a}, 0x40) 50.078016588s ago: executing program 0 (id=1610): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) 50.049638599s ago: executing program 0 (id=1611): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0x0, @remote}, {0x2, 0x4e21, @private=0xa010101}, 0x107, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000, 0x101}) ioctl$sock_inet_SIOCADDRT(r0, 0x890c, &(0x7f0000000840)={0x0, {0x2, 0x4e22, @empty}, {0x2, 0x8045, @multicast2}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0xc, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='lo\x00', 0x800, 0x3}) 49.953303735s ago: executing program 0 (id=1616): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) 49.878422269s ago: executing program 0 (id=1622): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000002500)={&(0x7f0000000080)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x44}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000100)="ec", 0x1}], 0x1}, 0x80) setsockopt$sock_attach_bpf(r0, 0x29, 0x6, 0x0, 0x0) 34.806194619s ago: executing program 32 (id=1622): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000002500)={&(0x7f0000000080)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x44}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000100)="ec", 0x1}], 0x1}, 0x80) setsockopt$sock_attach_bpf(r0, 0x29, 0x6, 0x0, 0x0) 29.462574231s ago: executing program 2 (id=2400): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000380)={[{@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x7}}, {@dioread_nolock}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}]}, 0x53, 0x4f3, &(0x7f00000012c0)="$eJzs3F1oXFUeAPD/nXz2a5vd7Xa33e5uut1lwxaTNq02D4JUFHxQECuojyFJS23aSJOCLVWmIPVRCr6Lj7764Kv6UsQnwdf6KEihSF/aCuLInbl3vjKTNJNkxpjfD27mnHtn7jnnnnvunHtO5gawbY2mf5JK+E5E7I2IQvMbRisvD+9fn3l0//pMFEulMz8m5Y89SOOZbDexK4uMFSIK7yW1DXUWr167MD0/P3c5i08sXXxrYvHqtSfOD2drpqaS/g4L1SK9tFwPDr67cOjAC2/cemmmuuc8tfpybJTRGG2VlbL/bnRiPbanLtxxvdF16fmfVtdAuf3vjb5YqfKKXcwZsNlKpVJpqP3mYqnZjWVrgC0rhnudA6A38i/69P43X1p1BAY3p/vRc/dOV26A0nI/zJaIf5VX5uMgA033txtpNCJeL/70UbrEJo1DAADU++J03hNs6v+NVGZGfr5y+5n09Q/ZHMpIRPwxIv4UEX+OiH0R8ZeI2B8Rf42IvzXtvy8iSiukP9oUr6ZfnYQq3N2goraU9v+ezua20qU291UNjfRlsT0ReYd57lh2TMZiYOjs+fm54yuk8eVz337Qblt9/y9d0jzkfcEsH3f7mwboZqeXpjsr7XL3bkQc7K+Vv9L/TfojkupMQBIRByLi4Br2O1IXPv//Tw5VIwON71u9/GWllvNoGzDPVPo44n+V+i9GtfzRMImYNMxPXpw+N3du7tLk1NTJE8dPPTX55MRwzM8dm0jPgmMt0/j6m5svt0t/1fJ/9n3zR54/9fmZrGWtX1r/O+vO/8jnb2vlH0kikup87eLa07j53ftt72k6Pf8Hk1fL4fy+9O3ppaXLxyMGkxeXr5+sfTaPp69RrJR/7Ejz+V9Ot3yNy4/E3yMiPYn/ERH/jModYpr3wxHx74g4skL5v3r2P292Xv7NlZZ/NhrLX6n5hvqvzde3CyTZ3GDDpsFIA30XDt951Obi8Xj1f7IcGsvWtL7+JQ2XiHY5zb/t0jW/rPvoAQAAwNZQiIjddWNJu6NQGB+vjAHti52F+YXFpaNnF65cmk23RYzEQCEf6aqMBw8k+fjnSF18sil+Ihs3/rBvRzk+PrMwP9vTkgO7ym0+KYxHvNZX1/5TP2zMEDPwW+b3WrB9rdT+0078/ltdzAzQVY///X/7nU3NCNB1de2/3S/8ix383xewBbj/B2pWf9CPawZsfSVtGba1NbX/ox4CCL8n/fFKNVzoaU6AbtP/h21p1d/1rytQGmq9aTiWvzmGV95hX3SWjR0t0upJIO1Z9ST1HZ18Kn+aQtv3RGFtOxyKxjWDHdbp2XUejeLlxXP7ayd//myRdR7nUva/8htdg592pZ22CnT9UgQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALApfg0AAP//XhrXwA==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000200, 0x0, 0x0) 29.263661742s ago: executing program 2 (id=2408): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0xfffe, 0x3080000, @mcast2, 0x6}, 0x1c) write(r0, &(0x7f00000000c0)="8f2a0a65bd", 0x5) 29.104412612s ago: executing program 2 (id=2414): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x4, 0x1, 0x80}, 0x1b) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000f80)={0x0, 0xfffffffffffffffd, &(0x7f0000000e00), &(0x7f0000000e80), 0x4, r0}, 0x38) 29.002813608s ago: executing program 2 (id=2419): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) 28.141351448s ago: executing program 2 (id=2470): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) symlinkat(&(0x7f0000000040)='./file0/file0\x00', r0, &(0x7f0000000100)='./file0\x00') 28.125857299s ago: executing program 2 (id=2471): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x4, 0x4) 13.092350956s ago: executing program 33 (id=2471): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x4, 0x4) 702.024769ms ago: executing program 3 (id=3509): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x5c, r1, 0xe17, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local={0xfe, 0xfc}}]}, 0x5c}}, 0x0) 649.732082ms ago: executing program 1 (id=3511): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) socket$kcm(0x21, 0x2, 0x2) 633.822713ms ago: executing program 3 (id=3512): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) fstat(r0, &(0x7f00000027c0)) 633.343123ms ago: executing program 1 (id=3513): syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000000)='./file0\x00', 0x800000, &(0x7f0000000200)=ANY=[], 0xfe, 0x37f, &(0x7f00000006c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x142, 0x60) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 558.280817ms ago: executing program 3 (id=3515): syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x2000004, &(0x7f0000002480)=ANY=[@ANYBLOB="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"], 0x1, 0x11f4, &(0x7f0000001280)="$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") r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) read$watch_queue(r0, &(0x7f00000000c0)=""/199, 0xc7) 436.742644ms ago: executing program 5 (id=3523): socket$can_raw(0x1d, 0x3, 0x1) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) 410.732236ms ago: executing program 5 (id=3524): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x34, 0x10, 0x0, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x114, 0x10}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40090}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000001200010200000000fedbdf250200000008000000060000000800e880040043"], 0x24}}, 0x40084) 410.380576ms ago: executing program 4 (id=3525): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x100000001, {{0xa, 0x0, 0xfffffffd, @mcast2, 0x5}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000240)={0x0, {{0xa, 0x4e21, 0x0, @mcast2, 0xfffffffe}}, {{0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x10}}, 0x100b}}}, 0x108) 400.291576ms ago: executing program 6 (id=3526): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x88040, 0x0) fcntl$getflags(r0, 0xb) 399.669796ms ago: executing program 1 (id=3527): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, 0x0, &(0x7f00000000c0)) 370.028888ms ago: executing program 4 (id=3528): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000006000000010001004900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000006c0), &(0x7f00000003c0)=""/14, 0x2}, 0x20) 369.311198ms ago: executing program 3 (id=3529): r0 = signalfd(0xffffffffffffffff, &(0x7f0000000b40)={[0x6]}, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x0, 0x1, 0x26d, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x7dffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) fcntl$lock(r0, 0x5, &(0x7f0000000e00)={0x0, 0x1, 0x3, 0xfffffffffffffffe}) 351.625579ms ago: executing program 6 (id=3530): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f00000000c0)={0x1e57, 0xfffffffe, 0x0, 0x6, 0x2, "04ad7d0d00", 0x400002, 0x80006}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xd) 298.867443ms ago: executing program 5 (id=3531): r0 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000a40)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0xfffffffe, {0x0, 0x0, 0x12, r1, {0x0, 0xffe0}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x5, '\x00', 0x2, 0x200001, 0xc, 0x63f1}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x818}, 0x0) 298.526882ms ago: executing program 1 (id=3532): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xffff0000}]}}}]}]}], {0x14}}, 0x8c}}, 0x0) 293.877183ms ago: executing program 4 (id=3533): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001800dd8d00000000000000000200000000000006000000000600150001000000180016"], 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000a0) 249.112646ms ago: executing program 3 (id=3534): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3800000, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x2904c, 0x3fffffffffffd49, 0x10003, '\x00', [{0x0, 0x0, 0x5}, {0xffffffff, 0x0, 0x0, 0x4}]}) 248.897406ms ago: executing program 6 (id=3535): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000180)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, 0x0}, 0x200400c4) 248.749496ms ago: executing program 5 (id=3536): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x4004032, 0xffffffffffffffff, 0xb06cb000) r0 = socket(0xa, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000f40)={@in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3e}}}, 0x0, 0x0, 0x3d, 0x0, "2dfedf4fe729e6da2c283c04b074205e1eefc56dbc4e3bbeef85e81f0118fc0f64326f290de80584bce41936f14cb7a820ac8e630e660da57c076a7cb4155c7f0efdcea917bd84db674f344208d682a5"}, 0xd8) 228.163667ms ago: executing program 4 (id=3537): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000340)=@ipv4_newroute={0x20, 0x1a, 0x1, 0x80000000, 0x25dfdbfd, {0xa, 0x80, 0x80}, [@RTA_METRICS={0x4}]}, 0x20}}, 0x20000050) 219.425247ms ago: executing program 1 (id=3538): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0x80000000, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0xf, 0x4}, {0xe, 0xfff3}, {0xe, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x4}, @TCA_FQ_PIE_BYTEMODE={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x4010) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) 151.573821ms ago: executing program 4 (id=3539): unshare(0x26000400) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events.local\x00', 0x275a, 0x0) fadvise64(r0, 0x3, 0x1, 0x5) 151.311791ms ago: executing program 5 (id=3540): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e80c20000000000000000000000900000000000000000000000900000200000000000000000902"], 0x0, 0x96}, 0x28) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1f00}, 0x2}, 0x80) 125.583663ms ago: executing program 4 (id=3541): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r0, 0x27, 0x82, 0x0, &(0x7f0000000240)="f8ad48cc02cb29dcc8007f5b86dd", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) 112.939453ms ago: executing program 3 (id=3542): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="4400000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000140012800b0001006970766c616e00000200028008000500", @ANYRES32=r1, @ANYBLOB="08000a00fe"], 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) 101.384394ms ago: executing program 5 (id=3543): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x1400c, &(0x7f0000000180)={[{@noinit_itable}, {@init_itable}, {@grpquota}]}, 0x3, 0x481, &(0x7f00000004c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x22) 97.993634ms ago: executing program 6 (id=3544): r0 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x6, &(0x7f0000000140)={0x24, {{0x29, 0x0, 0x2000000, @private2, 0x1000000}}}, 0x88) 18.554769ms ago: executing program 6 (id=3545): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS(r0, 0x5402, &(0x7f0000001280)={0x8, 0xbaf, 0x40, 0xffff, 0x4, "38c266fd5f358b1846568c0e1250f0c0c9f959"}) write$binfmt_elf64(r0, &(0x7f00000012c0)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0x6, 0x6, 0xd, 0xde, 0x3, 0x3, 0xff, 0x363, 0x40, 0x12b, 0x80, 0x4, 0x38, 0x1, 0xd, 0x4893, 0x8}, [{0x2, 0xfffffffe, 0x8, 0x4, 0x2, 0x3, 0x10000058e, 0x4}]}, 0x78) 14.288239ms ago: executing program 1 (id=3546): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000700)=0x14) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000200)=0xc0) 0s ago: executing program 6 (id=3547): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xa7a, 0x100) unshare(0x22020600) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f00000003c0)=""/4096) kernel console output (not intermixed with test programs): 7.304301][ T6324] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.319574][ T6324] ext4 filesystem being mounted at /229/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.359010][ T29] audit: type=1326 audit(1769252880.241:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6385 comm="syz.4.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba3ccaacb9 code=0x7ffc0000 [ 57.372763][ T6391] netlink: 'syz.0.1343': attribute type 11 has an invalid length. [ 57.382515][ T29] audit: type=1326 audit(1769252880.241:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6385 comm="syz.4.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba3ccaacb9 code=0x7ffc0000 [ 57.414021][ T29] audit: type=1326 audit(1769252880.251:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6385 comm="syz.4.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba3ccaacb9 code=0x7ffc0000 [ 57.437738][ T29] audit: type=1326 audit(1769252880.251:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6385 comm="syz.4.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba3ccaacb9 code=0x7ffc0000 [ 57.461143][ T29] audit: type=1326 audit(1769252880.281:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6385 comm="syz.4.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fba3ccaacb9 code=0x7ffc0000 [ 57.484724][ T29] audit: type=1326 audit(1769252880.281:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6385 comm="syz.4.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba3ccaacb9 code=0x7ffc0000 [ 57.508963][ T29] audit: type=1326 audit(1769252880.281:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6385 comm="syz.4.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba3ccaacb9 code=0x7ffc0000 [ 57.517820][ T6396] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1344'. [ 57.556713][ T6395] set_capacity_and_notify: 4 callbacks suppressed [ 57.556730][ T6395] loop4: detected capacity change from 0 to 256 [ 57.558399][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.630606][ T6402] netlink: 47 bytes leftover after parsing attributes in process `syz.3.1351'. [ 57.656977][ T6405] netlink: 'syz.2.1349': attribute type 3 has an invalid length. [ 57.700779][ T6412] loop4: detected capacity change from 0 to 512 [ 57.723175][ T6412] ext3: Unknown parameter 'measure' [ 57.865290][ T576] Bluetooth: hci0: Frame reassembly failed (-84) [ 57.991990][ T6455] loop1: detected capacity change from 0 to 512 [ 57.996508][ T6457] syz_tun: entered allmulticast mode [ 58.004297][ T6455] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 58.036094][ T6455] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 58.049523][ T6455] ext4 filesystem being mounted at /238/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.066641][ T6455] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.1373: Failed to acquire dquot type 0 [ 58.093858][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 58.182395][ T6479] __nla_validate_parse: 3 callbacks suppressed [ 58.182414][ T6479] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1384'. [ 58.227357][ T6482] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1383'. [ 58.236548][ T6482] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1383'. [ 58.455375][ T6505] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1396'. [ 58.554937][ T6520] tipc: Started in network mode [ 58.560035][ T6520] tipc: Node identity 2d0000000000000000e7, cluster identity 4711 [ 58.588354][ T6524] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1405'. [ 58.600499][ T6526] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 58.609428][ T6526] vhci_hcd vhci_hcd.0: default hub control req: 2314 v0008 i0002 l0 [ 58.660269][ T6531] loop2: detected capacity change from 0 to 512 [ 58.708075][ T6531] EXT4-fs error (device loop2): ext4_iget_extra_inode:5073: inode #15: comm syz.2.1409: corrupted in-inode xattr: e_value size too large [ 58.764180][ T6539] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1407'. [ 58.828216][ T6531] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.1409: couldn't read orphan inode 15 (err -117) [ 59.110975][ T6571] loop0: detected capacity change from 0 to 128 [ 59.193065][ T6581] loop0: detected capacity change from 0 to 512 [ 59.206479][ T6581] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.1432: inode has both inline data and extents flags [ 59.207134][ T6581] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.1432: couldn't read orphan inode 15 (err -117) [ 59.232730][ T6581] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters [ 59.263834][ T6586] loop2: detected capacity change from 0 to 1024 [ 59.450910][ T6601] loop1: detected capacity change from 0 to 1024 [ 59.600878][ T6626] netlink: 822 bytes leftover after parsing attributes in process `syz.2.1450'. [ 59.733257][ T6647] loop1: detected capacity change from 0 to 1024 [ 59.740366][ T6647] EXT4-fs: Ignoring removed bh option [ 59.834890][ T6659] loop1: detected capacity change from 0 to 512 [ 59.863855][ T6659] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 59.896108][ T6665] EXT4-fs: Ignoring removed orlov option [ 59.908905][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 59.913389][ T3709] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 59.936867][ T6659] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 59.968577][ T6665] EXT4-fs error (device loop0): __ext4_new_inode:1279: comm syz.0.1463: failed to insert inode 15: doubly allocated? [ 59.981900][ T6665] EXT4-fs (loop0): Remounting filesystem read-only [ 59.989702][ T6665] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2858: Unable to expand inode 13. Delete some EAs or run e2fsck. [ 60.038115][ T6674] usb usb7: usbfs: process 6674 (syz.3.1467) did not claim interface 0 before use [ 60.290897][ T6692] ext4 filesystem being mounted at /261/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.455357][ T6713] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1483'. [ 60.620570][ T6723] rock: directory entry would overflow storage [ 60.626897][ T6723] rock: sig=0x4f50, size=4, remaining=3 [ 60.632659][ T6723] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 60.660402][ T6727] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1490'. [ 60.768478][ T6731] EXT4-fs (loop1): 1 orphan inode deleted [ 60.775475][ T6731] ext4 filesystem being mounted at /272/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.989584][ T6752] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1501'. [ 61.212595][ T3500] IPVS: starting estimator thread 0... [ 61.308142][ T6780] IPVS: using max 2736 ests per chain, 136800 per kthread [ 61.348578][ T6803] EXT4-fs: Ignoring removed nobh option [ 61.371437][ T6803] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 61.425541][ T6803] EXT4-fs (loop3): 1 truncate cleaned up [ 61.733599][ T23] kernel read not supported for file /vga_arbiter (pid: 23 comm: kworker/1:0) [ 62.015184][ T29] kauditd_printk_skb: 58 callbacks suppressed [ 62.015204][ T29] audit: type=1400 audit(1769252884.901:658): avc: denied { create } for pid=6882 comm="syz.0.1550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 62.058178][ T29] audit: type=1400 audit(1769252884.931:659): avc: denied { ioctl } for pid=6882 comm="syz.0.1550" path="socket:[14901]" dev="sockfs" ino=14901 ioctlcmd=0x8919 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 62.247157][ T29] audit: type=1400 audit(1769252885.131:660): avc: denied { create } for pid=6909 comm="syz.1.1563" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=sctp_socket permissive=1 [ 62.468327][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 62.674750][ T6970] netlink: 'syz.0.1591': attribute type 8 has an invalid length. [ 62.703318][ T6974] netlink: 'syz.3.1593': attribute type 6 has an invalid length. [ 62.712009][ T6972] netlink: 'syz.2.1592': attribute type 5 has an invalid length. [ 62.735584][ T29] audit: type=1326 audit(1769252885.621:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6975 comm="syz.0.1594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63298acb9 code=0x7ffc0000 [ 62.777944][ T29] audit: type=1326 audit(1769252885.651:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6975 comm="syz.0.1594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fa63298acb9 code=0x7ffc0000 [ 62.801608][ T29] audit: type=1326 audit(1769252885.651:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6975 comm="syz.0.1594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63298acb9 code=0x7ffc0000 [ 62.825098][ T29] audit: type=1326 audit(1769252885.651:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6975 comm="syz.0.1594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63298acb9 code=0x7ffc0000 [ 62.848627][ T29] audit: type=1326 audit(1769252885.651:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6975 comm="syz.0.1594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=92 compat=0 ip=0x7fa63298acb9 code=0x7ffc0000 [ 62.872138][ T29] audit: type=1326 audit(1769252885.651:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6975 comm="syz.0.1594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63298acb9 code=0x7ffc0000 [ 62.896040][ T29] audit: type=1326 audit(1769252885.651:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6975 comm="syz.0.1594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63298acb9 code=0x7ffc0000 [ 63.150207][ T7013] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 63.192056][ T7007] set_capacity_and_notify: 9 callbacks suppressed [ 63.192076][ T7007] loop2: detected capacity change from 0 to 4096 [ 63.380702][ T7037] loop1: detected capacity change from 0 to 1024 [ 63.483153][ T7053] loop3: detected capacity change from 0 to 512 [ 63.715615][ T7082] tipc: Enabling of bearer rejected, failed to enable media [ 63.748575][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 64.109517][ T7130] __nla_validate_parse: 6 callbacks suppressed [ 64.109537][ T7130] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1666'. [ 64.127776][ T7133] tipc: Cannot configure node identity twice [ 64.306926][ T7154] loop3: detected capacity change from 0 to 512 [ 64.356688][ T7154] ext4 filesystem being mounted at /352/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.398707][ T7154] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.1679: Failed to acquire dquot type 0 [ 64.712588][ T7178] loop4: detected capacity change from 0 to 256 [ 64.764364][ T7181] loop1: detected capacity change from 0 to 512 [ 64.809133][ T7181] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 64.842548][ T7181] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0102] [ 64.878800][ T7181] EXT4-fs error (device loop1): ext4_iget_extra_inode:5073: inode #15: comm syz.1.1692: corrupted in-inode xattr: e_value size too large [ 64.932134][ T7181] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.1692: couldn't read orphan inode 15 (err -117) [ 65.091914][ T7211] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1702'. [ 65.149365][ T7215] vhci_hcd vhci_hcd.3: invalid port number 9 [ 65.174193][ T7219] loop1: detected capacity change from 0 to 256 [ 65.200185][ T7223] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1721'. [ 65.233317][ T7223] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1721'. [ 65.300615][ T7231] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1713'. [ 65.309631][ T7231] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1713'. [ 65.318725][ T7231] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1713'. [ 65.451014][ T7242] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 65.458514][ T7242] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 65.503051][ T7249] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 65.511726][ T7249] vhci_hcd vhci_hcd.0: default hub control req: 2314 v0008 i0002 l0 [ 65.551950][ T7253] loop3: detected capacity change from 0 to 512 [ 65.602561][ T7253] ext4 filesystem being mounted at /365/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.676308][ T7263] IPVS: Scheduler module ip_vs_sip not found [ 65.699924][ T7266] loop2: detected capacity change from 0 to 128 [ 65.764466][ T52] Bluetooth: hci0: Frame reassembly failed (-84) [ 65.842135][ T7278] loop3: detected capacity change from 0 to 1024 [ 65.941746][ T7288] EXT4-fs: Ignoring removed bh option [ 66.045722][ T7297] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 66.082032][ T7297] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 66.130065][ T7304] usb usb7: usbfs: process 7304 (syz.2.1747) did not claim interface 0 before use [ 66.283397][ T7326] EXT4-fs: Ignoring removed orlov option [ 66.297668][ T7322] ext4 filesystem being mounted at /374/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.356435][ T7326] EXT4-fs error (device loop4): __ext4_new_inode:1279: comm syz.4.1757: failed to insert inode 15: doubly allocated? [ 66.386583][ T7326] EXT4-fs (loop4): Remounting filesystem read-only [ 66.594967][ T7357] netlink: 'syz.4.1769': attribute type 1 has an invalid length. [ 66.602782][ T7357] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1769'. [ 66.841579][ T7381] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1780'. [ 66.850851][ T7381] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1780'. [ 66.875366][ T7379] dvmrp1: entered allmulticast mode [ 66.903439][ T7387] dvmrp1: left allmulticast mode [ 67.126087][ T7402] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 67.144797][ T7404] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.1789: inode has both inline data and extents flags [ 67.159366][ T7404] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.1789: couldn't read orphan inode 15 (err -117) [ 67.199205][ T7404] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters [ 67.226830][ T4884] IPVS: starting estimator thread 0... [ 67.318080][ T7411] IPVS: using max 2448 ests per chain, 122400 per kthread [ 67.796202][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 67.796220][ T29] audit: type=1326 audit(1769252890.681:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7434 comm="syz.3.1801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c10acacb9 code=0x7ffc0000 [ 67.827214][ T29] audit: type=1326 audit(1769252890.711:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7434 comm="syz.3.1801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0c10acacb9 code=0x7ffc0000 [ 67.851343][ T29] audit: type=1326 audit(1769252890.711:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7434 comm="syz.3.1801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c10acacb9 code=0x7ffc0000 [ 67.874943][ T29] audit: type=1326 audit(1769252890.711:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7434 comm="syz.3.1801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c10acacb9 code=0x7ffc0000 [ 67.878063][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 67.899116][ T29] audit: type=1326 audit(1769252890.721:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7434 comm="syz.3.1801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=93 compat=0 ip=0x7f0c10acacb9 code=0x7ffc0000 [ 67.904461][ T3709] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 67.928534][ T29] audit: type=1326 audit(1769252890.721:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7434 comm="syz.3.1801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c10acacb9 code=0x7ffc0000 [ 67.957635][ T29] audit: type=1326 audit(1769252890.721:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7434 comm="syz.3.1801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c10acacb9 code=0x7ffc0000 [ 68.012788][ T7441] netlink: 'syz.4.1805': attribute type 6 has an invalid length. [ 68.309143][ T29] audit: type=1400 audit(1769252891.201:702): avc: denied { read } for pid=7464 comm="syz.2.1818" path="socket:[17674]" dev="sockfs" ino=17674 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 68.332880][ T29] audit: type=1400 audit(1769252891.201:703): avc: denied { create } for pid=7463 comm="syz.4.1817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 68.440869][ T7478] netlink: 'syz.3.1826': attribute type 1 has an invalid length. [ 68.634842][ T7504] SELinux: failed to load policy [ 68.640432][ T29] audit: type=1400 audit(1769252891.521:704): avc: denied { load_policy } for pid=7503 comm="syz.3.1837" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 68.689032][ T7508] netlink: 'syz.2.1839': attribute type 4 has an invalid length. [ 68.779739][ T7518] vhci_hcd vhci_hcd.2: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 69.121999][ T7562] hsr0: entered promiscuous mode [ 69.137260][ T7562] macsec1: entered promiscuous mode [ 69.142790][ T7562] macsec1: entered allmulticast mode [ 69.148816][ T7562] hsr0: entered allmulticast mode [ 69.153952][ T7562] hsr_slave_0: entered allmulticast mode [ 69.160333][ T7562] hsr_slave_1: entered allmulticast mode [ 69.185567][ T7562] hsr0: left allmulticast mode [ 69.190526][ T7562] hsr_slave_0: left allmulticast mode [ 69.195962][ T7562] hsr_slave_1: left allmulticast mode [ 69.281718][ T7575] set_capacity_and_notify: 8 callbacks suppressed [ 69.281737][ T7575] loop2: detected capacity change from 0 to 256 [ 69.395212][ T7583] ucma_write: process 794 (syz.4.1874) changed security contexts after opening file descriptor, this is not allowed. [ 69.472600][ T7589] loop2: detected capacity change from 0 to 1024 [ 69.481810][ T7589] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 69.491912][ T7589] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 69.518336][ T7589] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 69.529632][ T7589] EXT4-fs error (device loop2): ext4_get_journal_inode:5849: inode #5: comm syz.2.1877: unexpected bad inode w/o EXT4_IGET_BAD [ 69.577331][ T7589] EXT4-fs (loop2): no journal found [ 69.582791][ T7589] EXT4-fs (loop2): can't get journal size [ 69.610539][ T7589] EXT4-fs mount: 42 callbacks suppressed [ 69.610559][ T7589] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 69.703548][ T7602] loop4: detected capacity change from 0 to 8192 [ 69.718350][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.774067][ T7608] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 69.786863][ T7610] loop3: detected capacity change from 0 to 512 [ 70.116936][ T7639] xt_CT: No such helper "snmp" [ 70.142770][ T7646] __nla_validate_parse: 15 callbacks suppressed [ 70.142789][ T7646] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1903'. [ 70.158301][ T7646] netlink: 31 bytes leftover after parsing attributes in process `syz.3.1903'. [ 70.167494][ T7646] netlink: 'syz.3.1903': attribute type 4 has an invalid length. [ 70.370419][ T7668] loop3: detected capacity change from 0 to 1024 [ 70.380117][ T7668] EXT4-fs: Ignoring removed orlov option [ 70.405499][ T7668] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.438980][ T3327] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.601650][ T7694] loop3: detected capacity change from 0 to 512 [ 70.630449][ T7694] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.652382][ T7694] ext4 filesystem being mounted at /412/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.666938][ T7694] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #2: block 3: comm syz.3.1926: lblock 8 mapped to illegal pblock 3 (length 26) [ 70.681805][ T7694] EXT4-fs (loop3): Remounting filesystem read-only [ 70.697921][ T3327] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.784363][ T7708] netlink: 'syz.3.1930': attribute type 62 has an invalid length. [ 71.086208][ T7749] ref_ctr_offset mismatch. inode: 0x840 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x20 [ 71.186432][ T7757] xt_NFQUEUE: number of total queues is 0 [ 71.354826][ T7771] loop1: detected capacity change from 0 to 2048 [ 71.401106][ T7779] loop2: detected capacity change from 0 to 512 [ 71.425966][ T7779] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.1965: couldn't read orphan inode 26 (err -116) [ 71.432433][ T7784] loop4: detected capacity change from 0 to 128 [ 71.472145][ T7779] EXT4-fs (loop2): Remounting filesystem read-only [ 71.479427][ T7779] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.492133][ T7779] ext4 filesystem being mounted at /428/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.521761][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.546510][ T7791] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7791 comm=syz.4.1971 [ 71.559612][ T7791] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7791 comm=syz.4.1971 [ 71.753969][ T7813] Invalid ELF header magic: != ELF [ 71.859094][ T7823] netlink: 392 bytes leftover after parsing attributes in process `syz.2.1986'. [ 71.868583][ T7823] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1986'. [ 71.959638][ T7835] loop3: detected capacity change from 0 to 512 [ 71.966585][ T7835] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 72.059656][ T7835] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 72.137642][ T7856] netlink: 'syz.4.1997': attribute type 18 has an invalid length. [ 72.222476][ T7858] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.328354][ T7674] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 72.413980][ T7876] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 72.423456][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.485053][ T7876] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.521962][ T7876] ext4 filesystem being mounted at /429/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 72.600981][ T7884] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 72.626684][ T3330] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.693536][ T7884] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 72.840830][ T7908] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2022'. [ 73.044265][ T7926] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2030'. [ 73.088251][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 73.088268][ T29] audit: type=1400 audit(1769252895.981:724): avc: denied { write } for pid=7921 comm="syz.3.2027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 73.154062][ T7930] EXT4-fs error (device loop2): ext4_iget_extra_inode:5073: inode #15: comm syz.2.2033: corrupted in-inode xattr: invalid ea_ino [ 73.177704][ T7930] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.2033: couldn't read orphan inode 15 (err -117) [ 73.193081][ T7930] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.210295][ T7930] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2033'. [ 73.229116][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.359201][ T7950] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2040'. [ 73.646138][ T7986] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 73.720134][ T29] audit: type=1326 audit(1769252896.611:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7997 comm="syz.4.2058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba3ccaacb9 code=0x7ffc0000 [ 73.728063][ T7986] block device autoloading is deprecated and will be removed. [ 73.869655][ T29] audit: type=1326 audit(1769252896.611:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7997 comm="syz.4.2058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba3ccaacb9 code=0x7ffc0000 [ 73.893144][ T29] audit: type=1326 audit(1769252896.641:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7997 comm="syz.4.2058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba3ccaacb9 code=0x7ffc0000 [ 73.916596][ T29] audit: type=1326 audit(1769252896.641:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7997 comm="syz.4.2058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba3ccaacb9 code=0x7ffc0000 [ 73.940472][ T29] audit: type=1326 audit(1769252896.661:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7997 comm="syz.4.2058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fba3ccaacb9 code=0x7ffc0000 [ 73.964064][ T29] audit: type=1326 audit(1769252896.661:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7997 comm="syz.4.2058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba3ccaacb9 code=0x7ffc0000 [ 73.987677][ T29] audit: type=1326 audit(1769252896.661:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7997 comm="syz.4.2058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba3ccaacb9 code=0x7ffc0000 [ 74.011272][ T29] audit: type=1326 audit(1769252896.741:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7997 comm="syz.4.2058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba3ccaacb9 code=0x7ffc0000 [ 74.034891][ T29] audit: type=1326 audit(1769252896.741:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7997 comm="syz.4.2058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7fba3ccaacb9 code=0x7ffc0000 [ 74.096839][ T8019] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2064'. [ 74.220103][ T8037] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.252469][ T8037] ext4 filesystem being mounted at /445/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.269023][ T8042] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2072'. [ 74.329814][ T3330] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.463976][ T8056] set_capacity_and_notify: 7 callbacks suppressed [ 74.464004][ T8056] loop4: detected capacity change from 0 to 128 [ 74.488856][ T8056] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 74.576363][ T290] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 74.776293][ T8081] loop2: detected capacity change from 0 to 1024 [ 74.818843][ T8081] EXT4-fs: Ignoring removed bh option [ 74.880227][ T8081] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.008538][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.337689][ T8139] loop1: detected capacity change from 0 to 2048 [ 75.380035][ T8145] __nla_validate_parse: 1 callbacks suppressed [ 75.380056][ T8145] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2120'. [ 75.428488][ T8139] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.462135][ T8139] EXT4-fs error (device loop1): ext4_ext_precache:632: inode #2: comm syz.1.2118: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 75.578622][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.582465][ T8162] loop2: detected capacity change from 0 to 512 [ 75.614185][ T8162] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 75.638155][ T8162] EXT4-fs (loop2): orphan cleanup on readonly fs [ 75.647640][ T8162] EXT4-fs warning (device loop2): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 75.668031][ T8162] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 75.675088][ T8162] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #13: comm syz.2.2128: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 75.694269][ T8162] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.2128: couldn't read orphan inode 13 (err -117) [ 75.718631][ T8162] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 75.792143][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.832012][ T8178] loop4: detected capacity change from 0 to 1024 [ 75.838186][ T8177] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2136'. [ 75.845292][ T8178] EXT4-fs: Ignoring removed mblk_io_submit option [ 75.859605][ T8179] IPVS: set_ctl: invalid protocol: 58 127.0.0.1:20004 [ 75.900753][ T8178] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.915683][ T8183] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2138'. [ 75.945357][ T3330] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.270040][ T8217] loop2: detected capacity change from 0 to 4096 [ 76.322729][ T8217] EXT4-fs: Ignoring removed bh option [ 76.338579][ T8217] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.358608][ T8230] loop4: detected capacity change from 0 to 256 [ 76.435288][ T8217] EXT4-fs error (device loop2): ext4_find_dest_de:2050: inode #12: block 80: comm syz.2.2154: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 76.489932][ T8217] EXT4-fs (loop2): Remounting filesystem read-only [ 76.528016][ T4884] kernel read not supported for file /rfkill (pid: 4884 comm: kworker/0:9) [ 76.550796][ T8246] loop4: detected capacity change from 0 to 512 [ 76.559052][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.603843][ T8250] loop2: detected capacity change from 0 to 128 [ 76.658010][ T8250] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 76.700490][ T8250] syz.2.2169: attempt to access beyond end of device [ 76.700490][ T8250] loop2: rw=8388611, sector=6950, nr_sectors = 2 limit=128 [ 76.730596][ T8250] syz.2.2169: attempt to access beyond end of device [ 76.730596][ T8250] loop2: rw=8390659, sector=6952, nr_sectors = 942 limit=128 [ 76.850206][ T8266] loop2: detected capacity change from 0 to 512 [ 77.421429][ T8322] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.443359][ T8322] ext4 filesystem being mounted at /499/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.495006][ T8329] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2204'. [ 77.513838][ T8322] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #12: comm syz.2.2201: corrupted xattr block 6: invalid header [ 77.543828][ T8322] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=12 [ 77.555493][ T8322] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #12: comm syz.2.2201: corrupted xattr block 6: invalid header [ 77.569554][ T8336] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #12: comm syz.2.2201: corrupted xattr block 6: invalid header [ 77.583112][ T8322] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=12 [ 77.593531][ T8336] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=12 [ 77.682094][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.849778][ T8364] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2218'. [ 77.858997][ T8364] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2218'. [ 78.161214][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 78.161233][ T29] audit: type=1400 audit(1769252901.051:758): avc: denied { bind } for pid=8381 comm="syz.4.2227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 78.409045][ T8395] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2234'. [ 78.488258][ T29] audit: type=1401 audit(1769252901.381:759): op=setxattr invalid_context="" [ 78.522350][ T29] audit: type=1400 audit(1769252901.391:760): avc: denied { mounton } for pid=8401 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 78.593393][ T8411] netlink: 'syz.1.2240': attribute type 12 has an invalid length. [ 78.601936][ T8411] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2240'. [ 78.652617][ T290] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.725748][ T29] audit: type=1400 audit(1769252901.611:761): avc: denied { sys_module } for pid=8401 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 78.747096][ T29] audit: type=1400 audit(1769252901.611:762): avc: denied { module_request } for pid=8401 comm="syz-executor" kmod="rose5" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 78.779005][ T290] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.830244][ T29] audit: type=1400 audit(1769252901.661:763): avc: denied { recv } for pid=22 comm="ksoftirqd/1" saddr=10.128.0.163 src=30036 daddr=10.128.0.31 dest=46294 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 78.843315][ T8421] EXT4-fs: Ignoring removed oldalloc option [ 78.855523][ T29] audit: type=1400 audit(1769252901.691:764): avc: denied { read write } for pid=3319 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 78.855561][ T29] audit: type=1400 audit(1769252901.691:765): avc: denied { open } for pid=3319 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 78.855593][ T29] audit: type=1400 audit(1769252901.691:766): avc: denied { ioctl } for pid=3319 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 78.868075][ T29] audit: type=1400 audit(1769252901.721:767): avc: denied { mounton } for pid=8420 comm="syz.1.2242" path="/436/file1" dev="tmpfs" ino=2240 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 78.985877][ T290] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.028638][ T8421] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 79.052823][ T290] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.066464][ T8401] chnl_net:caif_netlink_parms(): no params data found [ 79.079062][ T8421] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 79.099191][ T8421] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2242: bg 0: block 248: padding at end of block bitmap is not set [ 79.139387][ T8421] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.2242: Failed to acquire dquot type 1 [ 79.164101][ T8421] EXT4-fs (loop1): 1 truncate cleaned up [ 79.173651][ T8421] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 79.204275][ T290] bridge_slave_1: left allmulticast mode [ 79.210284][ T290] bridge_slave_1: left promiscuous mode [ 79.216192][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.318747][ T290] bridge_slave_0: left allmulticast mode [ 79.324488][ T290] bridge_slave_0: left promiscuous mode [ 79.330318][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.366063][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 79.600825][ T290] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 79.620744][ T290] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 79.632428][ T290] bond0 (unregistering): Released all slaves [ 79.648684][ T8468] set_capacity_and_notify: 3 callbacks suppressed [ 79.648700][ T8468] loop3: detected capacity change from 0 to 1024 [ 79.662542][ T8468] EXT4-fs: inline encryption not supported [ 79.693351][ T290] IPVS: stopping backup sync thread 5363 ... [ 79.699585][ T8401] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.699627][ T8401] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.700050][ T8401] bridge_slave_0: entered allmulticast mode [ 79.701327][ T8401] bridge_slave_0: entered promiscuous mode [ 79.733645][ T8401] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.740984][ T8401] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.748671][ T8401] bridge_slave_1: entered allmulticast mode [ 79.755390][ T8401] bridge_slave_1: entered promiscuous mode [ 79.775289][ T8468] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.803020][ T290] hsr_slave_0: left promiscuous mode [ 79.813932][ T8468] EXT4-fs error (device loop3): mb_free_blocks:2037: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt. [ 79.829090][ T290] hsr_slave_1: left promiscuous mode [ 79.835029][ T290] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.842578][ T290] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 79.843047][ T8468] EXT4-fs (loop3): Remounting filesystem read-only [ 79.878440][ T290] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.886051][ T290] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.886099][ T8483] loop4: detected capacity change from 0 to 2048 [ 79.910266][ T3327] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.920203][ T290] veth1_macvtap: left promiscuous mode [ 79.926775][ T8483] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.943702][ T290] veth0_macvtap: left promiscuous mode [ 79.952821][ T8483] ext4 filesystem being mounted at /504/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.957454][ T290] veth1_vlan: left promiscuous mode [ 79.970290][ T290] veth0_vlan: left promiscuous mode [ 80.041182][ T3330] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.127690][ T290] team0 (unregistering): Port device team_slave_1 removed [ 80.143546][ T290] team0 (unregistering): Port device team_slave_0 removed [ 80.179883][ T8522] loop3: detected capacity change from 0 to 128 [ 80.195802][ T8524] netlink: 'syz.2.2272': attribute type 1 has an invalid length. [ 80.214811][ T8401] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.228827][ T8514] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 80.242499][ T8526] macsec1: entered promiscuous mode [ 80.263652][ T8401] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.337103][ T8401] team0: Port device team_slave_0 added [ 80.358150][ T8401] team0: Port device team_slave_1 added [ 80.433467][ T8401] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.440503][ T8401] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.466610][ T8401] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.515540][ T8558] netlink: 822 bytes leftover after parsing attributes in process `syz.2.2286'. [ 80.524755][ T8558] veth0_to_bond: invalid flags given to default FDB implementation [ 80.542164][ T8401] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.549202][ T8401] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.575159][ T8401] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.599390][ T8566] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2288'. [ 80.611861][ T290] IPVS: stop unused estimator thread 0... [ 80.667503][ T8576] loop1: detected capacity change from 0 to 128 [ 80.675963][ T8573] loop2: detected capacity change from 0 to 1024 [ 80.679334][ T8401] hsr_slave_0: entered promiscuous mode [ 80.698746][ T8576] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=2842c028, mo2=0102] [ 80.709168][ T8573] EXT4-fs: Ignoring removed nobh option [ 80.717515][ T8576] System zones: 1-3, 19-19, 35-36 [ 80.717912][ T8401] hsr_slave_1: entered promiscuous mode [ 80.727123][ T8576] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 80.747088][ T8576] ext4 filesystem being mounted at /445/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 80.767259][ T8401] debugfs: 'hsr0' already exists in 'hsr' [ 80.785039][ T8401] Cannot create hsr debugfs directory [ 80.804541][ T3319] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 80.804826][ T8573] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.893902][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.942675][ T8605] loop4: detected capacity change from 0 to 512 [ 80.965674][ T8605] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 80.996073][ T8605] EXT4-fs (loop4): invalid journal inode [ 81.018162][ T8605] EXT4-fs (loop4): can't get journal size [ 81.026140][ T8605] EXT4-fs (loop4): 1 truncate cleaned up [ 81.044946][ T8605] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.057270][ T8401] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 81.068557][ T8616] syz.1.2302 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 81.094813][ T8401] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 81.112310][ T8401] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 81.153853][ T8401] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 81.201585][ T8639] netlink: 'syz.2.2309': attribute type 1 has an invalid length. [ 81.210732][ T8628] loop3: detected capacity change from 0 to 1764 [ 81.220250][ T3330] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.230009][ T8628] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 81.315582][ T8401] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.352257][ T8401] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.366099][ T8653] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2315'. [ 81.377792][ T2298] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.382094][ T8652] loop3: detected capacity change from 0 to 512 [ 81.385014][ T2298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.404727][ T8652] EXT4-fs: Mount option(s) incompatible with ext2 [ 81.443680][ T2298] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.450873][ T2298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.487448][ T8664] netlink: 'syz.3.2321': attribute type 18 has an invalid length. [ 81.495490][ T8664] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2321'. [ 81.530015][ T8669] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2322'. [ 81.583037][ T8673] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2323'. [ 81.611017][ T8401] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.668038][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 81.740375][ T8689] loop2: detected capacity change from 0 to 4096 [ 81.766953][ T8699] loop3: detected capacity change from 0 to 128 [ 81.797476][ T8689] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.825759][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.834553][ T8699] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 323) [ 81.843681][ T8699] FAT-fs (loop3): Filesystem has been set read-only [ 81.932473][ T8401] veth0_vlan: entered promiscuous mode [ 81.943807][ T8401] veth1_vlan: entered promiscuous mode [ 81.952574][ T8716] netlink: 'syz.2.2335': attribute type 1 has an invalid length. [ 81.958317][ T8401] veth0_macvtap: entered promiscuous mode [ 81.972571][ T8401] veth1_macvtap: entered promiscuous mode [ 82.014742][ T8401] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.034411][ T8401] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.051782][ T122] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.065558][ T122] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.099856][ T122] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.130334][ T122] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.141426][ T8718] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.210130][ T3327] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.303861][ T8747] EXT4-fs: Ignoring removed oldalloc option [ 82.336442][ T8747] EXT4-fs (loop2): 1 truncate cleaned up [ 82.364499][ T8747] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.455475][ T8747] netlink: 116376 bytes leftover after parsing attributes in process `syz.2.2349'. [ 82.500236][ T8747] net_ratelimit: 18 callbacks suppressed [ 82.500342][ T8747] netlink: zone id is out of range [ 82.511313][ T8747] netlink: zone id is out of range [ 82.516441][ T8747] netlink: zone id is out of range [ 82.521605][ T8747] netlink: zone id is out of range [ 82.526733][ T8747] netlink: zone id is out of range [ 82.529968][ T8768] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2357'. [ 82.531907][ T8747] netlink: zone id is out of range [ 82.531917][ T8747] netlink: zone id is out of range [ 82.550910][ T8769] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 82.551172][ T8747] netlink: zone id is out of range [ 82.565729][ T8747] netlink: zone id is out of range [ 82.571032][ T8747] netlink: zone id is out of range [ 82.635102][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.714707][ T8783] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 82.808480][ T8783] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 82.818486][ T8783] FAT-fs (loop4): Filesystem has been set read-only [ 82.889949][ T8800] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 82.901522][ T8802] EXT4-fs: Ignoring removed nobh option [ 82.907792][ T8802] EXT4-fs: Ignoring removed bh option [ 82.940511][ T8800] ext4 filesystem being mounted at /521/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.951774][ T8802] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.018425][ T8401] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.035828][ T3330] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 83.206833][ T29] kauditd_printk_skb: 137 callbacks suppressed [ 83.206852][ T29] audit: type=1400 audit(1769252906.091:903): avc: denied { read write } for pid=8822 comm="syz.5.2382" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 83.238968][ T3485] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x4 [ 83.246748][ T3485] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x2 [ 83.268508][ T29] audit: type=1400 audit(1769252906.091:904): avc: denied { open } for pid=8822 comm="syz.5.2382" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 83.289871][ T3485] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x3 [ 83.308053][ T8828] netlink: 'syz.4.2384': attribute type 83 has an invalid length. [ 83.312207][ T8830] netlink: 'syz.2.2385': attribute type 6 has an invalid length. [ 83.329049][ T3485] hid-generic 0000:3000000:0000.0001: hidraw0: HID v0.00 Device [sy] on syz0 [ 83.415266][ T8831] fido_id[8831]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 83.444803][ T29] audit: type=1400 audit(1769252906.331:905): avc: denied { write } for pid=8838 comm="syz.4.2389" name="psched" dev="proc" ino=4026532637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 83.553786][ T8851] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2395'. [ 83.596226][ T8855] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2397'. [ 83.611775][ T8851] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.745876][ T8862] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 83.767571][ T29] audit: type=1400 audit(1769252906.651:906): avc: denied { read } for pid=8863 comm="syz.4.2402" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 83.790618][ T29] audit: type=1400 audit(1769252906.651:907): avc: denied { open } for pid=8863 comm="syz.4.2402" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 83.821673][ T8862] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.2400: invalid indirect mapped block 4294967295 (level 1) [ 83.842402][ T29] audit: type=1400 audit(1769252906.651:908): avc: denied { ioctl } for pid=8867 comm="syz.5.2403" path="socket:[22729]" dev="sockfs" ino=22729 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 83.868291][ T8862] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.2400: invalid indirect mapped block 4294967295 (level 1) [ 83.883989][ T8862] EXT4-fs (loop2): 2 truncates cleaned up [ 83.890359][ T8862] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.919780][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.926616][ T8873] EXT4-fs: Ignoring removed bh option [ 83.942493][ T29] audit: type=1400 audit(1769252906.831:909): avc: denied { mounton } for pid=8877 comm="syz.4.2409" path="/532/file0" dev="tmpfs" ino=2740 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 83.980452][ T8873] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.009493][ T29] audit: type=1400 audit(1769252906.831:910): avc: denied { append } for pid=8874 comm="syz.5.2406" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 84.117219][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.135634][ T29] audit: type=1400 audit(1769252906.931:911): avc: denied { connect } for pid=8886 comm="syz.2.2408" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 84.156403][ T29] audit: type=1400 audit(1769252907.021:912): avc: denied { create } for pid=8895 comm="syz.5.2415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 84.333817][ T8924] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 84.437533][ T3485] kernel read not supported for file /rfkill (pid: 3485 comm: kworker/1:6) [ 84.478828][ T8944] Invalid logical block size (9) [ 84.492279][ T8947] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 84.533008][ T3330] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.609572][ T8964] netlink: 'syz.3.2447': attribute type 10 has an invalid length. [ 84.657125][ T8964] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 84.751447][ T8978] set_capacity_and_notify: 10 callbacks suppressed [ 84.751467][ T8978] loop5: detected capacity change from 0 to 164 [ 84.880477][ T8992] veth3: entered promiscuous mode [ 85.171064][ T9018] loop5: detected capacity change from 0 to 512 [ 85.194465][ T9018] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.201019][ T9020] batadv2: entered promiscuous mode [ 85.268954][ T8401] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.729303][ T9068] batadv1: entered promiscuous mode [ 85.907242][ T9082] loop3: detected capacity change from 0 to 4096 [ 85.944281][ T9082] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.011303][ T3327] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.075718][ T9091] hub 6-0:1.0: USB hub found [ 86.106275][ T9091] hub 6-0:1.0: 8 ports detected [ 86.189070][ T9103] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 86.371927][ T9118] __nla_validate_parse: 8 callbacks suppressed [ 86.371989][ T9118] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2519'. [ 86.750099][ T9146] loop1: detected capacity change from 0 to 1024 [ 86.771307][ T9146] EXT4-fs: Ignoring removed bh option [ 86.799649][ T9146] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.876600][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.980763][ T9158] loop4: detected capacity change from 0 to 1024 [ 86.987224][ T9159] loop1: detected capacity change from 0 to 512 [ 87.005525][ T9159] EXT4-fs: Ignoring removed bh option [ 87.020466][ T9158] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.033174][ T9159] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 87.055346][ T9159] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e842e028, mo2=0002] [ 87.057770][ T9158] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #11: comm syz.4.2537: missing EA_INODE flag [ 87.085472][ T9159] System zones: 1-12 [ 87.089623][ T9159] EXT4-fs (loop1): orphan cleanup on readonly fs [ 87.096356][ T9159] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.2536: invalid indirect mapped block 1023 (level 0) [ 87.118219][ T9159] EXT4-fs (loop1): Remounting filesystem read-only [ 87.130338][ T9159] EXT4-fs (loop1): 1 truncate cleaned up [ 87.131506][ T9158] EXT4-fs (loop4): Remounting filesystem read-only [ 87.141000][ T9159] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 87.160855][ T9159] EXT4-fs warning (device loop1): dx_probe:791: inode #2: lblock 0: comm syz.1.2536: error -117 reading directory block [ 87.250954][ T9165] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 87.470606][ T9182] devtmpfs: Too few inodes for current use [ 87.508955][ T9188] loop4: detected capacity change from 0 to 164 [ 87.558823][ T9192] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 87.775988][ T9216] loop3: detected capacity change from 0 to 512 [ 87.790761][ T9216] ext4 filesystem being mounted at /544/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.003840][ T9233] loop5: detected capacity change from 0 to 512 [ 88.023950][ T9233] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x05417272 (sector = 1) [ 88.036845][ T9237] program syz.1.2571 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 88.070781][ T9233] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 88.142269][ T9243] loop3: detected capacity change from 0 to 512 [ 88.177300][ T9241] ext4 filesystem being mounted at /510/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.191880][ T9243] EXT4-fs (loop3): 1 truncate cleaned up [ 88.212588][ T9233] FAT-fs (loop5): FAT read failed (blocknr 128) [ 88.225859][ T29] kauditd_printk_skb: 88 callbacks suppressed [ 88.225876][ T29] audit: type=1400 audit(1769252911.111:1001): avc: denied { write } for pid=9240 comm="syz.1.2574" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 88.271579][ T9243] EXT4-fs error (device loop3): ext4_generic_delete_entry:2666: inode #2: block 13: comm syz.3.2573: bad entry in directory: inode out of bounds - offset=0, inode=131074, rec_len=12, size=1024 fake=1 [ 88.284099][ T29] audit: type=1400 audit(1769252911.161:1002): avc: denied { remove_name } for pid=9242 comm="syz.3.2573" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 88.313955][ T29] audit: type=1400 audit(1769252911.161:1003): avc: denied { rename } for pid=9242 comm="syz.3.2573" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 88.314213][ T9243] EXT4-fs error (device loop3) in ext4_delete_entry:2737: Corrupt filesystem [ 88.336412][ T29] audit: type=1400 audit(1769252911.161:1004): avc: denied { unlink } for pid=9242 comm="syz.3.2573" name="file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 88.346571][ T9243] EXT4-fs warning (device loop3): ext4_rename_delete:3729: inode #2: comm syz.3.2573: Deleting old file: nlink 4, error=-117 [ 88.398898][ T9248] net_ratelimit: 73 callbacks suppressed [ 88.398918][ T9248] batman_adv: batadv0: adding TT local entry 06:e1:05:00:07:00 to non-existent VLAN 768 [ 88.441029][ T9243] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2573: bg 0: block 465: padding at end of block bitmap is not set [ 88.489919][ T9243] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 88.502556][ T9250] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2576'. [ 88.508308][ T9243] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.2573: invalid indirect mapped block 234881024 (level 0) [ 88.511727][ T9250] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2576'. [ 88.534605][ T9250] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2576'. [ 88.757535][ T9263] EXT4-fs: Ignoring removed bh option [ 88.782151][ T29] audit: type=1400 audit(1769252911.671:1005): avc: denied { mounton } for pid=9262 comm="syz.3.2582" path="/proc/1140/ns" dev="proc" ino=23598 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 88.917685][ T29] audit: type=1400 audit(1769252911.801:1006): avc: denied { connect } for pid=9278 comm="syz.5.2587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 88.937819][ T29] audit: type=1400 audit(1769252911.801:1007): avc: denied { getopt } for pid=9278 comm="syz.5.2587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 88.999514][ T9281] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2590'. [ 89.123037][ T29] audit: type=1400 audit(1769252912.011:1008): avc: denied { read write } for pid=3327 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 89.147475][ T29] audit: type=1400 audit(1769252912.011:1009): avc: denied { open } for pid=3327 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 89.284482][ T29] audit: type=1400 audit(1769252912.011:1010): avc: denied { ioctl } for pid=3319 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 89.410382][ T9323] ext4 filesystem being mounted at /558/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 89.441587][ T9326] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2610'. [ 89.651492][ T9343] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2615'. [ 89.743876][ T9349] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2620'. [ 89.840060][ T9358] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2624'. [ 89.840850][ T9356] set_capacity_and_notify: 3 callbacks suppressed [ 89.840865][ T9356] loop4: detected capacity change from 0 to 1024 [ 89.971716][ T9369] tipc: Enabling of bearer rejected, failed to enable media [ 90.003382][ T9371] loop4: detected capacity change from 0 to 128 [ 90.180969][ T9391] loop5: detected capacity change from 0 to 512 [ 90.203588][ T9394] loop4: detected capacity change from 0 to 512 [ 90.232793][ T9394] ext4 filesystem being mounted at /592/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.321973][ T9408] loop1: detected capacity change from 0 to 512 [ 90.351981][ T9408] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 90.386073][ T9408] EXT4-fs (loop1): 1 truncate cleaned up [ 90.430212][ T9408] EXT4-fs warning (device loop1): ext4_group_extend:1862: can't shrink FS - resize aborted [ 90.551197][ T9427] loop1: detected capacity change from 0 to 128 [ 90.564819][ T9427] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 90.613940][ T9427] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 90.748982][ T9443] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2663'. [ 90.797138][ T9449] veth0: entered promiscuous mode [ 90.817632][ T9447] veth0: left promiscuous mode [ 90.827888][ T9456] loop1: detected capacity change from 0 to 512 [ 90.834640][ T9454] loop3: detected capacity change from 0 to 512 [ 90.858501][ T9456] EXT4-fs (loop1): orphan cleanup on readonly fs [ 90.893642][ T9456] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.2668: bad orphan inode 13 [ 90.937910][ T9456] ext4_test_bit(bit=12, block=18) = 1 [ 90.943398][ T9456] is_bad_inode(inode)=0 [ 90.947567][ T9456] NEXT_ORPHAN(inode)=2130706432 [ 90.952641][ T9456] max_ino=32 [ 90.955848][ T9456] i_nlink=1 [ 90.970766][ T9467] loop5: detected capacity change from 0 to 512 [ 90.977475][ T9467] EXT4-fs: Ignoring removed i_version option [ 91.070160][ T9467] ext4 filesystem being mounted at /75/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 91.230262][ T9497] tipc: Enabling of bearer rejected, already enabled [ 91.252307][ T9499] loop1: detected capacity change from 0 to 256 [ 91.286197][ T9502] EXT4-fs: Ignoring removed mblk_io_submit option [ 91.316684][ T9499] FAT-fs (loop1): Directory bread(block 64) failed [ 91.318348][ T9502] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a85ec129, mo2=0006] [ 91.336473][ T9502] EXT4-fs (loop5): failed to initialize system zone (-117) [ 91.343974][ T9499] FAT-fs (loop1): Directory bread(block 65) failed [ 91.344298][ T9502] EXT4-fs (loop5): mount failed [ 91.381109][ T9499] FAT-fs (loop1): Directory bread(block 66) failed [ 91.399551][ T9499] FAT-fs (loop1): Directory bread(block 67) failed [ 91.406209][ T9499] FAT-fs (loop1): Directory bread(block 68) failed [ 91.413098][ T9499] FAT-fs (loop1): Directory bread(block 69) failed [ 91.441226][ T9499] FAT-fs (loop1): Directory bread(block 70) failed [ 91.447881][ T9499] FAT-fs (loop1): Directory bread(block 71) failed [ 91.475057][ T9499] FAT-fs (loop1): Directory bread(block 72) failed [ 91.484877][ T9518] SELinux: Context system_u:object_r:event_device_t:s0 is not valid (left unmapped). [ 91.490169][ T9499] FAT-fs (loop1): Directory bread(block 73) failed [ 91.590628][ T9499] syz.1.2688: attempt to access beyond end of device [ 91.590628][ T9499] loop1: rw=8388608, sector=1816, nr_sectors = 4 limit=256 [ 91.634096][ T9499] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 326) [ 91.642348][ T9499] FAT-fs (loop1): Filesystem has been set read-only [ 91.668747][ T9499] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 326) [ 91.837397][ T9551] __nla_validate_parse: 2 callbacks suppressed [ 91.837423][ T9551] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2712'. [ 91.853287][ T9551] tipc: Invalid UDP bearer configuration [ 91.853304][ T9551] tipc: Enabling of bearer rejected, failed to enable media [ 91.867243][ T9560] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2715'. [ 91.877729][ T9557] EXT4-fs: Ignoring removed bh option [ 92.076846][ T9585] EXT4-fs: Ignoring removed orlov option [ 92.280996][ T9614] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2730'. [ 92.368980][ T9623] Unable to read rock-ridge attributes [ 92.380150][ T9623] Unable to read rock-ridge attributes [ 92.751038][ T9667] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2746'. [ 92.934269][ T9684] tipc: Can't bind to reserved service type 0 [ 93.071169][ T9693] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2754'. [ 93.279838][ T9710] program syz.4.2761 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 93.319112][ T29] kauditd_printk_skb: 160 callbacks suppressed [ 93.319128][ T29] audit: type=1400 audit(1769252916.211:1171): avc: denied { read } for pid=9711 comm="syz.3.2763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 93.382301][ T29] audit: type=1400 audit(1769252916.251:1172): avc: denied { ioctl } for pid=9715 comm="syz.4.2764" path="socket:[24214]" dev="sockfs" ino=24214 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 93.489196][ T29] audit: type=1400 audit(1769252916.381:1173): avc: denied { create } for pid=9724 comm="syz.3.2768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 93.528303][ T29] audit: type=1400 audit(1769252916.401:1174): avc: denied { connect } for pid=9724 comm="syz.3.2768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 93.548351][ T29] audit: type=1400 audit(1769252916.431:1175): avc: denied { write } for pid=9724 comm="syz.3.2768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 93.613133][ T29] audit: type=1400 audit(1769252916.501:1176): avc: denied { read write } for pid=9732 comm="syz.4.2771" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 93.636870][ T29] audit: type=1400 audit(1769252916.501:1177): avc: denied { open } for pid=9732 comm="syz.4.2771" path="/dev/virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 93.786329][ T29] audit: type=1400 audit(1769252916.671:1178): avc: denied { create } for pid=9749 comm="syz.1.2776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 93.838513][ T29] audit: type=1400 audit(1769252916.701:1179): avc: denied { setopt } for pid=9749 comm="syz.1.2776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 93.859713][ T29] audit: type=1400 audit(1769252916.701:1180): avc: denied { write } for pid=9753 comm="syz.4.2778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 93.914482][ T9762] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2782'. [ 93.923534][ T9762] netem: invalid attributes len -10 [ 94.144482][ T9786] EXT4-fs: Ignoring removed nomblk_io_submit option [ 94.167887][ T9786] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 94.176287][ T9786] System zones: 0-1, 3-36 [ 94.220545][ T5702] loop4: p2 p3 p4[EZD] [ 94.226587][ T5702] loop4: p3 start 331781 is beyond EOD, truncated [ 94.233159][ T5702] loop4: p4 size 197376 extends beyond EOD, truncated [ 94.254176][ T9792] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2796'. [ 94.267157][ T9778] loop4: p2 p3 p4[EZD] [ 94.274232][ T9778] loop4: p3 start 331781 is beyond EOD, truncated [ 94.280798][ T9778] loop4: p4 size 197376 extends beyond EOD, truncated [ 94.380007][ T5702] udevd[5702]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 94.392769][ T3311] udevd[3311]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 94.455997][ T3311] udevd[3311]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 94.479605][ T5702] udevd[5702]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 94.622710][ T9832] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 94.630425][ T9834] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2816'. [ 94.820813][ T9852] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2827'. [ 95.108244][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 95.183820][ T9878] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 95.380758][ T9892] set_capacity_and_notify: 8 callbacks suppressed [ 95.380797][ T9892] loop5: detected capacity change from 0 to 512 [ 95.418956][ T9899] loop1: detected capacity change from 0 to 128 [ 95.427274][ T9892] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 95.439285][ T9899] ext4 filesystem being mounted at /576/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 95.452255][ T9892] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c128, mo2=0002] [ 95.461362][ T9899] EXT4-fs warning (device loop1): ext4_group_add:1736: No reserved GDT blocks, can't resize [ 95.477171][ T9892] System zones: 1-12 [ 95.494175][ T9892] EXT4-fs (loop5): orphan cleanup on readonly fs [ 95.508648][ T9892] EXT4-fs error (device loop5): ext4_iget_extra_inode:5073: inode #15: comm syz.5.2845: corrupted in-inode xattr: e_value size too large [ 95.542789][ T9892] EXT4-fs (loop5): Remounting filesystem read-only [ 95.832717][ T9941] loop1: detected capacity change from 0 to 136 [ 95.902111][ T9945] netlink: 'syz.5.2868': attribute type 2 has an invalid length. [ 95.924825][ T9947] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2869'. [ 96.075583][ T9953] loop3: detected capacity change from 0 to 4096 [ 96.097047][ T9961] loop5: detected capacity change from 0 to 256 [ 96.813059][T10003] loop4: detected capacity change from 0 to 1024 [ 96.821198][T10003] EXT4-fs: Ignoring removed orlov option [ 96.930204][T10009] sch_fq: defrate 4294967295 ignored. [ 97.251474][T10038] loop4: detected capacity change from 0 to 2048 [ 97.261940][T10038] EXT4-fs: Ignoring removed oldalloc option [ 97.296617][T10038] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c028, mo2=0002] [ 97.308372][T10038] System zones: 0-7 [ 97.328126][T10038] EXT4-fs error (device loop4): ext4_find_extent:939: inode #2: comm syz.4.2911: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 97.369810][T10038] EXT4-fs (loop4): Remounting filesystem read-only [ 97.656802][T10069] loop5: detected capacity change from 0 to 512 [ 97.689491][T10069] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 97.726978][T10072] loop1: detected capacity change from 0 to 2048 [ 97.736716][T10074] loop4: detected capacity change from 0 to 512 [ 97.745287][T10069] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.2925: bad orphan inode 13 [ 97.756327][T10069] ext4_test_bit(bit=12, block=18) = 1 [ 97.758454][T10072] EXT4-fs: Ignoring removed oldalloc option [ 97.761790][T10069] is_bad_inode(inode)=0 [ 97.772512][T10069] NEXT_ORPHAN(inode)=0 [ 97.776619][T10069] max_ino=32 [ 97.779924][T10069] i_nlink=1 [ 97.801417][T10074] ext4 filesystem being mounted at /663/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.817756][T10069] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.2925: Failed to acquire dquot type 1 [ 97.839157][T10072] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c028, mo2=0002] [ 97.854336][T10074] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.2928: Failed to acquire dquot type 1 [ 97.866373][T10072] System zones: 0-7 [ 97.868770][T10081] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.2925: Failed to acquire dquot type 1 [ 97.877537][T10074] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.2928: Failed to acquire dquot type 1 [ 97.904873][T10072] EXT4-fs error (device loop1): ext4_find_extent:939: inode #2: comm syz.1.2927: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 97.952346][T10072] EXT4-fs (loop1): Remounting filesystem read-only [ 98.128603][ T3485] ip6_tunnel: ip6gretap0 xmit: Routing loop! Remote address found on this node! [ 98.249542][T10116] vhci_hcd vhci_hcd.3: default hub control req: 8013 v0000 i0000 l31125 [ 98.257203][T10117] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 98.293783][T10117] EXT4-fs (loop3): 1 truncate cleaned up [ 98.407219][T10126] sg_write: data in/out 327903/28 bytes for SCSI command 0xe4-- guessing data in; [ 98.407219][T10126] program syz.5.2950 not setting count and/or reply_len properly [ 98.453909][ T29] kauditd_printk_skb: 446 callbacks suppressed [ 98.453928][ T29] audit: type=1400 audit(1769252921.341:1619): avc: denied { bind } for pid=10129 comm="syz.4.2953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 98.546468][T10140] program syz.3.2957 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 98.582996][T10140] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 98.642790][ T29] audit: type=1400 audit(1769252921.531:1620): avc: denied { read } for pid=10148 comm="syz.3.2961" name="usbmon8" dev="devtmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 98.666421][ T29] audit: type=1400 audit(1769252921.531:1621): avc: denied { open } for pid=10148 comm="syz.3.2961" path="/dev/usbmon8" dev="devtmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 98.732447][T10142] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 98.817087][ T29] audit: type=1400 audit(1769252921.701:1622): avc: denied { write } for pid=10157 comm="syz.4.2965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 98.837630][ T29] audit: type=1400 audit(1769252921.701:1623): avc: denied { read } for pid=10157 comm="syz.4.2965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 98.870039][ T29] audit: type=1400 audit(1769252921.761:1624): avc: denied { recv } for pid=3319 comm="syz-executor" saddr=10.128.0.163 src=30036 daddr=10.128.0.31 dest=46294 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 98.944147][ T29] audit: type=1400 audit(1769252921.761:1625): avc: denied { read write } for pid=3319 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 98.969286][ T29] audit: type=1400 audit(1769252921.761:1626): avc: denied { open } for pid=3319 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 98.993658][ T29] audit: type=1400 audit(1769252921.761:1627): avc: denied { ioctl } for pid=3319 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 99.019549][ T29] audit: type=1400 audit(1769252921.801:1628): avc: denied { open } for pid=10162 comm="syz.1.2966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 99.188210][ T3485] ip6_tunnel: ip6gretap0 xmit: Routing loop! Remote address found on this node! [ 99.461764][T10208] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 99.471780][T10208] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 99.486167][T10210] __nla_validate_parse: 3 callbacks suppressed [ 99.486186][T10210] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2985'. [ 99.505712][T10208] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 99.520068][T10208] EXT4-fs error (device loop3): ext4_get_journal_inode:5849: inode #5: comm syz.3.2987: unexpected bad inode w/o EXT4_IGET_BAD [ 99.534309][T10208] EXT4-fs (loop3): no journal found [ 99.539672][T10208] EXT4-fs (loop3): can't get journal size [ 99.637720][ T3327] EXT4-fs unmount: 55 callbacks suppressed [ 99.637831][ T3327] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.670585][T10223] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2994'. [ 99.807241][T10229] EXT4-fs: Ignoring removed nobh option [ 99.813015][T10229] EXT4-fs: Ignoring removed nomblk_io_submit option [ 99.856217][T10229] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.915704][ T3327] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.047265][T10256] netlink: 'syz.5.3008': attribute type 1 has an invalid length. [ 100.055196][T10256] netlink: 'syz.5.3008': attribute type 2 has an invalid length. [ 100.161484][T10266] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3012: bg 0: block 393: padding at end of block bitmap is not set [ 100.181660][T10266] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 100.191121][T10266] EXT4-fs (loop5): 2 truncates cleaned up [ 100.197351][T10266] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.225998][ T8401] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.282145][T10278] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.304647][ T290] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.315919][ T8401] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.371997][ T290] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.387687][T10285] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.400733][T10285] ext4 filesystem being mounted at /180/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.401090][T10263] chnl_net:caif_netlink_parms(): no params data found [ 100.428229][ T8401] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.439863][ T290] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.473298][T10263] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.480401][T10263] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.487583][T10263] bridge_slave_0: entered allmulticast mode [ 100.494763][T10263] bridge_slave_0: entered promiscuous mode [ 100.503646][ T290] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.515208][T10263] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.522428][T10263] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.529706][T10263] bridge_slave_1: entered allmulticast mode [ 100.536227][T10263] bridge_slave_1: entered promiscuous mode [ 100.552920][T10263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.563177][T10263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.582649][T10263] team0: Port device team_slave_0 added [ 100.591776][T10263] team0: Port device team_slave_1 added [ 100.610539][T10263] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.617517][T10263] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.643619][T10263] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.655036][T10263] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.662163][T10263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.688270][T10263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.710362][ T290] bridge_slave_1: left allmulticast mode [ 100.716061][ T290] bridge_slave_1: left promiscuous mode [ 100.722157][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.729948][ T290] bridge_slave_0: left allmulticast mode [ 100.735663][ T290] bridge_slave_0: left promiscuous mode [ 100.741519][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.811214][ T290] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 100.821260][ T290] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 100.830733][ T290] bond0 (unregistering): Released all slaves [ 100.852794][T10263] hsr_slave_0: entered promiscuous mode [ 100.859036][T10263] hsr_slave_1: entered promiscuous mode [ 100.865056][T10263] debugfs: 'hsr0' already exists in 'hsr' [ 100.870949][T10263] Cannot create hsr debugfs directory [ 100.881763][ T290] tipc: Disabling bearer [ 100.887081][ T290] tipc: Left network mode [ 100.944219][ T290] hsr_slave_0: left promiscuous mode [ 100.968691][ T290] hsr_slave_1: left promiscuous mode [ 100.978357][ T290] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.985814][ T290] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.005718][T10294] set_capacity_and_notify: 10 callbacks suppressed [ 101.005734][T10294] loop5: detected capacity change from 0 to 8192 [ 101.023853][ T290] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.031499][ T290] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.090108][ T290] veth1_macvtap: left promiscuous mode [ 101.095706][ T290] veth0_macvtap: left promiscuous mode [ 101.118165][ T290] veth1_vlan: left promiscuous mode [ 101.123794][ T290] veth0_vlan: left promiscuous mode [ 101.326290][ T290] team0 (unregistering): Port device team_slave_1 removed [ 101.346586][ T290] team0 (unregistering): Port device team_slave_0 removed [ 101.392107][T10350] syz_tun: entered promiscuous mode [ 101.397384][T10350] macvtap1: entered promiscuous mode [ 101.448680][T10356] random: crng reseeded on system resumption [ 101.460675][T10360] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3041'. [ 101.505290][T10356] Restarting kernel threads ... [ 101.511372][T10263] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 101.535798][T10356] Done restarting kernel threads. [ 101.552925][T10263] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 101.567032][T10263] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 101.593437][T10263] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 101.619197][ T290] IPVS: stop unused estimator thread 0... [ 101.688214][T10263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.711956][T10263] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.750893][ T2298] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.758140][ T2298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.794803][ T2298] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.799264][T10403] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3053'. [ 101.801932][ T2298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.925659][T10263] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.058161][T10263] veth0_vlan: entered promiscuous mode [ 102.069894][T10263] veth1_vlan: entered promiscuous mode [ 102.085989][T10263] veth0_macvtap: entered promiscuous mode [ 102.094259][T10263] veth1_macvtap: entered promiscuous mode [ 102.105340][T10263] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.116184][T10263] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.127600][ T52] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.136805][ T52] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.148293][ T52] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.161148][ T52] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.226578][T10458] support for the xor transformation has been removed. [ 102.376640][T10482] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3062'. [ 102.483818][T10491] loop4: detected capacity change from 0 to 512 [ 102.514903][T10497] loop6: detected capacity change from 0 to 128 [ 102.542161][T10497] EXT4-fs: Ignoring removed nobh option [ 102.549860][T10491] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3069: bg 0: block 248: padding at end of block bitmap is not set [ 102.581635][T10491] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.3069: Failed to acquire dquot type 1 [ 102.594092][T10497] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 102.612422][T10507] dummy0: entered promiscuous mode [ 102.617928][T10507] macsec1: entered promiscuous mode [ 102.626365][T10497] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.641243][T10491] EXT4-fs (loop4): 1 truncate cleaned up [ 102.657620][T10507] macsec1: entered allmulticast mode [ 102.665581][T10491] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.678062][T10507] dummy0: entered allmulticast mode [ 102.679676][T10497] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3074'. [ 102.684822][T10491] ext4 filesystem being mounted at /701/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.706743][T10507] dummy0: left allmulticast mode [ 102.707284][T10491] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.712310][T10507] dummy0: left promiscuous mode [ 102.740603][T10263] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 102.805098][T10516] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3079'. [ 102.821966][T10516] geneve0: entered promiscuous mode [ 102.834551][T10516] macsec1: entered allmulticast mode [ 102.839959][T10516] geneve0: entered allmulticast mode [ 102.849114][T10516] geneve0: left allmulticast mode [ 102.854323][T10516] geneve0: left promiscuous mode [ 102.984281][T10530] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3087'. [ 103.296803][T10550] netlink: 'syz.4.3097': attribute type 2 has an invalid length. [ 103.333896][T10552] loop5: detected capacity change from 0 to 2048 [ 103.348655][T10552] EXT4-fs: Ignoring removed nomblk_io_submit option [ 103.380189][T10552] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.429582][T10552] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.3098: bg 0: block 2: invalid block bitmap [ 103.442634][T10552] EXT4-fs (loop5): Remounting filesystem read-only [ 103.474646][ T8401] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.559789][T10575] loop3: detected capacity change from 0 to 512 [ 103.590997][T10575] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.3108: inode has both inline data and extents flags [ 103.608734][T10575] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.3108: couldn't read orphan inode 15 (err -117) [ 103.621829][T10575] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.677097][ T3327] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.702236][ T29] kauditd_printk_skb: 127 callbacks suppressed [ 103.702255][ T29] audit: type=1400 audit(1769252926.591:1754): avc: denied { setopt } for pid=10587 comm="syz.4.3114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 103.711531][T10534] syz.1.3089 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 103.742385][T10534] CPU: 0 UID: 0 PID: 10534 Comm: syz.1.3089 Not tainted syzkaller #0 PREEMPT(voluntary) [ 103.742419][T10534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 103.742511][T10534] Call Trace: [ 103.742552][T10534] [ 103.742562][T10534] __dump_stack+0x1d/0x30 [ 103.742618][T10534] dump_stack_lvl+0x95/0xd0 [ 103.742642][T10534] dump_stack+0x15/0x1b [ 103.742667][T10534] dump_header+0x80/0x240 [ 103.742695][T10534] oom_kill_process+0x295/0x350 [ 103.742746][T10534] out_of_memory+0x97d/0xb80 [ 103.742774][T10534] try_charge_memcg+0x62e/0xa10 [ 103.742822][T10534] obj_cgroup_charge_pages+0xa6/0x150 [ 103.742906][T10534] __memcg_kmem_charge_page+0x9e/0x170 [ 103.742939][T10534] __alloc_frozen_pages_noprof+0x18a/0x350 [ 103.742968][T10534] alloc_pages_mpol+0xb3/0x260 [ 103.743057][T10534] alloc_pages_noprof+0x8f/0x130 [ 103.743086][T10534] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 103.743124][T10534] __kvmalloc_node_noprof+0x471/0x680 [ 103.743171][T10534] ? ip_set_alloc+0x24/0x30 [ 103.743201][T10534] ? ip_set_alloc+0x24/0x30 [ 103.743239][T10534] ip_set_alloc+0x24/0x30 [ 103.743278][T10534] hash_netiface_create+0x282/0x740 [ 103.743308][T10534] ? __pfx_hash_netiface_create+0x10/0x10 [ 103.743337][T10534] ip_set_create+0x3cf/0x970 [ 103.743376][T10534] ? __nla_parse+0x40/0x60 [ 103.743458][T10534] nfnetlink_rcv_msg+0x509/0x5d0 [ 103.743570][T10534] netlink_rcv_skb+0x123/0x220 [ 103.743595][T10534] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 103.743624][T10534] nfnetlink_rcv+0x167/0x1720 [ 103.743648][T10534] ? __kfree_skb+0x109/0x150 [ 103.743671][T10534] ? nlmon_xmit+0x4f/0x60 [ 103.743754][T10534] ? consume_skb+0x49/0x140 [ 103.743775][T10534] ? nlmon_xmit+0x4f/0x60 [ 103.743795][T10534] ? dev_hard_start_xmit+0x3a8/0x3e0 [ 103.743840][T10534] ? __dev_queue_xmit+0x139a/0x1f20 [ 103.743868][T10534] ? __dev_queue_xmit+0x148/0x1f20 [ 103.743898][T10534] ? ref_tracker_free+0x37d/0x3e0 [ 103.743923][T10534] ? __netlink_deliver_tap+0x4dc/0x500 [ 103.744009][T10534] netlink_unicast+0x5c0/0x690 [ 103.744035][T10534] netlink_sendmsg+0x5c8/0x6f0 [ 103.744097][T10534] ? __pfx_netlink_sendmsg+0x10/0x10 [ 103.744130][T10534] __sock_sendmsg+0x145/0x170 [ 103.744159][T10534] ____sys_sendmsg+0x31e/0x4a0 [ 103.744290][T10534] ___sys_sendmsg+0x195/0x1e0 [ 103.744367][T10534] __x64_sys_sendmsg+0xd4/0x160 [ 103.744430][T10534] x64_sys_call+0x17ba/0x3000 [ 103.744499][T10534] do_syscall_64+0xc0/0x2a0 [ 103.744530][T10534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.744602][T10534] RIP: 0033:0x7f7a48e3acb9 [ 103.744624][T10534] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.744648][T10534] RSP: 002b:00007f7a47897028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 103.744674][T10534] RAX: ffffffffffffffda RBX: 00007f7a490b5fa0 RCX: 00007f7a48e3acb9 [ 103.744688][T10534] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 103.744724][T10534] RBP: 00007f7a48ea8bf7 R08: 0000000000000000 R09: 0000000000000000 [ 103.744758][T10534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.744773][T10534] R13: 00007f7a490b6038 R14: 00007f7a490b5fa0 R15: 00007ffd000b5808 [ 103.744796][T10534] [ 103.744820][T10534] memory: usage 307200kB, limit 307200kB, failcnt 230 [ 103.808006][ T29] audit: type=1400 audit(1769252926.691:1755): avc: denied { allowed } for pid=10589 comm="syz.5.3116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 103.808927][T10534] memory+swap: usage 307568kB, limit 9007199254740988kB, failcnt 0 [ 103.814390][ T29] audit: type=1400 audit(1769252926.691:1756): avc: denied { create } for pid=10589 comm="syz.5.3116" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 103.820324][T10534] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 103.825160][ T29] audit: type=1400 audit(1769252926.691:1757): avc: denied { map } for pid=10589 comm="syz.5.3116" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=27873 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 103.830536][T10534] Memory cgroup stats for /syz1: [ 103.836462][ T29] audit: type=1400 audit(1769252926.691:1758): avc: denied { read write } for pid=10589 comm="syz.5.3116" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=27873 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 103.927767][T10534] cache 0 [ 103.931435][ T29] audit: type=1400 audit(1769252926.751:1759): avc: denied { getopt } for pid=10591 comm="syz.4.3117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 103.935217][T10534] rss 0 [ 104.210277][T10534] shmem 0 [ 104.213229][T10534] mapped_file 0 [ 104.216714][T10534] dirty 0 [ 104.219695][T10534] writeback 0 [ 104.222989][T10534] workingset_refault_anon 18 [ 104.227641][T10534] workingset_refault_file 252 [ 104.232376][T10534] swap 376832 [ 104.235708][T10534] swapcached 4096 [ 104.239404][T10534] pgpgin 60918 [ 104.242792][T10534] pgpgout 60915 [ 104.246285][T10534] pgfault 90750 [ 104.249819][T10534] pgmajfault 9 [ 104.253208][T10534] inactive_anon 0 [ 104.257037][T10534] active_anon 4096 [ 104.260815][T10534] inactive_file 0 [ 104.264773][T10534] active_file 8192 [ 104.268559][T10534] unevictable 0 [ 104.272047][T10534] hierarchical_memory_limit 314572800 [ 104.277114][ T29] audit: type=1400 audit(1769252927.161:1760): avc: denied { create } for pid=10609 comm="syz.4.3123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 104.277462][T10534] hierarchical_memsw_limit 9223372036854771712 [ 104.277477][T10534] total_cache 0 [ 104.306879][T10534] total_rss 0 [ 104.310277][T10534] total_shmem 0 [ 104.313814][T10534] total_mapped_file 0 [ 104.317801][T10534] total_dirty 0 [ 104.321505][T10534] total_writeback 0 [ 104.325425][T10534] total_workingset_refault_anon 18 [ 104.330689][T10534] total_workingset_refault_file 252 [ 104.330946][ T29] audit: type=1400 audit(1769252927.191:1761): avc: denied { listen } for pid=10609 comm="syz.4.3123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 104.335922][T10534] total_swap 376832 [ 104.335934][T10534] total_swapcached 4096 [ 104.355610][ T29] audit: type=1400 audit(1769252927.191:1762): avc: denied { ioctl } for pid=10609 comm="syz.4.3123" path="socket:[27909]" dev="sockfs" ino=27909 ioctlcmd=0x89eb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 104.359426][T10534] total_pgpgin 60918 [ 104.359438][T10534] total_pgpgout 60915 [ 104.359447][T10534] total_pgfault 90750 [ 104.378572][T10612] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3124'. [ 104.388662][T10534] total_pgmajfault 9 [ 104.413719][T10534] total_inactive_anon 0 [ 104.418049][T10534] total_active_anon 4096 [ 104.422389][T10534] total_inactive_file 0 [ 104.426580][T10534] total_active_file 8192 [ 104.430944][T10534] total_unevictable 0 [ 104.435016][T10534] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.3089,pid=10533,uid=0 [ 104.449846][T10534] Memory cgroup out of memory: Killed process 10533 (syz.1.3089) total-vm:96048kB, anon-rss:1204kB, file-rss:22156kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 104.489538][T10534] syz.1.3089 (10534) used greatest stack depth: 6840 bytes left [ 104.555648][ T29] audit: type=1400 audit(1769252927.441:1763): avc: denied { write } for pid=10619 comm="syz.3.3127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 104.745132][T10645] loop4: detected capacity change from 0 to 128 [ 104.757679][T10649] loop3: detected capacity change from 0 to 512 [ 104.779313][T10649] EXT4-fs: Ignoring removed nobh option [ 104.806117][T10645] FAT-fs (loop4): Directory bread(block 32) failed [ 104.817729][T10649] EXT4-fs (loop3): orphan cleanup on readonly fs [ 104.834397][T10645] FAT-fs (loop4): Directory bread(block 33) failed [ 104.841291][T10649] EXT4-fs warning (device loop3): ext4_xattr_inode_get:546: inode #11: comm syz.3.3141: ea_inode file size=4 entry size=6 [ 104.854658][T10645] FAT-fs (loop4): Directory bread(block 34) failed [ 104.861290][T10645] FAT-fs (loop4): Directory bread(block 35) failed [ 104.868202][T10649] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 104.881906][T10645] FAT-fs (loop4): Directory bread(block 36) failed [ 104.884388][T10662] loop1: detected capacity change from 0 to 164 [ 104.896174][T10662] Unable to read rock-ridge attributes [ 104.900807][T10649] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.3141: corrupted inode contents [ 104.903356][T10645] FAT-fs (loop4): Directory bread(block 37) failed [ 104.920853][T10662] Unable to read rock-ridge attributes [ 104.927010][T10649] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #15: comm syz.3.3141: mark_inode_dirty error [ 104.938750][T10649] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.3141: corrupted inode contents [ 104.938764][T10645] FAT-fs (loop4): Directory bread(block 38) failed [ 104.938831][T10645] FAT-fs (loop4): Directory bread(block 39) failed [ 104.938854][T10645] FAT-fs (loop4): Directory bread(block 40) failed [ 104.970453][T10645] FAT-fs (loop4): Directory bread(block 41) failed [ 104.988769][T10649] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3001: inode #15: comm syz.3.3141: mark_inode_dirty error [ 105.020108][T10649] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3004: inode #15: comm syz.3.3141: mark inode dirty (error -117) [ 105.035250][T10649] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -117) [ 105.048983][T10645] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 105.056791][T10645] FAT-fs (loop4): Filesystem has been set read-only [ 105.063651][T10649] EXT4-fs (loop3): 1 orphan inode deleted [ 105.074407][T10649] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 105.158700][T10677] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3154'. [ 105.169220][ T3327] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.251324][T10689] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 105.321552][T10701] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3165'. [ 105.478415][T10724] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3177'. [ 105.555803][T10735] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3182'. [ 105.911016][T10786] program syz.1.3208 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 105.935785][T10785] loop5: detected capacity change from 0 to 512 [ 105.980293][T10785] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.985687][T10796] loop1: detected capacity change from 0 to 1024 [ 106.023082][T10800] loop4: detected capacity change from 0 to 512 [ 106.032746][T10802] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3214'. [ 106.038225][T10785] ext4 filesystem being mounted at /216/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.055003][T10800] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 106.073669][T10800] EXT4-fs (loop4): 1 truncate cleaned up [ 106.080645][T10800] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.096948][T10796] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.097269][T10800] EXT4-fs error (device loop4): ext4_generic_delete_entry:2666: inode #2: block 13: comm syz.4.3213: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 106.144992][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.158755][T10800] EXT4-fs error (device loop4) in ext4_delete_entry:2737: Corrupt filesystem [ 106.213310][T10810] loop1: detected capacity change from 0 to 1024 [ 106.232684][ T3330] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.252960][T10810] EXT4-fs: Ignoring removed oldalloc option [ 106.260052][T10810] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 106.270271][ T8401] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.272757][T10813] xt_hashlimit: max too large, truncated to 1048576 [ 106.299097][T10810] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.343409][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.482107][T10842] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 106.600802][T10866] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_1, syncid = 4, id = 0 [ 106.790702][T10889] loop4: detected capacity change from 0 to 1024 [ 106.806805][T10889] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 106.845786][T10889] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.3251: Invalid block bitmap block 0 in block_group 0 [ 106.878261][T10897] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3255'. [ 106.897094][T10889] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.3251: Failed to acquire dquot type 0 [ 106.918445][T10889] EXT4-fs error (device loop4): ext4_free_blocks:6728: comm syz.4.3251: Freeing blocks not in datazone - block = 0, count = 4096 [ 106.923408][T10875] loop1: detected capacity change from 0 to 512 [ 106.941578][T10889] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.3251: Invalid inode bitmap blk 0 in block_group 0 [ 106.958358][ T53] EXT4-fs error (device loop4): ext4_release_dquot:7022: comm kworker/u8:4: Failed to release dquot type 0 [ 106.971970][T10889] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 106.985935][T10875] EXT4-fs (loop1): orphan cleanup on readonly fs [ 106.994113][T10875] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 107.014731][T10875] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 107.030591][T10889] EXT4-fs (loop4): 1 orphan inode deleted [ 107.031165][T10889] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.070461][T10875] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.3245: attempt to clear invalid blocks 2 len 1 [ 107.097201][T10875] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.3245: invalid indirect mapped block 1819239214 (level 0) [ 107.125778][T10875] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.3245: invalid indirect mapped block 1819239214 (level 1) [ 107.126470][ T3330] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.161068][T10875] EXT4-fs (loop1): 1 truncate cleaned up [ 107.197733][T10875] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 107.341696][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.459778][T10949] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3280'. [ 107.638507][T10971] loop6: detected capacity change from 0 to 512 [ 107.656485][T10971] EXT4-fs (loop6): blocks per group (8192) and clusters per group (2304) inconsistent [ 107.988092][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.086114][T11012] loop5: detected capacity change from 0 to 2048 [ 108.133434][T11018] loop6: detected capacity change from 0 to 512 [ 108.149068][T11012] loop5: p1 < > p4 [ 108.184631][T11012] loop5: p4 size 8388608 extends beyond EOD, truncated [ 108.192231][T11018] EXT4-fs (loop6): orphan cleanup on readonly fs [ 108.209217][T11018] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #11: block 1: comm syz.6.3311: lblock 0 mapped to illegal pblock 1 (length 1) [ 108.227061][T11018] EXT4-fs error (device loop6): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.6.3311: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 108.242983][T11018] EXT4-fs warning (device loop6): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.6.3311: ea_inode dec ref err=-117 [ 108.256410][T11018] EXT4-fs (loop6): 1 orphan inode deleted [ 108.262874][T11018] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 108.290980][T10263] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.403188][T11039] rdma_op ffff88810d501d80 conn xmit_rdma 0000000000000000 [ 108.444185][T11041] loop6: detected capacity change from 0 to 512 [ 108.471449][T11041] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.501988][ T3311] udevd[3311]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 108.502909][ T5702] udevd[5702]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 108.533286][T11041] ext4 filesystem being mounted at /59/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 108.600499][T11041] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #2: comm syz.6.3321: corrupted inode contents [ 108.612444][T11041] EXT4-fs error (device loop6): ext4_dirty_inode:6502: inode #2: comm syz.6.3321: mark_inode_dirty error [ 108.612794][T11041] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #2: comm syz.6.3321: corrupted inode contents [ 108.612949][T11041] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #2: comm syz.6.3321: mark_inode_dirty error [ 108.615410][T11056] loop4: detected capacity change from 0 to 1024 [ 108.638963][T11056] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.643708][T10263] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.659170][T11056] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2858: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 108.659298][T11056] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #11: comm syz.4.3327: missing EA_INODE flag [ 108.660038][T11056] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.3327: error while reading EA inode 11 err=-117 [ 108.660486][T11056] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #11: comm syz.4.3327: missing EA_INODE flag [ 108.664642][T11056] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.3327: error while reading EA inode 11 err=-117 [ 108.698652][ T3330] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.755293][T11070] sd 0:0:1:0: device reset [ 108.803872][T11076] loop4: detected capacity change from 0 to 128 [ 108.806191][T11076] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 108.806327][T11076] ext4 filesystem being mounted at /764/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.813527][ T29] kauditd_printk_skb: 96 callbacks suppressed [ 108.813547][ T29] audit: type=1400 audit(1769252931.767:1857): avc: denied { create } for pid=11074 comm="syz.4.3335" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 108.813696][ T29] audit: type=1400 audit(1769252931.767:1858): avc: denied { link } for pid=11074 comm="syz.4.3335" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 108.854140][ T3330] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 109.146663][ T29] audit: type=1400 audit(1769252932.097:1859): avc: denied { create } for pid=11094 comm="syz.6.3343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 109.176657][ T29] audit: type=1400 audit(1769252932.097:1860): avc: denied { setopt } for pid=11094 comm="syz.6.3343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 109.228922][T11098] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.280832][ T29] audit: type=1400 audit(1769252932.237:1861): avc: denied { write } for pid=11104 comm="syz.1.3347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 109.344819][ T29] audit: type=1400 audit(1769252932.287:1862): avc: denied { setattr } for pid=11097 comm="syz.3.3344" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 109.389825][ T29] audit: type=1400 audit(1769252932.337:1863): avc: denied { write } for pid=11116 comm="syz.6.3353" path="socket:[29653]" dev="sockfs" ino=29653 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 109.417529][ T3327] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.573496][T11142] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3365'. [ 109.733628][T11158] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3373'. [ 109.742674][T11158] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3373'. [ 109.840504][T11169] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.3378: invalid block [ 109.865045][T11169] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.3378: invalid indirect mapped block 4294967295 (level 1) [ 109.885011][T11169] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.3378: invalid indirect mapped block 4294967295 (level 1) [ 109.900213][T11169] EXT4-fs (loop3): 2 truncates cleaned up [ 109.906542][T11169] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.923891][ T29] audit: type=1400 audit(1769252932.877:1864): avc: denied { rename } for pid=11167 comm="syz.3.3378" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 109.946362][ T29] audit: type=1400 audit(1769252932.877:1865): avc: denied { reparent } for pid=11167 comm="syz.3.3378" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 109.968415][T11177] EXT4-fs: Ignoring removed mblk_io_submit option [ 109.969133][ T29] audit: type=1400 audit(1769252932.877:1866): avc: denied { add_name } for pid=11167 comm="syz.3.3378" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 110.028932][T11177] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 110.038397][ T3327] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.065377][T11177] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 110.081310][T11177] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #11: comm syz.1.3381: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 110.148308][ T3567] IPVS: starting estimator thread 0... [ 110.172079][T11177] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.3381: couldn't read orphan inode 11 (err -117) [ 110.194884][T11196] netlink: 'syz.5.3386': attribute type 3 has an invalid length. [ 110.203418][T11177] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.248980][T11188] IPVS: using max 2736 ests per chain, 136800 per kthread [ 110.256662][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.572563][T11243] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.596426][T11243] ext4 filesystem being mounted at /787/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.743249][T11269] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.760336][T11269] ext4 filesystem being mounted at /240/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.816455][ T8401] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.849920][ T3311] udevd[3311]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: File exists [ 110.867927][T11279] veth0_to_team: entered promiscuous mode [ 110.881575][T11284] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3424'. [ 110.953789][ T3330] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.124674][T11313] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3439'. [ 111.145728][T11315] set_capacity_and_notify: 6 callbacks suppressed [ 111.145827][T11315] loop4: detected capacity change from 0 to 128 [ 111.281155][T11324] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3445'. [ 111.290283][T11324] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3445'. [ 111.299483][T11324] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3445'. [ 111.363986][T11334] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3447'. [ 111.373029][T11334] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3447'. [ 111.387824][T11336] loop1: detected capacity change from 0 to 512 [ 111.402179][T11338] loop5: detected capacity change from 0 to 1024 [ 111.431830][T11336] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 111.440754][T11338] EXT4-fs: inline encryption not supported [ 111.451332][T11336] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.3450: invalid block [ 111.521504][T11338] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.545427][T11336] EXT4-fs (loop1): Remounting filesystem read-only [ 111.575684][T11336] EXT4-fs (loop1): 2 truncates cleaned up [ 111.582123][T11336] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.598744][T11338] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3449: bg 0: block 200: padding at end of block bitmap is not set [ 111.645273][T11338] EXT4-fs (loop5): Remounting filesystem read-only [ 111.651970][T11338] EXT4-fs (loop5): error restoring inline_data for inode -- potential data loss! (inode 15, error -30) [ 111.663609][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.688171][ T8401] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.705455][T11364] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3463'. [ 111.723349][T11358] loop3: detected capacity change from 0 to 8192 [ 111.753974][T11370] loop5: detected capacity change from 0 to 256 [ 111.846275][T11381] loop4: detected capacity change from 0 to 1024 [ 111.847616][T11382] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3468'. [ 111.894595][T11381] EXT4-fs: Ignoring removed mblk_io_submit option [ 111.918920][T11381] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 111.940945][T11381] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 111.967984][T11392] tipc: Enabling of bearer rejected, failed to enable media [ 111.979537][T11381] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #11: comm syz.4.3469: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 112.028456][T11381] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.3469: couldn't read orphan inode 11 (err -117) [ 112.064771][T11406] netlink: 764 bytes leftover after parsing attributes in process `syz.5.3479'. [ 112.077453][T11381] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.114636][T11381] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.3469: Invalid block bitmap block 0 in block_group 0 [ 112.154844][T11381] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.3469: Failed to acquire dquot type 0 [ 112.256033][ T1601] EXT4-fs error (device loop4): __ext4_get_inode_loc:4830: comm kworker/u8:9: Invalid inode table block 8589934593 in block_group 0 [ 112.287525][ T3330] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.484369][T11468] hsr0 speed is unknown, defaulting to 1000 [ 112.490863][T11468] hsr0 speed is unknown, defaulting to 1000 [ 112.508459][T11468] hsr0 speed is unknown, defaulting to 1000 [ 112.514773][T11468] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 112.523254][T11468] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 112.558359][T11468] hsr0 speed is unknown, defaulting to 1000 [ 112.566950][T11468] hsr0 speed is unknown, defaulting to 1000 [ 112.571412][T11479] loop1: detected capacity change from 0 to 512 [ 112.576659][T11468] hsr0 speed is unknown, defaulting to 1000 [ 112.586312][T11468] hsr0 speed is unknown, defaulting to 1000 [ 112.604004][T11468] hsr0 speed is unknown, defaulting to 1000 [ 112.663811][T11479] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 112.672674][T11479] FAT-fs (loop1): Filesystem has been set read-only [ 112.708127][T11479] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 112.727222][T11479] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 112.753212][T11483] loop3: detected capacity change from 0 to 8192 [ 112.914918][T11525] loop3: detected capacity change from 0 to 512 [ 112.962722][T11525] EXT4-fs (loop3): 1 orphan inode deleted [ 112.978428][ T2208] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:11: Failed to release dquot type 1 [ 112.999672][T11525] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.001058][T11541] netlink: 'syz.1.3538': attribute type 12 has an invalid length. [ 113.020205][T11541] netlink: 'syz.1.3538': attribute type 11 has an invalid length. [ 113.039828][T11525] ext4 filesystem being mounted at /750/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.073130][ T3327] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.119536][T11550] loop5: detected capacity change from 0 to 512 [ 113.146872][T11550] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 113.180871][T11550] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.3543: bad orphan inode 131083 [ 113.218630][ T3008] ================================================================== [ 113.226845][ T3008] BUG: KCSAN: data-race in d_make_discardable / do_readlinkat [ 113.234327][ T3008] [ 113.236658][ T3008] write to 0xffff88811a53e180 of 4 bytes by task 3311 on cpu 1: [ 113.244297][ T3008] d_make_discardable+0x4f/0xa0 [ 113.249157][ T3008] simple_unlink+0x68/0x80 [ 113.253589][ T3008] shmem_unlink+0x12d/0x140 [ 113.258109][ T3008] vfs_unlink+0x28b/0x440 [ 113.262441][ T3008] do_unlinkat+0x1e2/0x4b0 [ 113.266892][ T3008] __x64_sys_unlink+0x2e/0x40 [ 113.271857][ T3008] x64_sys_call+0x2f48/0x3000 [ 113.276556][ T3008] do_syscall_64+0xc0/0x2a0 [ 113.281075][ T3008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.286977][ T3008] [ 113.289310][ T3008] read to 0xffff88811a53e180 of 4 bytes by task 3008 on cpu 0: [ 113.296859][ T3008] do_readlinkat+0xa9/0x340 [ 113.301474][ T3008] __x64_sys_readlink+0x47/0x60 [ 113.306351][ T3008] x64_sys_call+0x2af1/0x3000 [ 113.311041][ T3008] do_syscall_64+0xc0/0x2a0 [ 113.315558][ T3008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.321456][ T3008] [ 113.323783][ T3008] value changed: 0x08300080 -> 0x00300180 [ 113.329517][ T3008] [ 113.331851][ T3008] Reported by Kernel Concurrency Sanitizer on: [ 113.338021][ T3008] CPU: 0 UID: 0 PID: 3008 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) [ 113.347324][ T3008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 113.357392][ T3008] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 113.373067][T11550] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.392179][T11550] EXT4-fs error (device loop5): ext4_readdir:264: inode #2: block 13: comm syz.5.3543: path /265/file1: bad entry in directory: '.' directory cannot be the last in data block - offset=0, inode=2, rec_len=1024, size=1024 fake=1 [ 113.652163][T11546] syz_tun (unregistering): left allmulticast mode [ 113.704343][ T1601] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.753521][ T1601] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.841112][ T1601] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.858918][T11549] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.910872][ T1601] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.984648][ T1601] bridge_slave_1: left allmulticast mode [ 113.990491][ T1601] bridge_slave_1: left promiscuous mode [ 113.996220][ T1601] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.006989][ T1601] bridge_slave_0: left allmulticast mode [ 114.012804][ T1601] bridge_slave_0: left promiscuous mode [ 114.018564][ T1601] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.150351][ T1601] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 114.161772][ T1601] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 114.171470][ T1601] bond0 (unregistering): Released all slaves [ 114.221597][ T1601] IPVS: stopping master sync thread 10866 ... [ 114.231013][ T1601] hsr_slave_0: left promiscuous mode [ 114.236728][ T1601] hsr_slave_1: left promiscuous mode [ 114.242744][ T1601] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.250171][ T1601] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.257860][ T1601] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.265362][ T1601] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.276822][ T1601] veth1_macvtap: left promiscuous mode [ 114.282891][ T1601] veth0_macvtap: left promiscuous mode [ 114.288710][ T1601] veth1_vlan: left promiscuous mode [ 114.293971][ T1601] veth0_vlan: left promiscuous mode [ 114.350136][ T1601] team0 (unregistering): Port device team_slave_1 removed [ 114.360345][ T1601] team0 (unregistering): Port device team_slave_0 removed [ 114.665425][ T1601] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.722781][ T1601] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.770559][ T1601] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.811187][ T1601] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.881703][ T1601] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.921338][ T1601] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.973005][ T1601] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.020928][ T1601] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.094497][ T1601] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.151216][ T1601] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.201245][ T1601] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.261003][ T1601] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.338810][ T1601] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.386464][ T1601] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.446295][ T1601] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.513148][ T1601] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.568839][ T1601] bridge_slave_1: left allmulticast mode [ 115.574536][ T1601] bridge_slave_1: left promiscuous mode [ 115.580365][ T1601] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.588458][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 115.596331][ T1601] bridge_slave_0: left allmulticast mode [ 115.602034][ T1601] bridge_slave_0: left promiscuous mode [ 115.607686][ T1601] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.616116][ T1601] bridge_slave_1: left allmulticast mode [ 115.621851][ T1601] bridge_slave_1: left promiscuous mode [ 115.627687][ T1601] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.635552][ T1601] bridge_slave_0: left allmulticast mode [ 115.641274][ T1601] bridge_slave_0: left promiscuous mode [ 115.646884][ T1601] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.655678][ T1601] bridge_slave_1: left allmulticast mode [ 115.661385][ T1601] bridge_slave_1: left promiscuous mode [ 115.667114][ T1601] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.674957][ T1601] bridge_slave_0: left allmulticast mode [ 115.680649][ T1601] bridge_slave_0: left promiscuous mode [ 115.686324][ T1601] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.694688][ T1601] bridge_slave_1: left allmulticast mode [ 115.700461][ T1601] bridge_slave_1: left promiscuous mode [ 115.706181][ T1601] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.714057][ T1601] bridge_slave_0: left allmulticast mode [ 115.719786][ T1601] bridge_slave_0: left promiscuous mode [ 115.725631][ T1601] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.889954][ T1601] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 115.899516][ T1601] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 115.908932][ T1601] bond0 (unregistering): Released all slaves [ 116.050080][ T1601] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 116.060237][ T1601] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 116.070181][ T1601] bond0 (unregistering): Released all slaves [ 116.119702][ T1601] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 116.129345][ T1601] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 116.138904][ T1601] bond0 (unregistering): Released all slaves [ 116.269664][ T1601] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 116.280225][ T1601] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 116.289661][ T1601] bond0 (unregistering): Released all slaves [ 116.318604][ T1601] tipc: Disabling bearer [ 116.323861][ T1601] tipc: Left network mode [ 116.328767][ T1601] tipc: Left network mode [ 116.335164][ T1601] IPVS: stopping backup sync thread 8769 ... [ 116.341762][ T1601] IPVS: stopping backup sync thread 3696 ... [ 116.351257][ T1601] hsr_slave_0: left promiscuous mode [ 116.356968][ T1601] hsr_slave_1: left promiscuous mode [ 116.363320][ T1601] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.370924][ T1601] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.379152][ T1601] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.386726][ T1601] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.396531][ T1601] hsr_slave_0: left promiscuous mode [ 116.402406][ T1601] hsr_slave_1: left promiscuous mode [ 116.408248][ T1601] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.415642][ T1601] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.423540][ T1601] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.430996][ T1601] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.441196][ T1601] hsr_slave_0: left promiscuous mode [ 116.447017][ T1601] hsr_slave_1: left promiscuous mode [ 116.452958][ T1601] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.460472][ T1601] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.468089][ T1601] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.475473][ T1601] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.484914][ T1601] hsr_slave_0: left promiscuous mode [ 116.490610][ T1601] hsr_slave_1: left promiscuous mode [ 116.496202][ T1601] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.504193][ T1601] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.511856][ T1601] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.519577][ T1601] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.535708][ T1601] veth1_macvtap: left promiscuous mode [ 116.541312][ T1601] veth0_macvtap: left promiscuous mode [ 116.546873][ T1601] veth1_vlan: left promiscuous mode [ 116.552288][ T1601] veth0_vlan: left promiscuous mode [ 116.558254][ T1601] veth1_macvtap: left promiscuous mode [ 116.563717][ T1601] veth0_macvtap: left promiscuous mode [ 116.569496][ T1601] veth1_vlan: left promiscuous mode [ 116.574786][ T1601] veth0_vlan: left promiscuous mode [ 116.580621][ T1601] veth1_macvtap: left promiscuous mode [ 116.586169][ T1601] veth0_macvtap: left promiscuous mode [ 116.591731][ T1601] veth1_vlan: left promiscuous mode [ 116.597096][ T1601] veth0_vlan: left promiscuous mode [ 116.602910][ T1601] veth1_macvtap: left promiscuous mode [ 116.608649][ T1601] veth0_macvtap: left promiscuous mode [ 116.614343][ T1601] veth1_vlan: left promiscuous mode [ 116.619648][ T1601] veth0_vlan: left promiscuous mode [ 116.766401][ T1601] team0 (unregistering): Port device team_slave_1 removed [ 116.776897][ T1601] team0 (unregistering): Port device team_slave_0 removed [ 116.828695][ T1601] team0 (unregistering): Port device team_slave_1 removed [ 116.838129][ T1601] team0 (unregistering): Port device team_slave_0 removed [ 116.892405][ T1601] team0 (unregistering): Port device team_slave_1 removed [ 116.902626][ T1601] team0 (unregistering): Port device team_slave_0 removed [ 116.957138][ T1601] team0 (unregistering): Port device team_slave_1 removed [ 116.966905][ T1601] team0 (unregistering): Port device team_slave_0 removed [ 116.998483][ T1037] hsr0 speed is unknown, defaulting to 1000 [ 117.004482][ T1037] infiniband syz0: ib_query_port failed (-19) [ 117.870337][ T1601] IPVS: stop unused estimator thread 0...