last executing test programs: 1.544556439s ago: executing program 3 (id=7276): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x400) readv(r0, &(0x7f0000000540)=[{&(0x7f0000000200)=""/160, 0xa0}, {0x0}], 0x2) 669.435211ms ago: executing program 3 (id=7314): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=[@rthdr_2292={{0x28, 0x29, 0x5, {0x0, 0x2, 0x2, 0x1, 0x0, [@remote]}}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x2}}}], 0x40}, 0x0) 550.843333ms ago: executing program 3 (id=7322): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") quotactl$Q_SETQUOTA(0x1, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 444.152254ms ago: executing program 2 (id=7330): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, 0x0, 0x0) 421.071484ms ago: executing program 1 (id=7331): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="02180000100000000000000000000000030005000000000002000010e000000100000000000000000800120000000000000000000000000010000000000000000000000000000000ac1414bb000000000000000000000000fc010000000000000000000000000000030006000000000002"], 0x80}}, 0x0) 420.958204ms ago: executing program 4 (id=7332): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syslog(0x0, 0x0, 0x0) 356.101135ms ago: executing program 2 (id=7333): r0 = creat(&(0x7f0000000140)='./file0\x00', 0x2) getsockname$packet(r0, 0x0, 0x0) 313.401836ms ago: executing program 2 (id=7335): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) 248.134987ms ago: executing program 3 (id=7336): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@gettaction={0x28, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x0, 0x1, [{0x0, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x7}}, {0x0, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'bpf\x00'}}, {0x0, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x1}}, {0x0, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'mirred\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x0, 0x1, [{0x0, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'xt\x00'}}, {0x0, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'pedit\x00'}}]}]}, 0x28}}, 0x0) 247.933896ms ago: executing program 4 (id=7337): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="640100000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400200100000000000000000000000000010c00028005000100000000003c0002802c000180140003"], 0x164}}, 0x0) 247.836327ms ago: executing program 1 (id=7338): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r0, 0x0, 0x30, 0x1, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}}, 0x40) 247.784807ms ago: executing program 2 (id=7339): r0 = syz_clone(0x0, &(0x7f0000000e00), 0x0, 0x0, 0x0, 0x0) migrate_pages(r0, 0x8, 0x0, &(0x7f0000001fc0)=0x1) 247.729827ms ago: executing program 0 (id=7340): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9c010000100001040100"/20, @ANYRES32, @ANYBLOB="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"], 0x19c}}, 0x10) 237.597417ms ago: executing program 1 (id=7341): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x4, 0x8, 0x5, 0x0, 0x0, {0x3, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x80) 237.464777ms ago: executing program 4 (id=7342): setresuid(0x0, 0xee01, 0xee00) setfsuid(0x0) 216.725517ms ago: executing program 0 (id=7343): r0 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r0, &(0x7f00000066c0)=[{{&(0x7f00000019c0)={0xa, 0x0, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@rthdr={{0x18, 0x29, 0x39, {0x62}}}], 0x18}}], 0x1, 0x4001efe) 156.200478ms ago: executing program 1 (id=7344): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0x4}, {0x6}]}) 156.041558ms ago: executing program 0 (id=7345): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000040), 0x4) 155.905708ms ago: executing program 0 (id=7346): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x338, 0x0, 0x150, 0xffffffff, 0xa8, 0xa8, 0x360, 0x360, 0xffffffff, 0x360, 0x360, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x1c, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, @port=0x4e23, @gre_key=0x1}}}}, {{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0xb}, 0xffffffff, 0xffffffff, 'xfrm0\x00', 'ip6_vti0\x00', {}, {}, 0x1d, 0x3, 0x1}, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x2, @broadcast, @remote, @gre_key=0x2, @gre_key=0x9}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x1c, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @port=0x4e22, @icmp_id=0x64}}}}, {{@ip={@empty, @multicast2, 0xffffff00, 0xffffffff, 'wg2\x00', 'wlan1\x00', {0xff}, {}, 0x6, 0x2, 0xa0}, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x16, @empty, @multicast2, @gre_key=0xfffb, @gre_key=0x7}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) 148.445428ms ago: executing program 4 (id=7347): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="70000000020605000000000000000000000000b1120003006269746d61703a69702c6d616300000005000400000000000900020073797a3000000000240007800c000280ecff0040000080020c0001800800014000000000080006400000000005000500020000000500010006"], 0x70}}, 0x0) 142.484238ms ago: executing program 2 (id=7348): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f0000000280)=@ethtool_channels={0x3c, 0x1000, 0x0, 0x7, 0x4, 0x2, 0x1}}) 88.192818ms ago: executing program 3 (id=7349): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x4, 0x8, 0x0, 0x69b, 0xfb}) 88.091638ms ago: executing program 4 (id=7350): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r0, 0x5, &(0x7f0000000040)={0x0, 0x1, 0x42, 0xfffffffffffffffc}) 87.990009ms ago: executing program 1 (id=7351): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@empty, 0x7ff, 0x2, 0x103, 0x4}, 0x20) 87.702309ms ago: executing program 2 (id=7352): syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f0000000a40)={[{@i_version}, {@nomblk_io_submit}, {@data_err_ignore}]}, 0x84, 0x508, &(0x7f00000003c0)="$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") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, &(0x7f00000001c0)=""/70, 0x26, 0x46, 0x0, 0x0, 0x0, @void, @value}, 0x28) 78.144439ms ago: executing program 0 (id=7353): r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0xda, &(0x7f0000000200), &(0x7f0000000100)=0x4) 35.168179ms ago: executing program 1 (id=7354): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)=@flushpolicy={0x40, 0x12, 0x105, 0x0, 0x0, "", [@proto={0x5, 0x19, 0xff}, @address_filter={0x28, 0x1a, {@in=@dev={0xac, 0x14, 0x14, 0x18}, @in=@private=0xa010100, 0x2, 0x6, 0x9}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20040810) 35.09785ms ago: executing program 4 (id=7355): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x23, &(0x7f0000000040), &(0x7f0000000200)=0x38) 152.3µs ago: executing program 3 (id=7356): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x14, &(0x7f0000000040), 0x50) 0s ago: executing program 0 (id=7357): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x1a8, 0x19, 0x1, 0x0, 0x25dfdbfb, {0x1d, 0xd601, 0x9}, [@nested={0x50, 0x12, 0x0, 0x1, [@typed={0x49, 0x121, 0x0, 0x0, @binary="c9a7befe6f6d645a1a11b81b2c4b10fb4f5fdaf9331c7510e19feecb90ee6bb49fdb1a75df432aa833928a0772ff8f5e9ed32d3b477d35b296774f1fe35663c0d236fde58b"}]}, @nested={0x144, 0x6, 0x0, 0x1, [@nested={0x140, 0xce, 0x0, 0x1, [@nested={0x13c, 0x13e, 0x0, 0x1, [@nested={0x138, 0xa0, 0x0, 0x1, [@nested={0x134, 0x61, 0x0, 0x1, [@nested={0x130, 0x9d, 0x0, 0x1, [@nested={0x12c, 0x63, 0x0, 0x1, [@typed={0x8, 0x60, 0x0, 0x0, @uid}, @nested={0xa5, 0x90, 0x0, 0x1, [@nested={0x8d, 0x44, 0x0, 0x1, [@typed={0x8, 0xa5, 0x0, 0x0, @u32=0x10}, @typed={0x4, 0x13a}, @nested={0x71, 0xc5, 0x0, 0x1, [@generic="7920c0e350fcd110c942e8403c6ae5bf5d2cf28d8c9c8f6151c4a25b4109b0a364d2dccbd1e2ddece24a5075dc6f7f9bd60531507e07775d8c1dd2aeaf7727930d596c4d65e150fa4c61c2f2600a5be0a4f43dc746b3061c1a6e9df96fea1f1cddc23e5f89c22bc13f9243f8e3"]}, @generic="2777ace821d9d793c3"]}, @generic="f0d1352a224aadf38cc0be9a1bfc6ea31c"]}, @nested={0x4, 0x70}, @typed={0xc, 0x11c, 0x0, 0x0, @u64=0x9}, @typed={0xc, 0x12e, 0x0, 0x0, @u64=0x1}, @nested={0x59, 0xde, 0x0, 0x1, [@typed={0x14, 0x14a, 0x0, 0x0, @ipv6=@remote}, @generic="d3273107b4c7d6b83eaf4579e39037e72313d2279f11202dbef9a3db1fc2a4451f3f5bd969b7ebb1ca8e81563ac2525ff262442aa97fa00346696359aa4a2426c8"]}]}]}]}]}]}]}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x5}, 0x0) kernel console output (not intermixed with test programs): policy `syz0' can only be used by L3 protocol number 24578 [ 100.136291][T10920] xt_TCPMSS: Only works on TCP SYN packets [ 100.290444][T10939] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.467544][T10953] No such timeout policy "syz0" [ 100.661946][T10970] loop1: detected capacity change from 0 to 512 [ 100.692596][T10970] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 100.733914][T10970] EXT4-fs (loop1): 1 truncate cleaned up [ 100.767373][T10970] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.784992][ T10] IPVS: starting estimator thread 0... [ 100.800796][T10970] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 100.840849][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.873669][T10984] IPVS: using max 2304 ests per chain, 115200 per kthread [ 101.031205][ T29] kauditd_printk_skb: 54 callbacks suppressed [ 101.031224][ T29] audit: type=1400 audit(149.798:20577): avc: denied { create } for pid=11015 comm="syz.3.3605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 101.096887][ T29] audit: type=1400 audit(149.808:20578): avc: denied { setopt } for pid=11015 comm="syz.3.3605" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 101.117374][ T29] audit: type=1400 audit(149.848:20579): avc: denied { write } for pid=11020 comm="syz.0.3608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 101.136650][ T29] audit: type=1400 audit(149.848:20580): avc: denied { connect } for pid=11020 comm="syz.0.3608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 101.156424][ T29] audit: type=1400 audit(149.848:20581): avc: denied { name_connect } for pid=11020 comm="syz.0.3608" dest=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 101.269917][T11038] loop3: detected capacity change from 0 to 2048 [ 101.315678][ T3309] Alternate GPT is invalid, using primary GPT. [ 101.322211][ T3309] loop3: p2 p3 p7 [ 101.328219][ T29] audit: type=1400 audit(149.918:20582): avc: denied { create } for pid=11024 comm="syz.2.3610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 101.348931][ T29] audit: type=1400 audit(149.918:20583): avc: denied { getopt } for pid=11024 comm="syz.2.3610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 101.368488][ T29] audit: type=1400 audit(149.988:20584): avc: denied { create } for pid=11026 comm="syz.2.3611" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 101.389292][ T29] audit: type=1400 audit(149.988:20585): avc: denied { read } for pid=11026 comm="syz.2.3611" name="file0" dev="tmpfs" ino=3492 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 101.411623][ T29] audit: type=1400 audit(149.988:20586): avc: denied { open } for pid=11026 comm="syz.2.3611" path="/689/file0" dev="tmpfs" ino=3492 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 101.449467][T11038] Alternate GPT is invalid, using primary GPT. [ 101.456191][T11038] loop3: p2 p3 p7 [ 101.622835][T11077] openvswitch: netlink: Flow actions attr not present in new flow. [ 101.635589][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 101.645271][ T4045] udevd[4045]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 101.656954][T11072] udevd[11072]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 101.708747][ T3523] udevd[3523]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 101.757945][T11093] validate_nla: 5 callbacks suppressed [ 101.757964][T11093] netlink: 'syz.3.3644': attribute type 1 has an invalid length. [ 101.771646][T11093] netlink: 'syz.3.3644': attribute type 2 has an invalid length. [ 101.784185][T11096] netlink: 'syz.2.3643': attribute type 10 has an invalid length. [ 101.822271][T11100] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 101.823491][T11096] dummy0: entered promiscuous mode [ 101.856041][T11096] bridge0: port 3(dummy0) entered blocking state [ 101.862627][T11096] bridge0: port 3(dummy0) entered disabled state [ 101.869919][T11096] dummy0: entered allmulticast mode [ 101.876246][T11096] bridge0: port 3(dummy0) entered blocking state [ 101.882915][T11096] bridge0: port 3(dummy0) entered forwarding state [ 101.907041][T11110] (unnamed net_device) (uninitialized): down delay (2) is not a multiple of miimon (5), value rounded to 0 ms [ 101.919245][T11110] (unnamed net_device) (uninitialized): peer notification delay (7) is not a multiple of miimon (5), value rounded to 5 ms [ 102.197020][T11156] netlink: 'syz.0.3673': attribute type 1 has an invalid length. [ 102.214653][ T416] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 102.340504][T11173] netlink: 'syz.4.3682': attribute type 11 has an invalid length. [ 102.780218][T11242] loop0: detected capacity change from 0 to 512 [ 102.817114][T11242] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.3716: bg 0: block 248: padding at end of block bitmap is not set [ 102.838349][T11248] netlink: 'syz.4.3719': attribute type 29 has an invalid length. [ 102.847277][T11248] netlink: 'syz.4.3719': attribute type 3 has an invalid length. [ 102.855706][T11248] __nla_validate_parse: 11 callbacks suppressed [ 102.855723][T11248] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3719'. [ 102.877719][T11242] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.3716: Failed to acquire dquot type 1 [ 102.878686][T11253] x_tables: duplicate entry at hook 2 [ 102.890197][T11242] EXT4-fs (loop0): 1 truncate cleaned up [ 102.901133][T11242] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.967858][T11264] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3724'. [ 103.002057][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.013829][ T416] EXT4-fs error (device loop0): ext4_release_dquot:6971: comm kworker/u8:6: Failed to release dquot type 1 [ 103.119271][T11275] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3731'. [ 103.134625][T11279] netlink: 'syz.2.3733': attribute type 3 has an invalid length. [ 103.216019][T11287] loop0: detected capacity change from 0 to 164 [ 103.233222][T11290] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3738'. [ 103.249312][T11290] netlink: 'syz.3.3738': attribute type 1 has an invalid length. [ 103.374234][T11310] netlink: 'syz.1.3748': attribute type 5 has an invalid length. [ 103.422044][T11316] loop2: detected capacity change from 0 to 1024 [ 103.431141][T11316] EXT4-fs: Ignoring removed orlov option [ 103.437018][T11316] EXT4-fs: Ignoring removed nomblk_io_submit option [ 103.504825][T11316] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.541914][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.552146][T11332] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3758'. [ 103.605697][T11339] tmpfs: Bad value for 'mpol' [ 103.710317][T11358] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3771'. [ 103.764308][T11364] gre1: entered allmulticast mode [ 103.900760][T11385] ieee802154 phy0 wpan0: encryption failed: -22 [ 103.933457][T11391] program syz.1.3786 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 104.059467][T11410] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744071562067968) [ 104.069823][T11410] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 104.278357][T11441] IPv6: NLM_F_CREATE should be specified when creating new route [ 104.299174][T11441] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3812'. [ 104.523188][T11471] SELinux: syz.3.3827 (11471) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 104.537971][T11473] netlink: 71 bytes leftover after parsing attributes in process `syz.4.3826'. [ 104.623543][T11481] loop1: detected capacity change from 0 to 256 [ 104.635684][T11480] loop4: detected capacity change from 0 to 512 [ 104.660486][T11480] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 104.673236][T11480] EXT4-fs (loop4): orphan cleanup on readonly fs [ 104.681552][T11480] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.3830: invalid indirect mapped block 256 (level 2) [ 104.697839][T11480] EXT4-fs (loop4): 2 truncates cleaned up [ 104.704383][T11481] FAT-fs (loop1): Directory bread(block 64) failed [ 104.712993][T11480] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 104.727395][T11481] FAT-fs (loop1): Directory bread(block 65) failed [ 104.734853][T11481] FAT-fs (loop1): Directory bread(block 66) failed [ 104.742014][T11481] FAT-fs (loop1): Directory bread(block 67) failed [ 104.749229][T11481] FAT-fs (loop1): Directory bread(block 68) failed [ 104.767501][T11481] FAT-fs (loop1): Directory bread(block 69) failed [ 104.775791][T11481] FAT-fs (loop1): Directory bread(block 70) failed [ 104.794499][T11481] FAT-fs (loop1): Directory bread(block 71) failed [ 104.801275][T11481] FAT-fs (loop1): Directory bread(block 72) failed [ 104.804085][ T3328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.808214][T11481] FAT-fs (loop1): Directory bread(block 73) failed [ 104.978967][T11518] ieee802154 phy0 wpan0: encryption failed: -22 [ 105.100178][T11536] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3858'. [ 105.177641][T11548] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3864'. [ 105.342347][T11572] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 105.351727][T11572] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 105.441082][T11586] loop1: detected capacity change from 0 to 512 [ 105.461154][T11586] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 105.496330][T11586] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.3882: bg 0: block 255: padding at end of block bitmap is not set [ 105.511988][T11586] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 105.527509][T11586] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.3882: invalid indirect mapped block 1 (level 1) [ 105.565665][T11586] EXT4-fs (loop1): 1 truncate cleaned up [ 105.577468][T11586] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.648803][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.659467][T11616] xt_TPROXY: Can be used only with -p tcp or -p udp [ 106.001374][T11664] loop3: detected capacity change from 0 to 512 [ 106.065091][T11664] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3920: bg 0: block 248: padding at end of block bitmap is not set [ 106.081595][T11682] ipt_REJECT: TCP_RESET invalid for non-tcp [ 106.102513][T11664] __quota_error: 100 callbacks suppressed [ 106.102531][T11664] Quota error (device loop3): write_blk: dquota write failed [ 106.116057][T11664] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 106.132415][T11664] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.3920: Failed to acquire dquot type 1 [ 106.145263][ T29] audit: type=1400 audit(154.918:20684): avc: denied { append } for pid=11687 comm="syz.2.3930" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 106.156283][T11664] EXT4-fs (loop3): 1 truncate cleaned up [ 106.196419][T11664] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.266104][ T29] audit: type=1400 audit(155.038:20685): avc: denied { write } for pid=11699 comm="syz.4.3936" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 106.347229][ T29] audit: type=1400 audit(155.058:20686): avc: denied { ioctl } for pid=11699 comm="syz.4.3936" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 106.349944][ T3327] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.491989][T11728] loop0: detected capacity change from 0 to 1024 [ 106.530102][ T29] audit: type=1326 audit(155.288:20687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11731 comm="syz.2.3952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f925d1fe969 code=0x7ffc0000 [ 106.553776][ T29] audit: type=1326 audit(155.288:20688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11731 comm="syz.2.3952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f925d1fe969 code=0x7ffc0000 [ 106.588454][ T29] audit: type=1326 audit(155.288:20689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11731 comm="syz.2.3952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f925d1fe969 code=0x7ffc0000 [ 106.594071][T11728] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 106.612168][ T29] audit: type=1326 audit(155.288:20690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11731 comm="syz.2.3952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f925d1fe969 code=0x7ffc0000 [ 106.646005][ T51] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 106.649505][T11738] cgroup: none used incorrectly [ 106.676340][T11728] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 106.700007][T11744] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 106.703519][ T29] audit: type=1400 audit(155.418:20691): avc: denied { mounton } for pid=11736 comm="syz.2.3955" path="/748/file0" dev="tmpfs" ino=3790 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 106.739061][T11728] EXT4-fs (loop0): orphan cleanup on readonly fs [ 106.763505][T11728] EXT4-fs error (device loop0): __ext4_get_inode_loc:4450: comm syz.0.3947: Invalid inode table block 0 in block_group 0 [ 106.796209][T11728] EXT4-fs (loop0): Remounting filesystem read-only [ 106.811418][T11728] EXT4-fs (loop0): 1 truncate cleaned up [ 106.819315][T11728] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 106.877516][T11761] validate_nla: 5 callbacks suppressed [ 106.877536][T11761] netlink: 'syz.3.3966': attribute type 27 has an invalid length. [ 106.903205][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.939668][T11767] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.3970' sets config #1 [ 107.025339][T11761] A link change request failed with some changes committed already. Interface netdevsim1 may have been left with an inconsistent configuration, please check. [ 107.041651][T11778] netlink: 'syz.4.3973': attribute type 46 has an invalid length. [ 107.199925][T11801] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 107.213016][T11803] xt_TPROXY: Can be used only with -p tcp or -p udp [ 107.266711][T11810] loop4: detected capacity change from 0 to 256 [ 107.298573][T11816] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 107.481496][T11845] SELinux: syz.0.4002 (11845) set checkreqprot to 1. This is no longer supported. [ 107.821633][T11903] ieee802154 phy0 wpan0: encryption failed: -22 [ 107.860146][T11908] loop4: detected capacity change from 0 to 128 [ 107.888156][T11910] __nla_validate_parse: 14 callbacks suppressed [ 107.888177][T11910] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4035'. [ 107.964890][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 108.276003][T11962] netlink: 144 bytes leftover after parsing attributes in process `syz.3.4059'. [ 108.448620][T11990] netlink: 'syz.0.4074': attribute type 19 has an invalid length. [ 108.869278][T12051] netlink: 'syz.4.4104': attribute type 13 has an invalid length. [ 108.968480][T12051] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.976557][T12051] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.089969][T12051] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.101199][T12051] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.150555][T12051] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.159859][T12051] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.169178][T12051] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.178199][T12051] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.354897][T12113] x_tables: duplicate entry at hook 2 [ 109.434924][T12119] : renamed from bond0 [ 109.474409][T12123] netlink: 'syz.3.4138': attribute type 12 has an invalid length. [ 109.563567][T12131] netlink: 'syz.4.4142': attribute type 10 has an invalid length. [ 109.571808][T12131] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4142'. [ 109.635815][T12131] dummy0: entered promiscuous mode [ 109.662275][T12131] bridge0: port 3(dummy0) entered blocking state [ 109.668912][T12131] bridge0: port 3(dummy0) entered disabled state [ 109.702770][T12145] netlink: 'syz.3.4149': attribute type 11 has an invalid length. [ 109.706226][T12131] dummy0: entered allmulticast mode [ 109.807733][T12155] netlink: 'syz.3.4154': attribute type 49 has an invalid length. [ 109.872609][T12161] netlink: 'syz.0.4157': attribute type 29 has an invalid length. [ 109.880809][T12161] netlink: 'syz.0.4157': attribute type 3 has an invalid length. [ 109.888949][T12161] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4157'. [ 109.922113][T12167] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4159'. [ 109.930832][T12170] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4162'. [ 109.931545][T12167] tc_dump_action: action bad kind [ 110.018273][T12179] netlink: 228 bytes leftover after parsing attributes in process `syz.4.4166'. [ 110.262234][T12209] loop4: detected capacity change from 0 to 164 [ 110.274952][T12211] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4179'. [ 110.507819][T12247] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4199'. [ 110.518841][T12249] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4201'. [ 110.688736][T12270] loop1: detected capacity change from 0 to 1024 [ 110.709665][T12264] bridge0: port 3(dummy0) entered blocking state [ 110.716422][T12264] bridge0: port 3(dummy0) entered forwarding state [ 110.753599][T12270] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.4210: Failed to acquire dquot type 0 [ 110.773824][T12270] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 110.793073][T12264] 8021q: adding VLAN 0 to HW filter on device  [ 110.800917][T12270] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #13: comm syz.1.4210: corrupted inode contents [ 110.808701][T12264] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.822568][T12270] EXT4-fs error (device loop1): ext4_dirty_inode:6103: inode #13: comm syz.1.4210: mark_inode_dirty error [ 110.834519][T12264] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 110.835448][T12270] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #13: comm syz.1.4210: corrupted inode contents [ 110.872933][T12270] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #13: comm syz.1.4210: mark_inode_dirty error [ 110.906346][T12270] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #13: comm syz.1.4210: corrupted inode contents [ 110.919043][T12270] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 110.973812][T12270] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #13: comm syz.1.4210: corrupted inode contents [ 111.012794][T12270] EXT4-fs error (device loop1): ext4_truncate:4255: inode #13: comm syz.1.4210: mark_inode_dirty error [ 111.053472][T12270] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 111.077908][T12270] EXT4-fs (loop1): 1 truncate cleaned up [ 111.078371][T12270] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.087255][T12270] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 111.112048][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.124935][T12315] gre1: entered allmulticast mode [ 111.244139][ T29] kauditd_printk_skb: 31 callbacks suppressed [ 111.244156][ T29] audit: type=1326 audit(160.018:20719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12325 comm="syz.4.4236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6a4d7e969 code=0x7ffc0000 [ 111.315188][T12334] loop1: detected capacity change from 0 to 1024 [ 111.334070][T12334] EXT4-fs: Ignoring removed orlov option [ 111.339981][T12334] EXT4-fs: Ignoring removed nomblk_io_submit option [ 111.356591][ T29] audit: type=1326 audit(160.048:20720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12325 comm="syz.4.4236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6a4d7e969 code=0x7ffc0000 [ 111.380302][ T29] audit: type=1326 audit(160.048:20721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12325 comm="syz.4.4236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=104 compat=0 ip=0x7fc6a4d7e969 code=0x7ffc0000 [ 111.403657][ T29] audit: type=1326 audit(160.048:20722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12325 comm="syz.4.4236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6a4d7e969 code=0x7ffc0000 [ 111.427301][ T29] audit: type=1326 audit(160.048:20723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12325 comm="syz.4.4236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6a4d7e969 code=0x7ffc0000 [ 111.483331][T12334] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.484064][T12344] SELinux: syz.0.4244 (12344) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 111.589424][T12355] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 111.597618][T12355] IPv6: NLM_F_CREATE should be set when creating new route [ 111.604986][T12355] IPv6: NLM_F_CREATE should be set when creating new route [ 111.650651][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.728034][T12372] loop3: detected capacity change from 0 to 512 [ 111.740827][T12372] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 111.757681][T12372] EXT4-fs (loop3): orphan cleanup on readonly fs [ 111.767883][T12372] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.4258: invalid indirect mapped block 256 (level 2) [ 111.786548][T12372] EXT4-fs (loop3): 2 truncates cleaned up [ 111.792972][T12372] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 111.832935][ T3327] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.889029][T12392] validate_nla: 4 callbacks suppressed [ 111.889045][T12392] netlink: 'syz.0.4266': attribute type 1 has an invalid length. [ 112.059374][T12421] loop2: detected capacity change from 0 to 128 [ 112.087175][ T29] audit: type=1400 audit(160.858:20724): avc: denied { bind } for pid=12417 comm="syz.3.4281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 112.106436][ T29] audit: type=1400 audit(160.858:20725): avc: denied { node_bind } for pid=12417 comm="syz.3.4281" saddr=ff02::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 112.116542][T12424] loop0: detected capacity change from 0 to 512 [ 112.184699][T12424] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 112.223578][T12424] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8843e11c, mo2=0102] [ 112.233005][T12424] EXT4-fs (loop0): orphan cleanup on readonly fs [ 112.241175][T12424] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #11: comm syz.0.4284: attempt to clear invalid blocks 1024 len 1 [ 112.241273][T12433] loop3: detected capacity change from 0 to 1024 [ 112.257085][T12424] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.4284: bg 0: block 361: padding at end of block bitmap is not set [ 112.282126][T12424] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 112.304356][T12433] EXT4-fs: Ignoring removed bh option [ 112.310247][T12424] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.4284: invalid indirect mapped block 1811939328 (level 0) [ 112.324063][T12433] EXT4-fs: inline encryption not supported [ 112.326234][ T29] audit: type=1400 audit(161.098:20726): avc: denied { write } for pid=12443 comm="syz.4.4293" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 112.352664][T12433] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 112.370932][T12424] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.4284: invalid indirect mapped block 2185560079 (level 1) [ 112.386945][T12433] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 112.402559][ T29] audit: type=1326 audit(161.158:20727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12445 comm="syz.2.4294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f925d1fe969 code=0x7ffc0000 [ 112.425994][ T29] audit: type=1326 audit(161.168:20728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12445 comm="syz.2.4294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f925d1fe969 code=0x7ffc0000 [ 112.441345][T12433] EXT4-fs error (device loop3): ext4_map_blocks:675: inode #3: block 2: comm syz.3.4289: lblock 2 mapped to illegal pblock 2 (length 1) [ 112.450154][T12447] loop2: detected capacity change from 0 to 1024 [ 112.463796][ T37] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 112.477409][T12424] EXT4-fs (loop0): 1 truncate cleaned up [ 112.481774][T12447] EXT4-fs: inline encryption not supported [ 112.487544][T12424] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 112.492613][T12447] EXT4-fs: Ignoring removed bh option [ 112.510826][T12433] EXT4-fs error (device loop3): ext4_map_blocks:675: inode #3: block 48: comm syz.3.4289: lblock 0 mapped to illegal pblock 48 (length 1) [ 112.527207][T12433] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.4289: Failed to acquire dquot type 0 [ 112.539275][T12433] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 112.552171][T12424] EXT4-fs warning (device loop0): dx_probe:863: inode #2: comm syz.0.4284: dx entry: limit 0 != root limit 125 [ 112.557018][T12447] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.564202][T12424] EXT4-fs warning (device loop0): dx_probe:936: inode #2: comm syz.0.4284: Corrupt directory, running e2fsck is recommended [ 112.590772][T12433] EXT4-fs error (device loop3): ext4_evict_inode:259: inode #11: comm syz.3.4289: mark_inode_dirty error [ 112.622830][T12433] EXT4-fs warning (device loop3): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 112.636425][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.646455][T12433] EXT4-fs (loop3): 1 orphan inode deleted [ 112.659467][T12433] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.672239][ T37] EXT4-fs error (device loop3): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 112.713642][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 112.713750][ T37] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:2: Failed to release dquot type 0 [ 112.756332][ T3327] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.792539][ T3327] EXT4-fs error (device loop3): __ext4_get_inode_loc:4450: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 112.832978][ T3327] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 112.869565][ T3327] EXT4-fs error (device loop3): ext4_quota_off:7219: inode #3: comm syz-executor: mark_inode_dirty error [ 112.910762][T12481] ieee802154 phy0 wpan0: encryption failed: -22 [ 113.055400][T12506] netlink: 'syz.1.4322': attribute type 1 has an invalid length. [ 113.063215][T12507] __nla_validate_parse: 7 callbacks suppressed [ 113.063231][T12507] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4323'. [ 113.079158][T12507] netlink: 'syz.4.4323': attribute type 3 has an invalid length. [ 113.093819][ T54] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 113.208705][T12528] netlink: 'syz.3.4342': attribute type 10 has an invalid length. [ 113.253159][T12528] team0: Device hsr_slave_0 failed to register rx_handler [ 113.293565][T12534] netlink: 'syz.0.4334': attribute type 27 has an invalid length. [ 113.301605][T12534] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4334'. [ 113.364114][T12534] A link change request failed with some changes committed already. Interface netdevsim1 may have been left with an inconsistent configuration, please check. [ 113.457622][T12558] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4349'. [ 113.489815][T12563] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4351'. [ 113.498889][T12563] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4351'. [ 113.618074][T12581] netlink: 'syz.4.4360': attribute type 21 has an invalid length. [ 113.731733][T12597] loop4: detected capacity change from 0 to 512 [ 113.766627][T12597] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 113.783253][T12606] xt_TPROXY: Can be used only with -p tcp or -p udp [ 113.795952][T12597] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.4367: bg 0: block 255: padding at end of block bitmap is not set [ 113.839878][T12597] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 113.841134][T12615] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4375'. [ 113.868347][T12597] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.4367: invalid indirect mapped block 1 (level 1) [ 113.895167][T12597] EXT4-fs (loop4): 1 truncate cleaned up [ 113.911717][T12597] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.000473][T12636] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 114.011817][T12639] xt_TPROXY: Can be used only with -p tcp or -p udp [ 114.034105][ T3328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.076761][T12644] __vm_enough_memory: pid: 12644, comm: syz.3.4389, bytes: 21200025878528 not enough memory for the allocation [ 114.166559][T12658] ieee802154 phy0 wpan0: encryption failed: -22 [ 114.250199][T12671] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4402'. [ 114.259382][T12671] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4402'. [ 114.326230][T12681] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4407'. [ 114.491569][T12707] netlink: 'syz.2.4420': attribute type 21 has an invalid length. [ 114.500989][T12705] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.4419' sets config #1 [ 114.514188][T12707] netlink: 'syz.2.4420': attribute type 6 has an invalid length. [ 114.522217][T12707] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4420'. [ 115.035784][T12792] netlink: 'syz.1.4461': attribute type 21 has an invalid length. [ 115.347175][T12838] loop1: detected capacity change from 0 to 764 [ 115.397586][T12838] Symlink component flag not implemented [ 115.437295][T12838] Symlink component flag not implemented (7) [ 115.789334][T12883] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.809477][T12883] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.141769][T12935] netlink: 'syz.1.4529': attribute type 5 has an invalid length. [ 116.543052][T12983] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 116.766749][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 116.766765][ T29] audit: type=1400 audit(165.538:20758): avc: denied { setopt } for pid=13012 comm="syz.0.4569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 117.036921][ T29] audit: type=1400 audit(165.798:20759): avc: denied { getopt } for pid=13050 comm="syz.2.4586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 117.185324][T13072] validate_nla: 2 callbacks suppressed [ 117.185343][T13072] netlink: 'syz.1.4596': attribute type 2 has an invalid length. [ 117.256731][T13081] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0) [ 117.266371][T13081] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535 [ 117.271906][T13083] xt_CT: You must specify a L4 protocol and not use inversions on it [ 117.379212][T13094] netlink: 'syz.4.4607': attribute type 3 has an invalid length. [ 117.425348][T13094] netlink: 'syz.4.4607': attribute type 3 has an invalid length. [ 117.456451][T13094] netlink: 'syz.4.4607': attribute type 3 has an invalid length. [ 117.464515][T13094] netlink: 'syz.4.4607': attribute type 3 has an invalid length. [ 117.472343][T13094] netlink: 'syz.4.4607': attribute type 3 has an invalid length. [ 117.480498][T13094] netlink: 'syz.4.4607': attribute type 3 has an invalid length. [ 117.495760][T13094] netlink: 'syz.4.4607': attribute type 3 has an invalid length. [ 117.516908][T13094] netlink: 'syz.4.4607': attribute type 3 has an invalid length. [ 117.528431][T13094] netlink: 'syz.4.4607': attribute type 3 has an invalid length. [ 117.538172][T13103] IPv6: Can't replace route, no match found [ 117.564994][ T416] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 117.700538][ T29] audit: type=1400 audit(166.468:20760): avc: denied { ioctl } for pid=13130 comm="syz.2.4626" path="socket:[35618]" dev="sockfs" ino=35618 ioctlcmd=0x8923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 117.725379][T13133] netdevsim netdevsim2 ªªªªªª: renamed from netdevsim0 [ 117.795306][T13144] xt_NFQUEUE: number of total queues is 0 [ 117.859335][T13151] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 118.050327][ T29] audit: type=1400 audit(166.818:20761): avc: denied { setopt } for pid=13179 comm="syz.0.4650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 118.119309][T13189] __nla_validate_parse: 23 callbacks suppressed [ 118.119407][T13189] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4653'. [ 118.140298][T13190] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 118.168454][T13195] netlink: 766 bytes leftover after parsing attributes in process `syz.4.4657'. [ 118.170036][T13196] xt_HMARK: proto mask must be zero with L3 mode [ 118.270893][ T29] audit: type=1400 audit(167.038:20762): avc: denied { read } for pid=13203 comm="syz.3.4662" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 118.349360][ T29] audit: type=1400 audit(167.108:20763): avc: denied { bind } for pid=13211 comm="syz.2.4667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 118.410276][T13223] xt_policy: too many policy elements [ 118.422954][T13225] xt_connbytes: Forcing CT accounting to be enabled [ 118.471155][T13225] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 118.490746][ T29] audit: type=1400 audit(167.258:20764): avc: denied { append } for pid=13231 comm="syz.2.4676" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 118.492297][T13232] usb usb1: usbfs: process 13232 (syz.2.4676) did not claim interface 0 before use [ 118.673553][ T29] audit: type=1400 audit(167.438:20765): avc: denied { write } for pid=13248 comm="syz.1.4685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 118.726742][ T29] audit: type=1400 audit(167.478:20766): avc: denied { connect } for pid=13255 comm="syz.2.4689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 118.844025][ T53] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 119.015438][T13282] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.114762][T13282] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.128480][T13295] loop4: detected capacity change from 0 to 1024 [ 119.146626][T13282] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.169239][T13295] Quota error (device loop4): do_check_range: Getting block 64 out of range 1-5 [ 119.179112][T13295] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.4707: Failed to acquire dquot type 0 [ 119.217257][T13295] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 119.232428][T13295] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #13: comm syz.4.4707: corrupted inode contents [ 119.248278][T13295] EXT4-fs error (device loop4): ext4_dirty_inode:6103: inode #13: comm syz.4.4707: mark_inode_dirty error [ 119.260480][T13295] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #13: comm syz.4.4707: corrupted inode contents [ 119.272922][T13295] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #13: comm syz.4.4707: mark_inode_dirty error [ 119.284781][T13295] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #13: comm syz.4.4707: corrupted inode contents [ 119.297174][T13282] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.297352][T13295] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 119.306341][T13282] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.318173][T13295] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #13: comm syz.4.4707: corrupted inode contents [ 119.324711][T13282] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.324760][T13282] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.358591][T13295] EXT4-fs error (device loop4): ext4_truncate:4255: inode #13: comm syz.4.4707: mark_inode_dirty error [ 119.370205][T13295] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 119.380365][T13295] EXT4-fs (loop4): 1 truncate cleaned up [ 119.387159][T13295] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.433567][T13297] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 119.495175][T13295] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 119.566087][ T3328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.579817][T13321] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4719'. [ 119.589055][T13321] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4719'. [ 119.669554][T13321] geneve3: entered promiscuous mode [ 119.675075][T13321] geneve3: entered allmulticast mode [ 119.752091][T13346] 9pnet: Could not find request transport: fdãU(œ;4¤U¨þ§i¦€ËäåæµÙû€ç‘äë@\@ÄÙ®Ô.L]5™ÑN»Aø  [ 120.074198][T13389] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4754'. [ 120.083575][T13389] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4754'. [ 120.417543][T13445] ieee802154 phy0 wpan0: encryption failed: -22 [ 120.572602][T13465] loop3: detected capacity change from 0 to 128 [ 120.585065][T13471] xt_TPROXY: Can be used only with -p tcp or -p udp [ 120.604007][T13475] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4795'. [ 120.622718][T13465] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 120.631435][T13465] FAT-fs (loop3): Filesystem has been set read-only [ 120.645328][T13477] vti0: entered promiscuous mode [ 120.675831][T13482] ip6t_srh: unknown srh invflags 92A7 [ 121.017121][T13536] cgroup: Unknown subsys name 'audit' [ 121.339753][T13584] loop1: detected capacity change from 0 to 512 [ 121.390798][T13584] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 121.473065][T13607] loop0: detected capacity change from 0 to 512 [ 121.487852][T13584] EXT4-fs warning (device loop1): dx_probe:839: inode #2: comm syz.1.4847: Unimplemented hash flags: 0x0001 [ 121.499508][T13584] EXT4-fs warning (device loop1): dx_probe:936: inode #2: comm syz.1.4847: Corrupt directory, running e2fsck is recommended [ 121.523991][T13611] netlink: 33912 bytes leftover after parsing attributes in process `syz.4.4860'. [ 121.535373][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.535829][T13607] EXT4-fs: Ignoring removed bh option [ 121.560379][T13607] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 121.622642][T13607] EXT4-fs (loop0): 1 truncate cleaned up [ 121.658941][T13607] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.681948][T13607] EXT4-fs error (device loop0): ext4_generic_delete_entry:2670: inode #2: block 13: comm syz.0.4859: bad entry in directory: inode out of bounds - offset=44, inode=32780, rec_len=16, size=1024 fake=0 [ 121.719559][T13607] EXT4-fs error (device loop0) in ext4_delete_entry:2741: Corrupt filesystem [ 121.759700][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.784288][T13643] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4876'. [ 121.808907][T13645] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4877'. [ 122.141828][T13701] mmap: syz.4.4904 (13701): VmData 167489536 exceed data ulimit 67108945. Update limits or use boot option ignore_rlimit_data. [ 122.308227][T13728] loop4: detected capacity change from 0 to 512 [ 122.319995][T13730] SELinux: security_context_str_to_sid (ð ) failed with errno=-22 [ 122.322356][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 122.322376][ T29] audit: type=1400 audit(171.088:20778): avc: denied { mounton } for pid=13727 comm="syz.1.4917" path="/1038/file0" dev="tmpfs" ino=5260 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 122.372887][T13728] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 122.399834][T13728] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8843e11c, mo2=0102] [ 122.422447][T13728] EXT4-fs (loop4): orphan cleanup on readonly fs [ 122.433784][ T29] audit: type=1400 audit(171.198:20779): avc: denied { connect } for pid=13737 comm="syz.1.4922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 122.464202][T13728] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #11: comm syz.4.4916: attempt to clear invalid blocks 1024 len 1 [ 122.493652][T13728] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.4916: bg 0: block 361: padding at end of block bitmap is not set [ 122.526828][T13728] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 122.545251][T13728] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.4916: invalid indirect mapped block 1811939328 (level 0) [ 122.560674][T13750] xt_CT: You must specify a L4 protocol and not use inversions on it [ 122.568919][T13728] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.4916: invalid indirect mapped block 2185560079 (level 1) [ 122.585387][T13728] EXT4-fs (loop4): 1 truncate cleaned up [ 122.591657][T13728] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 122.613810][ T54] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 122.647182][T13728] EXT4-fs warning (device loop4): dx_probe:863: inode #2: comm syz.4.4916: dx entry: limit 0 != root limit 125 [ 122.659160][T13728] EXT4-fs warning (device loop4): dx_probe:936: inode #2: comm syz.4.4916: Corrupt directory, running e2fsck is recommended [ 122.714108][ T3328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 122.941830][ T29] audit: type=1400 audit(171.698:20780): avc: denied { getopt } for pid=13798 comm="syz.4.4947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 123.008744][T13811] validate_nla: 14 callbacks suppressed [ 123.008764][T13811] netlink: 'syz.2.4958': attribute type 10 has an invalid length. [ 123.049521][T13811] batman_adv: batadv0: Adding interface: team0 [ 123.056051][T13811] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.081825][T13811] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 123.120945][T13825] loop1: detected capacity change from 0 to 1024 [ 123.129265][T13825] EXT4-fs: Ignoring removed bh option [ 123.173256][T13831] __nla_validate_parse: 2 callbacks suppressed [ 123.173277][T13831] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4965'. [ 123.196014][T13825] EXT4-fs: inline encryption not supported [ 123.208324][T13825] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 123.212311][T13834] netlink: 172 bytes leftover after parsing attributes in process `syz.4.4967'. [ 123.235360][T13825] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 123.254782][T13825] EXT4-fs error (device loop1): ext4_map_blocks:675: inode #3: block 2: comm syz.1.4960: lblock 2 mapped to illegal pblock 2 (length 1) [ 123.280530][T13825] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 123.292142][T13825] EXT4-fs error (device loop1): ext4_map_blocks:675: inode #3: block 48: comm syz.1.4960: lblock 0 mapped to illegal pblock 48 (length 1) [ 123.311024][T13825] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 123.320349][T13825] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.4960: Failed to acquire dquot type 0 [ 123.337045][T13825] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 123.349818][T13825] EXT4-fs error (device loop1): ext4_evict_inode:259: inode #11: comm syz.1.4960: mark_inode_dirty error [ 123.366519][T13825] EXT4-fs warning (device loop1): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 123.373123][T13847] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4973'. [ 123.384104][T13825] EXT4-fs (loop1): 1 orphan inode deleted [ 123.392919][T13825] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.406645][ T37] EXT4-fs error (device loop1): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 123.432481][ T37] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 123.441292][ T37] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:2: Failed to release dquot type 0 [ 123.490439][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.505220][ T3319] EXT4-fs error (device loop1): __ext4_get_inode_loc:4450: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 123.533490][T13861] loop4: detected capacity change from 0 to 512 [ 123.542746][ T3319] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 123.561114][T13861] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 123.569443][T13861] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 123.576883][ T3319] EXT4-fs error (device loop1): ext4_quota_off:7219: inode #3: comm syz-executor: mark_inode_dirty error [ 123.578351][T13861] System zones: 0-1, 15-15, 18-18, 34-34 [ 123.590878][T13866] vhci_hcd: invalid port number 94 [ 123.607887][ T29] audit: type=1400 audit(172.368:20781): avc: denied { ioctl } for pid=13862 comm="syz.0.4982" path="socket:[37745]" dev="sockfs" ino=37745 ioctlcmd=0x48f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 123.627073][T13861] EXT4-fs (loop4): orphan cleanup on readonly fs [ 123.642977][T13861] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0 [ 123.652825][T13861] EXT4-fs warning (device loop4): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 123.668722][T13861] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 123.681496][T13861] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.4979: bad orphan inode 16 [ 123.705330][T13861] ext4_test_bit(bit=15, block=18) = 1 [ 123.711673][T13861] is_bad_inode(inode)=0 [ 123.716289][T13861] NEXT_ORPHAN(inode)=0 [ 123.720851][T13861] max_ino=32 [ 123.724296][T13861] i_nlink=2 [ 123.728983][T13880] netlink: 'syz.1.4987': attribute type 25 has an invalid length. [ 123.731411][T13861] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 123.847765][ T29] audit: type=1400 audit(172.608:20782): avc: denied { read } for pid=13860 comm="syz.4.4979" name="file2" dev="loop4" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 123.888023][ T3328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.905139][T13901] netdevsim netdevsim3 ªªªªªª: renamed from netdevsim0 [ 123.970466][ T29] audit: type=1326 audit(172.738:20783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13906 comm="syz.3.5000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44bc9de969 code=0x7ffc0000 [ 124.022234][T13915] xt_NFQUEUE: number of total queues is 0 [ 124.309641][T13964] loop4: detected capacity change from 0 to 1024 [ 124.343488][T13964] EXT4-fs: Ignoring removed orlov option [ 124.369159][T13964] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 124.385678][T13971] netlink: 'syz.3.5029': attribute type 21 has an invalid length. [ 124.394363][T13971] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5029'. [ 124.407992][T13971] netlink: 'syz.3.5029': attribute type 4 has an invalid length. [ 124.415926][T13971] netlink: 'syz.3.5029': attribute type 3 has an invalid length. [ 124.424042][T13971] netlink: 3 bytes leftover after parsing attributes in process `syz.3.5029'. [ 124.437315][T13964] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a04cc01c, mo2=0002] [ 124.453204][T13964] System zones: 0-1, 3-36 [ 124.465351][T13964] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.491922][ T3328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.547662][T13988] vti0: entered promiscuous mode [ 124.604500][ T416] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 125.016946][T14066] xt_policy: too many policy elements [ 125.083469][T14074] netlink: 'syz.1.5081': attribute type 16 has an invalid length. [ 125.091421][T14074] netlink: 'syz.1.5081': attribute type 17 has an invalid length. [ 125.108789][T14076] netlink: 'syz.2.5080': attribute type 13 has an invalid length. [ 125.152922][T14074] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.171197][T14074] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.190597][T14074] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 125.306651][T14076] bridge0: port 3(dummy0) entered disabled state [ 125.313576][T14076] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.321733][T14076] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.418659][T14076] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.430144][T14076] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.477471][T14114] netlink: 'syz.3.5101': attribute type 2 has an invalid length. [ 125.507378][T14076] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.516987][T14076] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.526378][T14076] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.549828][T14108] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5098'. [ 125.559340][T14108] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5098'. [ 125.600106][T14121] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5106'. [ 125.609108][T14121] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5106'. [ 125.634995][T14123] netlink: 'syz.0.5104': attribute type 3 has an invalid length. [ 125.744822][T14138] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5112'. [ 126.329266][T14234] vti1: entered promiscuous mode [ 126.395821][T14242] batadv_slave_1: entered promiscuous mode [ 126.402036][T14242] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.831040][T14310] loop3: detected capacity change from 0 to 764 [ 126.883642][T14310] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 126.905725][T14320] loop2: detected capacity change from 0 to 512 [ 126.947159][T14320] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 126.991207][T14320] EXT4-fs (loop2): 1 truncate cleaned up [ 127.021958][T14320] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.145054][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.155884][T14346] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 127.163239][T14346] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 127.170956][T14346] vhci_hcd vhci_hcd.0: Device attached [ 127.204822][T14347] vhci_hcd: connection closed [ 127.205656][ T37] vhci_hcd: stop threads [ 127.214802][ T37] vhci_hcd: release socket [ 127.219534][ T37] vhci_hcd: disconnect device [ 127.437611][T14379] loop2: detected capacity change from 0 to 512 [ 127.470152][T14379] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 127.503039][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 127.503060][ T29] audit: type=1400 audit(176.268:20796): avc: denied { bind } for pid=14385 comm="syz.4.5230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 127.528863][ T29] audit: type=1400 audit(176.268:20797): avc: denied { rmdir } for pid=14377 comm="syz.2.5227" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 127.565699][T14379] Quota error (device loop2): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 127.579389][T14379] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 127.590491][T14379] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.5227: Failed to acquire dquot type 0 [ 127.633565][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 127.865401][T14422] ip6erspan0: entered promiscuous mode [ 127.998069][T14439] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (7) [ 128.054708][T14448] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 128.061617][T14448] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 128.069883][T14448] vhci_hcd vhci_hcd.0: Device attached [ 128.086458][T14448] vhci_hcd vhci_hcd.0: port 0 already used [ 128.104060][T14449] vhci_hcd: connection closed [ 128.104245][ T37] vhci_hcd: stop threads [ 128.113304][ T37] vhci_hcd: release socket [ 128.117991][ T37] vhci_hcd: disconnect device [ 128.162844][ T29] audit: type=1400 audit(176.928:20798): avc: denied { connect } for pid=14464 comm="syz.4.5268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 128.266611][ T29] audit: type=1400 audit(177.038:20799): avc: denied { ioctl } for pid=14478 comm="syz.4.5275" path="socket:[40200]" dev="sockfs" ino=40200 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 128.381410][T14493] __nla_validate_parse: 8 callbacks suppressed [ 128.381432][T14493] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5282'. [ 128.392936][T14495] loop2: detected capacity change from 0 to 512 [ 128.415649][T14495] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 128.450141][T14495] EXT4-fs warning (device loop2): dx_probe:839: inode #2: comm syz.2.5284: Unimplemented hash flags: 0x0001 [ 128.462272][T14495] EXT4-fs warning (device loop2): dx_probe:936: inode #2: comm syz.2.5284: Corrupt directory, running e2fsck is recommended [ 128.505931][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.570612][T14508] loop2: detected capacity change from 0 to 8192 [ 128.601671][T14516] x_tables: unsorted entry at hook 1 [ 128.716661][T14530] netlink: 404 bytes leftover after parsing attributes in process `syz.2.5296'. [ 128.725948][T14530] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5296'. [ 128.735082][T14530] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5296'. [ 128.744409][T14530] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5296'. [ 128.801167][T14537] netlink: 763 bytes leftover after parsing attributes in process `syz.3.5304'. [ 128.852316][T14547] netlink: 452 bytes leftover after parsing attributes in process `syz.4.5308'. [ 128.865171][T14549] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (5) [ 128.975050][T14563] validate_nla: 49 callbacks suppressed [ 128.975140][T14563] netlink: 'syz.0.5316': attribute type 1 has an invalid length. [ 128.989072][T14563] netlink: 228 bytes leftover after parsing attributes in process `syz.0.5316'. [ 129.019434][T14568] loop2: detected capacity change from 0 to 512 [ 129.043716][T14568] EXT4-fs: Ignoring removed nomblk_io_submit option [ 129.056978][ T29] audit: type=1400 audit(177.818:20800): avc: denied { name_connect } for pid=14572 comm="syz.4.5321" dest=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 129.063512][T14568] EXT4-fs: Ignoring removed mblk_io_submit option [ 129.098717][T14568] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 129.110331][T14568] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 129.142357][T14568] EXT4-fs (loop2): 1 truncate cleaned up [ 129.155175][T14568] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.178571][ T29] audit: type=1400 audit(177.948:20801): avc: denied { create } for pid=14567 comm="syz.2.5319" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=blk_file permissive=1 [ 129.199688][T14568] EXT4-fs error (device loop2): ext4_map_blocks:675: inode #2: block 4: comm syz.2.5319: lblock 0 mapped to illegal pblock 4 (length 1) [ 129.231606][T14568] EXT4-fs (loop2): Remounting filesystem read-only [ 129.326630][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.346870][T14607] xt_CT: You must specify a L4 protocol and not use inversions on it [ 129.417677][T14617] netlink: 197276 bytes leftover after parsing attributes in process `syz.0.5342'. [ 129.469556][T14621] netlink: 'syz.1.5344': attribute type 3 has an invalid length. [ 129.477937][T14621] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5344'. [ 129.723797][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 129.759171][T14669] netlink: 'syz.3.5368': attribute type 1 has an invalid length. [ 129.784642][T14672] vlan0: entered promiscuous mode [ 129.866661][T14686] netlink: 'syz.0.5376': attribute type 25 has an invalid length. [ 129.963550][ T29] audit: type=1400 audit(178.728:20802): avc: denied { mount } for pid=14696 comm="syz.3.5383" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 130.003706][T14703] ipt_rpfilter: unknown options [ 130.110273][T14720] tmpfs: Bad value for 'mpol' [ 130.552386][T14785] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 130.616592][ T29] audit: type=1400 audit(179.388:20803): avc: denied { tracepoint } for pid=14792 comm="syz.2.5430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 130.693843][T14797] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 130.906197][T14830] netlink: 'syz.3.5446': attribute type 5 has an invalid length. [ 130.976391][T14836] vhci_hcd: invalid port number 254 [ 131.081619][T14853] 9pnet_fd: Insufficient options for proto=fd [ 131.166817][T14867] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 131.423512][T14905] netlink: 'syz.1.5493': attribute type 3 has an invalid length. [ 131.431664][T14905] netlink: 'syz.1.5493': attribute type 3 has an invalid length. [ 131.434892][T14907] netlink: 'syz.0.5483': attribute type 13 has an invalid length. [ 131.448841][T14909] netlink: 'syz.3.5485': attribute type 16 has an invalid length. [ 131.454659][T14905] netlink: 'syz.1.5493': attribute type 3 has an invalid length. [ 131.521740][T14909] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 131.632511][T14907] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.645972][T14907] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.686997][T14907] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.696447][T14907] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.706232][T14907] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.740457][T14917] bridge0: port 3(dummy0) entered disabled state [ 131.888006][T14937] xt_policy: too many policy elements [ 131.997622][T14951] loop3: detected capacity change from 0 to 1024 [ 132.018524][T14951] EXT4-fs: Ignoring removed orlov option [ 132.046723][T14951] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 132.075025][T14951] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a04cc01c, mo2=0002] [ 132.096843][T14951] System zones: 0-1, 3-36 [ 132.115875][T14951] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.225163][T14981] vhci_hcd: invalid port number 94 [ 132.240087][ T3327] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.675132][T15046] loop2: detected capacity change from 0 to 1024 [ 132.711224][T15046] __quota_error: 5 callbacks suppressed [ 132.711239][T15046] Quota error (device loop2): do_check_range: Getting block 64 out of range 1-5 [ 132.726593][T15046] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 132.736171][T15046] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.5551: Failed to acquire dquot type 0 [ 132.752083][T15046] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 132.783642][T15046] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #13: comm syz.2.5551: corrupted inode contents [ 132.823479][T15046] EXT4-fs error (device loop2): ext4_dirty_inode:6103: inode #13: comm syz.2.5551: mark_inode_dirty error [ 132.854105][T15046] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #13: comm syz.2.5551: corrupted inode contents [ 132.887997][T15046] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #13: comm syz.2.5551: mark_inode_dirty error [ 133.003668][T15046] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #13: comm syz.2.5551: corrupted inode contents [ 133.020629][T15085] loop0: detected capacity change from 0 to 2048 [ 133.032843][T15046] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 133.054282][ T3309] loop0: p1 < > p4 [ 133.060311][ T3309] loop0: p4 size 8388608 extends beyond EOD, truncated [ 133.069352][T15046] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #13: comm syz.2.5551: corrupted inode contents [ 133.087599][T15046] EXT4-fs error (device loop2): ext4_truncate:4255: inode #13: comm syz.2.5551: mark_inode_dirty error [ 133.104804][T15085] loop0: p1 < > p4 [ 133.111330][T15085] loop0: p4 size 8388608 extends beyond EOD, truncated [ 133.112528][T15046] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 133.170828][ T3519] udevd[3519]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 133.184937][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 133.185364][T15046] EXT4-fs (loop2): 1 truncate cleaned up [ 133.226036][ T3519] udevd[3519]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 133.241147][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 133.268590][T15046] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.320460][T15117] syz.4.5585 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 133.364312][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.397555][T15125] loop0: detected capacity change from 0 to 512 [ 133.416997][T15125] EXT4-fs: Ignoring removed nobh option [ 133.441735][T15125] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.5591: bad orphan inode 15 [ 133.486226][T15125] ext4_test_bit(bit=14, block=5) = 0 [ 133.491917][T15125] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.531660][ T29] audit: type=1400 audit(182.298:20809): avc: denied { setattr } for pid=15124 comm="syz.0.5591" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 133.564718][ T37] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 133.580552][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.816639][T15174] __nla_validate_parse: 13 callbacks suppressed [ 133.816663][T15174] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.5614'. [ 133.875823][T15180] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5616'. [ 133.887834][T15180] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5616'. [ 133.955863][ T29] audit: type=1400 audit(182.728:20810): avc: denied { bind } for pid=15185 comm="syz.2.5621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 134.138609][T15208] geneve1: entered allmulticast mode [ 134.306751][T15226] validate_nla: 16 callbacks suppressed [ 134.306852][T15226] netlink: 'syz.0.5640': attribute type 3 has an invalid length. [ 134.340027][T15226] netlink: 'syz.0.5640': attribute type 3 has an invalid length. [ 134.356221][T15226] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5640'. [ 134.391949][T15240] netlink: 'syz.3.5645': attribute type 10 has an invalid length. [ 134.431374][T15242] xt_addrtype: ipv6 does not support BROADCAST matching [ 134.435435][T15240] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.445913][T15240] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.468669][T15240] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.475906][T15240] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.483310][T15240] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.490547][T15240] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.507194][T15251] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 134.531114][T15240] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 134.709524][T15283] netlink: 'syz.0.5668': attribute type 39 has an invalid length. [ 134.741513][T15285] netlink: 'syz.3.5669': attribute type 15 has an invalid length. [ 134.755915][T15287] Cannot find add_set index 0 as target [ 134.844114][ T37] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 134.892558][T15309] netlink: 'syz.1.5681': attribute type 21 has an invalid length. [ 134.941163][T15315] netlink: 763 bytes leftover after parsing attributes in process `syz.0.5682'. [ 134.984812][T15318] xt_l2tp: v2 doesn't support IP mode [ 135.137799][T15342] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.5696'. [ 135.181366][T15347] Cannot find set identified by id 65534 to match [ 135.383662][ T29] audit: type=1400 audit(184.148:20811): avc: denied { bind } for pid=15373 comm="syz.2.5711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 135.395325][T15377] Cannot find map_set index 0 as target [ 135.430654][T15381] 8021q: adding VLAN 0 to HW filter on device bond4 [ 135.569241][ T29] audit: type=1400 audit(184.338:20812): avc: denied { setopt } for pid=15402 comm="syz.0.5726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 135.600898][T15404] ip6t_srh: unknown srh match flags 4000 [ 135.757863][ T29] audit: type=1400 audit(184.518:20813): avc: denied { ioctl } for pid=15421 comm="syz.3.5735" path="socket:[42828]" dev="sockfs" ino=42828 ioctlcmd=0x48f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 135.807173][T15412] loop4: detected capacity change from 0 to 8192 [ 135.838913][T15430] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 135.845690][T15430] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 135.854131][T15430] vhci_hcd vhci_hcd.0: Device attached [ 135.890977][T15434] vhci_hcd vhci_hcd.0: port 0 already used [ 135.894142][T15437] netlink: 452 bytes leftover after parsing attributes in process `syz.3.5740'. [ 135.908886][T15431] vhci_hcd: connection closed [ 135.913636][ T37] vhci_hcd: stop threads [ 135.922597][ T37] vhci_hcd: release socket [ 135.927108][ T37] vhci_hcd: disconnect device [ 136.204984][T15473] ip6t_rpfilter: unknown options [ 136.319144][ T29] audit: type=1400 audit(185.088:20814): avc: denied { view } for pid=15488 comm="syz.0.5764" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 136.365993][T15494] netlink: 168 bytes leftover after parsing attributes in process `syz.4.5765'. [ 136.390688][ T29] audit: type=1400 audit(185.158:20815): avc: denied { setopt } for pid=15496 comm="syz.3.5769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 136.479302][T15509] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5775'. [ 136.538997][T15519] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5780'. [ 136.643489][T15532] netlink: 'syz.2.5787': attribute type 5 has an invalid length. [ 136.741951][ T29] audit: type=1400 audit(185.498:20816): avc: denied { read } for pid=15545 comm="syz.1.5794" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 136.817221][T15554] netlink: 'syz.3.5797': attribute type 8 has an invalid length. [ 136.948421][T15579] (unnamed net_device) (uninitialized): option ad_select: invalid value (34) [ 136.954855][T15581] 9pnet_fd: Insufficient options for proto=fd [ 137.173639][T15617] netlink: 'syz.0.5828': attribute type 11 has an invalid length. [ 137.212198][T15621] loop4: detected capacity change from 0 to 128 [ 137.495759][T15657] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.530576][T15667] netlink: 'syz.1.5853': attribute type 10 has an invalid length. [ 137.565582][T15667] bridge0: entered promiscuous mode [ 137.571499][T15667] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 137.572808][T15673] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 137.688746][T15680] loop0: detected capacity change from 0 to 764 [ 137.787269][T15699] loop3: detected capacity change from 0 to 512 [ 137.850866][T15699] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 137.866734][T15699] __quota_error: 3 callbacks suppressed [ 137.866747][T15699] Quota error (device loop3): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 137.883266][T15699] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 137.893610][T15699] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.5867: Failed to acquire dquot type 0 [ 137.917739][ T3327] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 137.989931][T15712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.998389][T15712] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.005980][T15712] batman_adv: batadv0: Interface activated: team0 [ 138.014241][T15712] bridge0: port 3(dummy0) entered blocking state [ 138.020712][T15712] bridge0: port 3(dummy0) entered forwarding state [ 138.030259][T15712] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 138.083229][T15716] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.090506][T15716] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.202397][T15716] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 138.290304][T15716] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.300320][T15716] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.310413][T15716] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.337814][T15722] bridge0: port 3(dummy0) entered disabled state [ 138.358669][T15738] vti0: entered promiscuous mode [ 138.386329][T15744] bond0: left promiscuous mode [ 138.391367][T15744] bond_slave_0: left promiscuous mode [ 138.397190][T15744] bond_slave_1: left promiscuous mode [ 138.402843][T15744] bridge0: left promiscuous mode [ 138.413100][T15744] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 138.487202][T15752] tmpfs: Bad value for 'mpol' [ 138.630584][ T29] audit: type=1400 audit(187.398:20820): avc: denied { create } for pid=15769 comm="syz.1.5913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 138.652490][T15771] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 138.676396][ T29] audit: type=1400 audit(187.398:20821): avc: denied { write } for pid=15769 comm="syz.1.5913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 138.974703][ T29] audit: type=1400 audit(187.738:20822): avc: denied { getopt } for pid=15806 comm="syz.0.5929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 139.521204][T15827] validate_nla: 5 callbacks suppressed [ 139.521235][T15827] netlink: 'syz.4.5921': attribute type 10 has an invalid length. [ 139.521287][ T29] audit: type=1400 audit(188.288:20823): avc: denied { write } for pid=15825 comm="syz.0.5925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 139.560636][T15827] : (slave bridge0): Enslaving as an active interface with an up link [ 139.627570][T15839] __nla_validate_parse: 5 callbacks suppressed [ 139.627589][T15839] netlink: 197276 bytes leftover after parsing attributes in process `syz.4.5938'. [ 139.692447][T15849] netlink: 'syz.1.5942': attribute type 28 has an invalid length. [ 139.692544][ T29] audit: type=1400 audit(188.458:20824): avc: denied { ioctl } for pid=15846 comm="syz.2.5940" path="socket:[44467]" dev="sockfs" ino=44467 ioctlcmd=0x8919 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 139.837242][T15868] netlink: 'syz.1.5950': attribute type 10 has an invalid length. [ 140.019625][ T29] audit: type=1400 audit(188.788:20825): avc: denied { checkpoint_restore } for pid=15894 comm="syz.0.5965" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 140.244550][T15929] netlink: 'syz.3.5982': attribute type 3 has an invalid length. [ 140.252376][T15929] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5982'. [ 140.365637][T15947] netlink: 763 bytes leftover after parsing attributes in process `syz.4.5990'. [ 140.492066][T15965] loop0: detected capacity change from 0 to 2048 [ 140.515371][T15974] netlink: 'syz.2.6001': attribute type 3 has an invalid length. [ 140.551891][T15974] netlink: 'syz.2.6001': attribute type 3 has an invalid length. [ 140.580521][T15974] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6001'. [ 140.591922][ T29] audit: type=1400 audit(189.358:20826): avc: denied { write } for pid=15984 comm="syz.4.6006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 140.607085][ T3309] Alternate GPT is invalid, using primary GPT. [ 140.614296][T15984] delete_channel: no stack [ 140.617984][ T3309] loop0: p2 p3 p7 [ 140.681979][T15965] Alternate GPT is invalid, using primary GPT. [ 140.688690][T15965] loop0: p2 p3 p7 [ 140.721445][ T29] audit: type=1400 audit(189.488:20827): avc: denied { read } for pid=15963 comm="syz.0.5998" name="loop0p2" dev="devtmpfs" ino=989 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 140.818566][T16007] netlink: 'syz.4.6017': attribute type 15 has an invalid length. [ 140.825936][ T3519] udevd[3519]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 140.836646][ T3523] udevd[3523]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 140.838918][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 140.887431][ T3519] udevd[3519]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 140.890332][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 140.904817][ T3523] udevd[3523]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 140.985281][T16027] netlink: 'syz.1.6028': attribute type 2 has an invalid length. [ 140.993637][T16027] netlink: 'syz.1.6028': attribute type 8 has an invalid length. [ 141.001820][T16027] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6028'. [ 141.115253][T16043] netlink: 'syz.1.6035': attribute type 39 has an invalid length. [ 141.129548][T16042] lo: left promiscuous mode [ 141.154518][T16045] ieee802154 phy0 wpan0: encryption failed: -22 [ 141.177259][T16042] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 141.448960][T16080] xt_l2tp: v2 doesn't support IP mode [ 141.518923][T16091] netlink: 276 bytes leftover after parsing attributes in process `syz.4.6058'. [ 141.897963][T16135] netlink: 4100 bytes leftover after parsing attributes in process `syz.3.6077'. [ 142.285348][T16190] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6104'. [ 142.508401][T16224] netlink: 4280 bytes leftover after parsing attributes in process `syz.2.6122'. [ 142.516228][T16225] loop3: detected capacity change from 0 to 1024 [ 142.533907][T16224] netlink: 4280 bytes leftover after parsing attributes in process `syz.2.6122'. [ 142.594273][T16225] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.6120: Failed to acquire dquot type 0 [ 142.616424][T16225] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 142.631345][T16225] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #13: comm syz.3.6120: corrupted inode contents [ 142.646762][T16225] EXT4-fs error (device loop3): ext4_dirty_inode:6103: inode #13: comm syz.3.6120: mark_inode_dirty error [ 142.663265][T16225] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #13: comm syz.3.6120: corrupted inode contents [ 142.683488][T16225] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #13: comm syz.3.6120: mark_inode_dirty error [ 142.705482][T16225] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #13: comm syz.3.6120: corrupted inode contents [ 142.720119][T16225] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 142.730174][T16225] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #13: comm syz.3.6120: corrupted inode contents [ 142.753448][T16225] EXT4-fs error (device loop3): ext4_truncate:4255: inode #13: comm syz.3.6120: mark_inode_dirty error [ 142.787376][T16225] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 142.808661][T16242] loop0: detected capacity change from 0 to 8192 [ 142.822577][T16225] EXT4-fs (loop3): 1 truncate cleaned up [ 142.836369][T16225] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.852231][T16242] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 142.953812][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 142.953831][ T29] audit: type=1400 audit(191.728:20838): avc: denied { getopt } for pid=16266 comm="syz.2.6142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 143.085180][ T3327] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.360000][T16323] wg1: entered promiscuous mode [ 143.365097][T16323] wg1: entered allmulticast mode [ 143.467798][T16321] loop4: detected capacity change from 0 to 8192 [ 143.902540][T16390] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20001 - 0 [ 143.911501][T16390] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20001 - 0 [ 143.920381][T16390] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20001 - 0 [ 144.016848][ T29] audit: type=1400 audit(192.788:20839): avc: denied { write } for pid=16406 comm="syz.2.6212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 144.059069][T16412] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 144.212947][T16435] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 144.219594][T16435] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 144.227899][T16435] vhci_hcd vhci_hcd.0: Device attached [ 144.314155][T16445] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 20001 - 0 [ 144.323914][T16445] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 20001 - 0 [ 144.333065][T16445] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 20001 - 0 [ 144.361286][T16447] bridge0: port 3(dummy0) entered blocking state [ 144.367911][T16447] bridge0: port 3(dummy0) entered forwarding state [ 144.406657][T16447] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 144.503541][ T2969] usb 2-1: SetAddress Request (2) to port 0 [ 144.509681][ T2969] usb 2-1: new SuperSpeed USB device number 2 using vhci_hcd [ 144.528231][T16435] vhci_hcd vhci_hcd.0: port 0 already used [ 144.537218][T16437] vhci_hcd: connection reset by peer [ 144.542880][ T12] vhci_hcd: stop threads [ 144.547294][ T12] vhci_hcd: release socket [ 144.551768][ T12] vhci_hcd: disconnect device [ 144.731862][T16456] vti0: entered promiscuous mode [ 144.736355][T16458] loop4: detected capacity change from 0 to 512 [ 144.771893][T16458] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 144.825204][T16458] Quota error (device loop4): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 144.849805][T16458] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 144.860588][T16458] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.6233: Failed to acquire dquot type 0 [ 144.900669][T16480] loop1: detected capacity change from 0 to 512 [ 144.932941][T16480] EXT4-fs (loop1): orphan cleanup on readonly fs [ 144.939554][T16480] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 144.940696][ T3328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 144.966288][T16480] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 144.986607][T16480] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.6245: attempt to clear invalid blocks 2 len 1 [ 145.010717][T16480] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.6245: invalid indirect mapped block 1819239214 (level 0) [ 145.028609][T16480] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.6245: invalid indirect mapped block 1819239214 (level 1) [ 145.051134][T16480] EXT4-fs (loop1): 1 truncate cleaned up [ 145.061317][T16480] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 145.101994][ T29] audit: type=1400 audit(193.858:20840): avc: denied { setattr } for pid=16494 comm="syz.3.6253" name="ttyS3" dev="devtmpfs" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 145.128185][T16480] EXT4-fs error (device loop1): ext4_lookup:1786: inode #2: comm syz.1.6245: 'file1' linked to parent dir [ 145.219232][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.285136][ T29] audit: type=1400 audit(194.058:20841): avc: denied { write } for pid=16523 comm="syz.3.6267" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 145.480443][T16551] __nla_validate_parse: 10 callbacks suppressed [ 145.480462][T16551] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6279'. [ 145.525848][T16558] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6284'. [ 145.800605][T16602] netlink: 292 bytes leftover after parsing attributes in process `syz.3.6305'. [ 145.844312][T16602] validate_nla: 10 callbacks suppressed [ 145.844394][T16602] netlink: 'syz.3.6305': attribute type 2 has an invalid length. [ 145.858255][T16602] netlink: 'syz.3.6305': attribute type 1 has an invalid length. [ 145.866401][T16602] netlink: 'syz.3.6305': attribute type 1 has an invalid length. [ 145.874307][T16602] netlink: 100 bytes leftover after parsing attributes in process `syz.3.6305'. [ 145.945072][T16619] C: renamed from team_slave_0 [ 145.958669][T16619] netlink: 'syz.1.6313': attribute type 3 has an invalid length. [ 145.966777][T16619] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6313'. [ 145.976339][T16619] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 146.119424][T16639] netlink: 'syz.3.6324': attribute type 32 has an invalid length. [ 146.127907][T16639] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6324'. [ 146.144592][T16643] netlink: 'syz.0.6325': attribute type 2 has an invalid length. [ 146.152402][T16643] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6325'. [ 146.391913][T16654] loop1: detected capacity change from 0 to 128 [ 146.460478][T16654] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 550) [ 146.470028][T16654] FAT-fs (loop1): Filesystem has been set read-only [ 146.504476][ T29] audit: type=1326 audit(195.268:20842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16667 comm="syz.2.6336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f925d1fe969 code=0x7ffc0000 [ 146.527936][ T29] audit: type=1326 audit(195.268:20843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16667 comm="syz.2.6336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f925d1fe969 code=0x7ffc0000 [ 146.552559][ T29] audit: type=1326 audit(195.268:20844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16667 comm="syz.2.6336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f925d1fe969 code=0x7ffc0000 [ 146.577525][ T29] audit: type=1326 audit(195.268:20845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16667 comm="syz.2.6336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f925d1fe969 code=0x7ffc0000 [ 146.637032][T16673] netlink: 'syz.1.6339': attribute type 1 has an invalid length. [ 146.651710][T16680] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6343'. [ 146.653524][T16679] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6342'. [ 146.775423][T16693] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 146.784603][T16695] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 146.861492][T16706] netlink: 'syz.3.6355': attribute type 1 has an invalid length. [ 146.913905][T16710] netlink: 6032 bytes leftover after parsing attributes in process `syz.2.6357'. [ 147.205969][T16757] netlink: 'syz.0.6381': attribute type 21 has an invalid length. [ 147.233524][T16757] netlink: 'syz.0.6381': attribute type 6 has an invalid length. [ 147.616090][T16814] bridge2: entered promiscuous mode [ 147.621404][T16814] bridge2: entered allmulticast mode [ 147.675638][T16824] loop2: detected capacity change from 0 to 128 [ 147.735376][T16824] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 147.763152][T16824] System zones: 1-3, 19-19, 35-36 [ 147.773967][T16824] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 147.804091][T16838] tmpfs: Bad value for 'mpol' [ 147.832767][T16824] EXT4-fs warning (device loop2): ext4_group_extend:1862: can't shrink FS - resize aborted [ 147.933638][ T3317] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 148.082616][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 148.082634][ T29] audit: type=1326 audit(196.848:20853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16865 comm="syz.0.6435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8fe38e969 code=0x7ffc0000 [ 148.112438][ T29] audit: type=1326 audit(196.848:20854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16865 comm="syz.0.6435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8fe38e969 code=0x7ffc0000 [ 148.138801][ T29] audit: type=1326 audit(196.908:20855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16865 comm="syz.0.6435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7fc8fe38e969 code=0x7ffc0000 [ 148.199124][ T29] audit: type=1326 audit(196.968:20856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16865 comm="syz.0.6435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8fe38e969 code=0x7ffc0000 [ 148.222647][ T29] audit: type=1326 audit(196.968:20857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16865 comm="syz.0.6435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8fe38e969 code=0x7ffc0000 [ 148.312596][ T29] audit: type=1400 audit(197.048:20858): avc: denied { ioctl } for pid=16890 comm="syz.0.6444" path="socket:[49154]" dev="sockfs" ino=49154 ioctlcmd=0x894c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 148.478348][T16917] (unnamed net_device) (uninitialized): (slave gre0): Device is not bonding slave [ 148.488164][T16917] (unnamed net_device) (uninitialized): option active_slave: invalid value (gre0) [ 148.543808][T16921] new mount options do not match the existing superblock, will be ignored [ 148.663479][ T29] audit: type=1400 audit(197.428:20859): avc: denied { unmount } for pid=3319 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 148.686048][T16938] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 148.767530][ T29] audit: type=1326 audit(197.528:20860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16948 comm="syz.3.6475" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f44bc9de969 code=0x0 [ 149.039573][ T29] audit: type=1400 audit(197.808:20861): avc: denied { create } for pid=16986 comm="syz.0.6493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 149.114704][ T29] audit: type=1400 audit(197.828:20862): avc: denied { write } for pid=16986 comm="syz.0.6493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 149.438395][T17045] loop4: detected capacity change from 0 to 512 [ 149.458625][T17051] loop3: detected capacity change from 0 to 2048 [ 149.492296][T17051] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.519975][T17045] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.554516][T17051] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 149.559689][T17045] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #2: comm syz.4.6523: corrupted inode contents [ 149.576778][ T2969] usb 2-1: device descriptor read/8, error -110 [ 149.584389][T17051] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.6526: bg 0: block 2: invalid block bitmap [ 149.602664][T17045] EXT4-fs error (device loop4): ext4_dirty_inode:6103: inode #2: comm syz.4.6523: mark_inode_dirty error [ 149.638408][T17045] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #2: comm syz.4.6523: corrupted inode contents [ 149.656936][ T3327] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.693550][ T2969] usb 2-1: new SuperSpeed USB device number 2 using vhci_hcd [ 149.719843][ T2969] usb 2-1: enqueue for inactive port 0 [ 149.746472][ T2969] usb 2-1: enqueue for inactive port 0 [ 149.752187][ T2969] usb 2-1: enqueue for inactive port 0 [ 149.769026][ T3328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.858627][T17099] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 149.867394][T17099] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 149.876588][T17099] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 149.885364][T17099] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 149.930488][T17099] geneve3: entered promiscuous mode [ 149.935832][T17099] geneve3: entered allmulticast mode [ 150.018881][T17121] ip6t_srh: unknown srh match flags 4000 [ 150.224446][T17154] SET target dimension over the limit! [ 150.268513][T17161] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 150.327563][T17162] batman_adv: batadv0: Interface deactivated: team0 [ 150.405032][T17166] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.415122][T17166] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 150.520902][T17188] __nla_validate_parse: 21 callbacks suppressed [ 150.520983][T17188] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6588'. [ 150.804106][ T2969] usb usb2-port1: attempt power cycle [ 150.866419][T17239] validate_nla: 12 callbacks suppressed [ 150.866439][T17239] netlink: 'syz.2.6617': attribute type 1 has an invalid length. [ 150.899310][T17239] netlink: 'syz.2.6617': attribute type 1 has an invalid length. [ 150.912325][T17242] wg1: entered promiscuous mode [ 150.917590][T17242] wg1: entered allmulticast mode [ 151.072083][T17254] loop2: detected capacity change from 0 to 8192 [ 151.117441][T17268] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6632'. [ 151.213847][T17278] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6635'. [ 151.238569][T17278] netlink: 'syz.2.6635': attribute type 1 has an invalid length. [ 151.246608][T17278] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6635'. [ 151.279320][T17288] loop1: detected capacity change from 0 to 128 [ 151.301072][T17288] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 151.329737][T17296] netlink: 'syz.2.6644': attribute type 30 has an invalid length. [ 151.377859][T17300] netlink: 'syz.1.6647': attribute type 1 has an invalid length. [ 151.461838][T17312] netlink: 'syz.0.6653': attribute type 21 has an invalid length. [ 151.493230][T17318] xt_ipcomp: unknown flags 12 [ 151.499795][T17312] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6653'. [ 151.593084][T17332] netlink: 'syz.1.6663': attribute type 1 has an invalid length. [ 151.660421][T17342] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6668'. [ 151.669713][T17342] netlink: 'syz.1.6668': attribute type 1 has an invalid length. [ 151.677791][T17342] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6668'. [ 151.751870][T17351] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6671'. [ 151.895744][T17373] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6683'. [ 151.945865][T17378] delete_channel: no stack [ 152.001052][T17389] netlink: 72 bytes leftover after parsing attributes in process `syz.4.6690'. [ 152.209400][T17425] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.218710][T17425] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.227787][T17425] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.238051][T17425] geneve2: entered promiscuous mode [ 152.243652][T17425] geneve2: entered allmulticast mode [ 152.375850][T17439] tc_dump_action: action bad kind [ 152.437468][T17448] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 152.456180][T17453] IPv6: sit1: Disabled Multicast RS [ 152.620382][T17482] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 152.637742][ T2969] usb usb2-port1: unable to enumerate USB device [ 152.642140][T17478] IPv6: sit2: Disabled Multicast RS [ 152.751259][T17499] loop3: detected capacity change from 0 to 512 [ 152.812822][T17499] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.6745: bad orphan inode 15 [ 152.835398][T17499] ext4_test_bit(bit=14, block=18) = 1 [ 152.837138][T17512] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 152.841210][T17499] is_bad_inode(inode)=0 [ 152.852686][T17499] NEXT_ORPHAN(inode)=1023 [ 152.857224][T17499] max_ino=32 [ 152.860501][T17499] i_nlink=0 [ 152.884300][T17499] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2962: inode #15: comm syz.3.6745: corrupted xattr block 19: invalid header [ 152.905784][T17499] EXT4-fs warning (device loop3): ext4_evict_inode:279: xattr delete (err -117) [ 152.916259][T17499] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 153.027972][ T3327] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 153.235880][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 153.235904][ T29] audit: type=1400 audit(202.008:20869): avc: denied { write } for pid=17557 comm="syz.2.6774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 153.289793][T17566] bond0: (slave bond_slave_0): Releasing backup interface [ 153.399335][T17583] loop4: detected capacity change from 0 to 128 [ 153.430008][T17588] xt_CT: You must specify a L4 protocol and not use inversions on it [ 153.438969][T17583] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 550) [ 153.456862][T17583] FAT-fs (loop4): Filesystem has been set read-only [ 153.466318][ T29] audit: type=1400 audit(202.228:20870): avc: denied { setopt } for pid=17590 comm="syz.2.6788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 153.513684][ T29] audit: type=1326 audit(202.278:20871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17592 comm="syz.1.6791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f656c30e969 code=0x7ffc0000 [ 153.537748][ T29] audit: type=1326 audit(202.278:20872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17592 comm="syz.1.6791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f656c30e969 code=0x7ffc0000 [ 153.596711][ T29] audit: type=1326 audit(202.288:20873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17592 comm="syz.1.6791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7f656c30e969 code=0x7ffc0000 [ 153.620206][ T29] audit: type=1326 audit(202.288:20874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17592 comm="syz.1.6791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f656c30e969 code=0x7ffc0000 [ 153.644150][ T29] audit: type=1326 audit(202.288:20875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17592 comm="syz.1.6791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f656c30e969 code=0x7ffc0000 [ 153.840061][T17639] netdevsim netdevsim1: Firmware load for './file0/../file0' refused, path contains '..' component [ 153.854713][ T29] audit: type=1326 audit(202.628:20876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17634 comm="syz.3.6812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44bc9de969 code=0x7ffc0000 [ 153.879722][ T29] audit: type=1326 audit(202.628:20877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17634 comm="syz.3.6812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44bc9de969 code=0x7ffc0000 [ 153.992969][ T29] audit: type=1326 audit(202.678:20878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17634 comm="syz.3.6812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7f44bc9de969 code=0x7ffc0000 [ 154.115843][T17676] netlink: 'syz.1.6832': attribute type 1 has an invalid length. [ 154.160147][T17685] loop3: detected capacity change from 0 to 512 [ 154.202371][T17685] EXT4-fs: Ignoring removed bh option [ 154.224854][T17685] EXT4-fs: Invalid want_extra_isize 5 [ 154.372457][T17716] netlink: 'syz.3.6851': attribute type 3 has an invalid length. [ 154.443080][T17728] loop1: detected capacity change from 0 to 128 [ 154.480875][T17728] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 154.489591][T17728] System zones: 1-3, 19-19, 35-36 [ 154.495513][T17728] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 154.517725][T17728] EXT4-fs warning (device loop1): ext4_group_extend:1862: can't shrink FS - resize aborted [ 154.559983][ T3319] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 154.844803][T17777] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 155.058789][T17805] sock: sock_timestamping_bind_phc: sock not bind to device [ 155.362335][T17857] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 155.407143][T17860] (unnamed net_device) (uninitialized): (slave gre0): Device is not bonding slave [ 155.417396][T17860] (unnamed net_device) (uninitialized): option active_slave: invalid value (gre0) [ 155.568498][T17884] futex_wake_op: syz.4.6934 tries to shift op by 32; fix this program [ 155.578590][T17883] loop1: detected capacity change from 0 to 256 [ 155.761652][T17908] __nla_validate_parse: 24 callbacks suppressed [ 155.761675][T17908] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6947'. [ 155.807714][T17908] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 155.817024][T17908] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 155.826215][T17908] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 155.835260][T17908] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 155.853187][T17913] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6949'. [ 155.862544][T17913] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6949'. [ 155.960569][T17928] xt_TCPMSS: Only works on TCP SYN packets [ 155.968409][T17930] validate_nla: 1 callbacks suppressed [ 155.968428][T17930] netlink: 'syz.1.6956': attribute type 10 has an invalid length. [ 156.001245][T17930] team0: Device hsr_slave_0 failed to register rx_handler [ 156.038951][T17940] netlink: 'syz.3.6962': attribute type 4 has an invalid length. [ 156.166185][T17959] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6971'. [ 156.249535][T17967] netlink: 'syz.1.6976': attribute type 5 has an invalid length. [ 156.275382][T17973] netlink: 'syz.0.6978': attribute type 13 has an invalid length. [ 156.305391][T17978] netlink: 'syz.3.6979': attribute type 16 has an invalid length. [ 156.314385][T17978] netlink: 'syz.3.6979': attribute type 17 has an invalid length. [ 156.331863][T17973] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.341728][T17973] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.350984][T17973] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.393182][T17978] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.411837][T17978] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 156.413238][T17982] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6991'. [ 156.436883][T17982] netlink: 'syz.4.6991': attribute type 5 has an invalid length. [ 156.445053][T17982] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6991'. [ 156.475490][T17982] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 156.484488][T17982] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 156.493160][T17982] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 156.502517][T17982] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 156.512668][T17982] geneve3: entered promiscuous mode [ 156.518269][T17982] geneve3: entered allmulticast mode [ 156.581270][T17994] netlink: 'syz.1.6997': attribute type 4 has an invalid length. [ 156.650832][T17998] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6999'. [ 156.697805][T18008] netlink: 'syz.4.6990': attribute type 1 has an invalid length. [ 156.711547][T18008] netlink: 'syz.4.6990': attribute type 1 has an invalid length. [ 157.006439][T18052] wg1: entered promiscuous mode [ 157.011511][T18052] wg1: entered allmulticast mode [ 157.032386][T18058] xt_connbytes: Forcing CT accounting to be enabled [ 157.042514][T18058] Cannot find set identified by id 0 to match [ 157.209212][T18085] Cannot find add_set index 0 as target [ 157.213734][T18086] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7034'. [ 157.417585][T18120] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7051'. [ 157.450506][T18120] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7051'. [ 157.628875][T18146] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551608) [ 157.639534][T18146] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 158.111437][T18226] Unknown options in mask 5 [ 158.317517][T18255] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 158.323887][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 158.323908][ T29] audit: type=1400 audit(207.088:20894): avc: denied { write } for pid=18256 comm="syz.2.7119" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 158.467380][T18275] netlink: set zone limit has 4 unknown bytes [ 158.513892][T18284] x_tables: ip_tables: tcp match: only valid for protocol 6 [ 158.727863][T18319] loop2: detected capacity change from 0 to 512 [ 158.750859][T18319] EXT4-fs: Ignoring removed nomblk_io_submit option [ 158.760161][T18319] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 158.820192][T18319] EXT4-fs (loop2): 1 truncate cleaned up [ 158.833009][T18319] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.867906][T18337] delete_channel: no stack [ 158.880245][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.999720][T18358] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 159.008690][T18358] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 159.017781][T18358] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 159.026994][T18358] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 159.052193][T18358] geneve4: entered promiscuous mode [ 159.057637][T18358] geneve4: entered allmulticast mode [ 159.430082][T18412] bond0: (slave bond_slave_0): Releasing backup interface [ 159.498859][T18423] loop3: detected capacity change from 0 to 764 [ 159.581369][T18434] syz.4.7204: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 159.590909][T18426] loop0: detected capacity change from 0 to 512 [ 159.596750][T18434] CPU: 0 UID: 0 PID: 18434 Comm: syz.4.7204 Not tainted 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(voluntary) [ 159.596823][T18434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 159.596892][T18434] Call Trace: [ 159.596902][T18434] [ 159.596914][T18434] __dump_stack+0x1d/0x30 [ 159.596944][T18434] dump_stack_lvl+0xe8/0x140 [ 159.596971][T18434] dump_stack+0x15/0x1b [ 159.596995][T18434] warn_alloc+0x12b/0x1a0 [ 159.597090][T18434] ? schedule+0x5f/0xd0 [ 159.597211][T18434] ? futex_unqueue+0xb9/0xf0 [ 159.597254][T18434] __vmalloc_node_range_noprof+0x9c/0xdf0 [ 159.597296][T18434] ? __pfx_futex_wake_mark+0x10/0x10 [ 159.597375][T18434] ? __rcu_read_unlock+0x4f/0x70 [ 159.597406][T18434] ? avc_has_perm_noaudit+0x1b1/0x200 [ 159.597436][T18434] ? should_fail_ex+0x30/0x280 [ 159.597483][T18434] ? xskq_create+0x36/0xe0 [ 159.597549][T18434] ? should_failslab+0x8c/0xb0 [ 159.597596][T18434] vmalloc_user_noprof+0x59/0x70 [ 159.597632][T18434] ? xskq_create+0x80/0xe0 [ 159.597669][T18434] xskq_create+0x80/0xe0 [ 159.597736][T18434] xsk_init_queue+0x95/0xf0 [ 159.597819][T18434] xsk_setsockopt+0x35c/0x510 [ 159.597858][T18434] ? __pfx_xsk_setsockopt+0x10/0x10 [ 159.597916][T18434] __sys_setsockopt+0x181/0x200 [ 159.597942][T18434] ? fpregs_restore_userregs+0xbb/0x190 [ 159.598025][T18434] __x64_sys_setsockopt+0x64/0x80 [ 159.598054][T18434] x64_sys_call+0x2bd5/0x2fb0 [ 159.598078][T18434] do_syscall_64+0xd0/0x1a0 [ 159.598107][T18434] ? clear_bhb_loop+0x40/0x90 [ 159.598219][T18434] ? clear_bhb_loop+0x40/0x90 [ 159.598258][T18434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.598288][T18434] RIP: 0033:0x7fc6a4d7e969 [ 159.598317][T18434] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.598350][T18434] RSP: 002b:00007fc6a33e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 159.598491][T18434] RAX: ffffffffffffffda RBX: 00007fc6a4fa5fa0 RCX: 00007fc6a4d7e969 [ 159.598510][T18434] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 159.598527][T18434] RBP: 00007fc6a4e00ab1 R08: 0000000000000004 R09: 0000000000000000 [ 159.598545][T18434] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 159.598634][T18434] R13: 0000000000000000 R14: 00007fc6a4fa5fa0 R15: 00007ffdc2b76e68 [ 159.598659][T18434] [ 159.598674][T18434] Mem-Info: [ 159.635403][T18426] EXT4-fs: Ignoring removed mblk_io_submit option [ 159.637630][T18434] active_anon:15527 inactive_anon:0 isolated_anon:0 [ 159.637630][T18434] active_file:5535 inactive_file:15037 isolated_file:0 [ 159.637630][T18434] unevictable:0 dirty:247 writeback:0 [ 159.637630][T18434] slab_reclaimable:3096 slab_unreclaimable:88808 [ 159.637630][T18434] mapped:29102 shmem:208 pagetables:1040 [ 159.637630][T18434] sec_pagetables:0 bounce:0 [ 159.637630][T18434] kernel_misc_reclaimable:0 [ 159.637630][T18434] free:1805900 free_pcp:6120 free_cma:0 [ 159.866243][T18450] loop2: detected capacity change from 0 to 512 [ 159.870396][T18434] Node 0 active_anon:62276kB inactive_anon:0kB active_file:22140kB inactive_file:60180kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:116376kB dirty:992kB writeback:0kB shmem:1168kB writeback_tmp:0kB kernel_stack:3216kB pagetables:4872kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 159.958968][T18434] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 159.959284][T18434] lowmem_reserve[]: 0 2884 7863 7863 [ 159.959325][T18434] Node 0 DMA32 free:2949928kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2953560kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:100kB free_cma:0kB [ 159.959515][T18434] lowmem_reserve[]: 0 0 4978 4978 [ 159.959543][T18434] Node 0 Normal free:4257548kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:62276kB inactive_anon:0kB active_file:22140kB inactive_file:60180kB unevictable:0kB writepending:992kB present:5242880kB managed:5098244kB mlocked:0kB bounce:0kB free_pcp:20492kB local_pcp:12552kB free_cma:0kB [ 159.959655][T18434] lowmem_reserve[]: 0 0 0 0 [ 159.959688][T18434] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 159.959888][T18434] Node 0 DMA32: 2*4kB (M) 2*8kB (M) 1*16kB (M) 4*32kB (M) 2*64kB (M) 2*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949928kB [ 159.960235][T18434] Node 0 Normal: 2*4kB (UE) 5*8kB (UE) 8*16kB (E) 81*32kB (UME) 129*64kB (UME) 124*128kB (UM) 86*256kB (UME) 64*512kB (UM) 32*1024kB (UME) 29*2048kB (UME) 997*4096kB (UM) = 4257552kB [ 159.960616][T18434] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 159.960637][T18434] 20860 total pagecache pages [ 159.960647][T18434] 0 pages in swap cache [ 159.960655][T18434] Free swap = 124996kB [ 159.960663][T18434] Total swap = 124996kB [ 159.960672][T18434] 2097051 pages RAM [ 159.960680][T18434] 0 pages HighMem/MovableOnly [ 159.960688][T18434] 80260 pages reserved [ 159.993280][T18426] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 159.993325][T18426] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 160.016404][T18426] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a043c01c, mo2=0102] [ 160.045706][T18450] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 160.088705][T18426] System zones: 0-2, 18-18, 34-34 [ 160.207572][T18450] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.241065][T18450] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 160.259113][T18426] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 160.263480][T18426] EXT4-fs (loop0): 1 truncate cleaned up [ 160.295724][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.298227][T18426] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.339585][T18426] EXT4-fs error (device loop0): ext4_find_dest_de:2054: inode #2: block 3: comm syz.0.7211: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 160.359213][ T29] audit: type=1400 audit(209.108:20895): avc: denied { link } for pid=18425 comm="syz.0.7211" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 160.410076][T18478] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 160.480277][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.491331][T18486] xt_CT: No such helper "netbios-ns" [ 160.552058][ T29] audit: type=1400 audit(209.318:20896): avc: denied { connect } for pid=18496 comm="syz.0.7229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 160.571937][T18500] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 160.839981][T18541] __nla_validate_parse: 20 callbacks suppressed [ 160.840001][T18541] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7254'. [ 160.873613][T18541] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.882607][T18541] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7254'. [ 160.898590][T18541] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 160.923455][T18547] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7257'. [ 160.978154][T18552] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7259'. [ 160.987622][T18552] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7259'. [ 161.051832][T18552] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 161.151569][T18572] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7270'. [ 161.171512][T18575] loop4: detected capacity change from 0 to 128 [ 161.185732][T18577] sock: sock_timestamping_bind_phc: sock not bind to device [ 161.214595][T18575] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 161.242102][T18575] System zones: 1-3, 19-19, 35-36 [ 161.255860][T18575] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 161.290160][T18575] EXT4-fs warning (device loop4): ext4_group_extend:1862: can't shrink FS - resize aborted [ 161.315830][ T3328] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 161.523545][T18627] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7295'. [ 161.758639][ T29] audit: type=1400 audit(210.528:20897): avc: granted { setsecparam } for pid=18634 comm="syz.1.7299" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 161.759901][T18640] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=18640 comm=syz.0.7308 [ 161.902514][T18655] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7307'. [ 161.911814][T18655] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7307'. [ 161.949968][T18661] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 162.131459][T18669] loop4: detected capacity change from 0 to 256 [ 162.154626][ T29] audit: type=1400 audit(210.918:20898): avc: denied { remount } for pid=18668 comm="syz.4.7315" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 162.246806][ T29] audit: type=1400 audit(211.018:20899): avc: denied { read } for pid=18685 comm="syz.2.7321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 162.277975][T18690] loop3: detected capacity change from 0 to 512 [ 162.312354][T18698] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7325'. [ 162.337785][T18690] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.389040][ T29] audit: type=1326 audit(211.148:20900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18704 comm="syz.4.7332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6a4d7e969 code=0x7ffc0000 [ 162.412596][ T29] audit: type=1326 audit(211.148:20901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18704 comm="syz.4.7332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7fc6a4d7e969 code=0x7ffc0000 [ 162.435976][ T29] audit: type=1326 audit(211.148:20902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18704 comm="syz.4.7332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6a4d7e969 code=0x7ffc0000 [ 162.459675][ T29] audit: type=1326 audit(211.148:20903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18704 comm="syz.4.7332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6a4d7e969 code=0x7ffc0000 [ 162.510568][ T3327] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.632180][T18736] tc_dump_action: action bad kind [ 162.721821][T18749] loop2: detected capacity change from 0 to 512 [ 162.734364][T18749] EXT4-fs: Ignoring removed i_version option [ 162.740760][T18749] EXT4-fs: Ignoring removed nomblk_io_submit option [ 162.761879][T18749] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 162.773295][T18749] System zones: 1-12 [ 162.778020][T18749] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.7352: bg 0: block 328: padding at end of block bitmap is not set [ 162.795406][T18749] ================================================================== [ 162.803906][T18749] BUG: KCSAN: data-race in _copy_to_iter / memcpy_and_pad [ 162.811509][T18749] [ 162.813886][T18749] read to 0xffff888119d32400 of 1024 bytes by task 3309 on cpu 1: [ 162.821910][T18749] _copy_to_iter+0x12d/0xdd0 [ 162.826672][T18749] copy_page_to_iter+0x171/0x2b0 [ 162.831999][T18749] filemap_read+0x413/0x990 [ 162.836632][T18749] blkdev_read_iter+0x22d/0x2e0 [ 162.841528][T18749] vfs_read+0x5cd/0x6f0 [ 162.845814][T18749] ksys_read+0xda/0x1a0 [ 162.850353][T18749] __x64_sys_read+0x40/0x50 [ 162.855424][T18749] x64_sys_call+0x2d77/0x2fb0 [ 162.860121][T18749] do_syscall_64+0xd0/0x1a0 [ 162.864738][T18749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.871157][T18749] [ 162.873503][T18749] write to 0xffff888119d325e0 of 26 bytes by task 18749 on cpu 0: [ 162.881787][T18749] memcpy_and_pad+0x48/0x80 [ 162.886412][T18749] ext4_update_super+0x790/0xb70 [ 162.891489][T18749] ext4_commit_super+0x40/0x280 [ 162.896461][T18749] ext4_handle_error+0x451/0x550 [ 162.901545][T18749] __ext4_error+0x19a/0x320 [ 162.924574][T18749] ext4_validate_block_bitmap+0x557/0x5a0 [ 162.930503][T18749] ext4_read_block_bitmap_nowait+0x435/0x680 [ 162.936514][T18749] ext4_mb_init_cache+0x240/0xb60 [ 162.941836][T18749] ext4_mb_init_group+0x223/0x3b0 [ 162.947145][T18749] ext4_mb_load_buddy_gfp+0x6ed/0x750 [ 162.952628][T18749] ext4_free_blocks+0x758/0x1400 [ 162.958107][T18749] ext4_clear_blocks+0x2a2/0x2c0 [ 162.963624][T18749] ext4_ind_truncate+0x599/0x830 [ 162.968773][T18749] ext4_truncate+0x6cc/0xac0 [ 162.973941][T18749] ext4_evict_inode+0x89c/0xd80 [ 162.979102][T18749] evict+0x2e3/0x550 [ 162.983075][T18749] iput+0x447/0x5b0 [ 162.987442][T18749] ext4_process_orphan+0x1a9/0x1c0 [ 162.992788][T18749] ext4_orphan_cleanup+0x6a8/0xa00 [ 162.998208][T18749] ext4_fill_super+0x3171/0x34e0 [ 163.003721][T18749] get_tree_bdev_flags+0x28e/0x300 [ 163.009058][T18749] get_tree_bdev+0x1f/0x30 [ 163.013886][T18749] ext4_get_tree+0x1c/0x30 [ 163.018509][T18749] vfs_get_tree+0x57/0x1d0 [ 163.023034][T18749] do_new_mount+0x207/0x680 [ 163.027761][T18749] path_mount+0x4a4/0xb20 [ 163.032123][T18749] __se_sys_mount+0x28f/0x2e0 [ 163.037465][T18749] __x64_sys_mount+0x67/0x80 [ 163.042250][T18749] x64_sys_call+0xd36/0x2fb0 [ 163.046869][T18749] do_syscall_64+0xd0/0x1a0 [ 163.051390][T18749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.057577][T18749] [ 163.059988][T18749] Reported by Kernel Concurrency Sanitizer on: [ 163.066499][T18749] CPU: 0 UID: 0 PID: 18749 Comm: syz.2.7352 Not tainted 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(voluntary) [ 163.079987][T18749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 163.090241][T18749] ================================================================== [ 163.131748][T18749] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 163.142137][T18749] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.7352: invalid indirect mapped block 65280 (level 0) [ 163.156257][T18749] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.7352: attempt to clear invalid blocks 33619980 len 1 [ 163.170528][T18749] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.7352: invalid indirect mapped block 1819239214 (level 0) [ 163.185434][T18749] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.7352: invalid indirect mapped block 1819239214 (level 1) [ 163.200735][T18749] EXT4-fs (loop2): 1 orphan inode deleted [ 163.207260][T18749] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.231548][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.