last executing test programs: 40.937052029s ago: executing program 2 (id=2496): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000040)=0x5, 0x4) syz_emit_ethernet(0x9a, &(0x7f0000000200)=ANY=[@ANYBLOB="0180c200000eaaaaaaaaaaaa86dd60f4000000641100fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e200e22"], 0x0) 40.904434561s ago: executing program 2 (id=2498): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x1, 0x2, 0x7ffc0002}]}) setitimer(0x2, 0x0, 0x0) 40.836665515s ago: executing program 2 (id=2505): r0 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000040)=0x7, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900082c0120410000000000000000000000000000fe8000000000000000000000000000aaff"], 0x0) recvmmsg(r0, &(0x7f0000002fc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/16, 0x10}}], 0x1, 0x40010120, 0x0) 40.813386867s ago: executing program 2 (id=2508): syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000000100)=ANY=[], 0x6, 0x360, &(0x7f0000000b00)="$eJzs3c1rO0UYwPEnaZImKW1yEEVBOtiLXpY2ehaDtCAELG0jtoKwbTcasiYlG6oRse3Jq3j3JHgovVnwUND+A71404sI3noRPFhBXdm3ZPPWl5g0/trvB0omM/PszmQn5dm0m718+/MPKiVLK+kNiSaVRERErkSyEpVAxH+MuuWEhB3KSzO///j8+mYx6VWolfzGyzml1Nz8dx9+kvK7nU3LRfbdy99yv148ffHs5T8b75ctVbZUtdZQutqu/dzQt01D7ZatiqbUqmnolqHKVcuoe+3f+Nsxa3t7TaVXd2fTe3XDspRebaqK0VSNmmrUm0p/Ty9XlaZpajYtuEnxeG1Nzw8ZvDPiwWBM6vW8PiUiqZ6W4vFEBgQAACaqO/+POin9MPn/lswVCstryunczv9PXjhvzLx1Oufn/2eJfvn/Kz952+rI/53TiXb+X/POD0o35/9fyh3y/96M6HEZOv/PjmEwGM58oqcq0vHMyf/T/vvXdfTOyaJbIP8HAAAAAAAAAAAAAAAAAAAAAOBJcGXbGdu2M8Fj8NO+hMB/jgdp0PGfFpGkc/Rtjv9Dtr65JUn3wj3nGJuf7Rf3i96j3+FcREwx/ra7OWsjuPJIObLyvXngxx/sF6fclnxJyk68LElGsu56CsXb9sobheUl5fHjW5cppcPxOcnIU+H4b93V6cTnOuP9/SfkxYVQvCYZ+WFHamLKrhvZ3v+nS0q9/mahKz7l9hORX+79oAAAAAAAMGKaaul7/q5pg9q9bxnJl9yPiQxZlIz81f/8frHv+Xks81xs0rMHAAAAAOBxsJofV3SJGnW3YJr9CikZ2DSCQqyjJi4ifTsnumri1215KjTD244nId4dTP7rvL4KXtW7RAX/SOEMvNXk31FFhhtPMH+3JhJrNf1513lFDsVdAIfhpqjcIjzWPfh5p0L17bwwcDtH/kRaNcHHRokBr7Os9m4nes1KiPfU2JHhFsAzX3z9x+jeIK+e+ivgo5s7H5mGfSC3OShdBWcXvU3xsf/iAQAAAHDv2kl/UPNauDl8I5HwzXL4yz0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAACM0lq/06ypMeo4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/8W/AQAA//9/d/Qh") r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc040ff0b, &(0x7f0000000180)) 40.689345425s ago: executing program 2 (id=2517): r0 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) setresuid(0xee01, 0xee01, 0x0) sendmmsg$unix(r1, &(0x7f0000005800)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[@cred={{0x1c, 0x1, 0x2, {r0, 0x0, 0xee00}}}], 0x20, 0x20040000}}], 0x1, 0x0) 40.457691399s ago: executing program 2 (id=2526): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r1, r1) 40.456429368s ago: executing program 32 (id=2526): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r1, r1) 1.699309457s ago: executing program 0 (id=4384): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb}}, @TCA_CT_MARK={0x8, 0x10}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000000) 1.64176909s ago: executing program 4 (id=4387): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x6d34, 0x1000, 0x0, 0x4000000}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 1.629743351s ago: executing program 0 (id=4390): openat$vcsu(0xffffffffffffff9c, &(0x7f0000004180), 0x40200, 0x0) socket$unix(0x1, 0x5, 0x0) unshare(0x22020400) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000240)={0x1f}, 0x0, 0x0) 1.617847211s ago: executing program 4 (id=4391): r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) accept(r0, 0x0, 0x0) 1.576149974s ago: executing program 0 (id=4395): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) getrlimit(0x2, &(0x7f0000000280)) 1.549387536s ago: executing program 0 (id=4396): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002000)=ANY=[@ANYBLOB="757466383d312c6e6f6e756d7461696c3d302c6e6f6e756d7461696c3d302c756e695f786c6174653d302c73686f72746e616d653d77696e39352c000f3556feecb6412e00c80bdee16891f8bf67c9f201996782a86d4bab33b4f23383380e4ccafc9da9def41b05c1dfb2cfa24e43aedf5536d3bce06ddda97c586bc37fab5366b1ab6fee95cc224e56e681e82dd4dbbde3785fdd0fc4e7df753a0e2658aa5e88e1d38366c7908a7b2b678ee4b4bfc7aafa2101c157745926241af5ac30189eced78c1611b972d03bfef046f4adcada230ef0ac02ede79fb7d92a8354670c01cb80361c1fde2cef3204a182323c318e10ef11cb24c435d589b17a396377800f"], 0x1, 0x21b, &(0x7f0000000300)="$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") syz_emit_ethernet(0x1e, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaa"], 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x3aa) 1.501854999s ago: executing program 0 (id=4400): syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000180)='./file0\x00', 0x1000802, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x4, 0x24e, &(0x7f0000000a00)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/address_bits', 0xa0042, 0x148) 1.441154052s ago: executing program 0 (id=4402): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0xb, 0x2}, 0x8) shutdown(r0, 0x0) syz_usb_connect(0x5, 0x239, 0x0, 0x0) 763.926703ms ago: executing program 4 (id=4420): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003"], 0xe8}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 732.880165ms ago: executing program 4 (id=4422): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380), 0x84d03, 0x0) 703.332218ms ago: executing program 4 (id=4423): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) getrlimit(0x2, &(0x7f0000000280)) 678.577609ms ago: executing program 4 (id=4424): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000440)={0x2, 0xfffffffc, 0x6}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) 479.276991ms ago: executing program 5 (id=4432): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x0, 0x20) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r0, 0x28, 0x6, &(0x7f0000000000)={0x77359400}, 0x10) 434.499284ms ago: executing program 5 (id=4433): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x1, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x7080000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4, 0x4}, 0x80, 0x0, 0x0, &(0x7f00000008c0)=[{0x18, 0x29, 0xb, "bde2"}], 0x18}}], 0x1, 0x0) 383.875097ms ago: executing program 5 (id=4437): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000440)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r1, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x50000}, 0x0) 352.704509ms ago: executing program 5 (id=4439): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$P9_RRENAMEAT(r1, &(0x7f00000000c0)={0x7, 0x4b, 0x2}, 0x7) 313.240251ms ago: executing program 5 (id=4442): bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[], 0x48) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x400, &(0x7f0000000200)={[{@block_validity}, {@stripe={'stripe', 0x3d, 0x2}}, {@grpjquota}]}, 0x1, 0x4a6, &(0x7f0000000a40)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) 313.014221ms ago: executing program 1 (id=4443): r0 = syz_io_uring_setup(0x132a, &(0x7f0000000000)={0x0, 0x5042, 0x40, 0x81, 0x3df}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) 234.151576ms ago: executing program 1 (id=4445): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) utime(&(0x7f0000000880)='./file0\x00', 0x0) 233.690436ms ago: executing program 3 (id=4455): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x18, 0x140f, 0x1, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'mad\x00'}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x1004) 204.439108ms ago: executing program 1 (id=4446): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000000000}, 0x0, 0x0, 0x0, 0x0, 0xf60}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000009500"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000001c0)='cpu&20\t&&') 202.306168ms ago: executing program 3 (id=4457): r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x802, r1, 0x1, 0x0, 0x6, @local}, 0x14) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x800) 156.20339ms ago: executing program 1 (id=4447): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x801) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000440)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x100, 0x8000008, 0x3, 0x2004, 0x1, 0x0, 0x2, 0x1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000340)={0x5, 0x90, 0x1, 'queue0\x00', 0x3}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f0000000ec0)={0x800100, 0xfffffffd, 0x22, 0x100, 0x81, 0x5}) 156.080651ms ago: executing program 3 (id=4448): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000) 121.939782ms ago: executing program 3 (id=4449): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x1, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x7080000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4, 0x4}, 0x80, 0x0, 0x0, &(0x7f00000008c0)=[{0x18, 0x29, 0xb, "bde2"}], 0x18}}], 0x1, 0x0) 110.309434ms ago: executing program 1 (id=4450): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x7fe2, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 35.836508ms ago: executing program 3 (id=4451): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@mss={0x2, 0x8}, @sack_perm, @window={0x3, 0x11, 0x4}, @sack_perm, @window, @window={0x3, 0x0, 0xfffc}, @timestamp, @timestamp], 0x8) 9.77953ms ago: executing program 1 (id=4452): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0xda90) accept4(r0, 0x0, 0x0, 0x0) 7.21469ms ago: executing program 3 (id=4453): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x4000000, 0x1, 0x0, 'queue0\x00', 0x1c52}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) writev(r1, &(0x7f00000004c0)=[{&(0x7f0000000180)="95eba9fdb4cbab48929e1af151000000000000000500000000000100", 0x48}], 0x1) 0s ago: executing program 5 (id=4454): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x3, 0x0, 0x0, 0x1}, 0x10) write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) kernel console output (not intermixed with test programs): T7972] netlink: 'syz.0.2014': attribute type 1 has an invalid length. [ 77.652503][ T7977] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2015'. [ 77.685087][ T7982] loop0: detected capacity change from 0 to 512 [ 77.704494][ T7982] EXT4-fs: Ignoring removed i_version option [ 77.714179][ T7983] loop3: detected capacity change from 0 to 512 [ 77.722654][ T7982] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 77.732985][ T7983] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 77.746259][ T7983] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e11c, mo2=0002] [ 77.748138][ T7982] EXT4-fs (loop0): 1 truncate cleaned up [ 77.760594][ T7983] System zones: 1-12 [ 77.764948][ T7983] EXT4-fs (loop3): orphan cleanup on readonly fs [ 77.770321][ T7982] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.784814][ T7983] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2017: bg 0: block 361: padding at end of block bitmap is not set [ 77.799639][ T7983] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 77.821106][ T7983] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.2017: invalid indirect mapped block 12 (level 1) [ 77.847777][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.858320][ T7983] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.2017: invalid indirect mapped block 2 (level 2) [ 77.877615][ T7983] EXT4-fs (loop3): 1 truncate cleaned up [ 77.885014][ T7983] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 77.938301][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 77.950829][ T29] audit: type=1400 audit(1754439110.454:69014): avc: denied { map } for pid=7992 comm="syz.0.2022" path="socket:[19181]" dev="sockfs" ino=19181 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 77.974507][ T29] audit: type=1400 audit(1754439110.454:69015): avc: denied { read write } for pid=7992 comm="syz.0.2022" path="socket:[19181]" dev="sockfs" ino=19181 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 77.999445][ T7989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.015760][ T7989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.067204][ T29] audit: type=1326 audit(1754439110.574:69016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7998 comm="syz.0.2025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff18849ebe9 code=0x7ffc0000 [ 78.090921][ T29] audit: type=1326 audit(1754439110.574:69017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7998 comm="syz.0.2025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff18849ebe9 code=0x7ffc0000 [ 78.114452][ T29] audit: type=1326 audit(1754439110.574:69018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7998 comm="syz.0.2025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff18849ebe9 code=0x7ffc0000 [ 78.138008][ T29] audit: type=1326 audit(1754439110.574:69019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7998 comm="syz.0.2025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff18849ebe9 code=0x7ffc0000 [ 78.161605][ T29] audit: type=1326 audit(1754439110.574:69020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7998 comm="syz.0.2025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff18849ebe9 code=0x7ffc0000 [ 78.185105][ T29] audit: type=1326 audit(1754439110.574:69021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7998 comm="syz.0.2025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff18849ebe9 code=0x7ffc0000 [ 78.208677][ T29] audit: type=1326 audit(1754439110.574:69022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7998 comm="syz.0.2025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff18849ebe9 code=0x7ffc0000 [ 78.250992][ T8001] bridge0: port 3(ipvlan2) entered blocking state [ 78.257596][ T8001] bridge0: port 3(ipvlan2) entered disabled state [ 78.282892][ T8001] ipvlan2: entered allmulticast mode [ 78.288206][ T8001] bridge0: entered allmulticast mode [ 78.302794][ T8001] ipvlan2: left allmulticast mode [ 78.307939][ T8001] bridge0: left allmulticast mode [ 78.409113][ T8014] program syz.1.2032 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 78.634953][ T8029] loop1: detected capacity change from 0 to 512 [ 78.655832][ T8029] EXT4-fs: Ignoring removed mblk_io_submit option [ 78.675768][ T8029] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 78.710270][ T8029] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 78.734838][ T8029] EXT4-fs (loop1): orphan cleanup on readonly fs [ 78.750515][ T8029] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.2038: Invalid block bitmap block 0 in block_group 0 [ 78.771904][ T8029] EXT4-fs (loop1): Remounting filesystem read-only [ 78.780232][ T8041] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2043'. [ 78.789267][ T8041] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2043'. [ 78.798319][ T8041] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2043'. [ 78.811067][ T8029] EXT4-fs (loop1): 1 orphan inode deleted [ 78.817556][ T8029] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 78.831923][ T8041] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2043'. [ 78.874842][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.918611][ T8054] geneve2: entered promiscuous mode [ 78.923993][ T8054] geneve2: entered allmulticast mode [ 79.061604][ T8080] sctp: [Deprecated]: syz.1.2061 (pid 8080) Use of struct sctp_assoc_value in delayed_ack socket option. [ 79.061604][ T8080] Use struct sctp_sack_info instead [ 79.133777][ T8092] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2067'. [ 79.279474][ T8124] netlink: 268 bytes leftover after parsing attributes in process `syz.0.2093'. [ 79.301478][ T8127] loop1: detected capacity change from 0 to 512 [ 79.328247][ T8127] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.343801][ T8127] ext4 filesystem being mounted at /414/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.370097][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.608228][ T8173] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.615640][ T8173] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.626467][ T8173] bridge0: left promiscuous mode [ 79.649841][ T8179] loop2: detected capacity change from 0 to 128 [ 79.661768][ T8177] loop1: detected capacity change from 0 to 512 [ 79.664145][ T8179] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 79.684844][ T8179] ext4 filesystem being mounted at /390/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 79.696624][ T8177] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 0, start 000054fe) [ 79.768372][ T8179] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 79.829540][ T8198] loop0: detected capacity change from 0 to 1024 [ 80.030131][ T8229] loop2: detected capacity change from 0 to 512 [ 80.036388][ T8233] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2132'. [ 80.036515][ T8233] lo: entered promiscuous mode [ 80.050287][ T8231] loop4: detected capacity change from 0 to 512 [ 80.067575][ T8229] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 000054fe) [ 80.095010][ T8231] ext4 filesystem being mounted at /444/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.217245][ T8259] loop1: detected capacity change from 0 to 1024 [ 80.218337][ T8261] loop0: detected capacity change from 0 to 512 [ 80.230251][ T8261] EXT4-fs: Ignoring removed mblk_io_submit option [ 80.237677][ T8261] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 80.253383][ T8261] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 80.261618][ T8261] EXT4-fs (loop0): orphan cleanup on readonly fs [ 80.268344][ T8261] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.2154: Invalid block bitmap block 0 in block_group 0 [ 80.282032][ T8261] EXT4-fs (loop0): Remounting filesystem read-only [ 80.289652][ T8261] EXT4-fs (loop0): 1 orphan inode deleted [ 80.304497][ T8267] loop3: detected capacity change from 0 to 512 [ 80.312275][ T3354] net_ratelimit: 362 callbacks suppressed [ 80.312290][ T3354] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 80.328541][ T8267] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 000054fe) [ 80.373208][ T8276] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2148'. [ 80.414497][ T8284] loop3: detected capacity change from 0 to 512 [ 80.449962][ T8284] ext4 filesystem being mounted at /432/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.478369][ T8290] loop4: detected capacity change from 0 to 1024 [ 80.511052][ T8299] netlink: 'syz.2.2160': attribute type 9 has an invalid length. [ 80.521158][ T8299] team_slave_0: entered promiscuous mode [ 80.526877][ T8299] team_slave_1: entered promiscuous mode [ 80.529461][ T8290] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.2152: Allocating blocks 449-513 which overlap fs metadata [ 80.532888][ T8299] macvlan2: entered promiscuous mode [ 80.551906][ T8299] team0: entered promiscuous mode [ 80.557809][ T8299] macvlan2: entered allmulticast mode [ 80.563361][ T8299] team0: entered allmulticast mode [ 80.568473][ T8299] team_slave_0: entered allmulticast mode [ 80.568966][ T8288] EXT4-fs (loop4): pa ffff8881069ec3f0: logic 48, phys. 177, len 21 [ 80.574351][ T8299] team_slave_1: entered allmulticast mode [ 80.582340][ T8288] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 80.589662][ T8299] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 80.652481][ T8309] loop0: detected capacity change from 0 to 512 [ 80.659673][ T8311] loop2: detected capacity change from 0 to 512 [ 80.675705][ T8311] EXT4-fs: Ignoring removed mblk_io_submit option [ 80.682478][ T8309] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 0, start 000054fe) [ 80.704864][ T8311] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 80.723679][ T8311] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 80.744915][ T8311] EXT4-fs (loop2): orphan cleanup on readonly fs [ 80.780583][ T8311] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.2163: Invalid block bitmap block 0 in block_group 0 [ 80.801339][ T8311] EXT4-fs (loop2): Remounting filesystem read-only [ 80.808481][ T8311] EXT4-fs (loop2): 1 orphan inode deleted [ 81.017997][ T8350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 81.026587][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 81.035407][ T8348] netlink: 'syz.4.2181': attribute type 21 has an invalid length. [ 81.043857][ T8348] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 81.190884][ T8375] loop4: detected capacity change from 0 to 512 [ 81.225088][ T8375] EXT4-fs: test_dummy_encryption option not supported [ 81.345897][ T8401] program syz.1.2216 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 81.407997][ T8412] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.507455][ T8425] geneve2: entered promiscuous mode [ 81.509627][ T8428] loop2: detected capacity change from 0 to 512 [ 81.512768][ T8425] geneve2: entered allmulticast mode [ 81.522733][ T8429] loop3: detected capacity change from 0 to 512 [ 81.531393][ T8429] EXT4-fs: Ignoring removed nobh option [ 81.539742][ T8429] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.2219: iget: bad i_size value: 38620345925642 [ 81.540117][ T8428] ext4 filesystem being mounted at /416/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.554141][ T8429] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.2219: couldn't read orphan inode 15 (err -117) [ 81.592978][ T3389] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 81.601231][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 82.070060][ T8466] geneve2: entered promiscuous mode [ 82.075707][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 82.083977][ T8466] geneve2: entered allmulticast mode [ 82.108935][ T8473] loop3: detected capacity change from 0 to 512 [ 82.136087][ T8473] ext4 filesystem being mounted at /458/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.255436][ T8491] netlink: 'syz.0.2246': attribute type 21 has an invalid length. [ 82.267923][ T8495] loop2: detected capacity change from 0 to 512 [ 82.274468][ T8491] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 82.296344][ T8495] ext4 filesystem being mounted at /426/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 82.323965][ T8504] geneve2: entered promiscuous mode [ 82.329296][ T8504] geneve2: entered allmulticast mode [ 82.361354][ T8495] EXT4-fs warning (device loop2): ext4_group_extend:1886: will only finish group (16384 blocks, 16256 new) [ 82.373261][ T8495] EXT4-fs warning (device loop2): ext4_group_extend:1891: can't read last block, resize aborted [ 82.466249][ T8519] loop3: detected capacity change from 0 to 512 [ 82.473131][ T8515] __nla_validate_parse: 6 callbacks suppressed [ 82.473155][ T8515] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2257'. [ 82.485867][ T8519] EXT4-fs: test_dummy_encryption option not supported [ 82.543633][ T8529] SELinux: failed to load policy [ 82.563116][ T8534] sctp: [Deprecated]: syz.0.2264 (pid 8534) Use of struct sctp_assoc_value in delayed_ack socket option. [ 82.563116][ T8534] Use struct sctp_sack_info instead [ 82.754191][ T8563] netlink: 268 bytes leftover after parsing attributes in process `syz.3.2282'. [ 82.766086][ T8570] netlink: 'syz.2.2284': attribute type 1 has an invalid length. [ 82.857972][ T8581] SELinux: Context system_u:object_r:dhcp_state_t:s0 is not valid (left unmapped). [ 82.867608][ T29] kauditd_printk_skb: 139 callbacks suppressed [ 82.867630][ T29] audit: type=1400 audit(1754439115.384:69153): avc: denied { relabelto } for pid=8580 comm="syz.3.2288" name="" dev="pipefs" ino=21541 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:dhcp_state_t:s0" [ 82.869318][ T8582] loop2: detected capacity change from 0 to 512 [ 82.919819][ T8582] EXT4-fs: Ignoring removed nobh option [ 82.933210][ T8582] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.2287: iget: bad i_size value: 38620345925642 [ 82.959206][ T8583] loop4: detected capacity change from 0 to 512 [ 82.980150][ T8583] journal_path: Non-blockdev passed as './file0' [ 82.986589][ T8583] EXT4-fs: error: could not find journal device path [ 82.997830][ T8582] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.2287: couldn't read orphan inode 15 (err -117) [ 83.158853][ T8615] loop3: detected capacity change from 0 to 128 [ 83.169663][ T8615] FAT-fs (loop3): error, corrupted file size (i_pos 548, 512) [ 83.177260][ T8615] FAT-fs (loop3): Filesystem has been set read-only [ 83.184628][ T8617] loop2: detected capacity change from 0 to 1024 [ 83.210308][ T29] audit: type=1326 audit(1754439115.714:69154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8622 comm="syz.1.2305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65815aebe9 code=0x7ffc0000 [ 83.235028][ T8620] IPv6: Can't replace route, no match found [ 83.242748][ T29] audit: type=1326 audit(1754439115.744:69155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8622 comm="syz.1.2305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65815aebe9 code=0x7ffc0000 [ 83.266349][ T29] audit: type=1326 audit(1754439115.754:69156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8622 comm="syz.1.2305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f65815aebe9 code=0x7ffc0000 [ 83.300410][ T29] audit: type=1326 audit(1754439115.804:69157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8622 comm="syz.1.2305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65815aebe9 code=0x7ffc0000 [ 83.324089][ T29] audit: type=1326 audit(1754439115.804:69158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8622 comm="syz.1.2305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f65815aebe9 code=0x7ffc0000 [ 83.347708][ T29] audit: type=1326 audit(1754439115.804:69159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8622 comm="syz.1.2305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65815aebe9 code=0x7ffc0000 [ 83.371287][ T29] audit: type=1326 audit(1754439115.804:69160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8622 comm="syz.1.2305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7f65815aebe9 code=0x7ffc0000 [ 83.394862][ T29] audit: type=1326 audit(1754439115.804:69161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8622 comm="syz.1.2305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65815aebe9 code=0x7ffc0000 [ 83.418520][ T29] audit: type=1326 audit(1754439115.804:69162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8622 comm="syz.1.2305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65815aebe9 code=0x7ffc0000 [ 83.429837][ T8631] SELinux: failed to load policy [ 83.586508][ T8651] sctp: [Deprecated]: syz.3.2317 (pid 8651) Use of int in maxseg socket option. [ 83.586508][ T8651] Use struct sctp_assoc_value instead [ 83.688486][ T8658] syz.0.2329 (8658) used greatest stack depth: 9384 bytes left [ 83.729128][ T8666] SELinux: failed to load policy [ 83.816599][ T8628] loop4: detected capacity change from 0 to 32768 [ 83.863466][ T8628] loop4: p1 p2 p3 < p5 p6 > [ 83.868703][ T8628] loop4: p2 size 16775168 extends beyond EOD, truncated [ 83.876898][ T8628] loop4: p5 start 4294970168 is beyond EOD, truncated [ 84.103851][ T8692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.132411][ T8692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.180681][ T8722] loop0: detected capacity change from 0 to 1024 [ 84.440442][ T8763] IPv6: Can't replace route, no match found [ 84.486485][ T8773] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2368'. [ 84.582063][ T8781] loop0: detected capacity change from 0 to 512 [ 84.606194][ T8781] ext4 filesystem being mounted at /492/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.679004][ T8785] tap0: tun_chr_ioctl cmd 1074025677 [ 84.686203][ T8785] tap0: linktype set to 803 [ 85.120541][ T8814] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2386'. [ 85.129548][ T8814] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2386'. [ 85.273076][ T8809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.286814][ T8809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.460918][ T8845] random: crng reseeded on system resumption [ 85.540068][ T8853] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2406'. [ 85.759097][ T8883] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2419'. [ 85.990180][ T8922] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2439'. [ 85.999306][ T8922] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2439'. [ 86.310921][ T8948] loop2: detected capacity change from 0 to 1024 [ 86.342684][ T8948] EXT4-fs: Ignoring removed bh option [ 86.349505][ T8951] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2451'. [ 86.361586][ T8953] ip6gretap0: entered promiscuous mode [ 86.380874][ T8948] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 86.392928][ T8953] ip6gretap0: left promiscuous mode [ 86.839041][ T9026] loop2: detected capacity change from 0 to 4096 [ 87.066369][ T9071] loop2: detected capacity change from 0 to 128 [ 87.163174][ T3308] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 87.171033][ T3308] FAT-fs (loop2): Filesystem has been set read-only [ 87.366978][ T56] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.485428][ T56] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.539918][ T56] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.658007][ T56] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.717066][ T9116] chnl_net:caif_netlink_parms(): no params data found [ 87.760912][ T56] bridge_slave_1: left promiscuous mode [ 87.766716][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.775715][ T56] bridge_slave_0: left allmulticast mode [ 87.781386][ T56] bridge_slave_0: left promiscuous mode [ 87.787191][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.846354][ T56] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 87.885137][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 87.895832][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 87.906525][ T56] bond0 (unregistering): Released all slaves [ 87.939627][ T9116] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.946798][ T9116] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.956703][ T9116] bridge_slave_0: entered allmulticast mode [ 87.965917][ T9116] bridge_slave_0: entered promiscuous mode [ 87.969550][ T9146] loop1: detected capacity change from 0 to 128 [ 87.978925][ T9116] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.986077][ T9116] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.993837][ T9116] bridge_slave_1: entered allmulticast mode [ 88.000306][ T9116] bridge_slave_1: entered promiscuous mode [ 88.018561][ T56] hsr_slave_0: left promiscuous mode [ 88.025679][ T56] hsr_slave_1: left promiscuous mode [ 88.031406][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.038936][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 88.046532][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.054127][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 88.065952][ T56] team0: left allmulticast mode [ 88.070928][ T56] team_slave_0: left allmulticast mode [ 88.076542][ T56] team_slave_1: left allmulticast mode [ 88.082023][ T56] team0: left promiscuous mode [ 88.087138][ T56] team_slave_0: left promiscuous mode [ 88.092689][ T56] team_slave_1: left promiscuous mode [ 88.098643][ T56] veth1_macvtap: left promiscuous mode [ 88.104224][ T56] veth0_macvtap: left promiscuous mode [ 88.109873][ T56] veth1_vlan: left promiscuous mode [ 88.115723][ T56] veth0_vlan: left promiscuous mode [ 88.207362][ T56] team0 (unregistering): Port device team_slave_1 removed [ 88.219035][ T56] team0 (unregistering): Port device team_slave_0 removed [ 88.264000][ T9116] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.286187][ T9116] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.329450][ T9116] team0: Port device team_slave_0 added [ 88.336205][ T9116] team0: Port device team_slave_1 added [ 88.354610][ T9116] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.361725][ T9116] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.387749][ T9116] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.399589][ T9116] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.406783][ T9116] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.432803][ T9116] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.434011][ T9157] loop3: detected capacity change from 0 to 32768 [ 88.475969][ T9116] hsr_slave_0: entered promiscuous mode [ 88.487612][ T9116] hsr_slave_1: entered promiscuous mode [ 88.495906][ T9116] debugfs: 'hsr0' already exists in 'hsr' [ 88.501663][ T9116] Cannot create hsr debugfs directory [ 88.527122][ T9168] openvswitch: netlink: Message has 6 unknown bytes. [ 88.588019][ T9174] netlink: 'syz.3.2545': attribute type 13 has an invalid length. [ 88.625329][ T9174] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.632513][ T9174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.639905][ T9174] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.647014][ T9174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.677897][ T29] kauditd_printk_skb: 59 callbacks suppressed [ 88.677910][ T29] audit: type=1400 audit(2000000516.709:69222): avc: denied { write } for pid=9181 comm="syz.1.2552" name="ptp0" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 88.749223][ T9184] openvswitch: netlink: Message has 6 unknown bytes. [ 88.760426][ T9186] __nla_validate_parse: 2 callbacks suppressed [ 88.760443][ T9186] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2554'. [ 88.778017][ T9174] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 88.822260][ T9116] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 88.842054][ T9116] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 88.859820][ T9116] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 88.878778][ T9116] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 88.976798][ T9188] loop4: detected capacity change from 0 to 32768 [ 88.987103][ T9116] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.999999][ T9116] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.030405][ T383] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.037600][ T383] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.076110][ T383] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.083252][ T383] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.138628][ T9219] netlink: 'syz.0.2567': attribute type 21 has an invalid length. [ 89.141514][ T9116] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 89.157029][ T9116] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 89.170921][ T9223] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2566'. [ 89.182630][ T9219] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2567'. [ 89.232830][ T29] audit: type=1400 audit(2000000517.259:69223): avc: denied { create } for pid=9233 comm="syz.3.2573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 89.237913][ T9116] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.252596][ T29] audit: type=1400 audit(2000000517.259:69224): avc: denied { bind } for pid=9233 comm="syz.3.2573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 89.279088][ T29] audit: type=1400 audit(2000000517.259:69225): avc: denied { listen } for pid=9233 comm="syz.3.2573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 89.299059][ T29] audit: type=1400 audit(2000000517.259:69226): avc: denied { connect } for pid=9233 comm="syz.3.2573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 89.439087][ T9265] program syz.0.2581 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 89.453094][ T9116] veth0_vlan: entered promiscuous mode [ 89.460518][ T9116] veth1_vlan: entered promiscuous mode [ 89.491865][ T9116] veth0_macvtap: entered promiscuous mode [ 89.505976][ T9116] veth1_macvtap: entered promiscuous mode [ 89.518202][ T9116] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.529657][ T9268] netlink: 'syz.0.2583': attribute type 13 has an invalid length. [ 89.551271][ T9116] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.598972][ T9268] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 89.632190][ T51] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.649673][ T51] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.669207][ T29] audit: type=1400 audit(2000000517.699:69227): avc: denied { mounton } for pid=9116 comm="syz-executor" path="/root/syzkaller.VzuFl7/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 89.702434][ T51] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.703638][ T29] audit: type=1400 audit(2000000517.729:69228): avc: denied { mounton } for pid=9116 comm="syz-executor" path="/root/syzkaller.VzuFl7/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 89.738099][ T29] audit: type=1400 audit(2000000517.729:69229): avc: denied { mounton } for pid=9116 comm="syz-executor" path="/root/syzkaller.VzuFl7/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=23964 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 89.740273][ T51] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.782055][ T29] audit: type=1400 audit(2000000517.809:69230): avc: denied { create } for pid=9283 comm="syz.0.2591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 89.802108][ T29] audit: type=1400 audit(2000000517.819:69231): avc: denied { ioctl } for pid=9283 comm="syz.0.2591" path="socket:[24606]" dev="sockfs" ino=24606 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 90.036420][ T9313] netlink: 'syz.5.2603': attribute type 21 has an invalid length. [ 90.055531][ T9313] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2603'. [ 90.277891][ T9355] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2618'. [ 90.623860][ T9414] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 90.634124][ T9414] SELinux: failed to load policy [ 90.704462][ T9426] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.711808][ T9426] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.860772][ T9447] netlink: 'syz.1.2662': attribute type 13 has an invalid length. [ 90.894987][ T9447] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.902365][ T9447] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.909778][ T9447] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.917097][ T9447] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.929699][ T9447] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 91.331211][ T9481] netlink: 'syz.4.2677': attribute type 13 has an invalid length. [ 91.366148][ T9481] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 91.686434][ T9491] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2681'. [ 91.828300][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.043690][ T9547] loop4: detected capacity change from 0 to 512 [ 92.078371][ T9547] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002] [ 92.121491][ T9547] System zones: 1-12 [ 92.138333][ T9547] EXT4-fs error (device loop4): dx_probe:791: inode #2: comm syz.4.2706: Directory hole found for htree index block 0 [ 92.141097][ T9526] chnl_net:caif_netlink_parms(): no params data found [ 92.172235][ T9547] EXT4-fs (loop4): Remounting filesystem read-only [ 92.206110][ T9547] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -117 [ 92.210124][ T9565] loop1: detected capacity change from 0 to 1024 [ 92.221219][ T9565] EXT4-fs: Ignoring removed oldalloc option [ 92.227207][ T9565] EXT4-fs: Ignoring removed bh option [ 92.232925][ T9547] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 92.275677][ T9547] EXT4-fs (loop4): can't enable nombcache during remount [ 92.276262][ T9526] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.289888][ T9526] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.297375][ T9547] EXT4-fs (loop4): can't enable nombcache during remount [ 92.297531][ T9526] bridge_slave_0: entered allmulticast mode [ 92.311538][ T9526] bridge_slave_0: entered promiscuous mode [ 92.320649][ T9526] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.327784][ T9526] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.335492][ T9526] bridge_slave_1: entered allmulticast mode [ 92.342062][ T9526] bridge_slave_1: entered promiscuous mode [ 92.366046][ T9526] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.383535][ T9526] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.425500][ T9526] team0: Port device team_slave_0 added [ 92.432225][ T9526] team0: Port device team_slave_1 added [ 92.459088][ T9526] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.466099][ T9526] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.492358][ T9526] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.496568][ T9526] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.496583][ T9526] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.496614][ T9526] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.546708][ T9526] hsr_slave_0: entered promiscuous mode [ 92.547313][ T9526] hsr_slave_1: entered promiscuous mode [ 92.547491][ T9526] debugfs: 'hsr0' already exists in 'hsr' [ 92.547505][ T9526] Cannot create hsr debugfs directory [ 92.694394][ T9599] netlink: 14593 bytes leftover after parsing attributes in process `syz.4.2726'. [ 92.733236][ T9609] loop0: detected capacity change from 0 to 128 [ 92.742046][ T9609] ext4 filesystem being mounted at /544/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 92.809445][ T9616] loop1: detected capacity change from 0 to 2048 [ 92.846796][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.886167][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.917296][ T9639] loop4: detected capacity change from 0 to 1024 [ 92.924003][ T9641] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2739'. [ 92.945499][ T9639] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 92.975578][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.074918][ T12] bridge_slave_1: left allmulticast mode [ 93.080644][ T12] bridge_slave_1: left promiscuous mode [ 93.086490][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.092119][ T9671] loop3: detected capacity change from 0 to 512 [ 93.101176][ T12] bridge_slave_0: left allmulticast mode [ 93.106990][ T12] bridge_slave_0: left promiscuous mode [ 93.112976][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.139820][ T9671] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.2757: corrupted inode contents [ 93.152507][ T9671] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #16: comm syz.3.2757: mark_inode_dirty error [ 93.167963][ T9671] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.2757: corrupted inode contents [ 93.180401][ T9671] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.2757: mark_inode_dirty error [ 93.193674][ T9671] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.2757: corrupted inode contents [ 93.205870][ T9671] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 93.214721][ T9671] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.2757: corrupted inode contents [ 93.214971][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 93.227821][ T9671] EXT4-fs error (device loop3): ext4_truncate:4666: inode #16: comm syz.3.2757: mark_inode_dirty error [ 93.247989][ T9671] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 93.257695][ T9671] EXT4-fs (loop3): 1 truncate cleaned up [ 93.258265][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 93.264273][ T9671] ext4 filesystem being mounted at /570/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.283434][ T383] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 1 [ 93.283500][ T12] bond0 (unregistering): Released all slaves [ 93.303325][ T9674] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2758'. [ 93.312314][ T9674] netem: unknown loss type 12 [ 93.317058][ T9674] netem: change failed [ 93.343457][ T9681] netlink: 'syz.3.2760': attribute type 21 has an invalid length. [ 93.405396][ T12] hsr_slave_0: left promiscuous mode [ 93.411650][ T12] hsr_slave_1: left promiscuous mode [ 93.420015][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.427446][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.436127][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.443795][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.454819][ T12] veth1_macvtap: left promiscuous mode [ 93.460656][ T12] veth0_macvtap: left promiscuous mode [ 93.472402][ T12] veth1_vlan: left promiscuous mode [ 93.480998][ T12] veth0_vlan: left promiscuous mode [ 93.522050][ T9706] loop3: detected capacity change from 0 to 128 [ 93.533486][ T9706] ext4 filesystem being mounted at /573/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 93.602358][ T12] team0 (unregistering): Port device team_slave_1 removed [ 93.609605][ T9711] loop0: detected capacity change from 0 to 2048 [ 93.617258][ T12] team0 (unregistering): Port device team_slave_0 removed [ 93.695237][ T29] kauditd_printk_skb: 199 callbacks suppressed [ 93.695254][ T29] audit: type=1400 audit(2000000521.729:69430): avc: denied { append } for pid=9720 comm="syz.1.2774" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 93.741408][ T29] audit: type=1326 audit(2000000521.739:69431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9722 comm="syz.1.2775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65815aebe9 code=0x7ffc0000 [ 93.765193][ T29] audit: type=1326 audit(2000000521.739:69432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9722 comm="syz.1.2775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f65815aebe9 code=0x7ffc0000 [ 93.788965][ T29] audit: type=1326 audit(2000000521.749:69433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9722 comm="syz.1.2775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65815aebe9 code=0x7ffc0000 [ 93.812788][ T29] audit: type=1326 audit(2000000521.749:69434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9722 comm="syz.1.2775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65815aebe9 code=0x7ffc0000 [ 93.836413][ T29] audit: type=1326 audit(2000000521.749:69435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9722 comm="syz.1.2775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f65815aebe9 code=0x7ffc0000 [ 93.860088][ T29] audit: type=1326 audit(2000000521.759:69436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9722 comm="syz.1.2775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65815aebe9 code=0x7ffc0000 [ 93.875877][ T9719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.883694][ T29] audit: type=1326 audit(2000000521.759:69437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9722 comm="syz.1.2775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7f65815aebe9 code=0x7ffc0000 [ 93.899188][ T9719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.915668][ T29] audit: type=1326 audit(2000000521.759:69438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9722 comm="syz.1.2775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65815aebe9 code=0x7ffc0000 [ 93.948934][ T29] audit: type=1400 audit(2000000521.909:69439): avc: denied { read write } for pid=9718 comm="syz.0.2773" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 93.999643][ T9526] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 94.008908][ T9526] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 94.024070][ T9526] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 94.034012][ T9526] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 94.046784][ T9736] loop4: detected capacity change from 0 to 1024 [ 94.062634][ T9736] EXT4-fs: Ignoring removed oldalloc option [ 94.068648][ T9736] EXT4-fs: Ignoring removed bh option [ 94.076149][ T9526] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.096251][ T9526] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.106731][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.113842][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.126647][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.133779][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.211261][ T9526] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.220029][ T9760] tipc: Started in network mode [ 94.225133][ T9760] tipc: Node identity type_len, cluster identity 4711 [ 94.231935][ T9760] tipc: Enabling of bearer rejected, failed to enable media [ 94.349322][ T9526] veth0_vlan: entered promiscuous mode [ 94.357697][ T9526] veth1_vlan: entered promiscuous mode [ 94.371022][ T9526] veth0_macvtap: entered promiscuous mode [ 94.381217][ T9526] veth1_macvtap: entered promiscuous mode [ 94.394347][ T9526] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.406762][ T9526] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.420530][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.437773][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.451184][ T9792] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.2795'. [ 94.462619][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.471361][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.564393][ T9812] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2801'. [ 94.573466][ T9812] netem: unknown loss type 12 [ 94.578205][ T9812] netem: change failed [ 94.604152][ T9815] loop5: detected capacity change from 0 to 512 [ 94.614024][ T9815] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002] [ 94.622060][ T9815] System zones: 1-12 [ 94.626719][ T9815] EXT4-fs error (device loop5): dx_probe:791: inode #2: comm syz.5.2803: Directory hole found for htree index block 0 [ 94.640688][ T9815] EXT4-fs (loop5): Remounting filesystem read-only [ 94.647381][ T9815] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -117 [ 94.661419][ T9815] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 94.699737][ T9815] EXT4-fs (loop5): can't enable nombcache during remount [ 94.719969][ T9815] EXT4-fs (loop5): can't enable nombcache during remount [ 94.731356][ T9822] loop1: detected capacity change from 0 to 8192 [ 94.803877][ T9825] netlink: 'syz.0.2809': attribute type 21 has an invalid length. [ 94.873181][ T9835] netlink: 'syz.4.2813': attribute type 21 has an invalid length. [ 94.883795][ T9835] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2813'. [ 94.913452][ T9840] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2816'. [ 94.922601][ T9840] netem: unknown loss type 12 [ 94.927280][ T9840] netem: change failed [ 95.006479][ T9849] usb usb1: usbfs: process 9849 (syz.5.2819) did not claim interface 0 before use [ 95.016896][ T9853] loop4: detected capacity change from 0 to 2048 [ 95.061066][ T9853] ext4 filesystem being mounted at /570/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.136839][ T9865] loop4: detected capacity change from 0 to 512 [ 95.179004][ T9865] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.2825: corrupted inode contents [ 95.179893][ T9881] loop1: detected capacity change from 0 to 128 [ 95.207092][ T9865] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #16: comm syz.4.2825: mark_inode_dirty error [ 95.220994][ T9865] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.2825: corrupted inode contents [ 95.234960][ T9865] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.2825: mark_inode_dirty error [ 95.247397][ T9865] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.2825: corrupted inode contents [ 95.262193][ T9865] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 95.289587][ T9865] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.2825: corrupted inode contents [ 95.312237][ T9865] EXT4-fs error (device loop4): ext4_truncate:4666: inode #16: comm syz.4.2825: mark_inode_dirty error [ 95.325043][ T9865] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 95.335877][ T9865] EXT4-fs (loop4): 1 truncate cleaned up [ 95.342902][ T9865] ext4 filesystem being mounted at /571/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.355500][ T56] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:4: Failed to release dquot type 1 [ 95.464129][ T9918] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2850'. [ 95.699747][ T9963] netlink: 'syz.3.2871': attribute type 1 has an invalid length. [ 95.710042][ T9962] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9962 comm=syz.5.2872 [ 95.722882][ T9962] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=9962 comm=syz.5.2872 [ 95.981378][T10006] netlink: 'syz.5.2892': attribute type 21 has an invalid length. [ 95.999727][T10006] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2892'. [ 96.203618][T10048] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10048 comm=syz.0.2910 [ 96.216394][T10048] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=10048 comm=syz.0.2910 [ 96.378861][T10075] loop0: detected capacity change from 0 to 2048 [ 96.405026][T10075] ext4 filesystem being mounted at /579/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.460549][T10091] netlink: 'syz.5.2933': attribute type 1 has an invalid length. [ 96.802536][T10161] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2966'. [ 96.811696][T10161] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2966'. [ 97.063585][T10203] loop0: detected capacity change from 0 to 1024 [ 97.072309][T10203] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 97.085342][T10203] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 97.094873][T10203] EXT4-fs (loop0): orphan cleanup on readonly fs [ 97.105477][T10203] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.2986: Failed to acquire dquot type 0 [ 97.143500][T10203] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.2986: Failed to acquire dquot type 0 [ 97.156566][T10203] EXT4-fs error (device loop0): ext4_free_blocks:6696: comm syz.0.2986: Freeing blocks not in datazone - block = 0, count = 4096 [ 97.179305][T10203] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.2986: Failed to acquire dquot type 0 [ 97.213338][T10203] EXT4-fs (loop0): 1 orphan inode deleted [ 97.265362][T10224] geneve2: entered promiscuous mode [ 97.270681][T10224] geneve2: entered allmulticast mode [ 97.295172][T10228] veth1_to_batadv: entered promiscuous mode [ 97.331961][T10233] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3000'. [ 97.412910][T10249] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3007'. [ 97.447122][T10253] 9pnet: Could not find request transport: r [ 97.448229][T10257] veth1_to_batadv: entered promiscuous mode [ 97.505569][T10266] loop3: detected capacity change from 0 to 128 [ 97.547056][T10266] ext4 filesystem being mounted at /620/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.749413][T10310] loop3: detected capacity change from 0 to 512 [ 97.772290][T10308] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10308 comm=syz.1.3036 [ 97.909256][T10310] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 97.920957][T10310] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 97.931102][T10310] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.3037: Corrupt directory, running e2fsck is recommended [ 97.960184][T10310] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 97.969546][T10310] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.3037: corrupted in-inode xattr: invalid ea_ino [ 97.984583][T10310] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.3037: couldn't read orphan inode 15 (err -117) [ 98.021077][T10310] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 98.033243][T10310] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 98.043791][T10310] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.3037: Corrupt directory, running e2fsck is recommended [ 98.060119][T10310] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 3: comm syz.3.3037: path /623/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 98.083948][T10310] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 64: comm syz.3.3037: path /623/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 98.184023][T10316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.192742][T10316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.230224][T10339] loop1: detected capacity change from 0 to 2048 [ 98.238482][T10339] EXT4-fs: Ignoring removed nobh option [ 98.361991][T10359] 9pnet: Could not find request transport: f [ 98.514514][T10399] loop5: detected capacity change from 0 to 128 [ 98.591848][T10415] vcan0: entered allmulticast mode [ 98.597210][T10415] vcan0: left allmulticast mode [ 98.645265][T10419] loop5: detected capacity change from 0 to 2048 [ 98.674634][T10419] EXT4-fs mount: 68 callbacks suppressed [ 98.674649][T10419] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.695326][T10419] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 98.710342][T10419] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 22 with error 28 [ 98.723117][T10419] EXT4-fs (loop5): This should not happen!! Data will be lost [ 98.723117][T10419] [ 98.732814][T10419] EXT4-fs (loop5): Total free blocks count 0 [ 98.733621][T10434] loop1: detected capacity change from 0 to 128 [ 98.738974][T10419] EXT4-fs (loop5): Free/Dirty block details [ 98.738992][T10419] EXT4-fs (loop5): free_blocks=2415919104 [ 98.739006][T10419] EXT4-fs (loop5): dirty_blocks=32 [ 98.762247][T10419] EXT4-fs (loop5): Block reservation details [ 98.768352][T10419] EXT4-fs (loop5): i_reserved_data_blocks=2 [ 98.775748][ T29] kauditd_printk_skb: 157 callbacks suppressed [ 98.775764][ T29] audit: type=1400 audit(2000000526.809:69590): avc: denied { connect } for pid=10436 comm="syz.0.3094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 98.808759][ T56] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 98.821572][T10434] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 98.842674][T10434] ext4 filesystem being mounted at /627/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.880478][ T29] audit: type=1400 audit(2000000526.899:69591): avc: denied { read write } for pid=10446 comm="syz.5.3097" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 98.904141][ T29] audit: type=1400 audit(2000000526.899:69592): avc: denied { open } for pid=10446 comm="syz.5.3097" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 98.944892][T10454] loop5: detected capacity change from 0 to 512 [ 98.945377][T10454] ext4: Unknown parameter 'fowner' [ 99.032974][ T3300] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 99.037461][T10461] serio: Serial port ttyS3 [ 99.081202][T10467] geneve2: entered promiscuous mode [ 99.086499][T10467] geneve2: entered allmulticast mode [ 99.150301][ T29] audit: type=1400 audit(2000000527.179:69593): avc: denied { read } for pid=10471 comm="syz.1.3108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 99.214894][ T29] audit: type=1400 audit(2000000527.249:69594): avc: denied { create } for pid=10483 comm="syz.1.3115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 99.236020][ T29] audit: type=1400 audit(2000000527.269:69595): avc: denied { write } for pid=10483 comm="syz.1.3115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 99.272971][T10488] 9pnet: Could not find request transport: f [ 99.272971][ T29] audit: type=1400 audit(2000000527.269:69596): avc: denied { bind } for pid=10483 comm="syz.1.3115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 99.486137][ T29] audit: type=1400 audit(2000000527.519:69597): avc: denied { read write } for pid=3302 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 99.510567][ T29] audit: type=1400 audit(2000000527.519:69598): avc: denied { open } for pid=3302 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 99.537229][ T29] audit: type=1400 audit(2000000527.549:69599): avc: denied { ioctl } for pid=3300 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 99.617427][T10524] loop5: detected capacity change from 0 to 128 [ 99.623720][T10523] loop4: detected capacity change from 0 to 1024 [ 99.628884][T10521] __nla_validate_parse: 11 callbacks suppressed [ 99.628898][T10521] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3131'. [ 99.651880][T10526] 9pnet_fd: Insufficient options for proto=fd [ 99.660091][T10524] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 99.674891][T10524] ext4 filesystem being mounted at /76/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 99.733549][T10523] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.756405][T10523] VFS: Lookup of 'file0' in ext4 loop4 would have caused loop [ 99.780860][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.783570][T10539] bridge0: entered promiscuous mode [ 99.795437][T10539] macvlan3: entered promiscuous mode [ 99.830746][ T9526] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 99.931431][T10567] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3152'. [ 99.950309][T10571] sd 0:0:1:0: device reset [ 100.059102][T10589] erspan0: entered promiscuous mode [ 100.110383][T10596] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3166'. [ 100.119477][T10596] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3166'. [ 100.230589][T10611] netlink: 'syz.1.3173': attribute type 58 has an invalid length. [ 100.238591][T10611] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3173'. [ 100.346872][T10598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.360962][T10598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.456610][T10647] bridge0: entered promiscuous mode [ 100.461903][T10647] macvlan4: entered promiscuous mode [ 100.691945][T10663] 9pnet_fd: Insufficient options for proto=fd [ 100.724401][T10666] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3198'. [ 100.812597][T10687] loop1: detected capacity change from 0 to 512 [ 100.875160][T10700] netlink: 'syz.4.3214': attribute type 58 has an invalid length. [ 100.883061][T10700] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3214'. [ 100.901536][T10698] bridge0: entered promiscuous mode [ 100.907515][T10698] macvlan2: entered promiscuous mode [ 100.947989][T10711] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 100.950343][T10709] IPVS: stopping master sync thread 10711 ... [ 100.992995][T10715] syz.4.3222 (10715) used greatest stack depth: 8552 bytes left [ 101.058039][T10727] erspan0: entered promiscuous mode [ 101.173608][T10752] vlan0: entered allmulticast mode [ 101.205391][T10758] erspan0: entered promiscuous mode [ 101.261549][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 101.269520][ T36] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 101.321897][T10773] loop0: detected capacity change from 0 to 128 [ 101.346962][T10773] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 101.392673][T10773] ext4 filesystem being mounted at /654/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 101.468954][ T3302] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 101.488978][T10781] loop0: detected capacity change from 0 to 512 [ 101.516280][T10784] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3254'. [ 101.625264][T10804] loop3: detected capacity change from 0 to 512 [ 101.632122][T10804] EXT4-fs: Ignoring removed bh option [ 101.637923][T10804] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 101.662019][T10804] EXT4-fs (loop3): 1 truncate cleaned up [ 101.675435][T10804] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.701292][T10817] loop5: detected capacity change from 0 to 512 [ 101.723337][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.760282][T10823] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 101.789517][T10825] loop0: detected capacity change from 0 to 128 [ 101.826184][T10825] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 101.848319][T10825] ext4 filesystem being mounted at /660/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.890289][T10847] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 101.902003][T10844] IPVS: stopping master sync thread 10847 ... [ 101.985068][ T3302] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 102.166382][T10901] netlink: 'syz.5.3310': attribute type 1 has an invalid length. [ 102.174203][T10901] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3310'. [ 102.255781][T10916] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3315'. [ 102.267979][T10918] vlan2: entered allmulticast mode [ 102.327658][T10926] loop5: detected capacity change from 0 to 512 [ 102.334540][T10926] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 102.345747][T10926] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002] [ 102.354027][T10926] System zones: 1-12 [ 102.358717][T10926] EXT4-fs (loop5): 1 truncate cleaned up [ 102.364879][T10926] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.382011][T10926] SELinux: Context : is not valid (left unmapped). [ 102.405347][ T9526] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.961907][T10947] vlan2: entered allmulticast mode [ 103.145598][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 103.164949][ T36] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 103.191612][T10976] netlink: 'syz.4.3341': attribute type 1 has an invalid length. [ 103.343267][T10993] netlink: 'syz.0.3361': attribute type 12 has an invalid length. [ 103.426448][T11003] loop5: detected capacity change from 0 to 512 [ 103.442700][T11003] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 103.446873][T11002] syz.1.3355 (11002) used greatest stack depth: 8192 bytes left [ 103.493233][T11009] netlink: 'syz.1.3359': attribute type 1 has an invalid length. [ 103.540350][ T3382] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 103.560764][ T3382] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 103.597473][T11024] loop1: detected capacity change from 0 to 512 [ 103.607498][T11023] loop5: detected capacity change from 0 to 512 [ 103.627766][T11024] EXT4-fs: Ignoring removed oldalloc option [ 103.644334][T11023] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 103.662469][T11023] ext4 filesystem being mounted at /129/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.678527][T11024] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.695989][T11024] ext4 filesystem being mounted at /675/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 103.706861][T11023] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 103.720879][T11024] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.3366: bg 0: block 217: padding at end of block bitmap is not set [ 103.761738][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.812562][ T29] kauditd_printk_skb: 355 callbacks suppressed [ 103.812576][ T29] audit: type=1400 audit(2000000531.849:69955): avc: denied { write } for pid=11036 comm="syz.5.3371" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 103.860787][ T29] audit: type=1400 audit(2000000531.879:69956): avc: denied { map } for pid=11042 comm="syz.4.3374" path="socket:[30961]" dev="sockfs" ino=30961 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 103.884360][ T29] audit: type=1400 audit(2000000531.879:69957): avc: denied { read } for pid=11042 comm="syz.4.3374" path="socket:[30961]" dev="sockfs" ino=30961 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 103.908059][ T29] audit: type=1400 audit(2000000531.889:69958): avc: denied { tracepoint } for pid=11045 comm="syz.5.3375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 103.928065][ T29] audit: type=1400 audit(2000000531.889:69959): avc: denied { create } for pid=11045 comm="syz.5.3375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 103.968082][ T29] audit: type=1400 audit(2000000531.889:69960): avc: denied { connect } for pid=11045 comm="syz.5.3375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 103.988108][ T29] audit: type=1400 audit(2000000531.979:69961): avc: denied { read } for pid=11044 comm="syz.0.3373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 104.008755][ T29] audit: type=1400 audit(2000000531.979:69962): avc: denied { ioctl } for pid=11044 comm="syz.0.3373" path="socket:[30964]" dev="sockfs" ino=30964 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 104.034954][ T29] audit: type=1400 audit(2000000531.999:69963): avc: denied { ioctl } for pid=11050 comm="syz.0.3378" path="socket:[30974]" dev="sockfs" ino=30974 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 104.060235][ T29] audit: type=1400 audit(2000000531.999:69964): avc: denied { bind } for pid=11050 comm="syz.0.3378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 104.155736][T11060] ALSA: seq fatal error: cannot create timer (-19) [ 104.267517][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 104.284424][ T36] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 104.376478][T11068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.386814][T11068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.402125][T11085] netlink: 'syz.5.3387': attribute type 12 has an invalid length. [ 104.507376][T11094] loop4: detected capacity change from 0 to 512 [ 104.514317][T11094] EXT4-fs: Ignoring removed oldalloc option [ 104.533886][T11094] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.546589][T11094] ext4 filesystem being mounted at /695/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 104.566758][T11094] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3391: bg 0: block 217: padding at end of block bitmap is not set [ 104.603922][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.847243][T11141] __nla_validate_parse: 7 callbacks suppressed [ 104.847277][T11141] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3411'. [ 104.996288][T11165] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3424'. [ 105.040478][T11173] loop5: detected capacity change from 0 to 512 [ 105.069481][T11173] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.096539][T11173] ext4 filesystem being mounted at /150/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.115458][T11171] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.122746][T11171] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.125992][T11173] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.3427: corrupted inode contents [ 105.152811][T11173] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #2: comm syz.5.3427: mark_inode_dirty error [ 105.174737][T11173] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.3427: corrupted inode contents [ 105.216133][T11173] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #2: comm syz.5.3427: mark_inode_dirty error [ 105.234617][T11171] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.246477][T11171] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.276385][T11171] hsr0: left promiscuous mode [ 105.312430][T11180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.321416][T11180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.329607][ T383] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.339055][ T383] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 105.351362][ T383] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.360431][ T383] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 105.369555][ T31] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.378483][ T31] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 105.398057][ T9526] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.404915][ T31] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.416004][ T31] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 105.648859][T11239] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3451'. [ 105.924134][T11260] netlink: 'syz.4.3460': attribute type 8 has an invalid length. [ 106.138487][T11306] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3483'. [ 106.148294][T11306] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3483'. [ 106.165426][T11308] loop1: detected capacity change from 0 to 512 [ 106.184069][T11308] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.196790][T11308] ext4 filesystem being mounted at /694/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.210228][T11308] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.3484: corrupted inode contents [ 106.223541][T11308] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #2: comm syz.1.3484: mark_inode_dirty error [ 106.235573][T11308] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.3484: corrupted inode contents [ 106.249433][T11308] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.3484: mark_inode_dirty error [ 106.303383][T11324] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3491'. [ 106.313961][T11324] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.315388][T11326] loop5: detected capacity change from 0 to 1024 [ 106.331422][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.335910][T11326] EXT4-fs: Ignoring removed oldalloc option [ 106.346540][T11326] EXT4-fs: Ignoring removed orlov option [ 106.363954][T11326] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.386161][T11335] program syz.1.3494 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 106.409221][ T9526] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.878423][T11344] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=11344 comm=syz.5.3509 [ 107.061901][T11369] loop0: detected capacity change from 0 to 1024 [ 107.069674][T11369] EXT4-fs: Ignoring removed bh option [ 107.075583][T11369] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 107.093753][T11369] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.116267][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.235437][T11390] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3520'. [ 107.281121][T11395] loop1: detected capacity change from 0 to 1024 [ 107.288170][T11395] EXT4-fs: Ignoring removed bh option [ 107.295176][T11395] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 107.315006][T11395] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.342022][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.367969][T11409] netlink: 'syz.3.3530': attribute type 1 has an invalid length. [ 107.375774][T11409] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3530'. [ 107.423441][T11419] netlink: 188 bytes leftover after parsing attributes in process `syz.3.3534'. [ 107.485762][T11431] loop3: detected capacity change from 0 to 1024 [ 107.492701][T11431] EXT4-fs: Ignoring removed bh option [ 107.498505][T11431] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 107.517322][T11431] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.545127][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.578910][T11445] loop1: detected capacity change from 0 to 128 [ 107.612862][T11447] netlink: 188 bytes leftover after parsing attributes in process `syz.4.3547'. [ 107.667839][ T31] kworker/u8:1: attempt to access beyond end of device [ 107.667839][ T31] loop1: rw=1, sector=193, nr_sectors = 8 limit=128 [ 107.683592][ T31] kworker/u8:1: attempt to access beyond end of device [ 107.683592][ T31] loop1: rw=1, sector=209, nr_sectors = 8 limit=128 [ 107.698015][ T31] kworker/u8:1: attempt to access beyond end of device [ 107.698015][ T31] loop1: rw=1, sector=225, nr_sectors = 8 limit=128 [ 107.712616][ T31] kworker/u8:1: attempt to access beyond end of device [ 107.712616][ T31] loop1: rw=1, sector=241, nr_sectors = 8 limit=128 [ 107.726066][ T31] kworker/u8:1: attempt to access beyond end of device [ 107.726066][ T31] loop1: rw=1, sector=257, nr_sectors = 8 limit=128 [ 107.739817][ T31] kworker/u8:1: attempt to access beyond end of device [ 107.739817][ T31] loop1: rw=1, sector=273, nr_sectors = 8 limit=128 [ 107.771173][ T31] kworker/u8:1: attempt to access beyond end of device [ 107.771173][ T31] loop1: rw=1, sector=289, nr_sectors = 8 limit=128 [ 107.786824][ T31] kworker/u8:1: attempt to access beyond end of device [ 107.786824][ T31] loop1: rw=1, sector=305, nr_sectors = 8 limit=128 [ 107.800509][ T31] kworker/u8:1: attempt to access beyond end of device [ 107.800509][ T31] loop1: rw=1, sector=321, nr_sectors = 8 limit=128 [ 107.829860][ T31] kworker/u8:1: attempt to access beyond end of device [ 107.829860][ T31] loop1: rw=1, sector=337, nr_sectors = 8 limit=128 [ 107.881499][T11468] batman_adv: batadv0: Adding interface: ipvlan2 [ 107.887928][T11468] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.913341][T11468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.923896][T11468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.936149][T11468] batman_adv: batadv0: Interface activated: ipvlan2 [ 107.943731][T11470] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.956536][T11470] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.095629][T11485] loop1: detected capacity change from 0 to 256 [ 108.322072][T11511] loop5: detected capacity change from 0 to 256 [ 108.436599][T11530] loop3: detected capacity change from 0 to 128 [ 108.531798][T11549] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 108.531798][T11549] The task syz.4.3589 (11549) triggered the difference, watch for misbehavior. [ 108.571990][T11552] hugetlbfs: syz.0.3596 (11552): Using mlock ulimits for SHM_HUGETLB is obsolete [ 108.845897][T11587] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.853627][T11587] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.892580][T11587] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.900273][T11587] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.912642][T11587] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 108.919611][T11587] batman_adv: batadv0: Removing interface: ipvlan2 [ 108.990588][ T29] kauditd_printk_skb: 117 callbacks suppressed [ 108.990621][ T29] audit: type=1400 audit(2000000537.019:70082): avc: denied { read } for pid=11596 comm="syz.3.3613" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 109.007454][T11599] loop3: detected capacity change from 0 to 256 [ 109.139827][T11609] loop0: detected capacity change from 0 to 512 [ 109.160581][T11609] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.181557][ T29] audit: type=1400 audit(2000000537.209:70083): avc: denied { read append open } for pid=11607 comm="syz.0.3628" path="/738/file0/file0/blkio.bfq.io_wait_time_recursive" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 109.209325][ T29] audit: type=1400 audit(2000000537.209:70084): avc: denied { link } for pid=11607 comm="syz.0.3628" name="file0" dev="loop0" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 109.256152][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.266501][T11618] netlink: 'syz.1.3622': attribute type 3 has an invalid length. [ 109.315144][ T29] audit: type=1400 audit(2000000537.339:70085): avc: denied { execute } for pid=11630 comm="syz.3.3626" name="file1" dev="tmpfs" ino=3621 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 109.337815][ T29] audit: type=1400 audit(2000000537.339:70086): avc: denied { execute_no_trans } for pid=11630 comm="syz.3.3626" path="/708/file1" dev="tmpfs" ino=3621 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 109.385861][T11626] 9pnet: Could not find request transport: 0xffffffffffffffff [ 109.458911][ T29] audit: type=1400 audit(2000000537.489:70087): avc: denied { block_suspend } for pid=11639 comm="syz.1.3632" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 109.502326][ T29] audit: type=1400 audit(2000000537.529:70088): avc: denied { read } for pid=11647 comm="syz.4.3637" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 109.525331][ T29] audit: type=1400 audit(2000000537.529:70089): avc: denied { open } for pid=11647 comm="syz.4.3637" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 109.602805][T11654] netlink: 'syz.3.3638': attribute type 3 has an invalid length. [ 110.010753][T11676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.019778][T11676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.147737][T11711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.156458][T11711] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.195490][T11715] netlink: 'syz.3.3664': attribute type 1 has an invalid length. [ 110.215368][T11717] sch_fq: defrate 0 ignored. [ 110.310634][T11729] __nla_validate_parse: 2 callbacks suppressed [ 110.310646][T11729] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3671'. [ 110.351910][ T29] audit: type=1400 audit(2000000538.379:70090): avc: denied { validate_trans } for pid=11732 comm="syz.5.3673" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 110.405039][T11736] loop5: detected capacity change from 0 to 512 [ 110.411833][T11736] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 110.423229][T11736] EXT4-fs (loop5): 1 truncate cleaned up [ 110.429131][T11736] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.480561][ T9526] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.604316][ T29] audit: type=1400 audit(2000000538.639:70091): avc: denied { relabelfrom } for pid=11759 comm="syz.1.3686" name="" dev="pipefs" ino=32208 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 110.652773][T11766] loop5: detected capacity change from 0 to 128 [ 110.659419][T11766] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 110.671951][T11766] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 110.708814][ T12] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 110.845870][T11788] loop5: detected capacity change from 0 to 1024 [ 110.853410][T11788] EXT4-fs: inline encryption not supported [ 110.859422][T11788] EXT4-fs: Ignoring removed bh option [ 110.873565][T11788] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.917526][ T9526] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.934314][T11795] vhci_hcd: invalid port number 96 [ 110.939471][T11795] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 110.946852][T11799] loop5: detected capacity change from 0 to 2048 [ 110.963746][T11799] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.990146][T11799] EXT4-fs error (device loop5): ext4_find_extent:939: inode #2: comm syz.5.3704: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 111.038221][T11809] sch_fq: defrate 0 ignored. [ 111.045405][ T9526] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.105291][T11818] loop0: detected capacity change from 0 to 512 [ 111.114073][T11818] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 111.127576][T11818] EXT4-fs (loop0): 1 truncate cleaned up [ 111.133737][T11818] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.253801][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.302492][T11831] 9pnet: Could not find request transport: ra_arbiter [ 111.309490][T11833] ALSA: seq fatal error: cannot create timer (-19) [ 111.356761][T11843] loop3: detected capacity change from 0 to 1024 [ 111.363685][T11843] EXT4-fs: inline encryption not supported [ 111.369757][T11843] EXT4-fs: Ignoring removed bh option [ 111.383990][T11843] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.419013][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.438360][T11853] loop3: detected capacity change from 0 to 1024 [ 111.447001][T11853] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.470555][T11853] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 111.493199][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.651613][T11873] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 111.651613][T11873] program ¬í not setting count and/or reply_len properly [ 111.709987][T11876] loop3: detected capacity change from 0 to 8192 [ 111.717883][T11876] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 112.227626][T11884] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.3740'. [ 112.245482][T11886] loop4: detected capacity change from 0 to 2048 [ 112.264797][T11886] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.284220][T11890] vhci_hcd: invalid port number 96 [ 112.289389][T11890] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 112.307757][T11886] EXT4-fs error (device loop4): ext4_find_extent:939: inode #2: comm syz.4.3741: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 112.343049][T11899] tipc: Started in network mode [ 112.347951][T11899] tipc: Node identity ff, cluster identity 4711 [ 112.354885][T11899] tipc: Enabling of bearer rejected, failed to enable media [ 112.382179][T11903] loop3: detected capacity change from 0 to 512 [ 112.389050][T11903] EXT4-fs: Ignoring removed nobh option [ 112.411166][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.425720][T11903] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.3747: corrupted inode contents [ 112.444109][T11903] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #3: comm syz.3.3747: mark_inode_dirty error [ 112.457893][T11903] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.3747: corrupted inode contents [ 112.471266][T11903] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #3: comm syz.3.3747: mark_inode_dirty error [ 112.492326][T11903] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.3747: Failed to acquire dquot type 0 [ 112.513374][T11903] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.3747: corrupted inode contents [ 112.540503][T11923] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3765'. [ 112.557955][T11903] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #16: comm syz.3.3747: mark_inode_dirty error [ 112.588880][T11903] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.3747: corrupted inode contents [ 112.603167][T11903] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.3747: mark_inode_dirty error [ 112.620016][T11903] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.3747: corrupted inode contents [ 112.620324][T11929] loop1: detected capacity change from 0 to 8192 [ 112.633102][T11903] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 112.648420][T11903] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.3747: corrupted inode contents [ 112.670603][T11929] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 112.681824][T11903] EXT4-fs error (device loop3): ext4_truncate:4666: inode #16: comm syz.3.3747: mark_inode_dirty error [ 112.693999][T11903] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 112.704518][T11903] EXT4-fs (loop3): 1 truncate cleaned up [ 112.707364][T11936] loop5: detected capacity change from 0 to 1024 [ 112.710479][T11903] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.725542][T11936] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.730509][T11903] ext4 filesystem being mounted at /738/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.789420][T11936] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 112.823829][ T9526] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.888178][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.904956][T11954] sctp: [Deprecated]: syz.5.3769 (pid 11954) Use of int in max_burst socket option deprecated. [ 112.904956][T11954] Use struct sctp_assoc_value instead [ 113.236275][T11993] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3790'. [ 113.245519][T11993] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3790'. [ 113.255136][T11993] netlink: 33 bytes leftover after parsing attributes in process `syz.3.3790'. [ 113.265390][T11993] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3790'. [ 113.274585][T11993] netlink: 33 bytes leftover after parsing attributes in process `syz.3.3790'. [ 113.560040][T12041] loop5: detected capacity change from 0 to 512 [ 113.575807][T12041] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3812: bg 0: block 248: padding at end of block bitmap is not set [ 113.590786][T12041] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.3812: Failed to acquire dquot type 1 [ 113.605050][T12041] EXT4-fs (loop5): 1 truncate cleaned up [ 113.611133][T12041] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.624974][T12041] ext4 filesystem being mounted at /225/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.651268][ T9526] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.726523][T12067] loop5: detected capacity change from 0 to 512 [ 113.733167][T12067] EXT4-fs: Ignoring removed nobh option [ 113.743759][T12067] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #3: comm syz.5.3824: corrupted inode contents [ 113.755723][T12067] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #3: comm syz.5.3824: mark_inode_dirty error [ 113.767559][T12067] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #3: comm syz.5.3824: corrupted inode contents [ 113.779583][T12067] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #3: comm syz.5.3824: mark_inode_dirty error [ 113.791119][T12067] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.3824: Failed to acquire dquot type 0 [ 113.803578][T12067] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.3824: corrupted inode contents [ 113.815675][T12067] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #16: comm syz.5.3824: mark_inode_dirty error [ 113.828305][T12067] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.3824: corrupted inode contents [ 113.840820][T12067] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #16: comm syz.5.3824: mark_inode_dirty error [ 113.852389][T12067] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.3824: corrupted inode contents [ 113.864805][T12067] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 113.873769][T12067] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.3824: corrupted inode contents [ 113.886422][T12067] EXT4-fs error (device loop5): ext4_truncate:4666: inode #16: comm syz.5.3824: mark_inode_dirty error [ 113.897844][T12067] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 113.907920][T12067] EXT4-fs (loop5): 1 truncate cleaned up [ 113.916791][T12067] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.930141][T12067] ext4 filesystem being mounted at /229/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.960746][ T9526] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.031265][ T29] kauditd_printk_skb: 141 callbacks suppressed [ 114.031282][ T29] audit: type=1326 audit(2000000542.059:70227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12092 comm="syz.5.3835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d34cbebe9 code=0x7ffc0000 [ 114.061211][ T29] audit: type=1326 audit(2000000542.059:70228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12092 comm="syz.5.3835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d34cbebe9 code=0x7ffc0000 [ 114.092976][ T29] audit: type=1326 audit(2000000542.059:70229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12092 comm="syz.5.3835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7f1d34cbebe9 code=0x7ffc0000 [ 114.095421][T12094] sctp: [Deprecated]: syz.0.3834 (pid 12094) Use of int in max_burst socket option deprecated. [ 114.095421][T12094] Use struct sctp_assoc_value instead [ 114.116568][ T29] audit: type=1326 audit(2000000542.059:70230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12092 comm="syz.5.3835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d34cbebe9 code=0x7ffc0000 [ 114.155992][ T29] audit: type=1326 audit(2000000542.099:70231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12092 comm="syz.5.3835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d34cbebe9 code=0x7ffc0000 [ 114.246134][T12096] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3837'. [ 114.259659][ T29] audit: type=1400 audit(2000000542.289:70232): avc: denied { write } for pid=12109 comm="syz.4.3844" name="ptp0" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 114.283238][ T29] audit: type=1400 audit(2000000542.289:70233): avc: denied { open } for pid=12109 comm="syz.4.3844" path="/dev/ptp0" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 114.308405][ T29] audit: type=1400 audit(2000000542.289:70234): avc: denied { ioctl } for pid=12109 comm="syz.4.3844" path="/dev/ptp0" dev="devtmpfs" ino=245 ioctlcmd=0x3d10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 114.333595][ T29] audit: type=1400 audit(2000000542.319:70235): avc: denied { write } for pid=12105 comm="syz.5.3851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 114.355881][T12108] loop0: detected capacity change from 0 to 512 [ 114.391426][ T29] audit: type=1326 audit(2000000542.389:70236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12111 comm="syz.3.3845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc27c88ebe9 code=0x7ffc0000 [ 114.395795][T12117] netlink: 'syz.4.3848': attribute type 15 has an invalid length. [ 114.435827][T12108] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.3842: bg 0: block 248: padding at end of block bitmap is not set [ 114.464699][T12108] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.3842: Failed to acquire dquot type 1 [ 114.487548][T12108] EXT4-fs (loop0): 1 truncate cleaned up [ 114.507154][T12108] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.523607][T12108] ext4 filesystem being mounted at /793/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.544688][T12132] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3856'. [ 114.595386][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.617620][T12141] loop5: detected capacity change from 0 to 1024 [ 114.639628][T12141] EXT4-fs: Ignoring removed bh option [ 114.645730][T12141] EXT4-fs: inline encryption not supported [ 114.653027][T12141] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 114.678333][T12151] loop0: detected capacity change from 0 to 256 [ 114.685379][T12151] vfat: Deprecated parameter 'posix' [ 114.690680][T12151] FAT-fs: "posix" option is obsolete, not supported now [ 114.703815][T12151] FAT-fs (loop0): codepage cp775 not found [ 114.816661][T12141] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 114.834923][T12141] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 2: comm syz.5.3860: lblock 2 mapped to illegal pblock 2 (length 1) [ 114.863848][T12141] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 48: comm syz.5.3860: lblock 0 mapped to illegal pblock 48 (length 1) [ 114.878577][T12141] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.3860: Failed to acquire dquot type 0 [ 114.891191][T12141] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 114.902776][T12141] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #11: comm syz.5.3860: mark_inode_dirty error [ 114.922018][T12141] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 114.933647][T12141] EXT4-fs (loop5): 1 orphan inode deleted [ 114.939736][T12141] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.249055][ T31] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 115.285684][ T31] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 0 [ 115.306781][T12141] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 115.333310][ T9526] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.356640][T12195] loop1: detected capacity change from 0 to 512 [ 115.373523][T12195] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! crond[3092]: time disparity of 4092702 minutes detected [ 115.613355][T12239] loop5: detected capacity change from 0 to 512 [ 115.620081][T12239] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 115.701932][T12244] loop5: detected capacity change from 0 to 4096 [ 115.710498][T12244] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.736158][ T9526] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.800680][T12251] loop5: detected capacity change from 0 to 256 [ 115.807703][T12251] vfat: Deprecated parameter 'posix' [ 115.813083][T12251] FAT-fs: "posix" option is obsolete, not supported now [ 115.819266][T12251] FAT-fs (loop5): codepage cp775 not found [ 116.256882][T12279] loop5: detected capacity change from 0 to 512 [ 116.274062][T12279] ext4 filesystem being mounted at /256/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.332441][T12284] loop1: detected capacity change from 0 to 256 [ 116.339282][T12284] vfat: Deprecated parameter 'posix' [ 116.344739][T12284] FAT-fs: "posix" option is obsolete, not supported now [ 116.372397][T12284] FAT-fs (loop1): codepage cp775 not found [ 116.600419][T12308] loop0: detected capacity change from 0 to 8192 [ 116.869584][T12352] bond1: entered promiscuous mode [ 116.874715][T12352] bond1: entered allmulticast mode [ 116.903512][T12352] 8021q: adding VLAN 0 to HW filter on device bond1 [ 116.945264][T12352] bond1 (unregistering): Released all slaves [ 116.979887][T12371] loop5: detected capacity change from 0 to 1024 [ 117.003615][T12371] ext4 filesystem being mounted at /261/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.054146][T12383] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 117.069234][T12384] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #15: comm syz.5.3961: lblock 0 mapped to illegal pblock 0 (length 6) [ 117.092663][T12384] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 117.101554][T12386] loop1: detected capacity change from 0 to 512 [ 117.105282][T12384] EXT4-fs (loop5): This should not happen!! Data will be lost [ 117.105282][T12384] [ 117.134051][T12386] ext4 filesystem being mounted at /792/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.520436][ T56] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #15: block 8: comm kworker/u8:4: lblock 8 mapped to illegal pblock 8 (length 8) [ 117.537482][ T56] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 117.549787][ T56] EXT4-fs (loop5): This should not happen!! Data will be lost [ 117.549787][ T56] [ 117.571726][ T56] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 117.587279][ T56] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 2060 with max blocks 2048 with error 28 [ 117.600785][ T56] EXT4-fs (loop5): This should not happen!! Data will be lost [ 117.600785][ T56] [ 117.610489][ T56] EXT4-fs (loop5): Total free blocks count 0 [ 117.616517][ T56] EXT4-fs (loop5): Free/Dirty block details [ 117.623100][ T56] EXT4-fs (loop5): free_blocks=4293918720 [ 117.629068][ T56] EXT4-fs (loop5): dirty_blocks=14352 [ 118.056026][T12467] loop4: detected capacity change from 0 to 1024 [ 118.059772][T12466] loop5: detected capacity change from 0 to 512 [ 118.073660][T12469] __nla_validate_parse: 3 callbacks suppressed [ 118.073675][T12469] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4005'. [ 118.097142][T12467] EXT4-fs: Ignoring removed oldalloc option [ 118.103228][T12467] EXT4-fs: Ignoring removed bh option [ 118.179530][T12482] loop3: detected capacity change from 0 to 512 [ 118.213416][T12482] EXT4-fs: Ignoring removed oldalloc option [ 118.227697][T12482] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 118.251066][T12482] EXT4-fs (loop3): 1 truncate cleaned up [ 118.450738][T12513] loop3: detected capacity change from 0 to 512 [ 118.465810][T12513] EXT4-fs: Ignoring removed i_version option [ 118.471857][T12513] EXT4-fs: Ignoring removed nobh option [ 118.508677][T12513] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 118.557112][T12513] EXT4-fs (loop3): 1 truncate cleaned up [ 118.582113][T12522] loop5: detected capacity change from 0 to 1024 [ 118.622674][T12522] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.4026: Failed to acquire dquot type 0 [ 118.635169][T12522] EXT4-fs (loop5): 1 truncate cleaned up [ 118.757415][T12537] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 118.768138][T12537] macsec2: entered allmulticast mode [ 118.775623][T12537] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 118.797909][T12537] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 118.805276][T12537] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 118.832328][T12546] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4038'. [ 118.914834][T12555] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4042'. [ 118.933064][T12555] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4042'. [ 119.066035][ T29] kauditd_printk_skb: 128 callbacks suppressed [ 119.066051][ T29] audit: type=1400 audit(2000000547.099:70358): avc: denied { create } for pid=12573 comm="syz.1.4052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 119.184826][T12582] loop1: detected capacity change from 0 to 512 [ 119.191535][T12582] EXT4-fs: Ignoring removed i_version option [ 119.198406][T12582] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 119.226046][T12584] loop0: detected capacity change from 0 to 1024 [ 119.238933][T12582] EXT4-fs (loop1): 1 truncate cleaned up [ 119.253156][ T29] audit: type=1400 audit(2000000547.129:70359): avc: denied { ioctl } for pid=12573 comm="syz.1.4052" path="socket:[35378]" dev="sockfs" ino=35378 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 119.278021][ T29] audit: type=1400 audit(2000000547.129:70360): avc: denied { ioctl } for pid=12573 comm="syz.1.4052" path="socket:[35379]" dev="sockfs" ino=35379 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sock_file permissive=1 [ 119.302717][ T29] audit: type=1326 audit(2000000547.199:70361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12579 comm="syz.1.4054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65815aebe9 code=0x7ffc0000 [ 119.326335][ T29] audit: type=1326 audit(2000000547.199:70362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12579 comm="syz.1.4054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7f65815aebe9 code=0x7ffc0000 [ 119.349938][ T29] audit: type=1326 audit(2000000547.199:70363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12579 comm="syz.1.4054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65815aebe9 code=0x7ffc0000 [ 119.363507][T12584] ext4 filesystem being mounted at /833/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.373530][ T29] audit: type=1400 audit(2000000547.279:70364): avc: denied { setattr } for pid=12581 comm="syz.1.4055" name="file0" dev="loop1" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 119.373565][ T29] audit: type=1400 audit(2000000547.279:70365): avc: denied { remove_name } for pid=12581 comm="syz.1.4055" name="file0" dev="loop1" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 119.373589][ T29] audit: type=1400 audit(2000000547.279:70366): avc: denied { unlink } for pid=12581 comm="syz.1.4055" name="file0" dev="loop1" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 119.498401][ T29] audit: type=1400 audit(2000000547.519:70367): avc: denied { create } for pid=12590 comm="syz.4.4058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 119.583152][T12597] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: comm syz.0.4065: lblock 0 mapped to illegal pblock 0 (length 6) [ 119.602173][T12597] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 119.615152][T12597] EXT4-fs (loop0): This should not happen!! Data will be lost [ 119.615152][T12597] [ 119.706673][T12601] loop4: detected capacity change from 0 to 512 [ 119.722493][T12601] EXT4-fs: Ignoring removed oldalloc option [ 119.728664][T12601] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 119.743289][T12601] EXT4-fs (loop4): 1 truncate cleaned up [ 119.831387][T12607] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4063'. [ 119.841670][T12607] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4063'. [ 119.989018][T12623] netlink: 'syz.4.4071': attribute type 2 has an invalid length. [ 119.997030][T12623] netlink: 'syz.4.4071': attribute type 1 has an invalid length. [ 120.005512][T12623] netlink: 199820 bytes leftover after parsing attributes in process `syz.4.4071'. [ 120.064382][T12630] loop3: detected capacity change from 0 to 512 [ 120.077555][T12630] EXT4-fs: Ignoring removed oldalloc option [ 120.086752][T12630] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.4074: Parent and EA inode have the same ino 15 [ 120.112052][T12630] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.4074: Parent and EA inode have the same ino 15 [ 120.136953][T12630] EXT4-fs (loop3): 1 orphan inode deleted [ 120.148549][ T51] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: block 8: comm kworker/u8:3: lblock 8 mapped to illegal pblock 8 (length 8) [ 120.195664][ T51] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 120.208167][ T51] EXT4-fs (loop0): This should not happen!! Data will be lost [ 120.208167][ T51] [ 120.238734][T12642] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4081'. [ 120.272786][ T51] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 120.289545][ T51] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 2060 with max blocks 2048 with error 28 [ 120.302950][ T51] EXT4-fs (loop0): This should not happen!! Data will be lost [ 120.302950][ T51] [ 120.312666][ T51] EXT4-fs (loop0): Total free blocks count 0 [ 120.318928][ T51] EXT4-fs (loop0): Free/Dirty block details [ 120.324966][ T51] EXT4-fs (loop0): free_blocks=4293918720 [ 120.330887][ T51] EXT4-fs (loop0): dirty_blocks=14352 [ 120.553369][T12681] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 120.669159][T12696] loop3: detected capacity change from 0 to 512 [ 120.686943][T12700] SELinux: Context system_u:object_r:traceroute_exec_t:s0 is not valid (left unmapped). [ 120.705737][T12702] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4103'. [ 120.719654][T12704] loop4: detected capacity change from 0 to 256 [ 120.734282][T12704] FAT-fs (loop4): Directory bread(block 64) failed [ 120.741118][T12704] FAT-fs (loop4): Directory bread(block 65) failed [ 120.747725][T12704] FAT-fs (loop4): Directory bread(block 66) failed [ 120.754453][T12704] FAT-fs (loop4): Directory bread(block 67) failed [ 120.761019][T12704] FAT-fs (loop4): Directory bread(block 68) failed [ 120.768336][T12704] FAT-fs (loop4): Directory bread(block 69) failed [ 120.774945][T12704] FAT-fs (loop4): Directory bread(block 70) failed [ 120.781521][T12704] FAT-fs (loop4): Directory bread(block 71) failed [ 120.788591][T12704] FAT-fs (loop4): Directory bread(block 72) failed [ 120.795245][T12704] FAT-fs (loop4): Directory bread(block 73) failed [ 120.827184][T12710] loop4: detected capacity change from 0 to 512 [ 120.833776][T12710] EXT4-fs: Ignoring removed oldalloc option [ 120.843338][T12710] EXT4-fs error (device loop4): ext4_xattr_inode_iget:433: comm syz.4.4106: Parent and EA inode have the same ino 15 [ 120.856034][T12710] EXT4-fs error (device loop4): ext4_xattr_inode_iget:433: comm syz.4.4106: Parent and EA inode have the same ino 15 [ 120.869181][T12710] EXT4-fs (loop4): 1 orphan inode deleted [ 121.368900][T12742] loop0: detected capacity change from 0 to 128 [ 121.383188][T12742] ext4 filesystem being mounted at /836/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 121.433601][T12755] loop0: detected capacity change from 0 to 128 [ 121.451961][T12755] ext4 filesystem being mounted at /838/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.454467][T12755] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:375: inode #2: comm syz.0.4131: No space for directory leaf checksum. Please run e2fsck -D. [ 121.454575][T12755] EXT4-fs error (device loop0): htree_dirblock_to_tree:1051: inode #2: comm syz.0.4131: Directory block failed checksum [ 121.572528][T12775] loop3: detected capacity change from 0 to 2048 [ 121.695085][T12805] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4155'. [ 121.695675][T12801] loop3: detected capacity change from 0 to 1024 [ 121.731816][T12809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.740623][T12809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.749617][T12801] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.4153: Failed to acquire dquot type 0 [ 121.762364][T12801] EXT4-fs (loop3): 1 truncate cleaned up [ 121.778731][T12817] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 121.977811][T12840] loop0: detected capacity change from 0 to 1024 [ 122.004522][T12840] ext4 filesystem being mounted at /855/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.017603][T12840] EXT4-fs error (device loop0): ext4_readdir:264: inode #12: block 80: comm syz.0.4170: path /855/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=296, inode=0, rec_len=0, size=1024 fake=0 [ 122.155487][T12856] loop1: detected capacity change from 0 to 2048 [ 122.165791][T12858] loop0: detected capacity change from 0 to 512 [ 122.173622][T12858] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 122.194003][T12858] ext4 filesystem being mounted at /859/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.284506][T12872] loop5: detected capacity change from 0 to 128 [ 122.300076][T12872] ext4 filesystem being mounted at /290/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 122.323169][T12875] loop0: detected capacity change from 0 to 512 [ 122.339015][T12875] vfat: Unknown parameter '01777777777777777777777' [ 122.467729][T12888] netlink: 'syz.5.4189': attribute type 2 has an invalid length. [ 122.671338][T12905] loop5: detected capacity change from 0 to 764 [ 122.687104][T12907] 9pnet_fd: Insufficient options for proto=fd [ 122.703472][T12905] Symlink component flag not implemented [ 122.716667][T12905] Symlink component flag not implemented (7) [ 123.005822][T12941] loop5: detected capacity change from 0 to 512 [ 123.031602][T12941] ext4 filesystem being mounted at /307/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 123.054231][T12941] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.4216: corrupted inode contents [ 123.075416][T12941] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #2: comm syz.5.4216: mark_inode_dirty error [ 123.091264][T12941] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.4216: corrupted inode contents [ 123.124262][T12941] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #2: comm syz.5.4216: mark_inode_dirty error [ 123.337310][T12976] loop1: detected capacity change from 0 to 1024 [ 123.369223][T12976] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 15: block 369:freeing already freed block (bit 23); block bitmap corrupt. [ 123.432753][T12987] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 123.459549][T12989] __nla_validate_parse: 5 callbacks suppressed [ 123.459573][T12989] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4237'. [ 123.475683][T12989] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4237'. [ 123.487355][T12989] erspan0: entered promiscuous mode [ 123.500083][T12989] gretap0: entered promiscuous mode [ 123.508749][T12992] loop4: detected capacity change from 0 to 1024 [ 123.536241][T12992] ext4 filesystem being mounted at /850/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.579985][ T31] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 123.599103][ T31] EXT4-fs (loop4): Remounting filesystem read-only [ 123.619369][T13005] loop1: detected capacity change from 0 to 764 [ 123.629205][ T56] EXT4-fs warning (device loop4): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 123.647354][T13005] Symlink component flag not implemented [ 123.654738][T13005] Symlink component flag not implemented (7) [ 123.673087][T13008] openvswitch: netlink: Message has 6 unknown bytes. [ 123.706556][T13015] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4249'. [ 123.716246][T13015] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4249'. [ 123.725576][T13015] netlink: 2 bytes leftover after parsing attributes in process `syz.5.4249'. [ 123.930608][T13050] vhci_hcd: invalid port number 96 [ 123.935865][T13050] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 123.975514][T13059] loop0: detected capacity change from 0 to 512 [ 123.996517][T13064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.005530][T13064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.035084][T13059] ext4 filesystem being mounted at /882/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 124.055106][T13059] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.4269: corrupted inode contents [ 124.082631][T13059] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #2: comm syz.0.4269: mark_inode_dirty error [ 124.092636][T13081] loop4: detected capacity change from 0 to 1024 [ 124.098543][T13059] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.4269: corrupted inode contents [ 124.113690][T13059] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.4269: mark_inode_dirty error [ 124.118705][T13083] loop5: detected capacity change from 0 to 1024 [ 124.138746][T13083] ext4 filesystem being mounted at /321/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.166967][T13081] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 15: block 369:freeing already freed block (bit 23); block bitmap corrupt. [ 124.196676][ T12] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 124.211863][ T12] EXT4-fs (loop5): Remounting filesystem read-only [ 124.219637][ T51] EXT4-fs warning (device loop5): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 124.288578][T13094] vhci_hcd: invalid port number 96 [ 124.293841][T13094] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 124.336612][ T29] kauditd_printk_skb: 188 callbacks suppressed [ 124.336626][ T29] audit: type=1400 audit(2000000552.369:70554): avc: denied { ioctl } for pid=13103 comm="syz.4.4287" path="socket:[36454]" dev="sockfs" ino=36454 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 124.369481][T13104] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 124.476513][T13124] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4296'. [ 124.628904][ T29] audit: type=1400 audit(2000000552.659:70555): avc: denied { read } for pid=13142 comm="syz.1.4316" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 124.653129][ T29] audit: type=1400 audit(2000000552.659:70556): avc: denied { open } for pid=13142 comm="syz.1.4316" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 124.695393][ T29] audit: type=1400 audit(2000000552.729:70557): avc: denied { relabelfrom } for pid=13146 comm="syz.0.4307" name="" dev="pipefs" ino=36533 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 124.718351][ T29] audit: type=1400 audit(2000000552.729:70558): avc: denied { mac_admin } for pid=13146 comm="syz.0.4307" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 124.740397][ T29] audit: type=1400 audit(2000000552.729:70559): avc: denied { relabelto } for pid=13146 comm="syz.0.4307" name="" dev="pipefs" ino=36533 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:dhcp_state_t:s0" [ 124.776076][T13156] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4310'. [ 124.786006][ T29] audit: type=1400 audit(2000000552.819:70560): avc: denied { block_suspend } for pid=13157 comm="syz.5.4311" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 124.846979][T13166] loop0: detected capacity change from 0 to 1024 [ 124.854240][T13166] EXT4-fs: Ignoring removed orlov option [ 124.865545][ T29] audit: type=1400 audit(2000000552.899:70561): avc: denied { read append open } for pid=13165 comm="syz.0.4315" path="/894/bus/cpu.stat" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 124.892729][ T29] audit: type=1400 audit(2000000552.899:70562): avc: denied { ioctl } for pid=13165 comm="syz.0.4315" path="/894/bus/cpu.stat" dev="loop0" ino=18 ioctlcmd=0x583b scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 125.392982][ T29] audit: type=1400 audit(2000000553.429:70563): avc: denied { setopt } for pid=13187 comm="syz.1.4326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 125.434687][T13192] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4328'. [ 125.476592][T13196] program syz.4.4330 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 125.578689][T13216] netlink: 'syz.4.4340': attribute type 3 has an invalid length. [ 125.586690][T13216] netlink: 13435 bytes leftover after parsing attributes in process `syz.4.4340'. [ 125.851998][T13257] loop3: detected capacity change from 0 to 256 [ 125.904831][T13257] FAT-fs (loop3): Directory bread(block 1285) failed [ 125.929236][T13257] FAT-fs (loop3): Directory bread(block 1285) failed [ 126.002942][T13286] loop0: detected capacity change from 0 to 1024 [ 126.033956][T13286] ext4 filesystem being mounted at /900/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.136674][T13306] loop5: detected capacity change from 0 to 256 [ 126.191590][T13306] FAT-fs (loop5): Directory bread(block 1285) failed [ 126.200775][T13306] FAT-fs (loop5): Directory bread(block 1285) failed [ 126.206624][T13318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.221548][T13321] random: crng reseeded on system resumption [ 126.233675][T13318] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.320587][T13338] loop0: detected capacity change from 0 to 128 [ 126.373568][T13346] loop0: detected capacity change from 0 to 256 [ 126.382886][T13346] FAT-fs (loop0): Directory bread(block 1285) failed [ 126.394618][T13346] FAT-fs (loop0): Directory bread(block 1285) failed [ 126.464615][T13356] netlink: 'syz.3.4404': attribute type 14 has an invalid length. [ 126.663492][T13374] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 127.133351][T13395] random: crng reseeded on system resumption [ 127.274442][T13407] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4426'. [ 127.561006][T13435] loop5: detected capacity change from 0 to 512 [ 127.582174][T13435] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 127.614227][T13435] ext4 filesystem being mounted at /363/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.862153][ T9526] ================================================================== [ 127.870272][ T9526] BUG: KCSAN: data-race in __xa_clear_mark / xas_find_marked [ 127.877656][ T9526] [ 127.879972][ T9526] read-write to 0xffff888119e15b48 of 8 bytes by task 12 on cpu 0: [ 127.887852][ T9526] __xa_clear_mark+0xf5/0x1e0 [ 127.892624][ T9526] __folio_end_writeback+0x177/0x470 [ 127.897912][ T9526] folio_end_writeback+0x71/0x3d0 [ 127.902950][ T9526] ext4_finish_bio+0x459/0x8c0 [ 127.907726][ T9526] ext4_release_io_end+0x9f/0x1f0 [ 127.912897][ T9526] ext4_end_io_end+0x18d/0x240 [ 127.917662][ T9526] ext4_end_io_rsv_work+0x151/0x1e0 [ 127.922873][ T9526] process_scheduled_works+0x4ce/0x9d0 [ 127.928341][ T9526] worker_thread+0x582/0x770 [ 127.932941][ T9526] kthread+0x486/0x510 [ 127.937006][ T9526] ret_from_fork+0xda/0x150 [ 127.941505][ T9526] ret_from_fork_asm+0x1a/0x30 [ 127.946267][ T9526] [ 127.948584][ T9526] read to 0xffff888119e15b48 of 8 bytes by task 9526 on cpu 1: [ 127.956119][ T9526] xas_find_marked+0x218/0x620 [ 127.960888][ T9526] find_get_entry+0x5d/0x380 [ 127.965490][ T9526] filemap_get_folios_tag+0x13b/0x210 [ 127.970883][ T9526] filemap_fdatawait_keep_errors+0x6c/0x180 [ 127.976788][ T9526] sync_inodes_sb+0x39c/0x440 [ 127.981471][ T9526] sync_filesystem+0x102/0x190 [ 127.986241][ T9526] generic_shutdown_super+0x44/0x210 [ 127.991734][ T9526] kill_block_super+0x2a/0x70 [ 127.996423][ T9526] ext4_kill_sb+0x42/0x80 [ 128.000772][ T9526] deactivate_locked_super+0x72/0x1c0 [ 128.006165][ T9526] deactivate_super+0x97/0xa0 [ 128.010853][ T9526] cleanup_mnt+0x269/0x2e0 [ 128.015273][ T9526] __cleanup_mnt+0x19/0x20 [ 128.019695][ T9526] task_work_run+0x131/0x1a0 [ 128.024638][ T9526] exit_to_user_mode_loop+0xe4/0x100 [ 128.029943][ T9526] do_syscall_64+0x1d6/0x200 [ 128.034527][ T9526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.040413][ T9526] [ 128.042722][ T9526] value changed: 0x0001fff800000000 -> 0x0001f00000000000 [ 128.049842][ T9526] [ 128.052238][ T9526] Reported by Kernel Concurrency Sanitizer on: [ 128.058385][ T9526] CPU: 1 UID: 0 PID: 9526 Comm: syz-executor Not tainted 6.16.0-syzkaller-11743-g6bcdbd62bd56 #0 PREEMPT(voluntary) [ 128.070614][ T9526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 128.080661][ T9526] ==================================================================