last executing test programs: 44.787103128s ago: executing program 0 (id=5225): r0 = socket(0xa, 0x3, 0x3a) recvmmsg(r0, &(0x7f00000091c0)=[{{0x0, 0x0, 0x0}, 0x10}], 0x2f, 0x2, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000140)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c6dd00", 0x10, 0x3a, 0xff, @private1, @mcast2, {[], @ndisc_ra={0x89, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0xffffffff}}}}}}, 0x0) 44.692153383s ago: executing program 0 (id=5228): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r0, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0xb}}], 0x1, 0x0, 0x0) 44.441853696s ago: executing program 0 (id=5233): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='net/sockstat\x00') io_setup(0x9, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x3, 0x200, r0, &(0x7f0000000280), 0x0, 0x81c, 0x0, 0x0, r0}]) 44.246900327s ago: executing program 0 (id=5240): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16000000000000000600000004"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x20000, 0x4, 0x3, 0x141, r0}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0x2, r1}, 0x27) 43.582942392s ago: executing program 0 (id=5244): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) symlink(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 43.503333806s ago: executing program 0 (id=5245): unshare(0x22020400) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000040)=0x7, 0x4) 28.474292909s ago: executing program 32 (id=5245): unshare(0x22020400) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000040)=0x7, 0x4) 876.322403ms ago: executing program 3 (id=6394): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x1010400, &(0x7f00000000c0)=ANY=[], 0x2, 0x37b, &(0x7f0000000940)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @auto=[0x33, 0x39, 0x62, 0x64, 0x39, 0x64, 0x33, 0x32, 0x35, 0x64, 0x63, 0x33, 0x61, 0x39, 0x34, 0x30]}, 0x0, 0x0, 0xfffffffffffffff9) 862.742994ms ago: executing program 5 (id=6395): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f0000002300)={0x23, 0x4, 0x5, 0x2}, 0x10) 753.43575ms ago: executing program 5 (id=6399): r0 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x2b, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000280)="d8000000100081044e81f782db44b904021d006a0f000000dafe55a1290015000600142603600e120900040044000500a80016470a000140020000000006ffc3b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81508ff60d7fed0bffece0b42a9ecbee5de6cc357b17c160d40dd6e4edef3d93", 0xd8}], 0x1}, 0x20000) 651.252585ms ago: executing program 3 (id=6401): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b'], 0x24}}, 0x0) 592.992888ms ago: executing program 3 (id=6406): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x1c, 0x0, @in6={0xa, 0x4e23, 0xb9a, @empty, 0x6}}}, 0x90) 586.818569ms ago: executing program 5 (id=6407): unshare(0x4040600) r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x2, @local, 0x18b78d45}, 0x1c) 545.665571ms ago: executing program 3 (id=6408): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x4, &(0x7f0000000080)={[{@usrjquota}, {@noauto_da_alloc}, {}]}, 0x1, 0x781, &(0x7f0000000800)="$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") chdir(&(0x7f0000000240)='./file0\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file2\x00', 0x0) 512.559593ms ago: executing program 5 (id=6411): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0xf, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000001c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x4, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xea}, 0x94) 512.395373ms ago: executing program 2 (id=6412): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, 0x0, 0x4000000) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x30, 0x0, 0xb, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_NAME={0x9, 0x1, '\\.-.\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x40000) 424.233677ms ago: executing program 5 (id=6415): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="180200000900000000000000fdffffff850000003600000018010000756c6c2700000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000a000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="178d048604bf0bfb1945d7430008", 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 416.759378ms ago: executing program 4 (id=6416): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x54, r1, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x3}, {0xc, 0x90, 0xfffffffffffffff7}}]}, 0x54}, 0x1, 0x0, 0x0, 0x41}, 0x40000) 414.817368ms ago: executing program 2 (id=6417): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000300)={0x0, 0x2, "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"}) ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f0000000240)={0x9317, 0x1, [{0x1, 0x1}]}) 372.60946ms ago: executing program 3 (id=6419): pipe(&(0x7f0000000200)={0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sync_file_range(r0, 0x6, 0x9, 0x1) 324.051303ms ago: executing program 1 (id=6420): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000005900)={0x5, 0x1, 0x0, {}, {0x0, 0x2710}, {}, 0x2, @can={{}, 0x1, 0x0, 0x0, 0x0, "f21a810183bdfbff"}}, 0x48}, 0x300, 0x0, 0x0, 0x8800}, 0x20040002) 323.657803ms ago: executing program 2 (id=6421): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f00000009c0)={[{@barrier}, {@acl}, {@nogrpid}, {@errors_remount}, {@dioread_lock}]}, 0xff, 0x578, &(0x7f0000000380)="$eJzs3V1rFFcYAOB3NonfbSKItL0ogV7UYt2YpJ9Q0F63UqG91yUZg2TjSnYjJhXUi3pdpFBKhdIf0PteSv9Af0WhFaSItJTebJnNrFmTXTeJq4md54HRc2bGfffszDn7npldN4DCGs/+KEW8GhFfJxGjHduGI984vrrfwwfXZrIliWbz8z+TSPJ17f2T/O+DeeWViPjlq4jjpY1x68sr85VqNV3M6xONhcsT9eWVExcXKnPpXHppanr6g3enpz58/72BtfWts39/99ndoexZf/vTvcO3kzgdh/Jtne14Cjc6K+Mxnr8mI3F63Y6TAwi2myT9duhyDrDzhvJ+PhLZGDAaQ3mvB/7/rkdEEyioRP+HgmrnAe25/YDmwS+M+x+vToA2tn949dpI7GvNjQ48TB6bGWXz3bEBxM9i/PzHndvZEn2uQ1wfQDyAths3I+Lk8PDG8S/Jx7/tO7mJq37rYxTt/Qd20t0s/3m7W/5TepT/RJf852CXvrsda49x/kx07f+lewMI01OW/33UJf/dv7bL2FB+++KlVs43kly4WE1PRsTLEXEsRvZm9S3cz3nsAntn/pctWfx2LriqdG947+MPMFtpVLbd4HXu34x4bS3/TWLD+L+vleuuP/7Z63F2kzGOpnde77Wtf/s7DT4Dbv4Y8WbX+c/aHa3kyfcnJ1rnw0T7rNjor1tHf+0Vf2vtH7zs+B94cvvHks77tfWtx/hh379pr23bPf/3JF+0ynvydVcrjcbiZMSe5NON66fW/m1e/6eZ75+1/9gbTx7/up3/2fhwfpPtv3Wkdxq0G47/7JaO/9YLv33y5fe94m/u+L/TKh3L12xm/NvsE3ya1w4AAAAAAAB2m1JEHIqkVH5ULpXK5dXPdxyJA6Vqrd44fqG2dGk2Wt+VHYuRUvtO92jH5yEm88/DtutT6+rTEXE4Ir4Z2t+ql2dq1dmdbjwAAAAAAAAAAAAAAAAAAADsEgd7fP8/8/vQo92e2/9HDjxnfvIbiqtv/x/ELz0Bu5L3fygu/R+KS/+H4tL/obj0fygu/R+KS/+H4tL/AQAAAAAAAAAAAAAAAAAAAAAAAAAAYKDOnjmTLc2HD67NZPXZK8tL87UrJ2bT+nx5YWmmPFNbvFyeq9Xmqml5prbQ7/GqtdrlyalYujrRSOuNifryyrmF2tKlxrmLC5W59Fw68lxaBQAAAAAAAAAAAAAAAAAAAC+W+vLKfKVaTRdfgML1HYp+Kna+7U9TSPod5VP5ybCtEMM730CFZ1DoP3Y0R5/16AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAq/4LAAD//6d0Moc=") open(&(0x7f00000000c0)='./file0\x00', 0x80400, 0x20) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) 318.956343ms ago: executing program 4 (id=6422): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000180)={0x2, 0x0, 0x2, 0xdbd, r1}) 251.797386ms ago: executing program 3 (id=6423): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x200, 0x1002, 0x205a, 0x0, 0xa, 0x20005, 0x8a6, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10) syz_usbip_server_init(0x5) 251.554226ms ago: executing program 1 (id=6424): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x4000, 0xf1fe8e2010cc34c2}, 0x6) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10002, 0x0) 217.146349ms ago: executing program 4 (id=6425): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005e000100fcffffffff019700000a"], 0x1c}}, 0x4008074) 216.783339ms ago: executing program 1 (id=6426): write$cgroup_pid(0xffffffffffffffff, &(0x7f00000001c0), 0x12) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, &(0x7f00000001c0)={0x77359400}) 200.59035ms ago: executing program 5 (id=6427): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) write$cgroup_pid(r0, &(0x7f00000001c0), 0x12) 166.353601ms ago: executing program 4 (id=6428): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, 0x0, &(0x7f0000000140)=0x600) 159.939091ms ago: executing program 1 (id=6429): r0 = socket$inet6(0x10, 0x2, 0x4) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x81, 0xffffffff}) sendto$inet6(r0, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x810, 0x0, 0x0) 143.458792ms ago: executing program 2 (id=6430): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x40}, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xec, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xfffc, 0x0, 0x2, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x9c, 0x11, [{@in6=@dev={0xfe, 0x80, '\x00', 0x11}, @in=@rand_addr=0x64010102, @in=@local, @in6=@remote, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@private0, @in6=@remote, @in=@broadcast, 0x6c, 0x1, 0x0, 0x0, 0x2, 0xa}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x800}, 0x0) 68.413247ms ago: executing program 1 (id=6431): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) 68.075047ms ago: executing program 4 (id=6432): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 13.144279ms ago: executing program 1 (id=6433): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200e3}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 13.069889ms ago: executing program 2 (id=6434): r0 = socket(0x2, 0x80805, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, 0x0, &(0x7f0000000080)) 4.40226ms ago: executing program 2 (id=6435): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81800) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1b1a439, &(0x7f0000000800)=ANY=[@ANYRESOCT=r0, @ANYRESDEC, @ANYBLOB="41319d36b19da0f92c34d4161aedb4d9c117bb97d9a14da38deb4d799f7396c16e53eea9b38952392679dc9965aff692fc7a1de3490b4e22f3468c98ec62faff6c802527cda5cb48c5bc97b57252bea2f306513526e3e61d4e206934c90150ba2c325365d34a4866416a647a2022e5485163e3fad30730c80a46b63900f5dfdd845440d244a1e889fb14a29c06fcc85f976afbb0ce220bde0da45028db74413dd6a37b7b63c2b7a26169fc2a44d210bd17af7173aa72d2ad45542299334fe9576104e3e3e7d25997fe6c8bb5fa15b761725a39fedaf8d5533570ba136ac826592163351666324320c93c98c4", @ANYRES8=r0], 0xb, 0x0, &(0x7f0000000000)) renameat2(r0, &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r0, &(0x7f0000000f80)='./file0\x00', 0x4) 0s ago: executing program 4 (id=6436): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) kernel console output (not intermixed with test programs): (loop1): last error at time 1777759159: ext4_get_journal_inode:5896 [ 149.223952][T14597] EXT4-fs (loop1): no journal found [ 149.229233][T14633] syz.4.4951 (14633) used obsolete PPPIOCDETACH ioctl [ 149.229674][T14597] EXT4-fs (loop1): can't get journal size [ 149.256913][T14597] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 149.279858][T14597] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 149.462199][T14656] netlink: 'syz.4.4962': attribute type 21 has an invalid length. [ 149.480375][T14656] IPv6: NLM_F_CREATE should be specified when creating new route [ 149.492598][T14656] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 149.499872][T14656] IPv6: NLM_F_CREATE should be set when creating new route [ 149.507102][T14656] IPv6: NLM_F_CREATE should be set when creating new route [ 149.514315][T14656] IPv6: NLM_F_CREATE should be set when creating new route [ 149.538856][T14661] netlink: 'syz.4.4962': attribute type 21 has an invalid length. [ 149.568894][T14661] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 149.617674][T14659] ext4 filesystem being mounted at /948/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.763330][T14687] EXT4-fs error (device loop0): ext4_iget_extra_inode:5128: inode #15: comm syz.0.4975: corrupted in-inode xattr: invalid ea_ino [ 149.789065][T14687] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 149.792613][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 149.808206][ C1] EXT4-fs (loop0): initial error at time 1777759159: ext4_iget_extra_inode:5128: inode 15 [ 149.818167][ C1] EXT4-fs (loop0): last error at time 1777759159: ext4_iget_extra_inode:5128: inode 15 [ 149.830883][T14687] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.4975: couldn't read orphan inode 15 (err -117) [ 149.847719][T14687] loop0: lost filesystem error report for type 5 error -117 [ 150.080672][T14718] net_ratelimit: 3468 callbacks suppressed [ 150.080772][T14718] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 150.279950][T14736] set_capacity_and_notify: 7 callbacks suppressed [ 150.279966][T14736] loop3: detected capacity change from 0 to 512 [ 150.454987][T14754] __nla_validate_parse: 3 callbacks suppressed [ 150.455003][T14754] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5006'. [ 150.487874][T14754] 8021q: adding VLAN 0 to HW filter on device bond2 [ 150.551546][T14768] loop0: detected capacity change from 0 to 512 [ 150.636832][T14778] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5018'. [ 150.741390][ T28] kauditd_printk_skb: 67 callbacks suppressed [ 150.741405][ T28] audit: type=1400 audit(1777759160.635:1297): avc: denied { listen } for pid=14784 comm="syz.3.5022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 150.808539][T14795] loop2: detected capacity change from 0 to 128 [ 150.857169][T14803] loop4: detected capacity change from 0 to 512 [ 150.906328][T14806] SELinux: Context œ is not valid (left unmapped). [ 150.906817][ T28] audit: type=1400 audit(1777759160.805:1298): avc: denied { mac_admin } for pid=14804 comm="syz.0.5030" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 150.952011][ T28] audit: type=1400 audit(1777759160.845:1299): avc: denied { create } for pid=14804 comm="syz.0.5030" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=9C10 [ 151.008293][ T28] audit: type=1400 audit(1777759160.845:1300): avc: denied { associate } for pid=14804 comm="syz.0.5030" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=9C10 [ 151.092280][ T28] audit: type=1400 audit(1777759160.865:1301): avc: denied { unlink } for pid=3292 comm="syz-executor" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=5239 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=9C10 [ 151.139306][ T28] audit: type=1326 audit(1777759160.955:1302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14814 comm="syz.3.5035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa93e30cdd9 code=0x7ffc0000 [ 151.168146][ T28] audit: type=1326 audit(1777759160.955:1303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14814 comm="syz.3.5035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa93e30cdd9 code=0x7ffc0000 [ 151.202945][ T28] audit: type=1326 audit(1777759160.955:1304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14814 comm="syz.3.5035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa93e30cdd9 code=0x7ffc0000 [ 151.206002][T14825] netlink: 'syz.3.5050': attribute type 3 has an invalid length. [ 151.231874][ T28] audit: type=1326 audit(1777759160.955:1305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14814 comm="syz.3.5035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa93e30cdd9 code=0x7ffc0000 [ 151.303657][ T28] audit: type=1326 audit(1777759160.955:1306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14814 comm="syz.3.5035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa93e30cdd9 code=0x7ffc0000 [ 151.396273][T14843] netlink: 'syz.0.5047': attribute type 21 has an invalid length. [ 151.406526][T14843] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 151.413757][T14843] IPv6: NLM_F_CREATE should be set when creating new route [ 151.420993][T14843] IPv6: NLM_F_CREATE should be set when creating new route [ 151.435609][T14843] netlink: 'syz.0.5047': attribute type 21 has an invalid length. [ 151.451892][T14847] netlink: 2 bytes leftover after parsing attributes in process `syz.4.5048'. [ 151.462872][T14843] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 151.532290][T14855] netlink: 'syz.0.5055': attribute type 1 has an invalid length. [ 151.732774][T14880] loop1: detected capacity change from 0 to 512 [ 151.791818][T14880] EXT4-fs (loop1): 1 truncate cleaned up [ 151.956876][T14906] netlink: 'syz.3.5078': attribute type 5 has an invalid length. [ 152.035712][T14922] loop2: detected capacity change from 0 to 256 [ 152.042096][T14918] atomic_op ffff88811e66f928 conn xmit_atomic 0000000000000000 [ 152.065718][T14922] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 152.301462][T14943] netlink: 292 bytes leftover after parsing attributes in process `syz.2.5096'. [ 152.436660][T14950] Invalid option length (1048363) for dns_resolver key [ 152.866149][T14978] loop2: detected capacity change from 0 to 128 [ 152.898669][T14978] ext4 filesystem being mounted at /1046/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.942119][T14981] program syz.4.5114 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 152.981319][T14978] EXT4-fs: Ignoring removed bh option [ 153.061189][T14978] EXT4-fs (loop2): changing journal_checksum during remount not supported; ignoring [ 153.098125][T14978] EXT4-fs (loop2): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09 ro. [ 153.651209][T15030] loop3: detected capacity change from 0 to 512 [ 153.685464][T15030] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 153.724266][T15030] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 153.740077][T15030] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 153.750592][T15030] System zones: 0-2, 18-18, 34-34 [ 153.758858][T15030] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.5139: bad orphan inode 15 [ 153.771963][T15030] loop3: lost filesystem error report for type 5 error -117 [ 153.773391][T15030] ext4_test_bit(bit=14, block=18) = 1 [ 153.780726][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 153.780742][ C1] EXT4-fs (loop3): initial error at time 1777759163: ext4_orphan_get:1423 [ 153.780760][ C1] EXT4-fs (loop3): last error at time 1777759163: ext4_orphan_get:1423 [ 153.816138][T15030] is_bad_inode(inode)=0 [ 153.820349][T15030] NEXT_ORPHAN(inode)=2264924160 [ 153.827563][T15030] max_ino=32 [ 153.832337][T15030] i_nlink=0 [ 153.836899][T15030] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #15: comm syz.3.5139: corrupted inode contents [ 153.849955][T15030] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 153.850107][T15030] EXT4-fs error (device loop3): ext4_dirty_inode:6587: inode #15: comm syz.3.5139: mark_inode_dirty error [ 153.896053][T15030] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 153.897192][T15030] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #15: comm syz.3.5139: corrupted inode contents [ 153.946070][T15030] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 153.946301][T15030] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3001: inode #15: comm syz.3.5139: mark_inode_dirty error [ 153.979179][T15030] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 153.979368][T15030] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3004: inode #15: comm syz.3.5139: mark inode dirty (error -117) [ 154.002536][T15064] loop2: detected capacity change from 0 to 128 [ 154.006510][T15030] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 154.010753][T15030] EXT4-fs warning (device loop3): ext4_evict_inode:287: xattr delete (err -117) [ 154.023838][ T3280] udevd[3280]: symlink '../../loop2' '/dev/disk/by-diskseq/603.tmp-b7:2' failed: Read-only file system [ 154.081639][T15067] syz.1.5154 (15067): /proc/15065/oom_adj is deprecated, please use /proc/15065/oom_score_adj instead. [ 154.095691][ T3280] udevd[3280]: symlink '../../loop2' '/dev/disk/by-diskseq/603.tmp-b7:2' failed: Read-only file system [ 154.110698][T15030] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 154.157044][T15074] loop0: detected capacity change from 0 to 512 [ 154.202885][ T3280] udevd[3280]: symlink '../../loop0' '/dev/disk/by-diskseq/604.tmp-b7:0' failed: Read-only file system [ 154.210290][ T3283] udevd[3283]: symlink '../../loop3' '/dev/disk/by-diskseq/605.tmp-b7:3' failed: Read-only file system [ 154.238260][T15082] netlink: 'syz.4.5161': attribute type 1 has an invalid length. [ 154.279519][ T3280] udevd[3280]: symlink '../../loop0' '/dev/disk/by-diskseq/604.tmp-b7:0' failed: Read-only file system [ 154.310528][T15090] netlink: 'syz.2.5166': attribute type 6 has an invalid length. [ 154.320523][ T3283] udevd[3283]: symlink '../../loop2' '/dev/disk/by-diskseq/603.tmp-b7:2' failed: Read-only file system [ 154.353219][ T3966] udevd[3966]: symlink '../../loop3' '/dev/disk/by-diskseq/605.tmp-b7:3' failed: Read-only file system [ 154.353601][ T3280] udevd[3280]: symlink '../../loop0' '/dev/disk/by-diskseq/604.tmp-b7:0' failed: Read-only file system [ 154.386201][T15099] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5167'. [ 154.386418][ T3283] udevd[3283]: symlink '../../loop2' '/dev/disk/by-diskseq/603.tmp-b7:2' failed: Read-only file system [ 154.408970][T15099] IPv6: NLM_F_CREATE should be specified when creating new route [ 154.417877][ T3280] udevd[3280]: symlink '../../loop2' '/dev/disk/by-diskseq/607.tmp-b7:2' failed: Read-only file system [ 154.492024][T15110] EXT4-fs: inline encryption not supported [ 154.537651][T15110] ext4 filesystem being mounted at /1051/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.612126][ T39] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm kworker/u8:2: bg 0: block 112: padding at end of block bitmap is not set [ 154.667034][ T39] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 1 with error 117 [ 154.712414][ T39] EXT4-fs (loop3): This should not happen!! Data will be lost [ 154.712414][ T39] [ 154.730961][ T3298] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 154.731851][T15131] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5185'. [ 154.743227][T15133] program syz.1.5187 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 154.856810][T15145] netlink: 131336 bytes leftover after parsing attributes in process `syz.3.5192'. [ 154.874143][T15145] netlink: zone id is out of range [ 154.980393][T15167] netlink: 'syz.3.5202': attribute type 2 has an invalid length. [ 155.268309][T15205] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5221'. [ 155.302144][T15205] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5221'. [ 155.324650][T15205] netlink: 'syz.4.5221': attribute type 15 has an invalid length. [ 155.341027][T15205] netlink: 'syz.4.5221': attribute type 18 has an invalid length. [ 155.423487][T15217] set_capacity_and_notify: 2 callbacks suppressed [ 155.423523][T15217] loop4: detected capacity change from 0 to 512 [ 155.478381][T15217] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 155.498042][T15217] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 155.532304][T15217] EXT4-fs (loop4): orphan cleanup on readonly fs [ 155.546169][T15217] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.5226: bad orphan inode 3 [ 155.566697][T15217] loop4: lost filesystem error report for type 5 error -117 [ 155.567070][T15217] EXT4-fs (loop4): Remounting filesystem read-only [ 155.580905][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 155.580924][ C0] EXT4-fs (loop4): initial error at time 1777759165: ext4_orphan_get:1423 [ 155.580954][ C0] EXT4-fs (loop4): last error at time 1777759165: ext4_orphan_get:1423 [ 155.762309][ T28] kauditd_printk_skb: 87 callbacks suppressed [ 155.762324][ T28] audit: type=1400 audit(1777759165.652:1394): avc: denied { bind } for pid=15234 comm="syz.1.5234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 156.069065][T15251] loop1: detected capacity change from 0 to 4096 [ 156.427906][ T3298] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 156.441797][ T3298] CPU: 1 UID: 0 PID: 3298 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 156.441831][ T3298] Tainted: [W]=WARN [ 156.441900][ T3298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 156.441913][ T3298] Call Trace: [ 156.441921][ T3298] [ 156.441929][ T3298] __dump_stack+0x1d/0x30 [ 156.441952][ T3298] dump_stack_lvl+0x95/0xd0 [ 156.441974][ T3298] dump_stack+0x15/0x1b [ 156.442000][ T3298] dump_header+0x80/0x240 [ 156.442073][ T3298] oom_kill_process+0x295/0x350 [ 156.442102][ T3298] out_of_memory+0x97d/0xb80 [ 156.442129][ T3298] try_charge_memcg+0x62f/0xa10 [ 156.442233][ T3298] charge_memcg+0x6d/0x120 [ 156.442259][ T3298] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 156.442416][ T3298] __swap_cache_prepare_and_add+0x69/0x4a0 [ 156.442439][ T3298] ? alloc_pages_mpol+0x217/0x260 [ 156.442489][ T3298] swap_cache_alloc_folio+0xa2/0x120 [ 156.442514][ T3298] swap_cluster_readahead+0x25f/0x3c0 [ 156.442557][ T3298] swapin_readahead+0xde/0x840 [ 156.442620][ T3298] ? tick_program_event+0x79/0xc0 [ 156.442648][ T3298] ? __hrtimer_rearm_deferred+0x58d/0x670 [ 156.442671][ T3298] ? __rcu_read_unlock+0x4e/0x70 [ 156.442689][ T3298] ? swap_cache_get_folio+0x1e0/0x1f0 [ 156.442759][ T3298] do_swap_page+0x31e/0x2180 [ 156.442848][ T3298] ? __schedule+0x936/0xd20 [ 156.442948][ T3298] ? __rcu_read_lock+0x36/0x50 [ 156.442967][ T3298] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 156.442998][ T3298] handle_mm_fault+0xb2e/0x2e70 [ 156.443121][ T3298] ? vma_start_read+0x1c7/0x2c0 [ 156.443162][ T3298] do_user_addr_fault+0x62f/0x1050 [ 156.443244][ T3298] ? trace_page_fault_user+0x1f/0xa0 [ 156.443275][ T3298] exc_page_fault+0x62/0xa0 [ 156.443345][ T3298] asm_exc_page_fault+0x26/0x30 [ 156.443363][ T3298] RIP: 0033:0x7fa93e2c7f57 [ 156.443379][ T3298] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 156.443396][ T3298] RSP: 002b:00007ffd5cf3f520 EFLAGS: 00010202 [ 156.443411][ T3298] RAX: 0000000000000000 RBX: 0000555568140500 RCX: 00007fa93e2c7f57 [ 156.443437][ T3298] RDX: 00007ffd5cf3f560 RSI: 0000000000000000 RDI: 0000000000000000 [ 156.443452][ T3298] RBP: 00007ffd5cf3f5cc R08: 0000000000000000 R09: 0000000000000000 [ 156.443466][ T3298] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 156.443479][ T3298] R13: 00000000000927c0 R14: 0000000000025e8a R15: 00007ffd5cf3f620 [ 156.443515][ T3298] [ 156.443548][ T3298] memory: usage 307200kB, limit 307200kB, failcnt 639 [ 156.732364][ T3298] memory+swap: usage 307868kB, limit 9007199254740988kB, failcnt 0 [ 156.742093][ T3298] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 156.750770][ T3298] Memory cgroup stats for /syz3: [ 156.751126][ T3298] cache 0 [ 156.760778][ T3298] rss 0 [ 156.763556][ T3298] shmem 0 [ 156.767562][ T3298] mapped_file 0 [ 156.771018][ T3298] dirty 0 [ 156.773946][ T3298] writeback 0 [ 156.778301][ T3298] workingset_refault_anon 41 [ 156.782967][ T3298] workingset_refault_file 763 [ 156.790878][ T3298] swap 684032 [ 156.794328][ T3298] swapcached 12468224 [ 156.799587][ T3298] pgpgin 149841 [ 156.803037][ T3298] pgpgout 149841 [ 156.807853][ T3298] pgfault 183107 [ 156.811449][ T3298] pgmajfault 36 [ 156.814970][ T3298] inactive_anon 0 [ 156.821204][ T3298] active_anon 0 [ 156.824675][ T3298] inactive_file 0 [ 156.836747][ T3298] active_file 0 [ 156.843352][ T3298] unevictable 0 [ 156.852154][ T3298] hierarchical_memory_limit 314572800 [ 156.859713][ T3298] hierarchical_memsw_limit 9223372036854771712 [ 156.866006][ T3298] total_cache 0 [ 156.870907][ T3298] total_rss 0 [ 156.874214][ T3298] total_shmem 0 [ 156.879697][ T3298] total_mapped_file 0 [ 156.883701][ T3298] total_dirty 0 [ 156.888585][ T3298] total_writeback 0 [ 156.892428][ T3298] total_workingset_refault_anon 41 [ 156.899597][ T3298] total_workingset_refault_file 763 [ 156.904846][ T3298] total_swap 684032 [ 156.910726][ T3298] total_swapcached 12468224 [ 156.915418][ T3298] total_pgpgin 149841 [ 156.920828][ T3298] total_pgpgout 149841 [ 156.933387][ T3298] total_pgfault 183107 [ 156.945104][ T3298] total_pgmajfault 36 [ 156.955848][ T3298] total_inactive_anon 0 [ 156.968466][ T3298] total_active_anon 0 [ 156.975126][ T3298] total_inactive_file 0 [ 156.985720][ T3298] total_active_file 0 [ 156.995162][ T3298] total_unevictable 0 [ 157.006607][ T3298] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.5218,pid=15193,uid=0 [ 157.031460][ T3298] Memory cgroup out of memory: Killed process 15193 (syz.3.5218) total-vm:96084kB, anon-rss:1228kB, file-rss:22280kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 157.224334][ T28] audit: type=1400 audit(1777759167.111:1395): avc: denied { map } for pid=15270 comm="syz.3.5251" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 157.485220][T15288] loop1: detected capacity change from 0 to 2048 [ 157.554911][T15288] loop1: p1 < > p4 [ 157.559704][T15298] SELinux: syz.2.5265 (15298) set checkreqprot to 1. This is no longer supported. [ 157.572380][ T28] audit: type=1400 audit(1777759167.451:1396): avc: denied { setcheckreqprot } for pid=15297 comm="syz.2.5265" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 157.573918][T15288] loop1: p4 size 722688 extends beyond EOD, truncated [ 157.665526][T15302] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5267'. [ 157.713807][T15303] lo speed is unknown, defaulting to 1000 [ 157.726619][T15306] netlink: 'syz.2.5267': attribute type 22 has an invalid length. [ 157.748791][T15306] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5267'. [ 157.916401][T15316] loop4: detected capacity change from 0 to 2048 [ 157.989846][T15324] loop2: detected capacity change from 0 to 256 [ 158.055151][ T2979] loop1: p1 < > p4 [ 158.060729][ T2979] loop1: p4 size 722688 extends beyond EOD, truncated [ 158.281348][ T28] audit: type=1400 audit(1777759168.171:1397): avc: denied { ioctl } for pid=15335 comm="syz.1.5282" path="socket:[41907]" dev="sockfs" ino=41907 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 160.062949][ T3280] udevd[3280]: symlink '../../loop2' '/dev/disk/by-diskseq/621.tmp-b7:2' failed: Read-only file system [ 160.080977][T15360] loop2: detected capacity change from 0 to 512 [ 160.110810][ T3280] udevd[3280]: symlink '../../loop2' '/dev/disk/by-diskseq/622.tmp-b7:2' failed: Read-only file system [ 160.136194][ T3280] udevd[3280]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 160.156070][T15360] EXT4-fs mount: 36 callbacks suppressed [ 160.156084][T15360] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.192344][ T3280] udevd[3280]: symlink '../../loop2' '/dev/disk/by-diskseq/622.tmp-b7:2' failed: Read-only file system [ 160.213850][T15360] ext4 filesystem being mounted at /1081/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.226956][ T3280] udevd[3280]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 162.311656][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.338973][T15365] loop3: detected capacity change from 0 to 256 [ 162.348220][ T3280] udevd[3280]: symlink '../../loop1' '/dev/disk/by-diskseq/619.tmp-b7:1' failed: Read-only file system [ 162.382258][ T3283] udevd[3283]: symlink '../../loop3' '/dev/disk/by-diskseq/611.tmp-b7:3' failed: Read-only file system [ 162.424937][ T3285] udevd[3285]: symlink '../../loop1' '/dev/disk/by-diskseq/619.tmp-b7:1' failed: Read-only file system [ 162.436986][ T3280] udevd[3280]: symlink '../../loop2' '/dev/disk/by-diskseq/622.tmp-b7:2' failed: Read-only file system [ 162.474991][T15373] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5299'. [ 162.483112][ T3283] udevd[3283]: symlink '../../loop3' '/dev/disk/by-diskseq/623.tmp-b7:3' failed: Read-only file system [ 162.522728][T15378] ieee802154 phy0 wpan0: encryption failed: -22 [ 162.566268][T15375] loop4: detected capacity change from 0 to 4096 [ 162.594399][T15375] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.764465][ T3291] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.964630][T15416] loop1: detected capacity change from 0 to 512 [ 162.973480][T15416] EXT4-fs: Ignoring removed nomblk_io_submit option [ 162.986572][T15416] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 163.001038][T15416] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a840c09d, mo2=0102] [ 163.011124][T15416] System zones: 1-12 [ 163.015163][T15416] EXT4-fs (loop1): couldn't mount RDWR because of unsupported optional features (80) [ 163.019068][T15419] loop4: detected capacity change from 0 to 512 [ 163.025194][T15416] EXT4-fs (loop1): Skipping orphan cleanup due to unknown ROCOMPAT features [ 163.025563][T15416] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 163.028468][T15416] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #2: block 3: comm syz.1.5320: lblock 0 mapped to illegal pblock 3 (length 1) [ 163.069017][T15416] EXT4-fs warning (device loop1): dx_probe:791: inode #2: lblock 0: comm syz.1.5320: error -117 reading directory block [ 163.088833][T15419] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.5321: bg 0: block 393: padding at end of block bitmap is not set [ 163.107236][T15419] loop4: lost filesystem error report for type 5 error -117 [ 163.107398][T15419] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 163.117191][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 163.117214][ C1] EXT4-fs (loop4): initial error at time 1777759172: ext4_validate_block_bitmap:441 [ 163.117252][ C1] EXT4-fs (loop4): last error at time 1777759172: ext4_validate_block_bitmap:441 [ 163.156351][T15419] loop4: lost filesystem error report for type 5 error -117 [ 163.158934][T15419] EXT4-fs (loop4): 2 truncates cleaned up [ 163.175588][T15419] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.190056][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.193577][T15425] loop2: detected capacity change from 0 to 512 [ 163.216206][T15425] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 163.229536][T15425] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 163.242923][T15425] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.5323: Corrupt directory, running e2fsck is recommended [ 163.259120][T15425] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 163.270059][ T3291] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.279957][T15425] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.5323: corrupted in-inode xattr: e_name out of bounds [ 163.312301][T15425] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 163.312491][T15425] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.5323: couldn't read orphan inode 15 (err -117) [ 163.321652][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 163.321666][ C0] EXT4-fs (loop2): initial error at time 1777759173: ext4_iget_extra_inode:5128: inode 15 [ 163.321690][ C0] EXT4-fs (loop2): last error at time 1777759173: ext4_iget_extra_inode:5128: inode 15 [ 163.387751][T15425] loop2: lost filesystem error report for type 5 error -117 [ 163.392001][T15425] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.445706][T15438] loop3: detected capacity change from 0 to 128 [ 163.456188][T15436] loop1: detected capacity change from 0 to 4096 [ 163.462651][T15425] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 163.474744][T15438] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 163.488835][T15425] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 163.500315][T15436] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.512279][T15425] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.5323: Corrupt directory, running e2fsck is recommended [ 163.526121][T15438] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 163.538268][T15425] EXT4-fs error (device loop2): ext4_readdir:265: inode #2: block 3: comm syz.2.5323: path /1090/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 163.587782][T15425] EXT4-fs error (device loop2): ext4_readdir:265: inode #2: block 8: comm syz.2.5323: path /1090/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 163.617026][ T3427] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 163.634559][T15443] žÿ: renamed from team_slave_1 (while UP) [ 163.693950][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.706683][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.923507][T15465] loop2: detected capacity change from 0 to 512 [ 163.948752][T15465] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.5341: bg 0: block 127: padding at end of block bitmap is not set [ 163.983075][T15470] netlink: zone id is out of range [ 163.991043][T15467] loop4: detected capacity change from 0 to 1024 [ 164.010391][T15470] netlink: zone id is out of range [ 164.042002][T15470] netlink: zone id is out of range [ 164.050819][T15465] loop2: lost filesystem error report for type 5 error -117 [ 164.051361][T15465] ------------[ cut here ]------------ [ 164.064125][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 164.064152][ C0] EXT4-fs (loop2): initial error at time 1777759173: ext4_validate_block_bitmap:441 [ 164.064175][ C0] EXT4-fs (loop2): last error at time 1777759173: ext4_validate_block_bitmap:441 [ 164.089124][T15465] EA inode 11 i_nlink=0 [ 164.089145][T15465] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#0: syz.2.5341/15465 [ 164.104230][T15465] Modules linked in: [ 164.108123][T15465] CPU: 0 UID: 0 PID: 15465 Comm: syz.2.5341 Tainted: G W syzkaller #0 PREEMPT(full) [ 164.119105][T15465] Tainted: [W]=WARN [ 164.122933][T15465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 164.133013][T15465] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 164.139628][T15465] Code: 14 61 98 ff 4c 8d 2d 1d 6c 5c 05 49 8d 7e 40 e8 44 1f b6 ff 49 8b 6e 40 4c 89 e7 e8 78 1a b6 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 3f 70 d7 03 66 66 66 66 66 66 2e [ 164.147636][T15470] netlink: zone id is out of range [ 164.159456][T15465] RSP: 0018:ffffc900029e3778 EFLAGS: 00010246 [ 164.159480][T15465] RAX: ffff888101933df8 RBX: ffff888107a26ab8 RCX: ffffffff81c0c708 [ 164.159498][T15465] RDX: 0000000000000000 RSI: 000000000000000b RDI: ffffffff871d3310 [ 164.159513][T15465] RBP: 000000000000000b R08: 0001888107a26a6b R09: 0000000000000000 [ 164.159599][T15465] R10: ffffc900029e36a8 R11: 0001c900029e36a8 R12: ffff888107a26a68 [ 164.159615][T15465] R13: ffffffff871d3310 R14: ffff888107a26a20 R15: 0000000000000001 [ 164.159651][T15465] FS: 00007f28bd1ff6c0(0000) GS:ffff8882ae8fe000(0000) knlGS:0000000000000000 [ 164.159671][T15465] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 164.159688][T15465] CR2: 00007fa4e3dd4000 CR3: 000000015582a000 CR4: 00000000003506f0 [ 164.159706][T15465] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 164.159718][T15465] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 164.159733][T15465] Call Trace: [ 164.159740][T15465] [ 164.159752][T15465] ext4_xattr_inode_dec_ref_all+0x57c/0x8b0 [ 164.159795][T15465] ? errseq_check+0x2c/0x50 [ 164.159832][T15465] ext4_xattr_delete_inode+0x6c1/0x7a0 [ 164.159904][T15465] ext4_evict_inode+0xb16/0xe30 [ 164.159937][T15465] ? __pfx_ext4_evict_inode+0x10/0x10 [ 164.159981][T15465] evict+0x2af/0x510 [ 164.160053][T15465] ? __dquot_initialize+0x146/0x7c0 [ 164.160087][T15465] iput+0x41a/0x580 [ 164.160167][T15465] ext4_process_orphan+0x1a9/0x1c0 [ 164.160192][T15465] ext4_orphan_cleanup+0x69c/0x9f0 [ 164.160221][T15465] ext4_fill_super+0x3408/0x37c0 [ 164.160248][T15465] ? set_blocksize+0x14c/0x270 [ 164.160369][T15465] ? setup_bdev_super+0x30e/0x370 [ 164.160400][T15465] ? __pfx_ext4_fill_super+0x10/0x10 [ 164.160460][T15465] get_tree_bdev_flags+0x291/0x300 [ 164.160491][T15465] ? __pfx_ext4_fill_super+0x10/0x10 [ 164.160514][T15465] get_tree_bdev+0x1f/0x30 [ 164.160564][T15465] ext4_get_tree+0x1c/0x30 [ 164.160602][T15465] vfs_get_tree+0x57/0x1d0 [ 164.160663][T15465] do_new_mount+0x288/0x8d0 [ 164.160742][T15465] path_mount+0x4d0/0xbc0 [ 164.160776][T15465] __se_sys_mount+0x28c/0x2e0 [ 164.160813][T15465] __x64_sys_mount+0x67/0x80 [ 164.160944][T15465] x64_sys_call+0x2d61/0x3020 [ 164.160971][T15465] do_syscall_64+0x12c/0x3b0 [ 164.160998][T15465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.161094][T15465] RIP: 0033:0x7f28be7ae04a [ 164.161113][T15465] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 164.161133][T15465] RSP: 002b:00007f28bd1fee58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 164.161158][T15465] RAX: ffffffffffffffda RBX: 00007f28bd1feee0 RCX: 00007f28be7ae04a [ 164.161174][T15465] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 00007f28bd1feea0 [ 164.161243][T15465] RBP: 0000200000000180 R08: 00007f28bd1feee0 R09: 0000000000000000 [ 164.161258][T15465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000000 [ 164.161271][T15465] R13: 00007f28bd1feea0 R14: 000000000000047a R15: 00002000000001c0 [ 164.161290][T15465] [ 164.161298][T15465] ---[ end trace 0000000000000000 ]--- [ 164.198015][T15465] EXT4-fs error (device loop2): ext4_free_inode:354: comm syz.2.5341: bit already cleared for inode 11 [ 164.446172][T15467] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.447878][T15470] netlink: zone id is out of range [ 164.476212][T15467] EXT4-fs error (device loop4): ext4_search_dir:1474: inode #12: block 7: comm syz.4.5342: bad entry in directory: inode out of bounds - offset=0, inode=150994957, rec_len=16, size=56 fake=0 [ 164.482837][T15470] netlink: zone id is out of range [ 164.523827][T15465] loop2: lost filesystem error report for type 5 error -117 [ 164.524031][T15465] EXT4-fs (loop2): 1 orphan inode deleted [ 164.537427][T15470] netlink: zone id is out of range [ 164.537425][T15467] EXT4-fs (loop4): Remounting filesystem read-only [ 164.549266][T15470] netlink: zone id is out of range [ 164.556001][T15465] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.568117][T15470] netlink: zone id is out of range [ 164.574233][T15470] netlink: zone id is out of range [ 164.587717][ T3291] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.643608][T15477] loop4: detected capacity change from 0 to 512 [ 164.679829][T15477] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.709443][T15477] ext4 filesystem being mounted at /1065/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 164.718494][ T28] audit: type=1400 audit(1777759174.587:1398): avc: denied { getopt } for pid=15481 comm="syz.3.5347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 164.766117][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.791964][T15484] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 164.862471][T15484] ext4 filesystem being mounted at /1075/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.891754][ T3291] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.911146][T15484] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #15: block 3: comm syz.3.5348: lblock 3 mapped to illegal pblock 3 (length 1) [ 164.941382][T15484] EXT4-fs (loop3): Remounting filesystem read-only [ 164.960020][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 165.000494][T15496] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 165.056490][T15503] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5355'. [ 165.073782][ T3280] udevd[3280]: symlink '../../loop1' '/dev/disk/by-diskseq/636.tmp-b7:1' failed: Read-only file system [ 165.104869][ T3283] udevd[3283]: symlink '../../loop2' '/dev/disk/by-diskseq/643.tmp-b7:2' failed: Read-only file system [ 165.128892][ T3280] udevd[3280]: symlink '../../loop4' '/dev/disk/by-diskseq/645.tmp-b7:4' failed: Read-only file system [ 165.165706][ T3283] udevd[3283]: symlink '../../loop3' '/dev/disk/by-diskseq/646.tmp-b7:3' failed: Read-only file system [ 165.193758][ T3285] udevd[3285]: symlink '../../loop2' '/dev/disk/by-diskseq/643.tmp-b7:2' failed: Read-only file system [ 165.207856][ T3280] udevd[3280]: symlink '../../loop4' '/dev/disk/by-diskseq/645.tmp-b7:4' failed: Read-only file system [ 165.231431][ T3966] udevd[3966]: symlink '../../loop1' '/dev/disk/by-diskseq/636.tmp-b7:1' failed: Read-only file system [ 165.245181][ T3280] udevd[3280]: symlink '../../loop4' '/dev/disk/by-diskseq/645.tmp-b7:4' failed: Read-only file system [ 165.280754][T15516] lo speed is unknown, defaulting to 1000 [ 165.292369][ T3280] udevd[3280]: symlink '../../loop4' '/dev/disk/by-diskseq/647.tmp-b7:4' failed: Read-only file system [ 165.387309][ T3280] udevd[3280]: symlink '../../loop4' '/dev/disk/by-diskseq/647.tmp-b7:4' failed: Read-only file system [ 165.467568][T15530] 9p: Bad value for 'rfdno' [ 165.564455][ T28] audit: type=1400 audit(1777759175.447:1399): avc: denied { getopt } for pid=15536 comm="syz.1.5371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 165.749626][T15545] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.820382][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.892222][T15564] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5381'. [ 166.063673][ T28] audit: type=1400 audit(1777759175.947:1400): avc: denied { bind } for pid=15584 comm="syz.4.5394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 166.137392][ T28] audit: type=1400 audit(1777759175.947:1401): avc: denied { node_bind } for pid=15584 comm="syz.4.5394" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 166.167712][T15590] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 166.199054][T15590] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 166.199515][T15595] netlink: 'syz.4.5398': attribute type 58 has an invalid length. [ 166.223599][T15590] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 166.237118][T15590] System zones: 0-2, 18-18, 34-34 [ 166.276497][ T28] audit: type=1400 audit(1777759176.157:1402): avc: denied { name_connect } for pid=15599 comm="syz.2.5400" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 166.277904][T15590] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.5395: bad orphan inode 15 [ 166.296853][T15595] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5398'. [ 166.317447][T15590] loop1: lost filesystem error report for type 5 error -117 [ 166.321463][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 166.335219][ C0] EXT4-fs (loop1): initial error at time 1777759176: ext4_orphan_get:1423 [ 166.343757][ C0] EXT4-fs (loop1): last error at time 1777759176: ext4_orphan_get:1423 [ 166.355941][T15590] ext4_test_bit(bit=14, block=18) = 1 [ 166.361797][T15590] is_bad_inode(inode)=0 [ 166.367784][T15590] NEXT_ORPHAN(inode)=2264924160 [ 166.376225][T15590] max_ino=32 [ 166.380395][T15590] i_nlink=0 [ 166.385051][T15590] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #15: comm syz.1.5395: corrupted inode contents [ 166.394628][T15603] netlink: 84 bytes leftover after parsing attributes in process `syz.2.5402'. [ 166.417960][T15590] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 166.418506][T15590] EXT4-fs error (device loop1): ext4_dirty_inode:6587: inode #15: comm syz.1.5395: mark_inode_dirty error [ 166.453784][T15590] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 166.453961][T15590] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #15: comm syz.1.5395: corrupted inode contents [ 166.499976][T15590] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 166.500138][T15590] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3001: inode #15: comm syz.1.5395: mark_inode_dirty error [ 166.532182][T15609] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.559715][T15590] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 166.561303][T15590] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3004: inode #15: comm syz.1.5395: mark inode dirty (error -117) [ 166.617672][ T3291] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.667409][T15590] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 166.667522][T15590] EXT4-fs warning (device loop1): ext4_evict_inode:287: xattr delete (err -117) [ 166.717185][T15623] netlink: 220 bytes leftover after parsing attributes in process `syz.4.5407'. [ 166.719987][T15590] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.750830][T15623] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5407'. [ 166.774152][T15623] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5407'. [ 166.789642][T15590] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 166.800428][T15623] tipc: MTU too low for tipc bearer [ 166.856543][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.916920][ T28] audit: type=1400 audit(1777759176.806:1403): avc: denied { map } for pid=15634 comm="syz.1.5414" path="socket:[43616]" dev="sockfs" ino=43616 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 167.118707][T15660] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.5426: inode has both inline data and extents flags [ 167.136169][T15662] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 167.185046][T15660] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 167.185082][T15662] ext4 filesystem being mounted at /1056/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 167.203128][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 167.232650][ C1] EXT4-fs (loop2): initial error at time 1777759177: ext4_orphan_get:1397: inode 15 [ 167.242068][ C1] EXT4-fs (loop2): last error at time 1777759177: ext4_orphan_get:1397: inode 15 [ 167.256309][T15660] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.5426: couldn't read orphan inode 15 (err -117) [ 167.291069][T15668] can0: slcan on ptm0. [ 167.296039][ T28] audit: type=1400 audit(1777759177.176:1404): avc: denied { search } for pid=3018 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 167.317441][T15660] loop2: lost filesystem error report for type 5 error -117 [ 167.319241][T15660] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.353319][T15662] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:375: inode #2: comm syz.1.5427: No space for directory leaf checksum. Please run e2fsck -D. [ 167.361166][ T28] audit: type=1400 audit(1777759177.176:1405): avc: denied { search } for pid=3018 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 167.382054][T15662] EXT4-fs error (device loop1): __ext4_find_entry:1626: inode #2: comm syz.1.5427: checksumming directory block 0 [ 167.424463][T15667] can0 (unregistered): slcan off ptm0. [ 167.434287][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.468619][ T28] audit: type=1400 audit(1777759177.176:1406): avc: denied { search } for pid=3018 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 167.538921][ T3296] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 167.557002][ T28] audit: type=1400 audit(1777759177.176:1407): avc: denied { read } for pid=3018 comm="dhcpcd" name="n48" dev="tmpfs" ino=23716 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 167.587621][T15682] tipc: Enabling of bearer rejected, failed to enable media [ 168.001287][T15747] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5454'. [ 168.048062][T15747] geneve1: entered promiscuous mode [ 168.116771][T15757] set_capacity_and_notify: 9 callbacks suppressed [ 168.116787][T15757] loop2: detected capacity change from 0 to 512 [ 168.173506][T15757] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 168.205314][T15757] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 168.225568][T15757] EXT4-fs (loop2): orphan cleanup on readonly fs [ 168.246888][T15757] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.5459: bad orphan inode 267 [ 168.279065][T15757] loop2: lost filesystem error report for type 5 error -117 [ 168.279332][T15757] EXT4-fs (loop2): Remounting filesystem read-only [ 168.292484][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 168.299715][ C1] EXT4-fs (loop2): initial error at time 1777759178: ext4_orphan_get:1423 [ 168.308381][ C1] EXT4-fs (loop2): last error at time 1777759178: ext4_orphan_get:1423 [ 168.317172][T15757] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 168.414198][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 168.654562][T15793] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5475'. [ 168.782091][T15807] loop2: detected capacity change from 0 to 128 [ 169.079348][T15835] loop2: detected capacity change from 0 to 128 [ 169.112577][T15835] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 169.157704][T15835] FAT-fs (loop2): Filesystem has been set read-only [ 169.170557][T15841] loop4: detected capacity change from 0 to 512 [ 169.277545][T15841] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.370430][T15854] loop1: detected capacity change from 0 to 1764 [ 169.381981][T15841] ext4 filesystem being mounted at /1101/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.558280][ T3291] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.588301][T15872] loop2: detected capacity change from 0 to 512 [ 169.618771][T15872] EXT4-fs: inline encryption not supported [ 169.656661][T15872] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.687254][T15872] ext4 filesystem being mounted at /1138/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.720902][T15886] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5517'. [ 169.741273][ T28] kauditd_printk_skb: 52 callbacks suppressed [ 169.741335][ T28] audit: type=1400 audit(1777759179.625:1460): avc: denied { create } for pid=15871 comm="syz.2.5512" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 169.825194][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.847457][ T28] audit: type=1326 audit(1777759179.725:1461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15891 comm="syz.3.5521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa93e30cdd9 code=0x7ffc0000 [ 169.916101][ T28] audit: type=1326 audit(1777759179.725:1462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15891 comm="syz.3.5521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa93e30cdd9 code=0x7ffc0000 [ 170.009480][ T28] audit: type=1326 audit(1777759179.725:1463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15891 comm="syz.3.5521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa93e30cdd9 code=0x7ffc0000 [ 170.079553][ T28] audit: type=1326 audit(1777759179.725:1464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15891 comm="syz.3.5521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fa93e30cdd9 code=0x7ffc0000 [ 170.139715][ T3280] udevd[3280]: symlink '../../loop2' '/dev/disk/by-diskseq/673.tmp-b7:2' failed: Read-only file system [ 170.155307][ T28] audit: type=1326 audit(1777759179.725:1465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15891 comm="syz.3.5521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa93e30cdd9 code=0x7ffc0000 [ 170.188554][ T3283] udevd[3283]: symlink '../../loop3' '/dev/disk/by-diskseq/654.tmp-b7:3' failed: Read-only file system [ 170.194876][ T3280] udevd[3280]: symlink '../../loop4' '/dev/disk/by-diskseq/672.tmp-b7:4' failed: Read-only file system [ 170.248204][ T28] audit: type=1326 audit(1777759179.725:1466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15891 comm="syz.3.5521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa93e30cdd9 code=0x7ffc0000 [ 170.256986][ T3280] udevd[3280]: symlink '../../loop2' '/dev/disk/by-diskseq/673.tmp-b7:2' failed: Read-only file system [ 170.297654][ T3283] udevd[3283]: symlink '../../loop3' '/dev/disk/by-diskseq/654.tmp-b7:3' failed: Read-only file system [ 170.332052][ T28] audit: type=1326 audit(1777759179.725:1467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15891 comm="syz.3.5521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa93e30cdd9 code=0x7ffc0000 [ 170.362948][ T3280] udevd[3280]: symlink '../../loop3' '/dev/disk/by-diskseq/654.tmp-b7:3' failed: Read-only file system [ 170.401170][ T28] audit: type=1326 audit(1777759179.735:1468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15891 comm="syz.3.5521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa93e30cdd9 code=0x7ffc0000 [ 170.419625][ T3280] udevd[3280]: symlink '../../loop2' '/dev/disk/by-diskseq/673.tmp-b7:2' failed: Read-only file system [ 170.442853][T15930] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5537'. [ 170.474539][ T28] audit: type=1326 audit(1777759179.735:1469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15891 comm="syz.3.5521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7fa93e30cdd9 code=0x7ffc0000 [ 170.481843][ T3280] udevd[3280]: symlink '../../loop3' '/dev/disk/by-diskseq/654.tmp-b7:3' failed: Read-only file system [ 170.546616][ T3283] udevd[3283]: symlink '../../loop2' '/dev/disk/by-diskseq/673.tmp-b7:2' failed: Read-only file system [ 170.566882][ T3285] udevd[3285]: symlink '../../loop1' '/dev/disk/by-diskseq/670.tmp-b7:1' failed: Read-only file system [ 170.666964][T15938] usb usb8: check_ctrlrecip: process 15938 (syz.2.5541) requesting ep 01 but needs 81 [ 170.796579][T15956] loop2: detected capacity change from 0 to 512 [ 170.816064][T15958] loop3: detected capacity change from 0 to 512 [ 170.830045][T15958] EXT4-fs: Ignoring removed orlov option [ 170.850669][T15956] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.877837][T15956] ext4 filesystem being mounted at /1148/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 170.897146][T15958] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.951501][T15958] ext4 filesystem being mounted at /1130/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.027000][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.057129][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.279769][T15995] vhci_hcd vhci_hcd.4: default hub control req: 2016 v0100 i0004 l1 [ 171.381500][T16005] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5572'. [ 171.510958][T16015] loop2: detected capacity change from 0 to 512 [ 171.537301][T16015] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.580988][T16015] ext4 filesystem being mounted at /1154/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.632885][T16017] loop1: detected capacity change from 0 to 8192 [ 171.674386][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.022879][T16037] lo speed is unknown, defaulting to 1000 [ 172.143389][ T39] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 172.160481][ T39] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.209865][ T39] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 172.250164][ T39] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.316991][ T39] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 172.357421][ T39] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.435932][ T39] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 172.436057][ T39] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.546354][T16037] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.568489][T16037] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.594453][T16037] bridge_slave_0: entered allmulticast mode [ 172.609681][T16037] bridge_slave_0: entered promiscuous mode [ 172.623577][T16075] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5598'. [ 172.641559][T16037] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.657598][T16037] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.685035][T16037] bridge_slave_1: entered allmulticast mode [ 172.708960][T16037] bridge_slave_1: entered promiscuous mode [ 172.777646][T16037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 172.806781][T16037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 172.832282][ T39] bridge_slave_1: left allmulticast mode [ 172.845088][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.863498][ T39] bridge_slave_0: left allmulticast mode [ 172.870800][ T39] bridge_slave_0: left promiscuous mode [ 172.886208][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.079355][ T39] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 173.100790][ T39] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 173.116623][ T39] bond0 (unregistering): Released all slaves [ 173.138213][ T39] team0: Port device bond1 removed [ 173.146618][ T39] bond1 (unregistering): Released all slaves [ 173.155837][ T39] bond2 (unregistering): Released all slaves [ 173.198291][T16037] team0: Port device team_slave_0 added [ 173.227989][T16037] team0: Port device team_slave_1 added [ 173.268614][ T39] tipc: Disabling bearer [ 173.288917][ T39] tipc: Left network mode [ 173.324029][T16037] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 173.344414][T16037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 173.414605][T16037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 173.470143][ T39] hsr_slave_0: left promiscuous mode [ 173.512279][ T39] hsr_slave_1: left promiscuous mode [ 173.534424][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.563744][ T39] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.589943][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.617171][ T39] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.646008][ T39] veth1_macvtap: left promiscuous mode [ 173.654897][ T39] veth0_macvtap: left promiscuous mode [ 173.663813][T16142] loop2: detected capacity change from 0 to 8192 [ 173.673016][ T39] veth1_vlan: left promiscuous mode [ 173.690781][ T39] veth0_vlan: left promiscuous mode [ 173.875544][ T39] team0 (unregistering): Port device team_slave_1 removed [ 173.888905][ T39] team0 (unregistering): Port device team_slave_0 removed [ 173.955927][T16037] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.971882][T16037] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 174.003727][T16037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.019595][T16138] netlink: 'syz.4.5626': attribute type 322 has an invalid length. [ 174.035866][ T3018] 8021q: adding VLAN 0 to HW filter on device eth1 [ 174.101753][T16037] hsr_slave_0: entered promiscuous mode [ 174.127041][T16037] hsr_slave_1: entered promiscuous mode [ 174.195075][T16181] loop1: detected capacity change from 0 to 1024 [ 174.238317][T16181] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.372177][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.394316][ T39] IPVS: stop unused estimator thread 0... [ 174.449603][ T3018] 8021q: adding VLAN 0 to HW filter on device eth2 [ 174.526872][T16037] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 174.557822][T16037] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 174.563428][T16218] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5654'. [ 174.580868][T16037] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 174.603850][T16037] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 174.627788][T16037] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 174.652531][T16037] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 174.686861][T16037] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 174.723091][T16037] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 174.826137][T16257] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5665'. [ 174.842558][T16037] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.876906][T16037] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.899469][ T3427] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.906575][ T3427] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.921495][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 174.921511][ T28] audit: type=1400 audit(1777759184.802:1496): avc: denied { append } for pid=16263 comm="syz.2.5667" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 174.944557][T16037] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 174.971689][T16037] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 175.007931][ T3427] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.015115][ T3427] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.022923][ T28] audit: type=1326 audit(1777759184.872:1497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16266 comm="syz.4.5669" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f20949ccdd9 code=0x0 [ 175.063996][ T3018] 8021q: adding VLAN 0 to HW filter on device eth3 [ 175.173415][ T3280] udevd[3280]: symlink '../../loop1' '/dev/disk/by-diskseq/685.tmp-b7:1' failed: Read-only file system [ 175.196557][ T3283] udevd[3283]: symlink '../../loop2' '/dev/disk/by-diskseq/683.tmp-b7:2' failed: Read-only file system [ 175.277183][ T3280] udevd[3280]: symlink '../../loop1' '/dev/disk/by-diskseq/685.tmp-b7:1' failed: Read-only file system [ 175.345500][ T3280] udevd[3280]: symlink '../../loop1' '/dev/disk/by-diskseq/685.tmp-b7:1' failed: Read-only file system [ 175.362243][ T28] audit: type=1400 audit(1777759185.242:1498): avc: denied { name_bind } for pid=16311 comm="syz.1.5679" src=20005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 175.402966][T16037] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.433082][ T3018] 8021q: adding VLAN 0 to HW filter on device eth4 [ 175.450979][ T3280] udevd[3280]: symlink '../../loop1' '/dev/disk/by-diskseq/685.tmp-b7:1' failed: Read-only file system [ 175.536919][ T3280] udevd[3280]: symlink '../../loop1' '/dev/disk/by-diskseq/685.tmp-b7:1' failed: Read-only file system [ 175.615793][ T3280] udevd[3280]: symlink '../../loop1' '/dev/disk/by-diskseq/685.tmp-b7:1' failed: Read-only file system [ 175.670954][ T3280] udevd[3280]: symlink '../../loop1' '/dev/disk/by-diskseq/685.tmp-b7:1' failed: Read-only file system [ 175.694021][T16037] veth0_vlan: entered promiscuous mode [ 175.704127][T16037] veth1_vlan: entered promiscuous mode [ 175.723423][ T3280] udevd[3280]: symlink '../../loop1' '/dev/disk/by-diskseq/685.tmp-b7:1' failed: Read-only file system [ 175.742005][T16344] loop1: detected capacity change from 0 to 512 [ 175.746232][T16037] veth0_macvtap: entered promiscuous mode [ 175.757214][T16037] veth1_macvtap: entered promiscuous mode [ 175.768740][T16037] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 175.781499][T16037] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 175.798340][ T3280] udevd[3280]: symlink '../../loop1' '/dev/disk/by-diskseq/686.tmp-b7:1' failed: Read-only file system [ 175.799920][T16344] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 175.821208][ T55] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.836442][ T55] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.862293][ T55] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.878189][T16344] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.892623][ T55] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.917590][T16344] ext4 filesystem being mounted at /1136/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 175.945025][ T28] audit: type=1400 audit(1777759185.822:1499): avc: denied { mounton } for pid=16037 comm="syz-executor" path="/root/syzkaller.z2L1CF/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 175.973730][ T28] audit: type=1400 audit(1777759185.832:1500): avc: denied { mounton } for pid=16037 comm="syz-executor" path="/root/syzkaller.z2L1CF/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 176.002932][ T28] audit: type=1400 audit(1777759185.832:1501): avc: denied { mounton } for pid=16037 comm="syz-executor" path="/root/syzkaller.z2L1CF/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=46361 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 176.033274][ T28] audit: type=1400 audit(1777759185.852:1502): avc: denied { mounton } for pid=16037 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 176.063386][T16355] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5689'. [ 176.074230][ T28] audit: type=1400 audit(1777759185.852:1503): avc: denied { mount } for pid=16037 comm="syz-executor" name="/" dev="gadgetfs" ino=3942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 176.166723][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.283528][T16373] loop5: detected capacity change from 0 to 512 [ 176.298919][ T28] audit: type=1400 audit(1777759186.181:1504): avc: denied { mount } for pid=16374 comm="syz.4.5697" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 176.329900][T16373] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 176.347104][T16373] EXT4-fs (loop5): 1 truncate cleaned up [ 176.353338][T16373] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.369343][ T28] audit: type=1400 audit(1777759186.201:1505): avc: denied { remount } for pid=16374 comm="syz.4.5697" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 176.402873][T16380] netlink: 'syz.1.5699': attribute type 1 has an invalid length. [ 176.410933][T16380] netlink: 212400 bytes leftover after parsing attributes in process `syz.1.5699'. [ 176.424702][T16037] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.605041][ T3407] kernel read not supported for file /2398/fd (pid: 3407 comm: kworker/1:5) [ 176.660637][T16399] loop4: detected capacity change from 0 to 4096 [ 176.672024][T16399] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.682770][T16401] loop1: detected capacity change from 0 to 1764 [ 176.698407][T16399] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #15: comm syz.4.5708: corrupted inode contents [ 176.721943][T16399] EXT4-fs error (device loop4): ext4_dirty_inode:6587: inode #15: comm syz.4.5708: mark_inode_dirty error [ 176.741740][T16399] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #15: comm syz.4.5708: corrupted inode contents [ 176.754210][T16399] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #15: comm syz.4.5708: mark_inode_dirty error [ 176.778998][T16399] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #15: comm syz.4.5708: corrupted inode contents [ 176.808088][T16407] loop2: detected capacity change from 0 to 764 [ 176.815042][T16399] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #15: comm syz.4.5708: mark_inode_dirty error [ 176.830620][T16399] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #15: comm syz.4.5708: corrupted inode contents [ 176.850905][T16407] rock: directory entry would overflow storage [ 176.857615][T16399] EXT4-fs error (device loop4): ext4_truncate:4690: inode #15: comm syz.4.5708: mark_inode_dirty error [ 176.870368][T16407] rock: sig=0x4654, size=5, remaining=4 [ 176.884560][T16399] EXT4-fs error (device loop4) in ext4_setattr:6120: Corrupt filesystem [ 176.913827][T16405] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #15: comm syz.4.5708: corrupted inode contents [ 176.935200][T16417] loop3: detected capacity change from 0 to 128 [ 176.997390][ T3291] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.079976][T16430] loop1: detected capacity change from 0 to 1024 [ 177.121917][T16430] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.143903][T16430] ext4 filesystem being mounted at /1148/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.181570][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 177.229976][T16443] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5728'. [ 177.258108][T16447] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5729'. [ 177.426105][T16466] loop5: detected capacity change from 0 to 1024 [ 177.451115][T16466] EXT4-fs: Ignoring removed bh option [ 177.484496][T16466] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 177.511519][T16466] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.555031][T16479] EXT4-fs (loop3): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 177.601230][T16037] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.660096][ T3298] EXT4-fs (loop3): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 177.760369][T16501] netlink: 'syz.1.5751': attribute type 5 has an invalid length. [ 177.967113][T16522] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.996896][T16522] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 177.998339][T16522] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 178.052665][T16522] EXT4-fs (loop5): This should not happen!! Data will be lost [ 178.052665][T16522] [ 178.052681][T16522] EXT4-fs (loop5): Total free blocks count 0 [ 178.052696][T16522] EXT4-fs (loop5): Free/Dirty block details [ 178.052710][T16522] EXT4-fs (loop5): free_blocks=20480 [ 178.052724][T16522] EXT4-fs (loop5): dirty_blocks=16 [ 178.052749][T16522] EXT4-fs (loop5): Block reservation details [ 178.052762][T16522] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 178.235527][T16037] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 178.250522][T16037] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.029245][T16595] set_capacity_and_notify: 4 callbacks suppressed [ 179.037408][T16595] loop4: detected capacity change from 0 to 512 [ 179.057552][T16599] usb usb7: check_ctrlrecip: process 16599 (syz.5.5798) requesting ep 01 but needs 81 [ 179.091218][T16599] usb usb7: usbfs: process 16599 (syz.5.5798) did not claim interface 0 before use [ 179.093855][T16595] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.5796: invalid block [ 179.113008][T16595] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 179.113118][T16595] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.5796: invalid indirect mapped block 4294967295 (level 1) [ 179.122322][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 179.122339][ C0] EXT4-fs (loop4): initial error at time 1777759189: ext4_get_branch:178: inode 11: block 4294967295 [ 179.122370][ C0] EXT4-fs (loop4): last error at time 1777759189: ext4_get_branch:178: inode 11: block 4294967295 [ 179.166278][T16595] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 179.166415][T16595] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.5796: invalid indirect mapped block 4294967295 (level 1) [ 179.190213][T16595] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 179.190431][T16595] EXT4-fs (loop4): 2 truncates cleaned up [ 179.207477][T16595] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.344023][ T3291] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.396915][T16617] can0: slcan on ttyS3. [ 179.468553][T16616] can0 (unregistered): slcan off ttyS3. [ 179.552629][T16634] loop1: detected capacity change from 0 to 256 [ 179.690273][T16650] tipc: Enabling of bearer rejected, failed to enable media [ 179.859642][T16671] loop4: detected capacity change from 0 to 2048 [ 179.926881][T16669] loop2: detected capacity change from 0 to 8192 [ 179.947662][T16671] Alternate GPT is invalid, using primary GPT. [ 179.962690][ T28] kauditd_printk_skb: 41 callbacks suppressed [ 179.962705][ T28] audit: type=1400 audit(1777759189.840:1547): avc: denied { connect } for pid=16683 comm="syz.1.5826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 179.979973][T16671] loop4: p2 p3 p7 [ 180.073492][ T2979] Alternate GPT is invalid, using primary GPT. [ 180.093368][ T2979] loop4: p2 p3 p7 [ 180.104782][T16697] loop1: detected capacity change from 0 to 1024 [ 180.115544][T16697] EXT4-fs: inline encryption not supported [ 180.140791][T16697] EXT4-fs (loop1): stripe (6) is not aligned with cluster size (16), stripe is disabled [ 180.172328][T16697] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.193968][ T3285] udevd[3285]: symlink '../../loop1' '/dev/disk/by-diskseq/717.tmp-b7:1' failed: Read-only file system [ 180.195929][ T3966] udevd[3966]: symlink '../../loop3' '/dev/disk/by-diskseq/703.tmp-b7:3' failed: Read-only file system [ 180.207154][ T3283] udevd[3283]: symlink '../../loop2' '/dev/disk/by-diskseq/715.tmp-b7:2' failed: Read-only file system [ 180.229294][ T3280] udevd[3280]: symlink '../../loop4' '/dev/disk/by-diskseq/714.tmp-b7:4' failed: Read-only file system [ 180.279683][ T3285] udevd[3285]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 180.302931][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.322659][ T3284] udevd[3284]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 180.323341][ T3280] udevd[3280]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 180.334175][T13278] udevd[13278]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 180.350081][ T3283] udevd[3283]: symlink '../../loop1' '/dev/disk/by-diskseq/717.tmp-b7:1' failed: Read-only file system [ 180.361631][ T3966] udevd[3966]: symlink '../../loop3' '/dev/disk/by-diskseq/703.tmp-b7:3' failed: Read-only file system [ 180.395518][ T28] audit: type=1400 audit(1777759190.259:1548): avc: denied { execstack } for pid=16708 comm="syz.3.5837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 180.525173][T16721] netlink: 532 bytes leftover after parsing attributes in process `syz.1.5841'. [ 180.546293][T16723] loop2: detected capacity change from 0 to 512 [ 180.594058][T16723] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.624033][T16723] ext4 filesystem being mounted at /1218/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 180.682082][T16723] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.5842: corrupted xattr block 33: invalid ea_ino [ 180.697995][T16723] EXT4-fs (loop2): Remounting filesystem read-only [ 180.707330][T16723] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 180.718241][T16723] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 180.731061][T16723] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 180.785197][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.864904][T16744] autofs4:pid:16744:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(768.1), cmd(0xc0189375) [ 180.866125][ T28] audit: type=1400 audit(1777759190.739:1549): avc: denied { write } for pid=16743 comm="syz.5.5851" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 180.899014][T16744] autofs4:pid:16744:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189375) [ 181.271109][T16771] tipc: Enabling of bearer rejected, failed to enable media [ 181.396132][T16785] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5870'. [ 181.410984][T16748] loop1: detected capacity change from 0 to 32768 [ 181.677320][T16805] loop1: detected capacity change from 0 to 512 [ 181.711141][T16805] EXT4-fs: Ignoring removed nobh option [ 181.763933][T16805] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #3: comm syz.1.5880: corrupted inode contents [ 181.771488][T16818] loop2: detected capacity change from 0 to 1024 [ 181.786651][T16818] EXT4-fs: Ignoring removed orlov option [ 181.790470][T16805] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 181.796060][T16805] EXT4-fs error (device loop1): ext4_dirty_inode:6587: inode #3: comm syz.1.5880: mark_inode_dirty error [ 181.806323][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 181.806341][ C1] EXT4-fs (loop1): initial error at time 1777759191: ext4_do_update_inode:5690: inode 3 [ 181.806377][ C1] EXT4-fs (loop1): last error at time 1777759191: ext4_do_update_inode:5690: inode 3 [ 181.864174][T16805] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 181.865241][T16805] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #3: comm syz.1.5880: corrupted inode contents [ 181.922481][T16805] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 181.922624][T16805] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #3: comm syz.1.5880: mark_inode_dirty error [ 181.953844][T16805] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 181.954126][T16805] Quota error (device loop1): write_blk: dquota write failed [ 181.976735][T16805] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 181.987778][T16805] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.5880: Failed to acquire dquot type 0 [ 182.025352][T16805] loop1: lost filesystem error report for type 5 error -117 [ 182.026535][T16805] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #16: comm syz.1.5880: corrupted inode contents [ 182.066989][T16805] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 182.067270][T16805] EXT4-fs error (device loop1): ext4_dirty_inode:6587: inode #16: comm syz.1.5880: mark_inode_dirty error [ 182.109767][T16805] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 182.109934][T16805] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #16: comm syz.1.5880: corrupted inode contents [ 182.139615][ T28] audit: type=1400 audit(1777759192.009:1550): avc: denied { read append } for pid=16847 comm="syz.4.5899" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 182.147010][T16850] loop2: detected capacity change from 0 to 128 [ 182.179445][T16805] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 182.182210][T16805] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #16: comm syz.1.5880: mark_inode_dirty error [ 182.204544][ T28] audit: type=1400 audit(1777759192.009:1551): avc: denied { open } for pid=16847 comm="syz.4.5899" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 182.206436][T16853] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5901'. [ 182.249800][T16853] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5901'. [ 182.258938][T16805] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #16: comm syz.1.5880: corrupted inode contents [ 182.325677][T16805] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 182.347937][T16805] loop1: lost filesystem error report for type 5 error -117 [ 182.348354][T16805] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #16: comm syz.1.5880: corrupted inode contents [ 182.378858][T16805] EXT4-fs error (device loop1): ext4_truncate:4690: inode #16: comm syz.1.5880: mark_inode_dirty error [ 182.408574][T16805] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 182.448383][T16805] loop1: lost filesystem error report for type 5 error -117 [ 182.451321][T16805] EXT4-fs (loop1): 1 truncate cleaned up [ 182.475064][T16805] ext4 filesystem being mounted at /1184/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 182.514285][ T28] audit: type=1326 audit(1777759192.388:1552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16869 comm="syz.5.5909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3eacacdd9 code=0x7ffc0000 [ 182.553951][ T28] audit: type=1326 audit(1777759192.418:1553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16869 comm="syz.5.5909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3eacacdd9 code=0x7ffc0000 [ 182.592053][T16805] EXT4-fs warning (device loop1): ext4_es_cache_extent:1082: inode #3: comm syz.1.5880: ES cache extent failed: add [1,1,41,0x1] conflict with existing [1,-2,576460752303423487,0x18] [ 182.592053][T16805] [ 182.605488][T16874] xt_hashlimit: size too large, truncated to 1048576 [ 182.617799][ T28] audit: type=1326 audit(1777759192.418:1554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16869 comm="syz.5.5909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3eacacdd9 code=0x7ffc0000 [ 182.991043][T16907] ext4 filesystem being mounted at /1189/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 183.075885][T16918] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 183.285292][T16934] sg_write: data in/out 410588/66 bytes for SCSI command 0x0-- guessing data in; [ 183.285292][T16934] program syz.4.5935 not setting count and/or reply_len properly [ 183.725031][T16983] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5958'. [ 184.085566][T16995] netlink: 'syz.2.5964': attribute type 3 has an invalid length. [ 184.147515][T17000] set_capacity_and_notify: 4 callbacks suppressed [ 184.147532][T17000] loop2: detected capacity change from 0 to 1764 [ 184.192195][T17004] loop4: detected capacity change from 0 to 1024 [ 184.246910][T17009] loop1: detected capacity change from 0 to 512 [ 184.363843][T17014] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.376809][T17016] loop4: detected capacity change from 0 to 512 [ 184.435502][T17016] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #16: comm syz.4.5971: corrupted inode contents [ 184.464472][T17014] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.494338][T17016] fserror_report: 4 callbacks suppressed [ 184.494353][T17016] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 184.520116][T17016] EXT4-fs error (device loop4): ext4_dirty_inode:6587: inode #16: comm syz.4.5971: mark_inode_dirty error [ 184.529351][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 184.529380][ C0] EXT4-fs (loop4): initial error at time 1777759194: ext4_do_update_inode:5690: inode 16 [ 184.529404][ C0] EXT4-fs (loop4): last error at time 1777759194: ext4_do_update_inode:5690: inode 16 [ 184.571472][T17016] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 184.571706][T17016] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #16: comm syz.4.5971: corrupted inode contents [ 184.597195][T17016] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 184.597378][T17016] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #16: comm syz.4.5971: mark_inode_dirty error [ 184.602864][T17025] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5976'. [ 184.607851][T17016] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 184.633974][T17014] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.658574][T17016] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #16: comm syz.4.5971: corrupted inode contents [ 184.675937][T17016] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 184.676192][T17016] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 184.698176][T17016] loop4: lost filesystem error report for type 5 error -117 [ 184.698330][T17016] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #16: comm syz.4.5971: corrupted inode contents [ 184.722100][T17016] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 184.722291][T17016] EXT4-fs error (device loop4): ext4_truncate:4690: inode #16: comm syz.4.5971: mark_inode_dirty error [ 184.746525][T17016] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 184.763586][T17016] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 184.786296][T17014] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.799390][T17016] loop4: lost filesystem error report for type 5 error -117 [ 184.800035][T17016] EXT4-fs (loop4): 1 truncate cleaned up [ 184.814859][ T12] EXT4-fs error (device loop4): ext4_release_dquot:7070: comm kworker/u8:0: Failed to release dquot type 1 [ 184.815227][T17016] ext4 filesystem being mounted at /1208/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.849396][ T3427] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.862151][ T3427] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.875773][ T3427] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.900641][ T319] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.900779][ T3427] EXT4-fs error (device loop4): ext4_release_dquot:7070: comm kworker/u8:7: Failed to release dquot type 1 [ 184.940004][ T3427] loop4: lost filesystem error report for type 5 error -117 [ 185.097027][T17051] loop5: detected capacity change from 0 to 512 [ 185.143658][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 185.143673][ T28] audit: type=1400 audit(1777759195.017:1584): avc: denied { setopt } for pid=17054 comm="syz.4.5991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 185.176222][T17057] loop3: detected capacity change from 0 to 512 [ 185.195161][T17061] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5994'. [ 185.196126][T17057] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 185.209883][ T3285] udevd[3285]: symlink '../../loop1' '/dev/disk/by-diskseq/744.tmp-b7:1' failed: Read-only file system [ 185.219706][ T3283] udevd[3283]: symlink '../../loop2' '/dev/disk/by-diskseq/741.tmp-b7:2' failed: Read-only file system [ 185.246003][ T3966] udevd[3966]: symlink '../../loop3' '/dev/disk/by-diskseq/747.tmp-b7:3' failed: Read-only file system [ 185.265397][ T3280] udevd[3280]: symlink '../../loop5' '/dev/disk/by-diskseq/746.tmp-b7:5' failed: Read-only file system [ 185.266808][ T28] audit: type=1400 audit(1777759195.137:1585): avc: denied { create } for pid=17063 comm="syz.2.5996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 185.283538][ T3966] udevd[3966]: symlink '../../loop3' '/dev/disk/by-diskseq/747.tmp-b7:3' failed: Read-only file system [ 185.300608][ T3284] udevd[3284]: symlink '../../loop4' '/dev/disk/by-diskseq/745.tmp-b7:4' failed: Read-only file system [ 185.324411][ T3280] udevd[3280]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 185.333680][T17051] ext4 filesystem being mounted at /55/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.343343][T17057] EXT4-fs (loop3): 1 truncate cleaned up [ 185.358535][ T3283] udevd[3283]: symlink '../../loop2' '/dev/disk/by-diskseq/741.tmp-b7:2' failed: Read-only file system [ 185.366852][ T3280] udevd[3280]: symlink '../../loop5' '/dev/disk/by-uuid/00000000-0000-0000-0000-000000d40000.tmp-b7:5' failed: Read-only file system [ 185.390031][ T28] audit: type=1400 audit(1777759195.197:1586): avc: denied { bind } for pid=17063 comm="syz.2.5996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 185.418953][ T3285] udevd[3285]: symlink '../../loop1' '/dev/disk/by-diskseq/744.tmp-b7:1' failed: Read-only file system [ 185.464454][T17051] Quota error (device loop5): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 185.485984][T17051] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 185.503615][ T28] audit: type=1400 audit(1777759195.367:1587): avc: denied { write } for pid=17082 comm="syz.2.6002" name="file2" dev="tmpfs" ino=6388 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 185.504236][T17051] EXT4-fs error (device loop5): ext4_acquire_dquot:7034: comm syz.5.5989: Failed to acquire dquot type 0 [ 185.599542][T17090] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6004'. [ 185.806141][T17100] loop3: detected capacity change from 0 to 2048 [ 185.858906][T17100] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 185.886486][T17108] loop4: detected capacity change from 0 to 128 [ 185.923626][T17100] EXT4-fs (loop3): Delayed block allocation failed for inode 16 at logical offset 30 with max blocks 2 with error 28 [ 185.958542][T17100] EXT4-fs (loop3): This should not happen!! Data will be lost [ 185.958542][T17100] [ 185.983373][T17100] EXT4-fs (loop3): Total free blocks count 0 [ 185.999667][T17100] EXT4-fs (loop3): Free/Dirty block details [ 186.009191][T17100] EXT4-fs (loop3): free_blocks=2415919504 [ 186.015509][T17100] EXT4-fs (loop3): dirty_blocks=16 [ 186.020730][T17100] EXT4-fs (loop3): Block reservation details [ 186.027174][T17100] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 186.059082][ T3298] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #16: comm syz-executor: data will be lost [ 186.136628][T17114] loop4: detected capacity change from 0 to 1024 [ 186.178884][T17114] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 186.196389][T17127] loop2: detected capacity change from 0 to 512 [ 186.207048][T17114] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 186.218736][T17114] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 186.293192][T17114] EXT4-fs error (device loop4): ext4_get_journal_inode:5896: inode #5: comm syz.4.6014: unexpected bad inode w/o EXT4_IGET_BAD [ 186.348751][T17114] loop4: lost file I/O error report for ino 5 type 5 pos 0x0 len 0x0 error -117 [ 186.348909][T17114] EXT4-fs (loop4): no journal found [ 186.358017][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 186.358035][ C0] EXT4-fs (loop4): initial error at time 1777759196: ext4_get_journal_inode:5896: inode 5 [ 186.358066][ C0] EXT4-fs (loop4): last error at time 1777759196: ext4_get_journal_inode:5896: inode 5 [ 186.408731][T17114] EXT4-fs (loop4): can't get journal size [ 186.896589][ T28] audit: type=1400 audit(1777759196.766:1588): avc: denied { bind } for pid=17164 comm="syz.2.6022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 186.922443][T17114] EXT4-fs (loop4): ext4_remount: Checksum for group 0 failed (42152!=20869) [ 187.079284][ T28] audit: type=1400 audit(1777759196.956:1589): avc: denied { nlmsg_tty_audit } for pid=17172 comm="syz.2.6031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 187.130777][ T28] audit: type=1326 audit(1777759196.986:1590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17174 comm="syz.3.6030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa93e30cdd9 code=0x7ffc0000 [ 187.156395][ T28] audit: type=1326 audit(1777759196.986:1591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17174 comm="syz.3.6030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7fa93e30cdd9 code=0x7ffc0000 [ 187.211670][T17180] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6034'. [ 187.220785][T17180] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 187.228818][T17180] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 187.241909][T17180] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.259555][T17180] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 187.408073][T17191] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6039'. [ 188.266431][T17249] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6053'. [ 189.141386][T17298] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 189.163506][T17304] set_capacity_and_notify: 2 callbacks suppressed [ 189.163520][T17304] loop5: detected capacity change from 0 to 1024 [ 189.188817][T17298] ext4 filesystem being mounted at /1225/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 189.528914][T17338] loop3: detected capacity change from 0 to 1024 [ 189.566976][T17338] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 189.591663][T17340] loop5: detected capacity change from 0 to 512 [ 189.610264][T17338] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 189.641208][T17340] EXT4-fs warning (device loop5): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 189.675397][T17340] EXT4-fs (loop5): mount failed [ 189.743016][T17345] loop2: detected capacity change from 0 to 512 [ 189.755381][T17345] EXT4-fs: Ignoring removed nobh option [ 189.781248][T17349] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6094'. [ 189.797580][T17345] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #3: comm syz.2.6093: corrupted inode contents [ 189.830735][T17345] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 189.830934][T17345] EXT4-fs error (device loop2): ext4_dirty_inode:6587: inode #3: comm syz.2.6093: mark_inode_dirty error [ 189.840149][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 189.840185][ C0] EXT4-fs (loop2): initial error at time 1777759199: ext4_do_update_inode:5690: inode 3 [ 189.840217][ C0] EXT4-fs (loop2): last error at time 1777759199: ext4_do_update_inode:5690: inode 3 [ 189.846972][T17355] loop1: detected capacity change from 0 to 128 [ 189.854601][T17345] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 189.869602][T17353] loop5: detected capacity change from 0 to 2048 [ 189.885516][T17345] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #3: comm syz.2.6093: corrupted inode contents [ 189.885545][T17345] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 189.885662][T17345] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #3: comm syz.2.6093: mark_inode_dirty error [ 189.885686][T17345] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 189.885907][T17345] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.6093: Failed to acquire dquot type 0 [ 189.885930][T17345] loop2: lost filesystem error report for type 5 error -117 [ 189.886312][T17345] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #16: comm syz.2.6093: corrupted inode contents [ 189.886339][T17345] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 189.886464][T17345] EXT4-fs error (device loop2): ext4_dirty_inode:6587: inode #16: comm syz.2.6093: mark_inode_dirty error [ 189.886488][T17345] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 189.886608][T17345] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #16: comm syz.2.6093: corrupted inode contents [ 189.886633][T17345] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 189.886795][T17345] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #16: comm syz.2.6093: mark_inode_dirty error [ 189.886819][T17345] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 189.886994][T17345] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #16: comm syz.2.6093: corrupted inode contents [ 189.887014][T17345] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 190.060582][T17345] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 190.078759][T17353] loop5: p1 < > p4 [ 190.082979][T17345] loop2: lost filesystem error report for type 5 error -117 [ 190.085795][T17345] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #16: comm syz.2.6093: corrupted inode contents [ 190.110031][T17353] loop5: p4 start 3025664 is beyond EOD, truncated [ 190.115941][T17345] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 190.118538][T17345] EXT4-fs error (device loop2): ext4_truncate:4690: inode #16: comm syz.2.6093: mark_inode_dirty error [ 190.156929][T17345] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 190.176223][T17345] loop2: lost filesystem error report for type 5 error -117 [ 190.179433][T17345] EXT4-fs (loop2): 1 truncate cleaned up [ 190.219282][ T3285] udevd[3285]: symlink '../../loop5' '/dev/disk/by-diskseq/770.tmp-b7:5' failed: Read-only file system [ 190.220567][ T3283] udevd[3283]: symlink '../../loop4' '/dev/disk/by-diskseq/762.tmp-b7:4' failed: Read-only file system [ 190.236592][ T3280] udevd[3280]: symlink '../../loop1' '/dev/disk/by-diskseq/769.tmp-b7:1' failed: Read-only file system [ 190.260160][ T3285] udevd[3285]: symlink '../../loop5' '/dev/disk/by-diskseq/770.tmp-b7:5' failed: Read-only file system [ 190.261577][T17345] EXT4-fs mount: 26 callbacks suppressed [ 190.261590][T17345] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.278125][ T3280] udevd[3280]: symlink '../../loop1' '/dev/disk/by-diskseq/771.tmp-b7:1' failed: Read-only file system [ 190.312268][T17380] loop3: detected capacity change from 0 to 164 [ 190.314581][ T3285] udevd[3285]: symlink '../../loop5' '/dev/disk/by-diskseq/772.tmp-b7:5' failed: Read-only file system [ 190.321840][T17345] ext4 filesystem being mounted at /1271/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 190.348976][T17380] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 190.361196][ T3966] udevd[3966]: symlink '../../loop3' '/dev/disk/by-diskseq/768.tmp-b7:3' failed: Read-only file system [ 190.374937][ T3280] udevd[3280]: symlink '../../loop5' '/dev/disk/by-diskseq/772.tmp-b7:5' failed: Read-only file system [ 190.383687][ T3280] udevd[3280]: symlink '../../loop1' '/dev/disk/by-diskseq/771.tmp-b7:1' failed: Read-only file system [ 190.426652][ T3966] udevd[3966]: symlink '../../loop3' '/dev/disk/by-label/CDROM.tmp-b7:3' failed: Read-only file system [ 190.493278][T17345] EXT4-fs warning (device loop2): ext4_es_cache_extent:1082: inode #3: comm syz.2.6093: ES cache extent failed: add [1,1,41,0x1] conflict with existing [1,-2,576460752303423487,0x18] [ 190.493278][T17345] [ 190.535896][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 190.535910][ T28] audit: type=1400 audit(1777759200.404:1598): avc: denied { read } for pid=17393 comm="syz.4.6117" lport=21922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 190.611432][T17405] loop5: detected capacity change from 0 to 512 [ 190.653770][T17405] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.668470][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.695954][T17405] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 190.763401][ T46] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.782655][ T46] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.796435][T16037] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.806651][ T28] audit: type=1400 audit(1777759200.674:1599): avc: denied { getopt } for pid=17415 comm="syz.2.6125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 190.824860][ T46] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.843899][ T46] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.043312][T17443] loop5: detected capacity change from 0 to 128 [ 191.059918][T17443] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 191.083562][T17443] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 191.140039][T16037] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 191.170134][ T28] audit: type=1400 audit(1777759201.044:1600): avc: denied { read write } for pid=17448 comm="syz.5.6140" name="uhid" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 191.170681][ T1038] hid_parser_main: 102 callbacks suppressed [ 191.170697][ T1038] hid-generic 00A0:0006:0003.0003: unknown main item tag 0x0 [ 191.217908][ T1038] hid-generic 00A0:0006:0003.0003: unknown main item tag 0x0 [ 191.231618][ T28] audit: type=1400 audit(1777759201.044:1601): avc: denied { open } for pid=17448 comm="syz.5.6140" path="/dev/uhid" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 191.256051][ T1038] hid-generic 00A0:0006:0003.0003: unknown main item tag 0x0 [ 191.256087][ T1038] hid-generic 00A0:0006:0003.0003: unknown main item tag 0x0 [ 191.256109][ T1038] hid-generic 00A0:0006:0003.0003: unknown main item tag 0x0 [ 191.256129][ T1038] hid-generic 00A0:0006:0003.0003: unknown main item tag 0x0 [ 191.256154][ T1038] hid-generic 00A0:0006:0003.0003: unknown main item tag 0x0 [ 191.256177][ T1038] hid-generic 00A0:0006:0003.0003: unknown main item tag 0x0 [ 191.256249][ T1038] hid-generic 00A0:0006:0003.0003: unknown main item tag 0x0 [ 191.256274][ T1038] hid-generic 00A0:0006:0003.0003: unknown main item tag 0x0 [ 191.324185][T17459] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6145'. [ 191.329687][ T1038] hid-generic 00A0:0006:0003.0003: hidraw0: HID v0.05 Device [syz0] on syz0 [ 191.413405][T17461] fido_id[17461]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 191.450082][ T28] audit: type=1400 audit(1777759201.324:1602): avc: denied { create } for pid=17466 comm="syz.5.6148" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1 [ 191.531617][T17477] loop1: detected capacity change from 0 to 512 [ 191.560294][T17477] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 191.604129][T17477] EXT4-fs (loop1): 1 truncate cleaned up [ 191.655598][T17477] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.685786][ T28] audit: type=1400 audit(1777759201.554:1603): avc: denied { unlink } for pid=17474 comm="syz.1.6155" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 191.747622][ T28] audit: type=1326 audit(1777759201.614:1604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17494 comm="syz.3.6161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa93e30cdd9 code=0x7ffc0000 [ 191.771665][ T28] audit: type=1326 audit(1777759201.614:1605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17494 comm="syz.3.6161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa93e30cdd9 code=0x7ffc0000 [ 191.795633][ T28] audit: type=1326 audit(1777759201.614:1606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17494 comm="syz.3.6161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa93e30cdd9 code=0x7ffc0000 [ 191.796641][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.819720][ T28] audit: type=1326 audit(1777759201.614:1607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17494 comm="syz.3.6161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=172 compat=0 ip=0x7fa93e30cdd9 code=0x7ffc0000 [ 192.002944][T17511] tipc: Enabling of bearer rejected, failed to enable media [ 192.035518][T17513] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 192.047644][T17516] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6170'. [ 192.071538][T17513] ext4 filesystem being mounted at /1287/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 192.131174][T17525] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6175'. [ 192.153435][ T3297] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 192.286276][T17544] netem: invalid attributes len -24 [ 192.306620][T17544] netem: change failed [ 192.350165][T17552] tipc: Started in network mode [ 192.367499][T17552] tipc: Node identity 5f0000000000002d0000000000000001, cluster identity 4711 [ 192.389268][T17552] tipc: Enabling of bearer rejected, failed to enable media [ 192.565030][T17579] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6199'. [ 192.580591][T17579] netlink: 144 bytes leftover after parsing attributes in process `syz.1.6199'. [ 192.612364][T17579] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6199'. [ 192.749704][T17594] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 192.784136][T17594] EXT4-fs (loop2): 1 truncate cleaned up [ 192.818979][T17594] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.972590][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.078828][T17612] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.105300][T17621] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.199085][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.710091][T17671] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6240'. [ 193.974390][T17692] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 193.993570][T17695] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 194.008749][T17692] EXT4-fs error (device loop5): ext4_orphan_get:1397: inode #13: comm syz.5.6252: iget: bad i_size value: 12154757448730 [ 194.022552][T17692] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.6252: couldn't read orphan inode 13 (err -117) [ 194.034444][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 194.034467][ C0] EXT4-fs (loop5): initial error at time 1777759203: ext4_orphan_get:1397: inode 13 [ 194.034503][ C0] EXT4-fs (loop5): last error at time 1777759203: ext4_orphan_get:1397: inode 13 [ 194.062531][T17692] loop5: lost filesystem error report for type 5 error -117 [ 194.063791][T17692] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.098931][T17692] EXT4-fs warning (device loop5): ext4_lookup:1797: Inconsistent encryption contexts: 2/12 [ 194.109509][T17692] EXT4-fs warning (device loop5): ext4_lookup:1797: Inconsistent encryption contexts: 2/12 [ 194.140255][T16037] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.186585][T17706] set_capacity_and_notify: 6 callbacks suppressed [ 194.186600][T17706] loop2: detected capacity change from 0 to 164 [ 194.217504][T17711] loop5: detected capacity change from 0 to 128 [ 194.256425][T17711] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 194.282212][T17719] sg_write: data in/out 422876/114 bytes for SCSI command 0x0-- guessing data in; [ 194.282212][T17719] program syz.3.6264 not setting count and/or reply_len properly [ 194.421764][T17733] random: crng reseeded on system resumption [ 194.530209][T17742] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6275'. [ 194.570012][T17746] loop3: detected capacity change from 0 to 512 [ 194.594204][T17746] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 194.639136][T17746] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #13: comm syz.3.6278: inode has both inline data and extents flags [ 194.694835][T17746] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.6278: couldn't read orphan inode 13 (err -117) [ 194.706760][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 194.706781][ C0] EXT4-fs (loop3): initial error at time 1777759204: ext4_orphan_get:1397: inode 13 [ 194.706815][ C0] EXT4-fs (loop3): last error at time 1777759204: ext4_orphan_get:1397: inode 13 [ 194.757413][T17753] tipc: Resetting bearer [ 194.765875][T17746] loop3: lost filesystem error report for type 5 error -117 [ 194.767516][T17746] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.803169][T17753] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.810437][T17753] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.822248][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.843724][T17753] tipc: Resetting bearer [ 194.853899][T17753] bond0: (slave dummy0): Releasing backup interface [ 195.677612][ T3280] udevd[3280]: symlink '../../loop4' '/dev/disk/by-diskseq/762.tmp-b7:4' failed: Read-only file system [ 195.742574][T17753] tipc: Resetting bearer [ 195.755579][T17753] bridge_slave_0: left promiscuous mode [ 195.764889][ T3280] udevd[3280]: symlink '../../loop3' '/dev/disk/by-diskseq/799.tmp-b7:3' failed: Read-only file system [ 195.769369][T17753] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.790424][T17753] bridge_slave_1: left allmulticast mode [ 195.796284][T17753] bridge_slave_1: left promiscuous mode [ 195.804248][T17753] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.819047][T17753] bond0: (slave bond_slave_0): Releasing backup interface [ 195.829218][T17753] bond_slave_0: left promiscuous mode [ 195.830063][ T3280] udevd[3280]: symlink '../../loop3' '/dev/disk/by-diskseq/799.tmp-b7:3' failed: Read-only file system [ 195.846035][T17753] bond0: (slave bond_slave_1): Releasing backup interface [ 195.856436][T17753] bond_slave_1: left promiscuous mode [ 195.857806][T17780] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6293'. [ 195.876146][T17753] team0: Port device team_slave_0 removed [ 195.885367][T17753] team0: Port device team_slave_1 removed [ 195.899644][T17753] net_ratelimit: 55 callbacks suppressed [ 195.899657][T17753] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 195.952852][ T3280] udevd[3280]: symlink '../../loop1' '/dev/disk/by-diskseq/782.tmp-b7:1' failed: Read-only file system [ 195.991628][ T3280] udevd[3280]: symlink '../../loop1' '/dev/disk/by-diskseq/782.tmp-b7:1' failed: Read-only file system [ 196.043548][T17755] bridge_slave_0: left promiscuous mode [ 196.051656][T17755] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.063439][T17755] bridge_slave_1: left allmulticast mode [ 196.069248][T17755] bridge_slave_1: left promiscuous mode [ 196.074937][T17755] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.088294][T17755] bond0: (slave bond_slave_0): Releasing backup interface [ 196.098440][T17755] bond0: (slave bond_slave_1): Releasing backup interface [ 196.115425][T17755] team0: Port device team_slave_0 removed [ 196.126110][T17755] team0: Port device team_slave_1 removed [ 196.139500][T17755] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 196.151417][T17755] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 196.161755][T17755] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 196.173040][T17755] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 196.189158][T17755] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 196.233266][T17774] lo speed is unknown, defaulting to 1000 [ 196.248193][ T3280] udevd[3280]: symlink '../../loop3' '/dev/disk/by-diskseq/799.tmp-b7:3' failed: Read-only file system [ 196.282021][ T3283] udevd[3283]: symlink '../../loop5' '/dev/disk/by-diskseq/797.tmp-b7:5' failed: Read-only file system [ 196.296450][ T3285] udevd[3285]: symlink '../../loop2' '/dev/disk/by-diskseq/796.tmp-b7:2' failed: Read-only file system [ 196.334990][ T3280] udevd[3280]: symlink '../../loop3' '/dev/disk/by-diskseq/799.tmp-b7:3' failed: Read-only file system [ 196.376891][ T3283] udevd[3283]: symlink '../../loop1' '/dev/disk/by-diskseq/782.tmp-b7:1' failed: Read-only file system [ 196.401424][T17826] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6303'. [ 196.456178][T17826] vlan2: entered promiscuous mode [ 196.472141][T17826] bridge0: entered promiscuous mode [ 196.481788][T17831] loop3: detected capacity change from 0 to 512 [ 196.492693][T17831] EXT4-fs: Ignoring removed nomblk_io_submit option [ 196.516328][T17831] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 196.528338][T17831] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8840c01d, mo2=0102] [ 196.536488][T17831] EXT4-fs (loop3): couldn't mount RDWR because of unsupported optional features (80) [ 196.548604][T17831] EXT4-fs (loop3): Skipping orphan cleanup due to unknown ROCOMPAT features [ 196.559261][T17831] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 196.576445][T17831] EXT4-fs warning (device loop3): dx_probe:861: inode #2: comm syz.3.6305: dx entry: limit 65535 != root limit 120 [ 196.591406][T17831] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.6305: Corrupt directory, running e2fsck is recommended [ 196.605709][T17831] EXT4-fs error (device loop3): ext4_readdir:265: inode #2: block 3: comm syz.3.6305: path /1275/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 196.646651][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.666416][T17841] loop2: detected capacity change from 0 to 1024 [ 196.683188][T17841] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 196.703499][T17841] System zones: 0-1, 3-36 [ 196.715421][T17841] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.6310: bad orphan inode 134217728 [ 196.729751][T17841] loop2: lost filesystem error report for type 5 error -117 [ 196.734519][T17841] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.738688][T17848] loop3: detected capacity change from 0 to 256 [ 196.815650][T17848] FAT-fs (loop3): Directory bread(block 64) failed [ 196.833908][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.862211][T17848] FAT-fs (loop3): Directory bread(block 65) failed [ 196.866331][T17860] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6320'. [ 196.879626][T17848] FAT-fs (loop3): Directory bread(block 66) failed [ 196.918667][T17862] vhci_hcd vhci_hcd.2: invalid port number 96 [ 196.919357][T17848] FAT-fs (loop3): Directory bread(block 67) failed [ 196.932087][T17862] vhci_hcd vhci_hcd.2: default hub control req: 0314 v0006 i0060 l0 [ 196.942509][T17848] FAT-fs (loop3): Directory bread(block 68) failed [ 196.953493][T17864] loop2: detected capacity change from 0 to 2048 [ 196.956863][T17848] FAT-fs (loop3): Directory bread(block 69) failed [ 196.969237][T17848] FAT-fs (loop3): Directory bread(block 70) failed [ 196.981347][T17848] FAT-fs (loop3): Directory bread(block 71) failed [ 196.982541][T17864] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 196.987966][T17848] FAT-fs (loop3): Directory bread(block 72) failed [ 197.010416][T17848] FAT-fs (loop3): Directory bread(block 73) failed [ 197.051453][T17864] EXT4-fs error (device loop2): ext4_find_extent:904: inode #2: comm syz.2.6318: inode has invalid extent depth: 7 [ 197.072369][T17868] lo speed is unknown, defaulting to 1000 [ 197.111336][T17871] loop5: detected capacity change from 0 to 1764 [ 197.120493][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.153408][T17871] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 197.205931][T17876] loop3: detected capacity change from 0 to 764 [ 197.333706][T17891] ieee802154 phy0 wpan0: encryption failed: -22 [ 197.373251][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 197.373265][ T28] audit: type=1326 audit(1777759207.241:1627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17895 comm="syz.2.6335" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f28be7acdd9 code=0x0 [ 197.434625][T17902] netlink: 92 bytes leftover after parsing attributes in process `syz.1.6337'. [ 197.565084][T17914] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 197.681339][T17922] loop1: detected capacity change from 0 to 2048 [ 197.723052][T17926] xt_hashlimit: size too large, truncated to 1048576 [ 197.730275][T17922] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 197.749377][T17922] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.763755][T17922] ext4 filesystem being mounted at /1289/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.782998][T17922] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 197.819302][T17922] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 197.849556][T17922] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.6347: Failed to acquire dquot type 0 [ 197.909570][T17931] lo speed is unknown, defaulting to 1000 [ 197.923423][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.986733][T17933] bridge_slave_0: default FDB implementation only supports local addresses [ 198.139137][T17941] netlink: 822 bytes leftover after parsing attributes in process `syz.1.6354'. [ 198.316222][T17953] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6360'. [ 198.468821][T17957] EXT4-fs: quotafile must be on filesystem root [ 198.517476][T17957] ./file0: Can't lookup blockdev [ 198.596692][T17971] IPVS: Scheduler module ip_vs_sip not found [ 198.615632][T17974] EXT4-fs error (device loop3): __ext4_fill_super:5596: inode #2: comm syz.3.6371: iget: checksum invalid [ 198.636317][ T28] audit: type=1400 audit(1777759208.500:1628): avc: denied { connect } for pid=17978 comm="syz.2.6372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 198.688605][T17974] fserror_report: 3 callbacks suppressed [ 198.688656][T17974] loop3: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -74 [ 198.699776][ T28] audit: type=1400 audit(1777759208.560:1629): avc: denied { accept } for pid=17978 comm="syz.2.6372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 198.713442][T17974] EXT4-fs (loop3): get root inode failed [ 198.729483][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 198.729507][ C0] EXT4-fs (loop3): initial error at time 1777759208: __ext4_fill_super:5596: inode 2 [ 198.729533][ C0] EXT4-fs (loop3): last error at time 1777759208: __ext4_fill_super:5596: inode 2 [ 198.782454][T17974] EXT4-fs (loop3): mount failed [ 198.853737][ T28] audit: type=1400 audit(1777759208.720:1630): avc: denied { mount } for pid=17993 comm="syz.5.6378" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 198.895585][ T28] audit: type=1400 audit(1777759208.750:1631): avc: denied { remount } for pid=17993 comm="syz.5.6378" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 198.922499][ T28] audit: type=1400 audit(1777759208.760:1632): avc: denied { unmount } for pid=16037 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 198.946174][ T28] audit: type=1400 audit(1777759208.790:1633): avc: denied { bind } for pid=17995 comm="syz.3.6380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 199.048846][T18006] netlink: 764 bytes leftover after parsing attributes in process `syz.5.6384'. [ 199.057978][T18002] wireguard0: entered promiscuous mode [ 199.068190][T18002] wireguard0: entered allmulticast mode [ 199.185067][T18016] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.279136][ T3291] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.327777][T18029] set_capacity_and_notify: 4 callbacks suppressed [ 199.327793][T18029] loop3: detected capacity change from 0 to 256 [ 199.351982][T18029] FAT-fs (loop3): Directory bread(block 64) failed [ 199.366965][ T28] audit: type=1400 audit(1777759209.230:1634): avc: denied { bind } for pid=18031 comm="syz.5.6395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 199.392399][T18029] FAT-fs (loop3): Directory bread(block 65) failed [ 199.400661][T18029] FAT-fs (loop3): Directory bread(block 66) failed [ 199.410104][T18029] FAT-fs (loop3): Directory bread(block 67) failed [ 199.417121][T18029] FAT-fs (loop3): Directory bread(block 68) failed [ 199.429840][T18029] FAT-fs (loop3): Directory bread(block 69) failed [ 199.437607][T18029] FAT-fs (loop3): Directory bread(block 70) failed [ 199.444357][T18029] FAT-fs (loop3): Directory bread(block 71) failed [ 199.452536][T18029] FAT-fs (loop3): Directory bread(block 72) failed [ 199.461650][T18040] netlink: 'syz.5.6399': attribute type 4 has an invalid length. [ 199.469939][T18029] FAT-fs (loop3): Directory bread(block 73) failed [ 199.476668][T18040] netlink: 152 bytes leftover after parsing attributes in process `syz.5.6399'. [ 199.502291][T18040] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 199.541943][T17805] IPVS: starting estimator thread 0... [ 199.650263][T18045] IPVS: using max 2400 ests per chain, 120000 per kthread [ 199.688994][T18065] nft_compat: unsupported protocol 0 [ 199.700798][T18059] loop3: detected capacity change from 0 to 2048 [ 199.719542][T18059] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 199.742816][T18059] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.770184][T18059] ext4 filesystem being mounted at /1299/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 199.786555][T18059] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.6408: Failed to acquire dquot type 0 [ 199.811932][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.882718][T18086] loop2: detected capacity change from 0 to 1024 [ 199.917977][T18086] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.938055][T18091] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 199.944686][T18091] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 199.965301][T18091] vhci_hcd vhci_hcd.0: Device attached [ 199.989190][T18086] EXT4-fs error (device loop2): ext4_lookup:1789: inode #2: comm syz.2.6421: deleted inode referenced: 12 [ 199.990560][T18094] vhci_hcd: connection closed [ 200.002410][T18086] EXT4-fs (loop2): Remounting filesystem read-only [ 200.037179][ T46] vhci_hcd vhci_hcd.3: stop threads [ 200.048653][ T46] vhci_hcd vhci_hcd.3: release socket [ 200.054236][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.063533][ T46] vhci_hcd vhci_hcd.3: disconnect device [ 200.150411][T18119] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 200.191669][ T2979] ================================================================== [ 200.199776][ T2979] BUG: KCSAN: data-race in dentry_unlink_inode / step_into_slowpath [ 200.207769][ T2979] [ 200.210092][ T2979] write to 0xffff88811b1363f0 of 8 bytes by task 3283 on cpu 1: [ 200.217727][ T2979] dentry_unlink_inode+0x6a/0x290 [ 200.222768][ T2979] d_delete+0xc8/0xe0 [ 200.226760][ T2979] d_delete_notify+0x32/0x100 [ 200.231446][ T2979] vfs_unlink+0x289/0x490 [ 200.235868][ T2979] filename_unlinkat+0x1e2/0x410 [ 200.240846][ T2979] __se_sys_unlink+0x2b/0xe0 [ 200.245435][ T2979] __x64_sys_unlink+0x1f/0x30 [ 200.250111][ T2979] x64_sys_call+0x2eb6/0x3020 [ 200.254791][ T2979] do_syscall_64+0x12c/0x3b0 [ 200.259374][ T2979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.265261][ T2979] [ 200.267569][ T2979] read to 0xffff88811b1363f0 of 8 bytes by task 2979 on cpu 0: [ 200.275095][ T2979] step_into_slowpath+0x12c/0x4c0 [ 200.280111][ T2979] path_lookupat+0x330/0x500 [ 200.284702][ T2979] filename_lookup+0x190/0x390 [ 200.289453][ T2979] do_readlinkat+0x74/0x2f0 [ 200.294045][ T2979] __x64_sys_readlink+0x47/0x60 [ 200.298886][ T2979] x64_sys_call+0x2b51/0x3020 [ 200.303569][ T2979] do_syscall_64+0x12c/0x3b0 [ 200.308172][ T2979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.314061][ T2979] [ 200.316367][ T2979] value changed: 0xffff88811b728b38 -> 0x0000000000000000 [ 200.323464][ T2979] [ 200.325771][ T2979] Reported by Kernel Concurrency Sanitizer on: [ 200.331915][ T2979] CPU: 0 UID: 0 PID: 2979 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(full) SYZFAIL: failed to send rpc fd=3 want=12896 sent=0 n=-1 (errno 32: Broken pipe) [ 200.342320][ T2979] Tainted: [W]=WARN [ 200.346108][ T2979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 200.356176][ T2979] ================================================================== [ 200.646029][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 200.658457][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.707546][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 200.720823][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.762026][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 200.774273][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.871746][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 200.882162][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.955513][ T12] bridge_slave_1: left allmulticast mode [ 200.963164][ T12] bridge_slave_1: left promiscuous mode [ 200.968867][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.978966][ T12] bridge_slave_0: left promiscuous mode [ 200.986497][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.995253][ T12] pimreg9: left allmulticast mode [ 201.111064][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 201.120786][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 201.131175][ T12] bond0 (unregistering): Released all slaves [ 201.138918][ T12] bond1 (unregistering): Released all slaves [ 201.148132][ T12] bond2 (unregistering): Released all slaves [ 201.156720][ T3018] 8021q: adding VLAN 0 to HW filter on device eth5 [ 201.214652][ T12] hsr_slave_0: left promiscuous mode [ 201.220898][ T12] hsr_slave_1: left promiscuous mode [ 201.226595][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.234317][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 201.243345][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.251972][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 201.262730][ T12] veth1_macvtap: left promiscuous mode [ 201.268272][ T12] veth0_macvtap: left promiscuous mode [ 201.274028][ T12] veth1_vlan: left promiscuous mode [ 201.280036][ T12] veth0_vlan: left promiscuous mode [ 201.343487][ T12] team0 (unregistering): Port device 72žÿ removed [ 201.352689][ T12] team0 (unregistering): Port device team_slave_0 removed [ 201.382291][ T3018] 8021q: adding VLAN 0 to HW filter on device eth6 [ 201.472794][ T3018] 8021q: adding VLAN 0 to HW filter on device eth7 [ 201.560305][ T3018] 8021q: adding VLAN 0 to HW filter on device eth8 [ 201.681997][ T12] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.731297][ T12] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.771017][ T12] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.821367][ T12] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.910483][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.953297][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.002875][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.015223][ T3018] 8021q: adding VLAN 0 to HW filter on device eth9 [ 202.033771][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.110541][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.122276][ T3018] 8021q: adding VLAN 0 to HW filter on device eth10 [ 202.152374][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.201585][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.220433][ T3018] 8021q: adding VLAN 0 to HW filter on device eth11 [ 202.242107][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.313403][ T3018] 8021q: adding VLAN 0 to HW filter on device eth12 [ 202.351001][ T12] bridge_slave_1: left allmulticast mode [ 202.356673][ T12] bridge_slave_1: left promiscuous mode [ 202.362881][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.371165][ T12] bridge_slave_0: left allmulticast mode [ 202.376820][ T12] bridge_slave_0: left promiscuous mode [ 202.382540][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.391567][ T12] bridge_slave_1: left allmulticast mode [ 202.397309][ T12] bridge_slave_1: left promiscuous mode [ 202.403222][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.411224][ T12] bridge_slave_0: left allmulticast mode [ 202.416919][ T12] bridge_slave_0: left promiscuous mode [ 202.422636][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.592007][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 202.602784][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 202.612169][ T12] bond0 (unregistering): Released all slaves [ 202.682305][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 202.692309][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 202.702011][ T12] bond0 (unregistering): Released all slaves [ 202.762609][ T12] bond0 (unregistering): Released all slaves [ 202.805384][ T12] tipc: Disabling bearer [ 202.811012][ T12] tipc: Left network mode [ 202.815505][ T12] tipc: Left network mode [ 202.820641][ T12] tipc: Disabling bearer [ 202.825971][ T12] tipc: Left network mode [ 202.833279][ T12] IPVS: stopping master sync thread 7621 ... [ 202.839590][ T12] IPVS: stopping backup sync thread 11720 ... [ 202.846067][ T12] IPVS: stopping master sync thread 7505 ... [ 202.887381][ T3018] 8021q: adding VLAN 0 to HW filter on device eth13 [ 202.923036][ T12] hsr_slave_0: left promiscuous mode [ 202.928751][ T12] hsr_slave_1: left promiscuous mode [ 202.934316][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 202.941733][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 202.949276][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 202.957315][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 202.966591][ T12] hsr_slave_0: left promiscuous mode [ 202.972488][ T12] hsr_slave_1: left promiscuous mode [ 202.978209][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 202.985875][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 202.994313][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.002246][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.011750][ T12] hsr_slave_0: left promiscuous mode [ 203.017604][ T12] hsr_slave_1: left promiscuous mode [ 203.028362][ T12] veth1_macvtap: left promiscuous mode [ 203.033883][ T12] veth0_macvtap: left promiscuous mode [ 203.039363][ T12] veth1_vlan: left promiscuous mode [ 203.045139][ T12] veth0_vlan: left promiscuous mode [ 203.050923][ T12] veth1_macvtap: left promiscuous mode [ 203.056371][ T12] veth0_macvtap: left promiscuous mode [ 203.062050][ T12] veth1_vlan: left promiscuous mode [ 203.067311][ T12] veth0_vlan: left promiscuous mode [ 203.073535][ T12] veth0_macvtap: left promiscuous mode [ 203.079022][ T12] veth1_vlan: left promiscuous mode [ 203.084328][ T12] veth0_vlan: left promiscuous mode [ 203.154993][ T12] pim6reg2 (unregistering): left allmulticast mode [ 203.190315][ T12] team0 (unregistering): Port device team_slave_1 removed [ 203.200763][ T12] team0 (unregistering): Port device team_slave_0 removed [ 203.226569][ T12] team0 (unregistering): Port device dummy0 removed [ 203.236008][ T30] smc: removing ib device lyz2 [ 203.293111][ T12] team0 (unregistering): Port device team_slave_1 removed [ 203.304723][ T12] team0 (unregistering): Port device team_slave_0 removed [ 203.386337][ T3018] 8021q: adding VLAN 0 to HW filter on device eth14 [ 203.393377][T17800] lo speed is unknown, defaulting to 1000 [ 203.407318][T17800] lyz2: Port: 1 Link DOWN [ 203.484995][ T3018] 8021q: adding VLAN 0 to HW filter on device eth15 [ 203.574489][ T3018] 8021q: adding VLAN 0 to HW filter on device eth16 [ 203.662195][ T3018] 8021q: adding VLAN 0 to HW filter on device eth17 [ 203.750038][ T3018] 8021q: adding VLAN 0 to HW filter on device eth18 [ 203.850180][ T3018] 8021q: adding VLAN 0 to HW filter on device eth19 [ 203.941943][ T3018] 8021q: adding VLAN 0 to HW filter on device eth20 [ 203.978053][ T12] IPVS: stop unused estimator thread 0...