last executing test programs: 1m39.257164508s ago: executing program 3 (id=106): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2d, &(0x7f0000000200)={0x3, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x8, @private2}}}, 0x108) 1m39.193148332s ago: executing program 3 (id=109): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, 0x0, 0x0) 1m39.147372284s ago: executing program 3 (id=112): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x5}}}, 0xb8}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x64, 0x19, 0x1, 0x0, 0x25dfdbfb, {0x1d, 0xd601, 0x9}, [@nested={0x50, 0x12, 0x0, 0x1, [@nested={0x4c, 0xf8, 0x0, 0x1, [@typed={0x8, 0x133, 0x0, 0x0, @uid}, @nested={0x3d, 0xfb, 0x0, 0x1, [@generic="b5416b2b80f72979594745504f3a0aa6b036f86ce32d83591c6224e53de96804e6172083eaaa90cf56dd042b72", @nested={0x9, 0x34, 0x0, 0x1, [@generic="d9f9446995"]}]}]}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) 1m39.097468168s ago: executing program 3 (id=114): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10) 1m39.041181781s ago: executing program 3 (id=116): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) 1m38.978500735s ago: executing program 3 (id=118): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000b40), 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000080) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40603d10, &(0x7f0000000040)={0x7, 0x2}) 1m24.621331192s ago: executing program 1 (id=622): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@getlink={0x28, 0x12, 0x1, 0x70bd25, 0x0, {0x7}, [@IFLA_MTU={0x8, 0x4, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1m24.557709407s ago: executing program 1 (id=626): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) socket$nl_audit(0x10, 0x3, 0x9) 1m24.519439788s ago: executing program 1 (id=628): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e22, @empty}, @in={0x2, 0x0, @private=0xc0586300}], 0x20) 1m24.469815811s ago: executing program 1 (id=631): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000200), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="05000000030600"/16, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x44005) 1m24.436824594s ago: executing program 1 (id=632): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) symlinkat(&(0x7f0000000040)='./file0/file0\x00', r0, &(0x7f0000000100)='./file0\x00') 1m24.395028366s ago: executing program 1 (id=634): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0xfff, 0xaf7}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x46, 0xb}}, 0x1c}}, 0x0) 1m23.96777173s ago: executing program 32 (id=118): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000b40), 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000080) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40603d10, &(0x7f0000000040)={0x7, 0x2}) 1m9.358357003s ago: executing program 33 (id=634): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0xfff, 0xaf7}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x46, 0xb}}, 0x1c}}, 0x0) 820.960482ms ago: executing program 6 (id=4262): mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0xe, 0x0, &(0x7f0000000200)) 736.265207ms ago: executing program 6 (id=4268): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$GTP_CMD_ECHOREQ(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x24, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x8040) 681.21401ms ago: executing program 6 (id=4274): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, &(0x7f0000000340)={[{@jqfmt_vfsold}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@abort}, {@noload}, {@delalloc}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@bsdgroups}, {@init_itable_val={'init_itable', 0x3d, 0xfff}}]}, 0xfa, 0x477, &(0x7f0000001380)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000180)=0x9) 628.451073ms ago: executing program 2 (id=4278): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0xd, 0x0, 0x0) 619.743514ms ago: executing program 2 (id=4279): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000003180), 0x200, 0x0) ioctl$PTP_PIN_SETFUNC(r0, 0x40043d0d, 0x0) 516.43711ms ago: executing program 2 (id=4282): r0 = socket$inet_tcp(0x2, 0x1, 0x0) fchmod(r0, 0x40) fchmod(r0, 0x40) 516.193ms ago: executing program 2 (id=4284): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x7, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) 498.700911ms ago: executing program 4 (id=4286): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close_range(r0, r1, 0x0) 498.039211ms ago: executing program 5 (id=4296): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @loopback}, 0x10) getsockopt(r0, 0x200000000114, 0x8, &(0x7f0000019580)=""/102394, &(0x7f0000000040)=0x18ffa) 483.516872ms ago: executing program 6 (id=4287): r0 = memfd_create(&(0x7f00000009c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x3) fcntl$addseals(r0, 0x409, 0x8) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000500)='-', 0x1}], 0x1) 433.448804ms ago: executing program 5 (id=4288): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val={'init_itable', 0x3d, 0x7ff}}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x66}}, {@user_xattr}, {@nolazytime}, {@quota}]}, 0x3, 0x43d, &(0x7f0000002200)="$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") r0 = open(&(0x7f0000000000)='./file2\x00', 0x802400, 0x1f6) preadv2(r0, &(0x7f0000000d80)=[{&(0x7f0000001200)=""/4096, 0x100000}], 0x1, 0x0, 0x0, 0x1b) 399.506577ms ago: executing program 4 (id=4290): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fddbdf251a0000000600210061000000140022800414"], 0x30}}, 0x0) 388.057308ms ago: executing program 2 (id=4291): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = dup(r0) getsockopt$inet_int(r1, 0x11, 0xe, 0x0, &(0x7f0000000400)=0xfffffe6f) 353.19017ms ago: executing program 0 (id=4292): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) readv(r0, &(0x7f0000000500)=[{&(0x7f0000001800)=""/154, 0x9a}], 0x1) 351.724669ms ago: executing program 5 (id=4293): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x5c, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0xfffffffc}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast2}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @multicast1}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x100008c5}, 0x20000810) 351.4101ms ago: executing program 6 (id=4294): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x958b4000) remap_file_pages(&(0x7f0000ba1000/0x1000)=nil, 0x1000, 0x0, 0x4, 0x1c0000) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x5ff, 0x2) 316.678322ms ago: executing program 6 (id=4295): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x80c42, 0x0) read(r0, &(0x7f0000000040)=""/148, 0xffffff96) 316.174412ms ago: executing program 2 (id=4297): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000a00)='./bus\x00', 0x200000, &(0x7f00000005c0)={[{@dioread_nolock}, {@grpquota}, {@bh}, {@noblock_validity}]}, 0x4, 0x480, &(0x7f0000001040)="$eJzs3M9vFFUcAPDvTLsFBGxF/MEPtYrGBrWlgMrBgxpNPGBiogeMp6YtBCnU0JoIIQrG4MkYE+/Go/+CJ70YoxcTr3o3JMT0AnhxzezOtLtld8u2225lP59k4L2dmX3f78683TfzdhtAzxrO/kkidkTEHxExWK3WbzBc/e/mwqXJWwuXJpMol9/+O6lsd2Ph0mSxabHf9rwykkaknyWxr0G7cxcunpmYmZk+n9fH5s9+MDZ34eJzp89OnJo+NX3u8LFjR4+Mv/jC4ecbBz7QXp5ZTDf2fjy7f88b73715vEv6vJflkeHDLda+VS53OHmumtnTTnp72IgtKUvIrLDVar0/8Hoi6WDNxivf9rV4IB1VS6Xy9ubr75cBu5iSdTXdXnoFcUHfXb9WyzLBwEvr9/wo+uuv1K9AMryvpkv1TX9kebblJZd33bScEScuPzPN9kSbd+HaPMmCABARPyQjX+ebTT+S+PBmu3uzeeGhiLivojYFRH3R8TuiHggorLtQxHxcGXPWBw7rWT5JMnt45/02poSXEE2/nspn9uqH/8tZjDUl9d2VvIvJSdPz0wfyl+TkShtyerjLdr48bXfv2y2rnb8ly1Z+8VYMI/jWv+W+n2mJuYn1pJzretXIvb2F7nW5p8szgQkEbEnIvauso3TB7/b32zdyvm30IF5pvK3EU9Xj//lWKjPv5C0np8c2xoz04fGirPidr/8dvWtJs1XXvgTB1eZfwdkx/+ehuf/Yv5DSe187Vz7bVz98/Om1zSrPf8Hkncq5eIK6KOJ+fnz4xEDyfFq0LWPH17at6gX22f5jxxo3P93xdIrsS8ispP4kYh4NCIey2N/PCKeiIgDLfL/+dUn32+4Il3j+d8BWf5TbR3/pcJALH+kcaHvzE/f1zU6tFTM87/V+vgfrZRG8kfu5P3vTuJa3dkMAAAA/z9pROyIJB1dLKfp6Gj1+/K7I9KZ2bn5Z07OfnhuqvobgaEopcWdrsGa+6Hj+WV9tX4lIqpfLSjWH8nvG3/dt61SH52cnZnqdvLQ47Y36f+Zv/q6HR2w7vxeC3qX/g+9q1H/39qFOICN5/MfeleD/r+tG3EAG6/R5/8nrXf5d71iATbWsv5v2g96SPvX/7++ty6BABuuaf+/m//yD1Dh/j/0pLltsfKP5FsWimda5e6bpZBEREefMEqbIq+1F8pJw4MbaVYobYYIFdah0N33JQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgE75LwAA//8YzNth") r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x2100, 0xb) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) 305.759902ms ago: executing program 4 (id=4298): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = socket$unix(0x1, 0x5, 0x0) dup2(r1, r0) 305.316532ms ago: executing program 0 (id=4299): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x51d, &(0x7f0000000240)="$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") 164.354791ms ago: executing program 0 (id=4300): r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r0, @ANYBLOB="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"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) 164.040591ms ago: executing program 4 (id=4301): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) wait4(r0, 0x0, 0x20000000, &(0x7f0000000580)) 163.769281ms ago: executing program 5 (id=4310): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60a42, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000f40)={'pimreg\x00', 0x6002}) pwritev2(r0, &(0x7f0000000440)=[{&(0x7f0000000100)="00010000000005000098a14c35000000000000", 0x13}, {0x0}], 0x2, 0xe, 0xff, 0x11) 100.203134ms ago: executing program 0 (id=4302): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 71.863296ms ago: executing program 5 (id=4303): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r0, &(0x7f0000000780)}, 0x20) 71.761526ms ago: executing program 4 (id=4304): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') pread64(r0, &(0x7f0000000040)=""/103, 0x67, 0x7) preadv(r0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/97, 0x61}], 0x1, 0x40000000, 0x10000006) 60.404736ms ago: executing program 0 (id=4305): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000380)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x13ff, 0x0, &(0x7f0000000340)='\x00', 0x1, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0}) 14.617649ms ago: executing program 0 (id=4306): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000003c0), r0) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x14, r1, 0xfb59b128081ca7fb}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) 14.17751ms ago: executing program 4 (id=4307): mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0xa7210e10bc3c9d6b) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') rename(&(0x7f0000000100)='./file0/file0/..\x00', &(0x7f00000000c0)='./file1\x00') 0s ago: executing program 5 (id=4308): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2d, 0x3, {0x60, 0x0, 0x0, r1, {0x0, 0x4}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0xfffffffc}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40001d4}, 0x200080c0) kernel console output (not intermixed with test programs): ysadm_t pid=8141 comm="syz.2.1961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4f63cacb9 code=0x7ffc0000 [ 83.343061][ T8181] netlink: 'syz.6.1980': attribute type 1 has an invalid length. [ 83.410516][ T8194] EXT4-fs (loop5): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 83.473161][ T8194] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 2: comm syz.5.1985: lblock 2 mapped to illegal pblock 2 (length 1) [ 83.511114][ T8194] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 48: comm syz.5.1985: lblock 0 mapped to illegal pblock 48 (length 1) [ 83.549402][ T8194] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.1985: Failed to acquire dquot type 0 [ 83.567437][ T8194] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 83.589017][ T8194] EXT4-fs error (device loop5): ext4_evict_inode:253: inode #11: comm syz.5.1985: mark_inode_dirty error [ 83.603685][ T8194] EXT4-fs warning (device loop5): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 83.614729][ T8217] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.1996: invalid indirect mapped block 4294967295 (level 1) [ 83.629056][ T8194] EXT4-fs (loop5): 1 orphan inode deleted [ 83.636009][ T8217] EXT4-fs (loop0): Remounting filesystem read-only [ 83.645425][ T37] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 83.649470][ T8217] EXT4-fs (loop0): 2 truncates cleaned up [ 83.666550][ T37] EXT4-fs error (device loop5): ext4_release_dquot:7022: comm kworker/u8:2: Failed to release dquot type 0 [ 83.689905][ T52] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 83.721598][ T52] EXT4-fs error (device loop5): ext4_release_dquot:7022: comm kworker/u8:3: Failed to release dquot type 0 [ 83.749404][ T8228] EXT4-fs: inline encryption not supported [ 83.755498][ T8228] EXT4-fs: Ignoring removed bh option [ 83.765730][ T8228] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 83.766165][ T4953] EXT4-fs error (device loop5): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 83.794001][ T4953] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 83.804061][ T8228] EXT4-fs (loop6): orphan cleanup on readonly fs [ 83.807025][ T4953] EXT4-fs error (device loop5): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 83.828249][ T8228] EXT4-fs error (device loop6): ext4_quota_enable:7177: comm syz.6.2002: inode #2304: comm syz.6.2002: iget: illegal inode # [ 83.864734][ T8228] EXT4-fs (loop6): Remounting filesystem read-only [ 83.871566][ T8237] netlink: 'syz.4.2004': attribute type 1 has an invalid length. [ 83.879827][ T8228] EXT4-fs warning (device loop6): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-117, ino=2304). Please run e2fsck to fix. [ 83.905503][ T8228] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 84.032052][ T8257] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 84.069459][ T8257] EXT4-fs (loop2): 1 truncate cleaned up [ 84.235382][ C0] ip6_tunnel: ip6gretap0 xmit: Routing loop! Remote address found on this node! [ 84.260087][ T8290] team0: Device gtp0 is of different type [ 84.352976][ T8298] netlink: 'syz.5.2033': attribute type 3 has an invalid length. [ 84.426001][ T2971] IPVS: starting estimator thread 0... [ 84.525448][ T8303] IPVS: using max 2832 ests per chain, 141600 per kthread [ 84.642818][ T8313] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.671553][ T8313] hsr0: left promiscuous mode [ 84.797234][ T8320] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.804353][ T8320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.816903][ T10] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 84.824510][ T10] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 84.832590][ T10] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 84.840050][ T10] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 84.848109][ T10] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 84.855651][ T10] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 84.863082][ T10] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 84.866794][ T8320] veth0_to_team: left promiscuous mode [ 84.871057][ T10] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 84.883465][ T10] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 84.891702][ T10] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 84.900091][ T10] hid-generic 0003:0004:0000.0002: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 85.004191][ T8332] fido_id[8332]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 85.187412][ T8363] netlink: 'syz.2.2063': attribute type 3 has an invalid length. [ 85.229902][ T8368] set_capacity_and_notify: 7 callbacks suppressed [ 85.229921][ T8368] loop5: detected capacity change from 0 to 256 [ 85.278423][ T8368] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 85.288847][ T8368] FAT-fs (loop5): Filesystem has been set read-only [ 85.330662][ T8375] loop6: detected capacity change from 0 to 512 [ 85.382162][ T8375] EXT4-fs: Ignoring removed bh option [ 85.387790][ T8375] EXT4-fs: Ignoring removed mblk_io_submit option [ 85.411423][ T8375] ext4 filesystem being mounted at /151/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 85.426131][ T8375] EXT4-fs error (device loop6): ext4_lookup:1785: inode #15: comm syz.6.2069: invalid fast symlink length 10 [ 85.536578][ T8403] loop4: detected capacity change from 0 to 512 [ 85.558678][ T8403] ext4 filesystem being mounted at /459/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.733031][ T8430] __nla_validate_parse: 10 callbacks suppressed [ 85.733046][ T8430] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2093'. [ 85.752139][ T8425] loop0: detected capacity change from 0 to 4096 [ 85.903810][ T8446] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2099'. [ 85.966576][ T8456] loop0: detected capacity change from 0 to 512 [ 85.987255][ T8456] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 86.016639][ T8461] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 86.038237][ T8456] ext4 filesystem being mounted at /539/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.286491][ T8495] loop0: detected capacity change from 0 to 512 [ 86.320514][ T8495] ext4 filesystem being mounted at /546/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.354285][ T8495] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #4: comm syz.0.2123: corrupted inode contents [ 86.374342][ T8495] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #4: comm syz.0.2123: mark_inode_dirty error [ 86.392586][ T8495] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #4: comm syz.0.2123: corrupted inode contents [ 86.410413][ T8515] loop4: detected capacity change from 0 to 128 [ 86.411532][ T8495] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #4: comm syz.0.2123: mark_inode_dirty error [ 86.419808][ T8515] EXT4-fs: Ignoring removed nobh option [ 86.434743][ T8495] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.2123: Failed to acquire dquot type 1 [ 86.452463][ T8515] ext4 filesystem being mounted at /472/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 86.476662][ T8515] EXT4-fs warning (device loop4): __ext4_ioctl:1555: Setting inode version is not supported with metadata_csum enabled. [ 86.536518][ T8525] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2134'. [ 86.584479][ T8531] loop4: detected capacity change from 0 to 512 [ 86.596433][ T8531] EXT4-fs error (device loop4): ext4_iget_extra_inode:5073: inode #15: comm syz.4.2138: corrupted in-inode xattr: invalid ea_ino [ 86.608628][ T8534] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2139'. [ 86.611839][ T8531] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.2138: couldn't read orphan inode 15 (err -117) [ 86.847112][ T8564] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2154'. [ 86.895081][ T8570] loop4: detected capacity change from 0 to 1024 [ 86.903094][ T8570] EXT4-fs: Ignoring removed nomblk_io_submit option [ 86.912549][ T8570] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 86.918234][ T8573] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2158'. [ 86.921648][ T8570] System zones: 0-1, 3-36 [ 86.995477][ T8580] loop4: detected capacity change from 0 to 512 [ 87.012996][ T8580] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 87.027022][ T8580] EXT4-fs (loop4): 1 truncate cleaned up [ 87.043926][ T8586] EXT4-fs: Ignoring removed oldalloc option [ 87.068113][ T8586] ext4 filesystem being mounted at /307/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.096444][ T8586] EXT4-fs (loop5): resizing filesystem from 128 to 2 blocks [ 87.103881][ T8586] EXT4-fs warning (device loop5): ext4_resize_fs:2042: can't shrink FS - resize aborted [ 87.160522][ T8598] netlink: 'syz.4.2170': attribute type 1 has an invalid length. [ 87.268471][ T8614] netlink: 120 bytes leftover after parsing attributes in process `syz.6.2177'. [ 87.299284][ T8617] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2179'. [ 87.357848][ T8624] ALSA: seq fatal error: cannot create timer (-19) [ 87.477137][ T8644] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2191'. [ 87.632723][ T8666] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 87.641626][ T8666] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 87.700469][ T8666] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.2201: Allocating blocks 41-42 which overlap fs metadata [ 87.728414][ T8666] __quota_error: 66 callbacks suppressed [ 87.728465][ T8666] Quota error (device loop2): write_blk: dquota write failed [ 87.728959][ T8680] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2207'. [ 87.734164][ T8666] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5 [ 87.754866][ T8666] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 87.761040][ T8680] hsr0: entered allmulticast mode [ 87.776263][ T8680] hsr_slave_0: entered allmulticast mode [ 87.781919][ T8680] hsr_slave_1: entered allmulticast mode [ 87.789174][ T1037] hsr0 speed is unknown, defaulting to 1000 [ 87.795406][ T8666] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.2201: Failed to acquire dquot type 1 [ 87.809002][ T8666] EXT4-fs error (device loop2): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 87.823979][ T8666] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.2201: corrupted inode contents [ 87.837065][ T8666] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #12: comm syz.2.2201: mark_inode_dirty error [ 87.848814][ T8666] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.2201: corrupted inode contents [ 87.879642][ T8666] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #12: comm syz.2.2201: mark_inode_dirty error [ 87.895440][ T29] audit: type=1400 audit(1769252942.161:1454): avc: denied { read } for pid=3047 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 87.954799][ T8666] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.2201: corrupted inode contents [ 88.001580][ T8666] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 88.035920][ T8666] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.2201: corrupted inode contents [ 88.055668][ T8666] EXT4-fs error (device loop2): ext4_truncate:4635: inode #12: comm syz.2.2201: mark_inode_dirty error [ 88.095386][ T8666] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 88.122545][ T8666] EXT4-fs (loop2): 1 truncate cleaned up [ 88.205337][ T29] audit: type=1400 audit(1769252942.461:1455): avc: denied { lock } for pid=8727 comm="syz.6.2223" path="socket:[21308]" dev="sockfs" ino=21308 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 88.476187][ T29] audit: type=1400 audit(1769252942.741:1456): avc: denied { create } for pid=8769 comm="syz.2.2238" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_dnrt_socket permissive=1 [ 88.498456][ T8768] SELinux: security_context_str_to_sid () failed with errno=-22 [ 88.572328][ T29] audit: type=1400 audit(1769252942.831:1457): avc: denied { accept } for pid=8777 comm="syz.2.2241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 88.649185][ T37] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.671494][ T37] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.693129][ T37] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.708842][ T37] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.724989][ T8792] EXT4-fs: Ignoring removed mblk_io_submit option [ 88.780326][ T29] audit: type=1400 audit(1769252943.041:1458): avc: denied { bind } for pid=8800 comm="syz.6.2253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 88.807417][ T29] audit: type=1400 audit(1769252943.071:1459): avc: denied { ioctl } for pid=8801 comm="syz.4.2251" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 88.842565][ T8792] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2247: bg 0: block 234: padding at end of block bitmap is not set [ 88.865262][ T8792] EXT4-fs (loop0): Remounting filesystem read-only [ 88.943465][ T8817] EXT4-fs: inline encryption not supported [ 88.991345][ T8817] EXT4-fs error (device loop2): mb_free_blocks:2037: group 0, inode 15: block 385:freeing already freed block (bit 24); block bitmap corrupt. [ 89.006786][ T8817] EXT4-fs (loop2): Remounting filesystem read-only [ 89.050273][ T29] audit: type=1400 audit(1769252943.311:1460): avc: denied { write } for pid=8826 comm="syz.0.2263" path="socket:[22108]" dev="sockfs" ino=22108 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 89.335980][ T8869] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 89.373849][ T8869] EXT4-fs (loop6): Remounting filesystem read-only [ 89.383988][ T8869] EXT4-fs (loop6): 1 truncate cleaned up [ 90.014742][ T8879] FAT-fs (loop5): bogus sectors per cluster 254 [ 90.021786][ T8879] FAT-fs (loop5): Can't find a valid FAT filesystem [ 90.140089][ T8951] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 90.162222][ T8951] EXT4-fs error (device loop0): ext4_iget_extra_inode:5073: inode #15: comm syz.0.2321: corrupted in-inode xattr: overlapping e_value [ 90.185936][ T8951] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.2321: couldn't read orphan inode 15 (err -117) [ 90.392907][ T8982] set_capacity_and_notify: 10 callbacks suppressed [ 90.392928][ T8982] loop4: detected capacity change from 0 to 764 [ 90.506579][ T8995] loop0: detected capacity change from 0 to 512 [ 90.540308][ T8995] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #3: comm syz.0.2341: corrupted inode contents [ 90.571417][ T8995] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #3: comm syz.0.2341: mark_inode_dirty error [ 90.591856][ T8995] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #3: comm syz.0.2341: corrupted inode contents [ 90.612619][ T8995] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.2341: mark_inode_dirty error [ 90.662437][ T8995] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.2341: Failed to acquire dquot type 0 [ 90.680579][ T8995] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm syz.0.2341: corrupted inode contents [ 90.693168][ T8995] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #16: comm syz.0.2341: mark_inode_dirty error [ 90.705841][ T8995] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm syz.0.2341: corrupted inode contents [ 90.735969][ T8995] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.2341: mark_inode_dirty error [ 90.749232][ T8995] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm syz.0.2341: corrupted inode contents [ 90.765955][ T8995] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 90.776198][ T9020] __nla_validate_parse: 5 callbacks suppressed [ 90.776216][ T9020] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2354'. [ 90.806275][ T8995] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm syz.0.2341: corrupted inode contents [ 90.836418][ T8995] EXT4-fs error (device loop0): ext4_truncate:4635: inode #16: comm syz.0.2341: mark_inode_dirty error [ 90.855473][ T8995] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 90.876119][ T8995] EXT4-fs (loop0): 1 truncate cleaned up [ 90.892706][ T8995] ext4 filesystem being mounted at /604/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.951031][ T9031] vhci_hcd vhci_hcd.0: invalid port number 0 [ 91.140642][ T9056] loop6: detected capacity change from 0 to 2048 [ 91.147538][ T9056] EXT4-fs: Ignoring removed mblk_io_submit option [ 91.193354][ T9056] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2368: bg 0: block 234: padding at end of block bitmap is not set [ 91.209333][ T9056] EXT4-fs (loop6): Remounting filesystem read-only [ 91.732555][ T9084] SET target dimension over the limit! [ 91.798918][ T9094] loop4: detected capacity change from 0 to 128 [ 91.817708][ T9094] FAT-fs (loop4): error, clusters badly computed (2 != 0) [ 91.824900][ T9094] FAT-fs (loop4): Filesystem has been set read-only [ 91.845133][ T9094] FAT-fs (loop4): error, clusters badly computed (3 != 1) [ 91.855495][ T9094] FAT-fs (loop4): error, clusters badly computed (4 != 2) [ 91.968896][ T9117] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2396'. [ 92.010859][ T9117] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2396'. [ 92.029361][ T9124] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2402'. [ 92.036773][ T9126] team0: Device gtp0 is of different type [ 92.131023][ T9140] loop5: detected capacity change from 0 to 512 [ 92.159408][ T9140] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 92.198153][ T9146] loop0: detected capacity change from 0 to 1024 [ 92.206129][ T9146] EXT4-fs: Ignoring removed orlov option [ 92.211889][ T9146] EXT4-fs: Ignoring removed nomblk_io_submit option [ 92.219062][ T9140] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.2409: bad orphan inode 131083 [ 92.251662][ T9140] EXT4-fs error (device loop5): ext4_readdir:264: inode #2: block 13: comm syz.5.2409: path /346/file1: bad entry in directory: '.' directory cannot be the last in data block - offset=0, inode=2, rec_len=1024, size=1024 fake=1 [ 92.448159][ T9175] loop5: detected capacity change from 0 to 128 [ 92.482386][ T9175] ext4 filesystem being mounted at /348/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 92.609192][ T9197] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2429'. [ 92.635553][ T9200] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2435'. [ 92.653115][ T9206] loop4: detected capacity change from 0 to 512 [ 92.679992][ T9206] EXT4-fs: Ignoring removed mblk_io_submit option [ 92.688357][ T9206] EXT4-fs (loop4): orphan cleanup on readonly fs [ 92.694817][ T9206] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 92.713304][ T9206] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.2436: attempt to clear invalid blocks 2 len 1 [ 92.728924][ T9206] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 92.748210][ T9206] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.2436: invalid indirect mapped block 1819239214 (level 0) [ 92.763124][ T9206] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.2436: invalid indirect mapped block 1819239214 (level 1) [ 92.784158][ T9206] EXT4-fs (loop4): 1 truncate cleaned up [ 92.792152][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 92.792171][ T29] audit: type=1400 audit(1769252947.051:1486): avc: denied { mounton } for pid=9201 comm="syz.4.2436" path="/539/file0/file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 92.815331][ T9206] cgroup: Unknown subsys name 'cpuset' [ 92.845502][ T29] audit: type=1400 audit(1769252947.111:1487): avc: denied { quotaon } for pid=9201 comm="syz.4.2436" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 92.909594][ T9231] loop4: detected capacity change from 0 to 512 [ 92.910838][ T29] audit: type=1400 audit(1769252947.161:1488): avc: denied { create } for pid=9227 comm="syz.0.2449" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=atmsvc_socket permissive=1 [ 92.989787][ T9231] ext4 filesystem being mounted at /540/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.009535][ T9231] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #4: comm syz.4.2450: corrupted inode contents [ 93.030462][ T9231] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #4: comm syz.4.2450: mark_inode_dirty error [ 93.042505][ T9231] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #4: comm syz.4.2450: corrupted inode contents [ 93.070653][ T9231] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #4: comm syz.4.2450: mark_inode_dirty error [ 93.089340][ T9231] Quota error (device loop4): write_blk: dquota write failed [ 93.096803][ T9231] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5 [ 93.105921][ T9231] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 93.115967][ T9231] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.2450: Failed to acquire dquot type 1 [ 93.119090][ T9257] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2460'. [ 93.181465][ T9262] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2463'. [ 93.196840][ T29] audit: type=1400 audit(1769252947.461:1489): avc: denied { listen } for pid=9259 comm="syz.6.2464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 93.229484][ T9262] netlink: 'syz.0.2463': attribute type 2 has an invalid length. [ 93.237385][ T9262] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2463'. [ 93.394414][ T9288] loop4: detected capacity change from 0 to 1764 [ 93.432646][ T29] audit: type=1326 audit(1769252947.691:1490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9292 comm="syz.0.2479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39a975acb9 code=0x7ffc0000 [ 93.461752][ T9296] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2480'. [ 93.476270][ T29] audit: type=1326 audit(1769252947.691:1491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9292 comm="syz.0.2479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f39a975acb9 code=0x7ffc0000 [ 93.551693][ T29] audit: type=1326 audit(1769252947.761:1492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9292 comm="syz.0.2479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39a975acb9 code=0x7ffc0000 [ 93.586608][ T9308] bridge0: entered promiscuous mode [ 93.714304][ T9320] hsr0 speed is unknown, defaulting to 1000 [ 93.822368][ T9341] EXT4-fs: Ignoring removed oldalloc option [ 93.855105][ T9341] ext4 filesystem being mounted at /551/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.869011][ T9341] EXT4-fs (loop4): resizing filesystem from 128 to 2 blocks [ 93.876430][ T9341] EXT4-fs warning (device loop4): ext4_resize_fs:2042: can't shrink FS - resize aborted [ 94.268131][ T9403] pimreg: entered allmulticast mode [ 94.303182][ T9403] pimreg: left allmulticast mode [ 94.342731][ T9415] netlink: 'syz.5.2536': attribute type 2 has an invalid length. [ 94.485614][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.810747][ T9454] SELinux: security_context_str_to_sid () failed with errno=-22 [ 94.852051][ T9461] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 95.041478][ T9486] ieee802154 phy0 wpan0: encryption failed: -22 [ 95.394711][ T9526] SELinux: Context system_u:object_r:system_dbusd_var_run_t:s0 is not valid (left unmapped). [ 95.630524][ T9554] netlink: zone id is out of range [ 95.635795][ T9554] netlink: zone id is out of range [ 95.659656][ T9554] netlink: zone id is out of range [ 95.669740][ T9554] netlink: zone id is out of range [ 95.674962][ T9554] netlink: zone id is out of range [ 95.680185][ T9554] netlink: zone id is out of range [ 95.685514][ T9554] netlink: zone id is out of range [ 95.715975][ T9567] set_capacity_and_notify: 1 callbacks suppressed [ 95.715991][ T9567] loop5: detected capacity change from 0 to 1024 [ 95.735299][ T9554] netlink: del zone limit has 8 unknown bytes [ 95.745325][ T9567] EXT4-fs: Ignoring removed nomblk_io_submit option [ 95.847208][ T9577] loop2: detected capacity change from 0 to 256 [ 95.859319][ T9582] loop4: detected capacity change from 0 to 736 [ 95.929889][ T9582] rock: directory entry would overflow storage [ 95.932935][ T9586] loop0: detected capacity change from 0 to 4096 [ 95.936702][ T9582] rock: sig=0x3b10, size=4, remaining=3 [ 95.993229][ T9595] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 96.499168][ T9650] __nla_validate_parse: 10 callbacks suppressed [ 96.499188][ T9650] netlink: 160 bytes leftover after parsing attributes in process `syz.6.2648'. [ 96.741285][ T9674] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2659'. [ 96.826762][ T9687] loop6: detected capacity change from 0 to 256 [ 96.873860][ T9691] loop4: detected capacity change from 0 to 512 [ 96.949795][ T9691] ext4 filesystem being mounted at /599/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.037830][ T9691] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.2667: corrupted xattr block 33: invalid header [ 97.058545][ T9691] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 97.108257][ T9691] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.2667: corrupted xattr block 33: invalid header [ 97.155581][ T9691] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 97.177125][ T9691] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.2667: corrupted xattr block 33: invalid header [ 97.210423][ T9691] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 97.234635][ T9716] loop0: detected capacity change from 0 to 512 [ 97.260499][ T9719] raw_sendmsg: syz.6.2680 forgot to set AF_INET. Fix it! [ 97.296122][ T9716] ext4 filesystem being mounted at /658/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.338637][ T9724] vhci_hcd vhci_hcd.1: default hub control req: 5f00 v0000 i0000 l0 [ 97.370533][ T9716] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2678: bg 0: block 272: padding at end of block bitmap is not set [ 97.492652][ T9672] syz.2.2658 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 97.507779][ T9672] CPU: 0 UID: 0 PID: 9672 Comm: syz.2.2658 Not tainted syzkaller #0 PREEMPT(voluntary) [ 97.507812][ T9672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 97.507826][ T9672] Call Trace: [ 97.507834][ T9672] [ 97.507871][ T9672] __dump_stack+0x1d/0x30 [ 97.507960][ T9672] dump_stack_lvl+0x95/0xd0 [ 97.507986][ T9672] dump_stack+0x15/0x1b [ 97.508010][ T9672] dump_header+0x80/0x240 [ 97.508035][ T9672] oom_kill_process+0x295/0x350 [ 97.508062][ T9672] out_of_memory+0x97d/0xb80 [ 97.508144][ T9672] try_charge_memcg+0x62e/0xa10 [ 97.508213][ T9672] obj_cgroup_charge_pages+0xa6/0x150 [ 97.508247][ T9672] __memcg_kmem_charge_page+0x9e/0x170 [ 97.508285][ T9672] __alloc_frozen_pages_noprof+0x18a/0x350 [ 97.508338][ T9672] alloc_pages_mpol+0xb3/0x260 [ 97.508373][ T9672] alloc_pages_noprof+0x8f/0x130 [ 97.508407][ T9672] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 97.508559][ T9672] __kvmalloc_node_noprof+0x471/0x680 [ 97.508632][ T9672] ? ip_set_alloc+0x24/0x30 [ 97.508661][ T9672] ? ip_set_alloc+0x24/0x30 [ 97.508718][ T9672] ip_set_alloc+0x24/0x30 [ 97.508746][ T9672] hash_netiface_create+0x282/0x740 [ 97.508813][ T9672] ? __pfx_hash_netiface_create+0x10/0x10 [ 97.508851][ T9672] ip_set_create+0x3cf/0x970 [ 97.508894][ T9672] ? __nla_parse+0x40/0x60 [ 97.508922][ T9672] nfnetlink_rcv_msg+0x509/0x5d0 [ 97.509035][ T9672] netlink_rcv_skb+0x123/0x220 [ 97.509064][ T9672] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 97.509095][ T9672] nfnetlink_rcv+0x167/0x1720 [ 97.509126][ T9672] ? __kfree_skb+0x109/0x150 [ 97.509200][ T9672] ? nlmon_xmit+0x4f/0x60 [ 97.509220][ T9672] ? consume_skb+0x49/0x140 [ 97.509243][ T9672] ? nlmon_xmit+0x4f/0x60 [ 97.509263][ T9672] ? dev_hard_start_xmit+0x3a8/0x3e0 [ 97.509293][ T9672] ? __dev_queue_xmit+0x139a/0x1f20 [ 97.509385][ T9672] ? __dev_queue_xmit+0x148/0x1f20 [ 97.509414][ T9672] ? ref_tracker_free+0x37d/0x3e0 [ 97.509522][ T9672] ? __netlink_deliver_tap+0x4dc/0x500 [ 97.509557][ T9672] netlink_unicast+0x5c0/0x690 [ 97.509586][ T9672] netlink_sendmsg+0x5c8/0x6f0 [ 97.509665][ T9672] ? __pfx_netlink_sendmsg+0x10/0x10 [ 97.509723][ T9672] __sock_sendmsg+0x145/0x170 [ 97.509758][ T9672] ____sys_sendmsg+0x31e/0x4a0 [ 97.509789][ T9672] ___sys_sendmsg+0x195/0x1e0 [ 97.509885][ T9672] __x64_sys_sendmsg+0xd4/0x160 [ 97.509955][ T9672] x64_sys_call+0x17ba/0x3000 [ 97.509986][ T9672] do_syscall_64+0xc0/0x2a0 [ 97.510020][ T9672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.510082][ T9672] RIP: 0033:0x7fd4f63cacb9 [ 97.510169][ T9672] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.510191][ T9672] RSP: 002b:00007fd4f4e27028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 97.510215][ T9672] RAX: ffffffffffffffda RBX: 00007fd4f6645fa0 RCX: 00007fd4f63cacb9 [ 97.510266][ T9672] RDX: 0000000000000880 RSI: 0000200000000040 RDI: 0000000000000003 [ 97.510281][ T9672] RBP: 00007fd4f6438bf7 R08: 0000000000000000 R09: 0000000000000000 [ 97.510294][ T9672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.510307][ T9672] R13: 00007fd4f6646038 R14: 00007fd4f6645fa0 R15: 00007fff032689e8 [ 97.510386][ T9672] [ 97.510396][ T9672] memory: usage 307200kB, limit 307200kB, failcnt 781 [ 97.772568][ T9749] loop6: detected capacity change from 0 to 764 [ 97.789860][ T9672] memory+swap: usage 307660kB, limit 9007199254740988kB, failcnt 0 [ 97.789887][ T9672] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 97.831902][ T9672] Memory cgroup stats for /syz2: [ 97.873791][ T3326] EXT4-fs unmount: 69 callbacks suppressed [ 97.873810][ T3326] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.873984][ T9672] cache 0 [ 97.897337][ T9672] rss 0 [ 97.900301][ T9672] shmem 0 [ 97.903262][ T9672] mapped_file 0 [ 97.907408][ T9672] dirty 0 [ 97.910367][ T9672] writeback 0 [ 97.913670][ T9672] workingset_refault_anon 54 [ 97.918419][ T9672] workingset_refault_file 877 [ 97.923107][ T9672] swap 471040 [ 97.927050][ T9672] swapcached 4096 [ 97.930725][ T9672] pgpgin 64196 [ 97.934104][ T9672] pgpgout 64195 [ 97.937626][ T9672] pgfault 76928 [ 97.941093][ T9672] pgmajfault 44 [ 97.944837][ T9672] inactive_anon 0 [ 97.949228][ T9672] active_anon 4096 [ 97.953104][ T9672] inactive_file 0 [ 97.957089][ T9672] active_file 0 [ 97.960632][ T9672] unevictable 0 [ 97.964099][ T9672] hierarchical_memory_limit 314572800 [ 97.970343][ T9672] hierarchical_memsw_limit 9223372036854771712 [ 97.976806][ T9672] total_cache 0 [ 97.980514][ T9672] total_rss 0 [ 97.983811][ T9672] total_shmem 0 [ 97.988107][ T9672] total_mapped_file 0 [ 97.992307][ T9672] total_dirty 0 [ 97.994239][ T9764] gretap0: entered promiscuous mode [ 97.996098][ T9672] total_writeback 0 [ 98.004114][ T9764] vlan2: entered promiscuous mode [ 98.005813][ T9672] total_workingset_refault_anon 54 [ 98.015570][ T9672] total_workingset_refault_file 877 [ 98.020852][ T9672] total_swap 471040 [ 98.024676][ T9672] total_swapcached 4096 [ 98.029489][ T9672] total_pgpgin 64196 [ 98.033401][ T9672] total_pgpgout 64195 [ 98.037429][ T9672] total_pgfault 76928 [ 98.041557][ T9672] total_pgmajfault 44 [ 98.046141][ T9672] total_inactive_anon 0 [ 98.050313][ T9672] total_active_anon 4096 [ 98.054583][ T9672] total_inactive_file 0 [ 98.058760][ T9672] total_active_file 0 [ 98.062815][ T9672] total_unevictable 0 [ 98.067340][ T9672] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.2658,pid=9670,uid=0 [ 98.082276][ T9672] Memory cgroup out of memory: Killed process 9670 (syz.2.2658) total-vm:96048kB, anon-rss:1284kB, file-rss:22028kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 98.188048][ T9774] loop0: detected capacity change from 0 to 256 [ 98.197907][ T9776] loop6: detected capacity change from 0 to 128 [ 98.236373][ T9774] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 98.249538][ T9776] FAT-fs (loop6): error, clusters badly computed (2 != 0) [ 98.256828][ T9776] FAT-fs (loop6): Filesystem has been set read-only [ 98.275424][ T9776] FAT-fs (loop6): error, clusters badly computed (3 != 1) [ 98.298935][ T9776] FAT-fs (loop6): error, clusters badly computed (4 != 2) [ 98.334004][ T9790] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2711'. [ 98.550641][ T9814] EXT4-fs: Ignoring removed orlov option [ 98.556525][ T9814] EXT4-fs: Ignoring removed i_version option [ 98.569717][ T9814] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 98.589814][ T9814] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.620129][ T9819] netlink: 'syz.5.2724': attribute type 3 has an invalid length. [ 98.629428][ T9814] ext4 filesystem being mounted at /299/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.667853][ T9814] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #2: comm syz.6.2722: corrupted inode contents [ 98.693321][ T9814] EXT4-fs (loop6): Remounting filesystem read-only [ 98.714182][ T6174] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.726225][ T37] __quota_error: 46 callbacks suppressed [ 98.726243][ T37] Quota error (device loop6): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 98.802085][ T9830] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 98.829472][ T9830] FAT-fs (loop4): error, clusters badly computed (0 != 1) [ 98.837368][ T9830] FAT-fs (loop4): Filesystem has been set read-only [ 98.867439][ T9830] FAT-fs (loop4): error, clusters badly computed (1 != 2) [ 98.887132][ T9830] FAT-fs (loop4): error, clusters badly computed (2 != 3) [ 98.902737][ T9830] FAT-fs (loop4): error, clusters badly computed (3 != 4) [ 98.922713][ T3328] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 98.987560][ T9843] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.011850][ T9843] ext4 filesystem being mounted at /555/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.020126][ T9853] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2739'. [ 99.032991][ T9845] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.046680][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.082965][ T9857] EXT4-fs: Ignoring removed orlov option [ 99.085882][ T9859] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2742'. [ 99.089376][ T9857] EXT4-fs: Ignoring removed nomblk_io_submit option [ 99.106663][ T6174] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.134982][ T9857] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.241933][ T29] audit: type=1400 audit(1769252953.501:1539): avc: denied { create } for pid=9874 comm="syz.6.2748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 99.263925][ T29] audit: type=1400 audit(1769252953.521:1540): avc: denied { connect } for pid=9874 comm="syz.6.2748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 99.285710][ T3328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.320229][ T9882] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 99.343999][ T9884] FAT-fs (loop4): Directory bread(block 517) failed [ 99.379772][ T9882] ext4 filesystem being mounted at /559/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 99.383343][ T9884] FAT-fs (loop4): Directory bread(block 518) failed [ 99.401477][ T9884] FAT-fs (loop4): Directory bread(block 519) failed [ 99.408478][ T9884] FAT-fs (loop4): Directory bread(block 520) failed [ 99.422572][ T9884] FAT-fs (loop4): Directory bread(block 521) failed [ 99.423626][ T9882] EXT4-fs (loop2): resizing filesystem from 64 to 1 blocks [ 99.429361][ T9884] FAT-fs (loop4): Directory bread(block 522) failed [ 99.436616][ T9882] EXT4-fs warning (device loop2): ext4_resize_fs:2042: can't shrink FS - resize aborted [ 99.443188][ T9884] FAT-fs (loop4): Directory bread(block 523) failed [ 99.460414][ T9884] FAT-fs (loop4): Directory bread(block 524) failed [ 99.467783][ T9884] FAT-fs (loop4): Directory bread(block 525) failed [ 99.474492][ T9884] FAT-fs (loop4): Directory bread(block 526) failed [ 99.487786][ T9896] sg_write: process 638 (syz.6.2757) changed security contexts after opening file descriptor, this is not allowed. [ 99.513062][ T9895] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 99.545067][ T3323] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 99.602883][ T29] audit: type=1326 audit(1769252953.861:1541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9903 comm="syz.4.2763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1e0f9acb9 code=0x7ffc0000 [ 99.627044][ T29] audit: type=1326 audit(1769252953.861:1542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9903 comm="syz.4.2763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1e0f9acb9 code=0x7ffc0000 [ 99.684412][ T29] audit: type=1326 audit(1769252953.871:1543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9903 comm="syz.4.2763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7fe1e0f9acb9 code=0x7ffc0000 [ 99.708035][ T29] audit: type=1326 audit(1769252953.871:1544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9903 comm="syz.4.2763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1e0f9acb9 code=0x7ffc0000 [ 99.731664][ T29] audit: type=1326 audit(1769252953.871:1545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9903 comm="syz.4.2763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1e0f9acb9 code=0x7ffc0000 [ 99.737676][ T9917] veth0_virt_wifi: entered promiscuous mode [ 99.755652][ T29] audit: type=1326 audit(1769252953.871:1546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9903 comm="syz.4.2763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=450 compat=0 ip=0x7fe1e0f9acb9 code=0x7ffc0000 [ 99.784883][ T29] audit: type=1326 audit(1769252953.871:1547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9903 comm="syz.4.2763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1e0f9acb9 code=0x7ffc0000 [ 99.857090][ T9925] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2772'. [ 99.950602][ T9941] xt_policy: too many policy elements [ 100.007877][ T9949] netlink: 399 bytes leftover after parsing attributes in process `syz.5.2784'. [ 100.017126][ T9949] openvswitch: netlink: ufid size 36 bytes exceeds the range (1, 16) [ 100.055425][ T9953] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 100.104374][ T9963] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 100.115097][ T9953] EXT4-fs (loop0): 1 truncate cleaned up [ 100.128744][ T9953] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.150334][ T9953] EXT4-fs error (device loop0): ext4_generic_delete_entry:2666: inode #2: block 13: comm syz.0.2786: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 100.172020][ T9953] EXT4-fs error (device loop0) in ext4_delete_entry:2737: Corrupt filesystem [ 100.181471][ T9953] EXT4-fs warning (device loop0): ext4_rename_delete:3729: inode #2: comm syz.0.2786: Deleting old file: nlink 4, error=-117 [ 100.181499][ T9963] EXT4-fs (loop4): 1 orphan inode deleted [ 100.201231][ T9963] EXT4-fs (loop4): 1 truncate cleaned up [ 100.212290][ T3326] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.214897][ T9963] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.256527][ T9974] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 100.267260][ T3328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.392084][ T9986] EXT4-fs: Ignoring removed mblk_io_submit option [ 100.417513][ T9986] EXT4-fs (loop5): orphan cleanup on readonly fs [ 100.423896][ T9986] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13 [ 100.442324][ T9986] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.2799: attempt to clear invalid blocks 2 len 1 [ 100.457063][ T9986] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 100.472067][ T9986] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.2799: invalid indirect mapped block 1819239214 (level 0) [ 100.487444][ T9986] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.2799: invalid indirect mapped block 1819239214 (level 1) [ 100.518724][ T9986] EXT4-fs (loop5): 1 truncate cleaned up [ 100.527045][ T9986] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 100.545670][ T9986] cgroup: Unknown subsys name 'cpuset' [ 100.583772][ T4953] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.597801][T10006] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 100.614371][T10010] netlink: 'syz.4.2812': attribute type 3 has an invalid length. [ 100.617392][T10006] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 100.631531][T10006] FAT-fs (loop0): Filesystem has been set read-only [ 100.686542][T10015] EXT4-fs: Ignoring removed bh option [ 100.700856][T10015] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 100.718113][T10015] EXT4-fs (loop6): 1 truncate cleaned up [ 100.724393][T10015] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.775976][ T6174] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.785152][T10025] gretap0: entered promiscuous mode [ 100.795663][T10025] vlan2: entered promiscuous mode [ 101.248714][T10082] set_capacity_and_notify: 16 callbacks suppressed [ 101.248733][T10082] loop5: detected capacity change from 0 to 1024 [ 101.334478][T10082] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.427419][T10090] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2847'. [ 101.437925][ T4953] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.440559][T10090] macvlan3: entered promiscuous mode [ 101.452348][T10090] macvlan3: entered allmulticast mode [ 101.458564][T10090] veth0_virt_wifi: entered allmulticast mode [ 101.524151][T10092] netlink: 'syz.2.2850': attribute type 3 has an invalid length. [ 101.807051][T10130] loop0: detected capacity change from 0 to 256 [ 102.013997][T10147] netlink: 332 bytes leftover after parsing attributes in process `syz.2.2876'. [ 102.117029][T10161] loop4: detected capacity change from 0 to 1024 [ 102.131479][T10161] EXT4-fs: Ignoring removed bh option [ 102.159743][T10161] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.176962][T10169] ieee802154 phy0 wpan0: encryption failed: -22 [ 102.217895][T10176] xt_hashlimit: max too large, truncated to 1048576 [ 102.233616][T10176] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 102.273704][ T3328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.333182][T10191] loop2: detected capacity change from 0 to 256 [ 102.347090][T10196] loop4: detected capacity change from 0 to 512 [ 102.366836][T10200] tipc: Enabling of bearer rejected, failed to enable media [ 102.375847][T10196] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x05417272 (sector = 1) [ 102.402286][T10196] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 102.426041][T10205] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2904'. [ 102.522075][T10196] FAT-fs (loop4): FAT read failed (blocknr 128) [ 102.621368][T10233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.637761][T10233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.639321][T10236] A link change request failed with some changes committed already. Interface veth0_to_batadv may have been left with an inconsistent configuration, please check. [ 103.035674][T10280] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2940'. [ 103.046532][T10280] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2940'. [ 103.152666][T10288] loop6: detected capacity change from 0 to 128 [ 103.164919][T10288] syz.6.2944: attempt to access beyond end of device [ 103.164919][T10288] loop6: rw=8390659, sector=104, nr_sectors = 937 limit=128 [ 103.183022][T10290] vhci_hcd vhci_hcd.0: invalid port number 65 [ 103.189990][T10290] vhci_hcd vhci_hcd.0: invalid port number 65 [ 103.271084][T10302] netlink: 'syz.6.2951': attribute type 11 has an invalid length. [ 103.279054][T10302] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2951'. [ 103.299445][T10306] loop0: detected capacity change from 0 to 1024 [ 103.307750][T10306] EXT4-fs (loop0): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 103.336594][T10306] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 2: comm syz.0.2952: lblock 2 mapped to illegal pblock 2 (length 1) [ 103.351621][T10306] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 48: comm syz.0.2952: lblock 0 mapped to illegal pblock 48 (length 1) [ 103.367382][T10306] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.2952: Failed to acquire dquot type 0 [ 103.379717][T10306] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 103.388637][T10315] loop6: detected capacity change from 0 to 512 [ 103.392326][T10306] EXT4-fs error (device loop0): ext4_evict_inode:253: inode #11: comm syz.0.2952: mark_inode_dirty error [ 103.407853][T10306] EXT4-fs warning (device loop0): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 103.418329][T10306] EXT4-fs (loop0): 1 orphan inode deleted [ 103.424662][T10306] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.434332][T10315] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 103.447604][ T909] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 103.455405][T10306] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #2: block 16: comm syz.0.2952: lblock 262144 mapped to illegal pblock 16 (length 8) [ 103.477809][ T909] EXT4-fs error (device loop0): ext4_release_dquot:7022: comm kworker/u8:7: Failed to release dquot type 0 [ 103.509869][T10315] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.2956: inode has both inline data and extents flags [ 103.524981][ T3326] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.526065][T10315] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.2956: couldn't read orphan inode 15 (err -117) [ 103.535031][ T3326] EXT4-fs error (device loop0): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 103.559451][ T3326] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 103.569406][T10315] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.582126][ T3326] EXT4-fs error (device loop0): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 103.649037][ T6174] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.796045][T10346] loop5: detected capacity change from 0 to 1024 [ 103.815160][T10346] __quota_error: 49 callbacks suppressed [ 103.820945][T10346] Quota error (device loop5): do_check_range: Getting block 64 out of range 1-5 [ 103.830306][T10346] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 103.839746][T10346] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.2972: Failed to acquire dquot type 0 [ 103.870599][T10346] EXT4-fs error (device loop5): mb_free_blocks:2037: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 103.871453][T10354] loop6: detected capacity change from 0 to 128 [ 103.945259][T10346] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #13: comm syz.5.2972: corrupted inode contents [ 103.966308][T10346] EXT4-fs error (device loop5): ext4_dirty_inode:6502: inode #13: comm syz.5.2972: mark_inode_dirty error [ 103.985352][T10363] netlink: 642 bytes leftover after parsing attributes in process `syz.0.2979'. [ 104.018663][T10346] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #13: comm syz.5.2972: corrupted inode contents [ 104.045706][T10346] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #13: comm syz.5.2972: mark_inode_dirty error [ 104.067300][T10346] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #13: comm syz.5.2972: corrupted inode contents [ 104.114881][T10346] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 104.127513][T10346] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #13: comm syz.5.2972: corrupted inode contents [ 104.145373][T10379] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 104.187046][T10379] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 104.195009][T10379] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 104.197147][T10346] EXT4-fs error (device loop5): ext4_truncate:4635: inode #13: comm syz.5.2972: mark_inode_dirty error [ 104.215480][T10379] System zones: 0-1, 15-15, 18-18, 34-34 [ 104.221603][T10379] EXT4-fs (loop0): orphan cleanup on readonly fs [ 104.229067][T10379] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0 [ 104.229253][T10346] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 104.248541][T10379] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 104.252294][T10346] EXT4-fs (loop5): 1 truncate cleaned up [ 104.263217][T10379] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 104.277458][T10379] EXT4-fs (loop0): 1 truncate cleaned up [ 104.283543][T10379] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 104.302795][T10346] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.325938][T10383] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 104.343003][ T29] audit: type=1400 audit(1769252958.601:1594): avc: denied { read } for pid=10378 comm="syz.0.2987" name="file2" dev="loop0" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 104.378072][T10383] ext4 filesystem being mounted at /358/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.390187][ T3326] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.413246][T10383] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2989'. [ 104.450941][T10398] smc: net device bond0 applied user defined pnetid SYZ0 [ 104.458742][ T6174] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 104.487384][ T4953] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.818600][ T29] audit: type=1400 audit(1769252959.081:1595): avc: denied { connect } for pid=10445 comm="syz.6.3018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 105.025938][T10473] netlink: 'syz.0.3031': attribute type 1 has an invalid length. [ 105.033734][T10473] netlink: 236 bytes leftover after parsing attributes in process `syz.0.3031'. [ 105.171528][T10487] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3019'. [ 105.180663][T10487] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3019'. [ 105.248004][T10490] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.261084][T10490] ext4 filesystem being mounted at /612/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.275490][T10500] netlink: get zone limit has 8 unknown bytes [ 105.280157][T10490] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3039: bg 0: block 272: padding at end of block bitmap is not set [ 105.310401][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.340272][ T29] audit: type=1326 audit(1769252959.601:1596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10506 comm="syz.4.3047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1e0f9acb9 code=0x7ffc0000 [ 105.364014][ T29] audit: type=1326 audit(1769252959.601:1597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10506 comm="syz.4.3047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7fe1e0f9acb9 code=0x7ffc0000 [ 105.387787][ T29] audit: type=1326 audit(1769252959.601:1598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10506 comm="syz.4.3047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1e0f9acb9 code=0x7ffc0000 [ 105.542631][T10519] EXT4-fs: Ignoring removed bh option [ 105.581109][T10519] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 105.613508][T10519] ext4 filesystem being mounted at /681/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.653803][ T3328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 105.689384][T10541] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.719125][T10552] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10552 comm=syz.0.3066 [ 105.800979][ T4953] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.818094][ T922] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.836511][ T922] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.845766][ T922] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.855020][ T922] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.869040][T10567] bridge_slave_1: left allmulticast mode [ 105.874725][T10567] bridge_slave_1: left promiscuous mode [ 105.880490][T10567] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.036197][ T29] audit: type=1400 audit(1769252960.301:1599): avc: denied { connect } for pid=10595 comm="syz.6.3087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 106.266793][T10622] set_capacity_and_notify: 7 callbacks suppressed [ 106.266812][T10622] loop5: detected capacity change from 0 to 1024 [ 106.341338][T10622] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.514306][T10622] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 106.585304][ T4953] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.601770][T10642] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 106.611506][T10642] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 106.887895][T10666] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 106.898175][ T29] audit: type=1400 audit(1769252961.161:1600): avc: denied { setopt } for pid=10667 comm="syz.0.3120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 106.912156][T10608] syz.6.3090 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 106.932101][T10608] CPU: 1 UID: 0 PID: 10608 Comm: syz.6.3090 Not tainted syzkaller #0 PREEMPT(voluntary) [ 106.932189][T10608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 106.932206][T10608] Call Trace: [ 106.932215][T10608] [ 106.932225][T10608] __dump_stack+0x1d/0x30 [ 106.932255][T10608] dump_stack_lvl+0x95/0xd0 [ 106.932278][T10608] dump_stack+0x15/0x1b [ 106.932298][T10608] dump_header+0x80/0x240 [ 106.932366][T10608] oom_kill_process+0x295/0x350 [ 106.932390][T10608] out_of_memory+0x97d/0xb80 [ 106.932412][T10608] try_charge_memcg+0x62e/0xa10 [ 106.932522][T10608] obj_cgroup_charge_pages+0xa6/0x150 [ 106.932551][T10608] __memcg_kmem_charge_page+0x9e/0x170 [ 106.932728][T10608] __alloc_frozen_pages_noprof+0x18a/0x350 [ 106.932812][T10608] alloc_pages_mpol+0xb3/0x260 [ 106.932893][T10608] alloc_pages_noprof+0x8f/0x130 [ 106.932921][T10608] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 106.932993][T10608] __kvmalloc_node_noprof+0x471/0x680 [ 106.933021][T10608] ? ip_set_alloc+0x24/0x30 [ 106.933065][T10608] ? ip_set_alloc+0x24/0x30 [ 106.933090][T10608] ip_set_alloc+0x24/0x30 [ 106.933114][T10608] hash_netiface_create+0x282/0x740 [ 106.933149][T10608] ? __pfx_hash_netiface_create+0x10/0x10 [ 106.933180][T10608] ip_set_create+0x3cf/0x970 [ 106.933244][T10608] ? __nla_parse+0x40/0x60 [ 106.933268][T10608] nfnetlink_rcv_msg+0x509/0x5d0 [ 106.933361][T10608] netlink_rcv_skb+0x123/0x220 [ 106.933391][T10608] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 106.933420][T10608] nfnetlink_rcv+0x167/0x1720 [ 106.933446][T10608] ? __kfree_skb+0x109/0x150 [ 106.933470][T10608] ? nlmon_xmit+0x4f/0x60 [ 106.933566][T10608] ? consume_skb+0x49/0x140 [ 106.933668][T10608] ? nlmon_xmit+0x4f/0x60 [ 106.933686][T10608] ? dev_hard_start_xmit+0x3a8/0x3e0 [ 106.933710][T10608] ? __dev_queue_xmit+0x139a/0x1f20 [ 106.933735][T10608] ? __dev_queue_xmit+0x148/0x1f20 [ 106.933894][T10608] ? ref_tracker_free+0x37d/0x3e0 [ 106.933925][T10608] ? __netlink_deliver_tap+0x4dc/0x500 [ 106.933957][T10608] netlink_unicast+0x5c0/0x690 [ 106.934055][T10608] netlink_sendmsg+0x5c8/0x6f0 [ 106.934115][T10608] ? __pfx_netlink_sendmsg+0x10/0x10 [ 106.934145][T10608] __sock_sendmsg+0x145/0x170 [ 106.934182][T10608] ____sys_sendmsg+0x31e/0x4a0 [ 106.934211][T10608] ___sys_sendmsg+0x195/0x1e0 [ 106.934326][T10608] __x64_sys_sendmsg+0xd4/0x160 [ 106.934360][T10608] x64_sys_call+0x17ba/0x3000 [ 106.934484][T10608] do_syscall_64+0xc0/0x2a0 [ 106.934566][T10608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.934616][T10608] RIP: 0033:0x7fd9213dacb9 [ 106.934637][T10608] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.934661][T10608] RSP: 002b:00007fd91fe37028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 106.934684][T10608] RAX: ffffffffffffffda RBX: 00007fd921655fa0 RCX: 00007fd9213dacb9 [ 106.934726][T10608] RDX: 0000000000000880 RSI: 0000200000000040 RDI: 0000000000000003 [ 106.934740][T10608] RBP: 00007fd921448bf7 R08: 0000000000000000 R09: 0000000000000000 [ 106.934756][T10608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 106.934769][T10608] R13: 00007fd921656038 R14: 00007fd921655fa0 R15: 00007ffe933b3848 [ 106.934788][T10608] [ 106.934795][T10608] memory: usage 307200kB, limit 307200kB, failcnt 212 [ 107.165958][T10685] __nla_validate_parse: 6 callbacks suppressed [ 107.165976][T10685] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3127'. [ 107.169307][T10608] memory+swap: usage 307672kB, limit 9007199254740988kB, failcnt 0 [ 107.180279][T10685] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3127'. [ 107.184186][T10608] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 107.184202][T10608] Memory cgroup stats for /syz6: [ 107.185017][T10608] cache 0 [ 107.310917][T10608] rss 0 [ 107.313701][T10608] shmem 0 [ 107.316809][T10608] mapped_file 0 [ 107.320428][T10608] dirty 0 [ 107.320439][T10608] writeback 0 [ 107.320449][T10608] workingset_refault_anon 17 [ 107.331416][T10608] workingset_refault_file 0 [ 107.331428][T10608] swap 483328 [ 107.331437][T10608] swapcached 0 [ 107.331447][T10608] pgpgin 53540 [ 107.346043][T10608] pgpgout 53540 [ 107.349506][T10608] pgfault 59911 [ 107.353040][T10608] pgmajfault 15 [ 107.356591][T10608] inactive_anon 0 [ 107.360331][T10608] active_anon 0 [ 107.363834][T10608] inactive_file 0 [ 107.367543][T10608] active_file 0 [ 107.371101][T10608] unevictable 0 [ 107.374613][T10608] hierarchical_memory_limit 314572800 [ 107.380182][T10608] hierarchical_memsw_limit 9223372036854771712 [ 107.386438][T10608] total_cache 0 [ 107.389913][T10608] total_rss 0 [ 107.393214][T10608] total_shmem 0 [ 107.396730][T10608] total_mapped_file 0 [ 107.400812][T10608] total_dirty 0 [ 107.404288][T10608] total_writeback 0 [ 107.408219][T10608] total_workingset_refault_anon 17 [ 107.413403][T10608] total_workingset_refault_file 0 [ 107.418488][T10608] total_swap 483328 [ 107.422299][T10608] total_swapcached 0 [ 107.426219][T10608] total_pgpgin 53540 [ 107.430123][T10608] total_pgpgout 53540 [ 107.434182][T10608] total_pgfault 59911 [ 107.438212][T10608] total_pgmajfault 15 [ 107.442212][T10608] total_inactive_anon 0 [ 107.446394][T10608] total_active_anon 0 [ 107.450565][T10608] total_inactive_file 0 [ 107.454704][T10608] total_active_file 0 [ 107.458773][T10608] total_unevictable 0 [ 107.462758][T10608] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.3090,pid=10603,uid=0 [ 107.477763][T10608] Memory cgroup out of memory: Killed process 10603 (syz.6.3090) total-vm:96048kB, anon-rss:1236kB, file-rss:22028kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 107.533050][T10700] loop5: detected capacity change from 0 to 164 [ 107.582758][T10608] syz.6.3090 (10608) used greatest stack depth: 6352 bytes left [ 107.618468][T10710] : renamed from vlan0 (while UP) [ 107.648260][T10712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.704245][T10712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.768264][T10727] loop5: detected capacity change from 0 to 128 [ 107.861548][T10736] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3150'. [ 108.083197][T10778] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3168'. [ 108.150546][T10791] loop5: detected capacity change from 0 to 1024 [ 108.175930][T10791] EXT4-fs: Ignoring removed oldalloc option [ 108.181899][T10791] EXT4-fs: Ignoring removed bh option [ 108.210994][T10797] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3178'. [ 108.233771][T10791] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.265066][T10806] loop2: detected capacity change from 0 to 512 [ 108.279892][ T4953] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.291449][T10806] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 108.318912][T10806] EXT4-fs (loop2): 1 truncate cleaned up [ 108.328507][T10814] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3183'. [ 108.340209][T10814] ip6gre1: entered promiscuous mode [ 108.343370][T10806] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.345473][T10814] ip6gre1: entered allmulticast mode [ 108.382607][T10806] EXT4-fs error (device loop2): ext4_generic_delete_entry:2666: inode #2: block 13: comm syz.2.3180: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 108.409932][T10806] EXT4-fs error (device loop2) in ext4_delete_entry:2737: Corrupt filesystem [ 108.425230][T10806] EXT4-fs warning (device loop2): ext4_rename_delete:3729: inode #2: comm syz.2.3180: Deleting old file: nlink 4, error=-117 [ 108.448587][T10828] loop6: detected capacity change from 0 to 2048 [ 108.489984][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.553356][T10837] loop0: detected capacity change from 0 to 256 [ 108.799754][T10869] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3210'. [ 109.108285][T10916] loop2: detected capacity change from 0 to 256 [ 109.543826][T10966] loop2: detected capacity change from 0 to 512 [ 109.844146][T10966] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x05417272 (sector = 1) [ 109.860311][T10966] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 110.105301][ T29] kauditd_printk_skb: 46 callbacks suppressed [ 110.105319][ T29] audit: type=1400 audit(1769252964.361:1647): avc: denied { name_connect } for pid=10985 comm="syz.5.3266" dest=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 110.116027][T10966] FAT-fs (loop2): FAT read failed (blocknr 128) [ 110.164877][T10991] xt_l2tp: unknown flags: 10 [ 110.256579][T10997] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3269'. [ 110.272222][T10996] loop6: detected capacity change from 0 to 512 [ 110.284564][T10997] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3269'. [ 110.293853][T10996] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 110.359247][ T3486] kernel write not supported for file /uhid (pid: 3486 comm: kworker/1:3) [ 110.413084][T11005] bond_slave_0: entered promiscuous mode [ 110.418854][T11005] bond_slave_1: entered promiscuous mode [ 110.436326][T11005] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 110.446724][T11005] bond_slave_0: left promiscuous mode [ 110.452217][T11005] bond_slave_1: left promiscuous mode [ 110.840293][T11035] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3289'. [ 111.022828][T11057] EXT4-fs: inline encryption not supported [ 111.033433][T11057] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 111.074516][T11057] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 2: comm syz.0.3300: lblock 2 mapped to illegal pblock 2 (length 1) [ 111.096459][T11066] netlink: 'syz.4.3302': attribute type 11 has an invalid length. [ 111.104612][T11057] EXT4-fs (loop0): Remounting filesystem read-only [ 111.111208][T11057] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 111.120408][T11057] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 111.158001][T11057] EXT4-fs (loop0): 1 orphan inode deleted [ 111.169274][T11057] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.183169][T11076] SELinux: security_context_str_to_sid (a`yv-|J+0l8G[kT_|nU5 [ 111.183169][T11076] M9) failed with errno=-22 [ 111.219557][ T3326] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.232399][T11076] SELinux: security_context_str_to_sid (--^$-) failed with errno=-22 [ 111.359777][ T29] audit: type=1326 audit(1769252965.621:1648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11099 comm="syz.0.3320" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f39a975acb9 code=0x0 [ 111.500399][T11125] vlan0: entered promiscuous mode [ 111.505517][T11125] geneve1: entered promiscuous mode [ 111.510963][T11125] vlan0: entered allmulticast mode [ 111.516198][T11125] geneve1: entered allmulticast mode [ 111.624830][T11140] netlink: 'syz.5.3338': attribute type 1 has an invalid length. [ 111.677653][T11148] set_capacity_and_notify: 1 callbacks suppressed [ 111.677701][T11148] loop5: detected capacity change from 0 to 256 [ 111.767625][T11162] loop6: detected capacity change from 0 to 1024 [ 111.783429][T11162] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 111.795040][T11162] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 111.816697][T11162] EXT4-fs (loop6): invalid journal inode [ 111.822530][T11162] EXT4-fs (loop6): can't get journal size [ 111.828794][ T29] audit: type=1326 audit(1769252966.061:1649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11163 comm="syz.5.3350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca9733acb9 code=0x7ffc0000 [ 111.850125][T11162] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 111.852649][ T29] audit: type=1326 audit(1769252966.061:1650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11163 comm="syz.5.3350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca9733acb9 code=0x7ffc0000 [ 111.889015][ T29] audit: type=1326 audit(1769252966.061:1651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11163 comm="syz.5.3350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fca9733acb9 code=0x7ffc0000 [ 111.912974][ T29] audit: type=1326 audit(1769252966.071:1652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11163 comm="syz.5.3350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca9733acb9 code=0x7ffc0000 [ 111.936902][ T29] audit: type=1326 audit(1769252966.071:1653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11163 comm="syz.5.3350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fca9733acb9 code=0x7ffc0000 [ 111.960644][ T29] audit: type=1326 audit(1769252966.071:1654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11163 comm="syz.5.3350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca9733acb9 code=0x7ffc0000 [ 111.986438][ T6174] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.073652][T11185] loop6: detected capacity change from 0 to 512 [ 112.082145][T11185] vfat: Unknown parameter 'noiumtail' [ 112.141172][T11193] netlink: 'syz.6.3364': attribute type 3 has an invalid length. [ 112.219257][T11201] loop6: detected capacity change from 0 to 512 [ 112.237805][T11201] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 112.250870][T11208] loop5: detected capacity change from 0 to 128 [ 112.252521][T11201] EXT4-fs (loop6): orphan cleanup on readonly fs [ 112.268985][T11201] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.3367: Failed to acquire dquot type 1 [ 112.283310][T11201] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.3367: bg 0: block 40: padding at end of block bitmap is not set [ 112.299404][T11201] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 112.308769][T11201] EXT4-fs (loop6): 1 truncate cleaned up [ 112.319716][T11201] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 112.341330][T11201] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #16: comm syz.6.3367: corrupted xattr block 31: invalid header [ 112.364927][T11201] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=16 [ 112.377242][T11201] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #16: comm syz.6.3367: corrupted xattr block 31: invalid header [ 112.392704][T11212] loop2: detected capacity change from 0 to 1024 [ 112.400956][T11201] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=16 [ 112.405549][T11216] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #16: comm syz.6.3367: corrupted xattr block 31: invalid header [ 112.414730][T11201] EXT4-fs error (device loop6): ext4_get_link:106: inode #16: comm syz.6.3367: bad symlink. [ 112.427082][T11212] EXT4-fs: Ignoring removed mblk_io_submit option [ 112.441730][T11216] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=16 [ 112.452019][T11216] EXT4-fs error (device loop6): ext4_get_link:106: inode #16: comm syz.6.3367: bad symlink. [ 112.464769][T11212] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.502755][T11222] loop5: detected capacity change from 0 to 1024 [ 112.505825][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.540261][T11222] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.575478][T11222] __nla_validate_parse: 5 callbacks suppressed [ 112.575572][T11222] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3376'. [ 112.601801][ T6174] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.622607][ T4953] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.740604][T11246] loop6: detected capacity change from 0 to 1024 [ 112.755709][T11246] EXT4-fs: Ignoring removed bh option [ 112.773905][T11254] loop4: detected capacity change from 0 to 256 [ 112.786209][T11246] EXT4-fs: inline encryption not supported [ 112.809631][T11256] loop2: detected capacity change from 0 to 128 [ 112.826885][T11246] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 112.845100][T11256] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 112.891626][T11256] FAT-fs (loop2): error, clusters badly computed (0 != 1) [ 112.899063][T11256] FAT-fs (loop2): Filesystem has been set read-only [ 112.906737][T11256] FAT-fs (loop2): error, clusters badly computed (1 != 2) [ 112.914311][T11256] FAT-fs (loop2): error, clusters badly computed (2 != 3) [ 112.914450][T11246] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 112.921944][T11256] FAT-fs (loop2): error, clusters badly computed (3 != 4) [ 112.978853][ T3323] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 112.988988][T11246] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #3: block 2: comm syz.6.3385: lblock 2 mapped to illegal pblock 2 (length 1) [ 113.010122][T11246] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #3: block 48: comm syz.6.3385: lblock 0 mapped to illegal pblock 48 (length 1) [ 113.026001][T11246] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.3385: Failed to acquire dquot type 0 [ 113.040705][T11246] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 113.041020][T11246] EXT4-fs error (device loop6): ext4_evict_inode:253: inode #11: comm syz.6.3385: mark_inode_dirty error [ 113.043343][T11275] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3398'. [ 113.079371][T11246] EXT4-fs warning (device loop6): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 113.079413][T11246] EXT4-fs (loop6): 1 orphan inode deleted [ 113.098401][ T2199] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:11: lblock 1 mapped to illegal pblock 1 (length 1) [ 113.099270][T11246] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.164099][ T2199] EXT4-fs error (device loop6): ext4_release_dquot:7022: comm kworker/u8:11: Failed to release dquot type 0 [ 113.171087][T11275] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.207387][T11275] bridge_slave_1: left allmulticast mode [ 113.213098][T11275] bridge_slave_1: left promiscuous mode [ 113.218819][T11275] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.227699][ T6174] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.248483][T11290] pim6reg: entered allmulticast mode [ 113.255333][ T6174] EXT4-fs error (device loop6): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 113.274997][ T6174] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 113.287355][ T6174] EXT4-fs error (device loop6): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 113.334473][T11294] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 113.360973][T11301] EXT4-fs error (device loop0): ext4_iget_extra_inode:5073: inode #15: comm syz.0.3411: corrupted in-inode xattr: invalid ea_ino [ 113.367054][T11294] ext4 filesystem being mounted at /558/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 113.385896][T11301] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.3411: couldn't read orphan inode 15 (err -117) [ 113.406730][T11301] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.455648][T11294] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 113.476960][T11313] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3416'. [ 113.486085][T11313] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3416'. [ 113.538434][ T3326] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.631618][T11331] EXT4-fs: inline encryption not supported [ 113.661222][T11331] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 113.673096][T11336] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3428'. [ 113.696875][T11331] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #3: block 2: comm syz.6.3425: lblock 2 mapped to illegal pblock 2 (length 1) [ 113.711355][T11331] EXT4-fs (loop6): Remounting filesystem read-only [ 113.719012][T11331] EXT4-fs (loop6): 1 orphan inode deleted [ 113.725791][T11331] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.731557][T11344] tipc: Invalid UDP bearer configuration [ 113.738407][T11344] tipc: Enabling of bearer rejected, failed to enable media [ 113.754689][ T6174] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.000731][T11377] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 114.039976][T11377] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.3447: invalid block [ 114.064044][T11377] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.3447: invalid indirect mapped block 4294967295 (level 1) [ 114.064525][T11377] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.3447: invalid indirect mapped block 4294967295 (level 1) [ 114.064846][T11377] EXT4-fs (loop2): 2 truncates cleaned up [ 114.065529][T11377] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.228367][T11395] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 114.251932][T11400] EXT4-fs: inline encryption not supported [ 114.252031][T11400] EXT4-fs: Ignoring removed nomblk_io_submit option [ 114.255371][T11395] System zones: 1-3, 19-19, 35-36 [ 114.272198][T11400] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 114.272221][T11400] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 114.281899][T11395] ext4 filesystem being mounted at /568/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 114.339723][T11400] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.3455: Failed to acquire dquot type 1 [ 114.341783][T11400] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 46 vs 41 free clusters [ 114.341919][T11400] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.3455: corrupted inode contents [ 114.350261][T11400] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #12: comm syz.2.3455: mark_inode_dirty error [ 114.350519][T11400] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.3455: corrupted inode contents [ 114.350735][T11400] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #12: comm syz.2.3455: mark_inode_dirty error [ 114.351015][T11400] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.3455: corrupted inode contents [ 114.351223][T11400] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 114.351389][T11400] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.3455: corrupted inode contents [ 114.351587][T11400] EXT4-fs error (device loop2): ext4_truncate:4635: inode #12: comm syz.2.3455: mark_inode_dirty error [ 114.351721][T11400] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 114.352029][T11400] EXT4-fs (loop2): 1 truncate cleaned up [ 114.441715][T11412] EXT4-fs: Ignoring removed bh option [ 114.446660][T11412] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 114.556788][T11412] EXT4-fs (loop2): 1 truncate cleaned up [ 114.906032][T11453] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3481'. [ 114.915321][T11453] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3481'. [ 114.937362][T11457] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 114.947564][T11457] FAT-fs (loop2): Filesystem has been set read-only [ 114.954548][T11457] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 114.964839][T11457] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 115.162168][T11482] vlan3: entered promiscuous mode [ 115.168056][T11482] geneve1: entered promiscuous mode [ 115.173444][T11482] vlan3: entered allmulticast mode [ 115.178652][T11482] geneve1: entered allmulticast mode [ 115.276332][T11496] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3502'. [ 115.392417][T11504] EXT4-fs: Ignoring removed oldalloc option [ 115.398646][T11504] EXT4-fs: Ignoring removed bh option [ 115.644907][T11530] netlink: 'syz.0.3516': attribute type 11 has an invalid length. [ 115.673647][T11532] can0: slcan on ptm0. [ 115.745283][T11531] can0 (unregistered): slcan off ptm0. [ 115.927191][T11561] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3522'. [ 115.980992][T11561] ip6gre1: entered promiscuous mode [ 115.986457][T11561] ip6gre1: entered allmulticast mode [ 116.038984][T11574] bridge0: port 3(gretap0) entered blocking state [ 116.045588][T11574] bridge0: port 3(gretap0) entered disabled state [ 116.059989][T11574] gretap0: entered allmulticast mode [ 116.072097][T11574] bridge0: port 3(gretap0) entered blocking state [ 116.078684][T11574] bridge0: port 3(gretap0) entered forwarding state [ 116.102101][T11578] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 116.127964][T11578] EXT4-fs (loop4): 1 truncate cleaned up [ 116.301524][T11602] netlink: 348 bytes leftover after parsing attributes in process `syz.6.3538'. [ 116.398252][T11607] xt_TPROXY: Can be used only with -p tcp or -p udp [ 116.434142][T11613] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 116.443331][T11613] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 116.489116][T11613] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 116.500476][T11613] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 116.516120][T11613] System zones: 0-2, 18-18, 34-35 [ 116.740873][ T29] kauditd_printk_skb: 51 callbacks suppressed [ 116.740889][ T29] audit: type=1326 audit(1769252971.001:1697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11643 comm="syz.5.3558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca9733acb9 code=0x7ffc0000 [ 116.819356][ T29] audit: type=1326 audit(1769252971.031:1698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11643 comm="syz.5.3558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca9733acb9 code=0x7ffc0000 [ 116.843505][ T29] audit: type=1326 audit(1769252971.031:1699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11643 comm="syz.5.3558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=260 compat=0 ip=0x7fca9733acb9 code=0x7ffc0000 [ 116.867976][ T29] audit: type=1326 audit(1769252971.031:1700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11643 comm="syz.5.3558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca9733acb9 code=0x7ffc0000 [ 116.892477][ T29] audit: type=1326 audit(1769252971.031:1701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11643 comm="syz.5.3558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca9733acb9 code=0x7ffc0000 [ 117.055646][T11668] program syz.6.3570 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 117.212675][T11690] set_capacity_and_notify: 15 callbacks suppressed [ 117.212695][T11690] loop4: detected capacity change from 0 to 256 [ 117.504735][T11725] loop2: detected capacity change from 0 to 256 [ 117.582055][ T29] audit: type=1326 audit(1769252971.841:1702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11730 comm="syz.6.3602" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd9213dacb9 code=0x0 [ 117.657850][T11736] loop5: detected capacity change from 0 to 2048 [ 117.753291][ T3415] kernel write not supported for file /uhid (pid: 3415 comm: kworker/0:6) [ 117.943876][ T29] audit: type=1400 audit(1769252972.191:1703): avc: denied { bind } for pid=11762 comm="syz.5.3614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 117.989914][T11765] loop5: detected capacity change from 0 to 512 [ 117.997633][T11765] EXT4-fs warning (device loop5): read_mmp_block:111: Error -74 while reading MMP block 34 [ 118.061978][T11773] loop2: detected capacity change from 0 to 128 [ 118.212677][T11792] __nla_validate_parse: 2 callbacks suppressed [ 118.212695][T11792] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3624'. [ 118.377170][T11808] loop5: detected capacity change from 0 to 256 [ 118.391790][T11806] loop2: detected capacity change from 0 to 4096 [ 118.439662][T11811] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3633'. [ 118.661969][T11836] loop4: detected capacity change from 0 to 512 [ 118.675466][ T29] audit: type=1326 audit(1769252972.931:1704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11834 comm="syz.5.3645" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fca9733acb9 code=0x0 [ 118.684645][T11839] loop2: detected capacity change from 0 to 512 [ 118.723148][T11833] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 118.754914][T11836] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.3646: inode has both inline data and extents flags [ 118.777000][T11839] ext4 filesystem being mounted at /733/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.804634][T11836] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.3646: couldn't read orphan inode 15 (err -117) [ 118.842787][T11849] netlink: 9 bytes leftover after parsing attributes in process `syz.6.3648'. [ 118.866829][T11853] loop2: detected capacity change from 0 to 512 [ 118.874540][T11853] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 118.885102][T11849] netlink: 9 bytes leftover after parsing attributes in process `syz.6.3648'. [ 118.906135][T11853] EXT4-fs (loop2): 1 orphan inode deleted [ 118.912045][T11853] EXT4-fs (loop2): 1 truncate cleaned up [ 118.952710][T11853] EXT4-fs error (device loop2): ext4_search_dir:1474: inode #12: block 7: comm syz.2.3649: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=56 fake=0 [ 118.977404][T11853] EXT4-fs (loop2): Remounting filesystem read-only [ 119.217999][ T29] audit: type=1326 audit(1769252973.481:1705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11881 comm="syz.4.3665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1e0f9acb9 code=0x7ffc0000 [ 119.259270][ T29] audit: type=1326 audit(1769252973.481:1706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11881 comm="syz.4.3665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1e0f9acb9 code=0x7ffc0000 [ 119.528120][T11911] program syz.0.3678 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 119.652024][T11923] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3684'. [ 119.747870][T11939] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3691'. [ 119.757323][T11939] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3691'. [ 119.773604][T11941] vlan2: entered promiscuous mode [ 119.779417][T11941] geneve1: entered promiscuous mode [ 119.784973][T11941] vlan2: entered allmulticast mode [ 119.790177][T11941] geneve1: entered allmulticast mode [ 119.866867][T11954] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 119.975858][T11968] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3705'. [ 120.228679][T11992] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 120.249840][T11992] EXT4-fs (loop4): invalid journal inode [ 120.277803][T11992] EXT4-fs (loop4): can't get journal size [ 120.309591][T11992] EXT4-fs (loop4): 1 truncate cleaned up [ 120.395725][T12013] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12013 comm=syz.6.3727 [ 120.497553][T12024] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 120.504153][T12024] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 120.512506][T12024] vhci_hcd vhci_hcd.0: Device attached [ 120.523002][T12025] vhci_hcd: connection closed [ 120.525616][ T53] vhci_hcd vhci_hcd.6: stop threads [ 120.536242][ T53] vhci_hcd vhci_hcd.6: release socket [ 120.541680][ T53] vhci_hcd vhci_hcd.6: disconnect device [ 120.561481][T12030] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 120.571328][T12030] EXT4-fs (loop2): orphan cleanup on readonly fs [ 120.613482][T12030] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #16: comm syz.2.3734: corrupted inode contents [ 120.648917][T12030] EXT4-fs (loop2): Remounting filesystem read-only [ 120.650140][T12040] ext4 filesystem being mounted at /629/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.658628][T12030] EXT4-fs (loop2): 1 truncate cleaned up [ 120.672140][ T53] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 120.682793][ T53] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 120.686629][T12040] EXT4-fs warning (device loop5): verify_group_input:137: Cannot add at group 7 (only 1 groups) [ 120.694210][ T53] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 120.749745][T12043] ext4 filesystem being mounted at /853/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.781360][T12043] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #12: comm syz.0.3739: corrupted xattr block 6: invalid header [ 120.796583][T12043] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=12 [ 120.805956][T12043] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #12: comm syz.0.3739: corrupted xattr block 6: invalid header [ 120.819535][T12043] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=12 [ 120.829307][T12043] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #12: comm syz.0.3739: corrupted xattr block 6: invalid header [ 120.843254][T12043] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=12 [ 120.852968][T12043] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #12: comm syz.0.3739: corrupted xattr block 6: invalid header [ 120.878821][T12056] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #12: comm syz.0.3739: corrupted xattr block 6: invalid header [ 120.892519][T12056] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=12 [ 120.907322][T12056] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #12: comm syz.0.3739: corrupted xattr block 6: invalid header [ 120.944463][T12056] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=12 [ 121.100861][T12066] vfat: Unknown parameter '01777777777777777777777' [ 121.355385][ C0] ip6_tunnel: ip6gretap0 xmit: Routing loop! Remote address found on this node! [ 121.451665][T12123] EXT4-fs: Ignoring removed bh option [ 121.467355][T12126] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 121.474790][T12126] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 121.558138][T12079] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3754'. [ 121.567183][T12079] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3754'. [ 121.707767][T12160] bond1: (slave bond_slave_1): Device is not our slave [ 121.714953][T12160] bond1: option active_slave: invalid value (bond_slave_1) [ 121.724433][T12160] bond1 (unregistering): Released all slaves [ 121.815518][T12172] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 121.834144][T12175] tmpfs: Cannot retroactively limit inodes [ 121.850017][T12172] EXT4-fs (loop4): 1 orphan inode deleted [ 121.855850][T12172] EXT4-fs (loop4): 1 truncate cleaned up [ 121.909715][T12185] tipc: Started in network mode [ 121.914815][T12185] tipc: Node identity , cluster identity 4711 [ 121.920995][T12185] tipc: Failed to obtain node identity [ 121.926946][T12185] tipc: Enabling of bearer rejected, failed to enable media [ 121.995356][ T1037] ip6_tunnel: ip6gretap0 xmit: Routing loop! Remote address found on this node! [ 122.010462][T12197] can0: slcan on ttyS3. [ 122.093891][T12213] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 122.093926][T12213] System zones: 1-3, 19-19, 35-36 [ 122.094616][T12213] ext4 filesystem being mounted at /830/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 122.126045][T12196] can0 (unregistered): slcan off ttyS3. [ 122.378032][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 122.378061][ T29] audit: type=1400 audit(1769252976.641:1724): avc: denied { watch watch_reads } for pid=12255 comm="syz.0.3823" path="/862" dev="tmpfs" ino=4417 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 122.416159][ T1037] ip6_tunnel: ip6gretap0 xmit: Routing loop! Remote address found on this node! [ 122.441899][T12260] set_capacity_and_notify: 13 callbacks suppressed [ 122.441919][T12260] loop4: detected capacity change from 0 to 128 [ 122.608278][T12287] loop0: detected capacity change from 0 to 512 [ 122.639155][ T31] kworker/u8:1: attempt to access beyond end of device [ 122.639155][ T31] loop4: rw=1, sector=153, nr_sectors = 8 limit=128 [ 122.657668][T12287] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.3833: inode has both inline data and extents flags [ 122.683458][T12287] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.3833: couldn't read orphan inode 15 (err -117) [ 122.692795][T12296] loop2: detected capacity change from 0 to 256 [ 122.698659][ T31] kworker/u8:1: attempt to access beyond end of device [ 122.698659][ T31] loop4: rw=1, sector=169, nr_sectors = 8 limit=128 [ 122.716196][ T31] kworker/u8:1: attempt to access beyond end of device [ 122.716196][ T31] loop4: rw=1, sector=185, nr_sectors = 8 limit=128 [ 122.729817][ T31] kworker/u8:1: attempt to access beyond end of device [ 122.729817][ T31] loop4: rw=1, sector=201, nr_sectors = 8 limit=128 [ 122.752668][ T31] kworker/u8:1: attempt to access beyond end of device [ 122.752668][ T31] loop4: rw=1, sector=217, nr_sectors = 8 limit=128 [ 122.782673][ T31] kworker/u8:1: attempt to access beyond end of device [ 122.782673][ T31] loop4: rw=1, sector=233, nr_sectors = 8 limit=128 [ 122.806724][ T31] kworker/u8:1: attempt to access beyond end of device [ 122.806724][ T31] loop4: rw=1, sector=249, nr_sectors = 8 limit=128 [ 122.821600][ T31] kworker/u8:1: attempt to access beyond end of device [ 122.821600][ T31] loop4: rw=1, sector=265, nr_sectors = 8 limit=128 [ 122.855276][ T31] kworker/u8:1: attempt to access beyond end of device [ 122.855276][ T31] loop4: rw=1, sector=281, nr_sectors = 8 limit=128 [ 122.879810][ T29] audit: type=1400 audit(1769252977.131:1725): avc: denied { mount } for pid=12313 comm="syz.0.3840" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 122.902345][ T29] audit: type=1400 audit(1769252977.131:1726): avc: denied { remount } for pid=12313 comm="syz.0.3840" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 122.904655][ T31] kworker/u8:1: attempt to access beyond end of device [ 122.904655][ T31] loop4: rw=1, sector=297, nr_sectors = 8 limit=128 [ 122.931955][ T29] audit: type=1400 audit(1769252977.191:1727): avc: denied { unmount } for pid=3326 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 122.987132][T12323] netlink: 'syz.2.3843': attribute type 11 has an invalid length. [ 123.077106][T12338] tipc: Enabled bearer , priority 10 [ 123.135766][T12345] loop2: detected capacity change from 0 to 256 [ 123.899719][T12420] __nla_validate_parse: 1 callbacks suppressed [ 123.899739][T12420] netlink: 272 bytes leftover after parsing attributes in process `syz.0.3862'. [ 124.109640][T12453] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3868'. [ 124.118807][T12453] tipc: Enabled bearer , priority 10 [ 124.173700][T12461] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3873'. [ 124.211326][T12470] bridge0: Device is already in use. [ 124.610064][ T29] audit: type=1400 audit(1769252978.871:1728): avc: denied { execute } for pid=12529 comm="syz.4.3893" dev="hugetlbfs" ino=32618 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 124.632106][ T29] audit: type=1400 audit(1769252978.871:1729): avc: denied { execute_no_trans } for pid=12529 comm="syz.4.3893" path=2F6D656D66643A5B0BDB58AE5B1A02FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="hugetlbfs" ino=32618 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 124.684129][T12535] netlink: 348 bytes leftover after parsing attributes in process `syz.4.3894'. [ 124.909024][T12559] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3899'. [ 125.017738][T12568] loop0: detected capacity change from 0 to 1024 [ 125.034496][T12568] EXT4-fs: Ignoring removed bh option [ 125.132096][ T29] audit: type=1400 audit(1769252979.391:1730): avc: denied { bind } for pid=12574 comm="syz.4.3903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 125.191231][ T36] tipc: Node number set to 20 [ 125.331276][T12601] netlink: 'syz.4.3916': attribute type 1 has an invalid length. [ 125.339116][T12601] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3916'. [ 125.426991][T12616] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3923'. [ 125.504665][T12627] loop0: detected capacity change from 0 to 512 [ 125.621505][T12640] loop6: detected capacity change from 0 to 512 [ 125.648975][T12640] EXT4-fs warning (device loop6): read_mmp_block:111: Error -74 while reading MMP block 34 [ 125.667509][ T29] audit: type=1400 audit(1769252979.931:1731): avc: denied { setopt } for pid=12648 comm="syz.5.3939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 125.700943][ T29] audit: type=1400 audit(1769252979.951:1732): avc: denied { read } for pid=12642 comm="syz.0.3936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 125.724381][T12654] loop5: detected capacity change from 0 to 128 [ 125.761554][T12657] netlink: 224 bytes leftover after parsing attributes in process `syz.6.3943'. [ 125.770822][T12657] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3943'. [ 125.970840][ T29] audit: type=1400 audit(1769252980.231:1733): avc: denied { watch watch_reads } for pid=12686 comm="syz.6.3958" path="/proc/1146/task" dev="proc" ino=34900 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 126.382446][T12735] loop2: detected capacity change from 0 to 512 [ 126.401874][T12737] netlink: 'syz.0.3981': attribute type 13 has an invalid length. [ 126.409970][T12737] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3981'. [ 126.420277][T12737] syz_tun: refused to change device tx_queue_len [ 126.426724][T12737] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 126.444339][T12735] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 126.466215][T12735] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 126.479342][T12741] loop6: detected capacity change from 0 to 1024 [ 126.515749][T12735] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.3978: bad orphan inode 4 [ 126.538207][T12735] EXT4-fs (loop2): 1 orphan inode deleted [ 126.557354][T12735] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #2: block 4: comm syz.2.3978: lblock 0 mapped to illegal pblock 4 (length 1) [ 126.916358][T12783] netlink: 'syz.4.4001': attribute type 32 has an invalid length. [ 126.956094][T12783] bond1: option coupled_control: invalid value (17) [ 126.990181][T12783] bond1 (unregistering): Released all slaves [ 127.056817][T12796] macsec2: entered allmulticast mode [ 127.062217][T12796] veth1_macvtap: entered allmulticast mode [ 127.069606][T12796] veth1_macvtap: left allmulticast mode [ 127.243874][T12831] netlink: 'syz.0.4023': attribute type 3 has an invalid length. [ 127.252452][T12831] netlink: 'syz.0.4023': attribute type 1 has an invalid length. [ 127.329198][T12844] netlink: 'syz.6.4030': attribute type 14 has an invalid length. [ 127.771441][ T29] kauditd_printk_skb: 39 callbacks suppressed [ 127.771461][ T29] audit: type=1400 audit(1769252982.031:1773): avc: denied { nlmsg_read } for pid=12895 comm="syz.6.4053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 127.897848][T12902] set_capacity_and_notify: 2 callbacks suppressed [ 127.897892][T12902] loop6: detected capacity change from 0 to 128 [ 127.938000][T12904] delete_channel: no stack [ 127.971074][ T29] audit: type=1326 audit(1769252982.231:1774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12905 comm="syz.0.4058" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f39a975acb9 code=0x0 [ 128.021594][T12902] FAT-fs (loop6): Directory bread(block 32) failed [ 128.038365][T12902] FAT-fs (loop6): Directory bread(block 33) failed [ 128.046157][T12902] FAT-fs (loop6): Directory bread(block 34) failed [ 128.061450][T12902] FAT-fs (loop6): Directory bread(block 35) failed [ 128.076701][T12902] FAT-fs (loop6): Directory bread(block 36) failed [ 128.091546][T12902] FAT-fs (loop6): Directory bread(block 37) failed [ 128.107116][T12902] FAT-fs (loop6): Directory bread(block 38) failed [ 128.121352][T12902] FAT-fs (loop6): Directory bread(block 39) failed [ 128.136994][T12902] FAT-fs (loop6): Directory bread(block 40) failed [ 128.155911][T12902] FAT-fs (loop6): Directory bread(block 41) failed [ 128.156221][T12909] loop5: detected capacity change from 0 to 1024 [ 128.186879][T12909] EXT4-fs mount: 49 callbacks suppressed [ 128.186899][T12909] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.208624][ T29] audit: type=1400 audit(1769252982.471:1775): avc: denied { create } for pid=12908 comm="syz.5.4060" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 128.252900][ T29] audit: type=1400 audit(1769252982.471:1776): avc: denied { unlink } for pid=12908 comm="syz.5.4060" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 128.312869][ T4953] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.404192][T12923] loop2: detected capacity change from 0 to 256 [ 128.413565][T12923] msdos: Bad value for 'gid' [ 128.418330][T12923] msdos: Bad value for 'gid' [ 128.438207][T12927] geneve2: entered promiscuous mode [ 128.456975][ T2334] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 54708 - 0 [ 128.480691][ T2334] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 54708 - 0 [ 128.503281][T12931] loop6: detected capacity change from 0 to 512 [ 128.504554][ T2334] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 54708 - 0 [ 128.523473][ T2334] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 54708 - 0 [ 128.536372][T12931] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 128.554737][ T29] audit: type=1400 audit(1769252982.811:1777): avc: denied { validate_trans } for pid=12937 comm="syz.2.4073" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 128.582213][T12931] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.4069: bad orphan inode 13 [ 128.602602][T12931] ext4_test_bit(bit=12, block=18) = 1 [ 128.608652][T12931] is_bad_inode(inode)=0 [ 128.612855][T12931] NEXT_ORPHAN(inode)=0 [ 128.616992][T12931] max_ino=32 [ 128.620294][T12931] i_nlink=1 [ 128.651255][T12931] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 128.686068][T12931] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 128.710786][T12931] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.4069: bg 0: block 248: padding at end of block bitmap is not set [ 128.741373][T12931] Quota error (device loop6): write_blk: dquota write failed [ 128.749682][T12931] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 128.765223][T12931] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.4069: Failed to acquire dquot type 1 [ 128.794600][T12962] loop2: detected capacity change from 0 to 1024 [ 128.834583][ T6174] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 128.846092][T12962] EXT4-fs: Ignoring removed bh option [ 128.852409][ T2334] Quota error (device loop6): do_check_range: Getting block 0 out of range 1-5 [ 128.861448][ T2334] EXT4-fs error (device loop6): ext4_release_dquot:7022: comm kworker/u8:12: Failed to release dquot type 1 [ 128.903436][T12962] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.959316][ T29] audit: type=1326 audit(1769252983.201:1778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12977 comm="syz.4.4090" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe1e0f9acb9 code=0x0 [ 128.960868][T12980] loop0: detected capacity change from 0 to 4096 [ 129.011744][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.034446][T12980] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.038753][ T922] tipc: Subscription rejected, illegal request [ 129.076791][T12992] macvlan2: entered promiscuous mode [ 129.083312][ T3326] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.130395][T12996] loop2: detected capacity change from 0 to 512 [ 129.146707][ T29] audit: type=1400 audit(1769252983.401:1779): avc: denied { relabelfrom } for pid=12998 comm="syz.0.4098" name="NETLINK" dev="sockfs" ino=34240 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 129.206458][T12996] ------------[ cut here ]------------ [ 129.211998][T12996] EA inode 11 i_nlink=2 [ 129.212016][T12996] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#1: syz.2.4095/12996 [ 129.227231][T12996] Modules linked in: [ 129.231149][T12996] CPU: 1 UID: 0 PID: 12996 Comm: syz.2.4095 Not tainted syzkaller #0 PREEMPT(voluntary) [ 129.241052][T12996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 129.251301][T12996] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 129.258015][T12996] Code: f4 cd 9b ff 4c 8d 2d 0d 87 3f 05 49 8d 7e 40 e8 f4 7f b7 ff 49 8b 6e 40 4c 89 e7 e8 28 7b b7 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 1f 4c c5 03 66 66 66 66 66 66 2e [ 129.277897][T12996] RSP: 0018:ffffc90008b47778 EFLAGS: 00010246 [ 129.284205][T12996] RAX: ffff88810b1ccc90 RBX: ffff888100499348 RCX: ffffffff81bc76e8 [ 129.292267][T12996] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff86fbfde0 [ 129.298488][T13014] __nla_validate_parse: 12 callbacks suppressed [ 129.298506][T13014] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4106'. [ 129.300654][T12996] RBP: 000000000000000b R08: 00018881004992fb R09: 0000000000000000 [ 129.323892][T12996] R10: ffffc90008b476a8 R11: 0001c90008b476a8 R12: ffff8881004992f8 [ 129.332023][T12996] R13: ffffffff86fbfde0 R14: ffff8881004992b0 R15: 0000000000000001 [ 129.340156][T12996] FS: 00007fd4f4e276c0(0000) GS:ffff8882aec7e000(0000) knlGS:0000000000000000 [ 129.349224][T12996] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 129.355923][T12996] CR2: 00007fd922188060 CR3: 000000013fbde000 CR4: 00000000003506f0 [ 129.363925][T12996] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 129.369397][T13017] loop6: detected capacity change from 0 to 256 [ 129.371967][T12996] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 129.386502][T12996] Call Trace: [ 129.389798][T12996] [ 129.392746][T12996] ext4_xattr_inode_dec_ref_all+0x57c/0x880 [ 129.398722][T12996] ? errseq_check+0x2c/0x50 [ 129.403272][T12996] ext4_xattr_delete_inode+0x6c1/0x7a0 [ 129.408824][T12996] ? ext4_truncate+0x92b/0xad0 [ 129.413686][T12996] ext4_evict_inode+0xa1f/0xd40 [ 129.418694][T12996] ? __pfx_ext4_evict_inode+0x10/0x10 [ 129.424119][T12996] evict+0x2af/0x510 [ 129.428089][T12996] ? __dquot_initialize+0x146/0x7c0 [ 129.433347][T12996] iput+0x4b9/0x650 [ 129.437507][T12996] ext4_process_orphan+0x1a9/0x1c0 [ 129.442797][T12996] ext4_orphan_cleanup+0x6a8/0xa00 [ 129.448162][T12996] ext4_fill_super+0x3476/0x3800 [ 129.453166][T12996] ? set_blocksize+0x1a3/0x310 [ 129.458367][T12996] ? setup_bdev_super+0x30e/0x370 [ 129.463522][T12996] ? __pfx_ext4_fill_super+0x10/0x10 [ 129.468922][T12996] get_tree_bdev_flags+0x291/0x300 [ 129.474097][T12996] ? __pfx_ext4_fill_super+0x10/0x10 [ 129.479473][T12996] get_tree_bdev+0x1f/0x30 [ 129.483942][T12996] ext4_get_tree+0x1c/0x30 [ 129.488399][T12996] vfs_get_tree+0x57/0x1d0 [ 129.493250][T12996] do_new_mount+0x288/0x700 [ 129.497832][T12996] path_mount+0x4c0/0xb90 [ 129.502263][T12996] ? user_path_at+0xbf/0x130 [ 129.506957][T12996] __se_sys_mount+0x28c/0x2e0 [ 129.511686][T12996] __x64_sys_mount+0x67/0x80 [ 129.516455][T12996] x64_sys_call+0x2cca/0x3000 [ 129.521191][T12996] do_syscall_64+0xc0/0x2a0 [ 129.525811][T12996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.531791][T12996] RIP: 0033:0x7fd4f63cbf4a [ 129.536277][T12996] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.556232][T12996] RSP: 002b:00007fd4f4e26e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 129.564659][T12996] RAX: ffffffffffffffda RBX: 00007fd4f4e26ee0 RCX: 00007fd4f63cbf4a [ 129.572880][T12996] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007fd4f4e26ea0 [ 129.580931][T12996] RBP: 0000200000000180 R08: 00007fd4f4e26ee0 R09: 0000000000800718 [ 129.589006][T12996] R10: 0000000000800718 R11: 0000000000000246 R12: 00002000000001c0 [ 129.597051][T12996] R13: 00007fd4f4e26ea0 R14: 000000000000047f R15: 0000200000000200 [ 129.605116][T12996] [ 129.608181][T12996] ---[ end trace 0000000000000000 ]--- [ 129.614758][T12996] EXT4-fs (loop2): 1 orphan inode deleted [ 129.621079][T12996] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.714214][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.725879][T13037] xt_hashlimit: max too large, truncated to 1048576 [ 129.794160][T13043] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4117'. [ 129.972501][T13074] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4134'. [ 130.046488][T13079] loop0: detected capacity change from 0 to 512 [ 130.053131][T13079] EXT4-fs: Ignoring removed nomblk_io_submit option [ 130.059835][T13079] EXT4-fs: Ignoring removed bh option [ 130.096137][T13086] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 130.102693][T13086] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 130.110455][T13086] vhci_hcd vhci_hcd.0: Device attached [ 130.117932][T13089] vhci_hcd: connection closed [ 130.119258][ T909] vhci_hcd vhci_hcd.2: stop threads [ 130.120294][T13093] netlink: 88 bytes leftover after parsing attributes in process `syz.6.4143'. [ 130.124151][ T909] vhci_hcd vhci_hcd.2: release socket [ 130.144326][ T909] vhci_hcd vhci_hcd.2: disconnect device [ 130.151252][T13079] EXT4-fs error (device loop0): mb_free_blocks:2037: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 130.179128][T13079] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #11: comm syz.0.4136: corrupted inode contents [ 130.192257][T13079] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #11: comm syz.0.4136: mark_inode_dirty error [ 130.204181][T13079] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.4136: invalid indirect mapped block 1 (level 1) [ 130.217777][T13079] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #11: comm syz.0.4136: corrupted inode contents [ 130.230149][T13079] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 130.240051][T13079] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #11: comm syz.0.4136: corrupted inode contents [ 130.252977][T13079] EXT4-fs error (device loop0): ext4_truncate:4635: inode #11: comm syz.0.4136: mark_inode_dirty error [ 130.265280][T13079] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 130.280815][T13105] loop4: detected capacity change from 0 to 512 [ 130.286092][T13079] EXT4-fs (loop0): 1 truncate cleaned up [ 130.293509][T13079] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.318603][T13107] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.4149: inode has both inline data and extents flags [ 130.340579][T13110] netlink: 'syz.5.4150': attribute type 1 has an invalid length. [ 130.343348][ T3326] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.372305][T13107] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.4149: couldn't read orphan inode 15 (err -117) [ 130.385055][T13107] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.417346][ T6174] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.435553][T13116] rock: directory entry would overflow storage [ 130.441823][T13116] rock: sig=0x4654, size=5, remaining=4 [ 130.462417][T13118] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4155'. [ 130.495550][T13118] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4155'. [ 130.536231][T13126] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.4158: inode has both inline data and extents flags [ 130.550807][T13126] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.4158: couldn't read orphan inode 15 (err -117) [ 130.563872][T13126] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.603836][ T4953] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.684269][T13146] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4167'. [ 130.707172][T13146] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 130.737826][T13146] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #13: comm syz.4.4167: inode has both inline data and extents flags [ 130.769694][T13152] usb usb7: usbfs: process 13152 (syz.5.4170) did not claim interface 0 before use [ 130.779730][T13146] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.4167: couldn't read orphan inode 13 (err -117) [ 130.797138][T13146] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.906215][ T3328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.908510][T13170] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4175'. [ 130.917976][T13169] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4178'. [ 131.051836][T13188] netlink: 54775 bytes leftover after parsing attributes in process `syz.6.4186'. [ 131.473021][T13255] tipc: Started in network mode [ 131.478081][T13255] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 131.487004][T13255] tipc: Enabling of bearer rejected, failed to enable media [ 131.739454][T13290] EXT4-fs: Ignoring removed bh option [ 131.764370][T13290] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.802555][ T6174] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.843516][T13304] tipc: Enabling of bearer rejected, failed to enable media [ 132.359357][T13371] EXT4-fs error (device loop6): ext4_iget_extra_inode:5073: inode #15: comm syz.6.4274: corrupted in-inode xattr: e_value size too large [ 132.359872][T13372] xt_CT: You must specify a L4 protocol and not use inversions on it [ 132.420920][T13371] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.4274: couldn't read orphan inode 15 (err -117) [ 132.482059][T13371] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.532789][ T6174] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.585053][T13399] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 132.617758][T13399] EXT4-fs (loop5): 1 truncate cleaned up [ 132.625491][T13399] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.665638][ T4953] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.711262][T13417] EXT4-fs: Ignoring removed bh option [ 132.739977][T13420] EXT4-fs (loop0): 1 orphan inode deleted [ 132.746143][T13420] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.759027][ T909] EXT4-fs error (device loop0): ext4_release_dquot:7022: comm kworker/u8:7: Failed to release dquot type 1 [ 132.759122][T13420] ext4 filesystem being mounted at /974/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.771216][T13417] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 132.820315][ T3326] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.887438][T13417] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.4297: Invalid block bitmap block 0 in block_group 0 [ 132.901476][T13417] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 132.925657][T13417] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #11: comm syz.2.4297: attempt to clear invalid blocks 983261 len 1 [ 132.971816][T13417] EXT4-fs error (device loop2): __ext4_get_inode_loc:4830: comm syz.2.4297: Invalid inode table block 0 in block_group 0 [ 133.017746][ T3008] ================================================================== [ 133.025880][ T3008] BUG: KCSAN: data-race in d_make_discardable / lookup_fast [ 133.033281][ T3008] [ 133.035641][ T3008] write to 0xffff8881078e9cc0 of 4 bytes by task 7782 on cpu 1: [ 133.043360][ T3008] d_make_discardable+0x4f/0xa0 [ 133.048222][ T3008] simple_unlink+0x68/0x80 [ 133.052737][ T3008] shmem_unlink+0x12d/0x140 [ 133.057258][ T3008] vfs_unlink+0x28b/0x440 [ 133.061593][ T3008] do_unlinkat+0x1e2/0x4b0 [ 133.066134][ T3008] __x64_sys_unlink+0x2e/0x40 [ 133.070818][ T3008] x64_sys_call+0x2f48/0x3000 [ 133.075504][ T3008] do_syscall_64+0xc0/0x2a0 [ 133.080193][ T3008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.086112][ T3008] [ 133.088436][ T3008] read to 0xffff8881078e9cc0 of 4 bytes by task 3008 on cpu 0: [ 133.095983][ T3008] lookup_fast+0xf0/0x320 [ 133.100668][ T3008] path_lookupat+0x15c/0x500 [ 133.105271][ T3008] filename_lookup+0x190/0x390 [ 133.110397][ T3008] do_readlinkat+0x7d/0x340 [ 133.114915][ T3008] __x64_sys_readlink+0x47/0x60 [ 133.119778][ T3008] x64_sys_call+0x2af1/0x3000 [ 133.124467][ T3008] do_syscall_64+0xc0/0x2a0 [ 133.129065][ T3008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.134965][ T3008] [ 133.137287][ T3008] value changed: 0x08300080 -> 0x00300180 [ 133.143002][ T3008] [ 133.145325][ T3008] Reported by Kernel Concurrency Sanitizer on: [ 133.151485][ T3008] CPU: 0 UID: 0 PID: 3008 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 133.162346][ T3008] Tainted: [W]=WARN [ 133.166151][ T3008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 133.176310][ T3008] ================================================================== [ 133.195717][T13417] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 133.233252][T13417] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 133.242048][T13417] EXT4-fs error (device loop2): __ext4_get_inode_loc:4830: comm syz.2.4297: Invalid inode table block 0 in block_group 0 [ 133.255863][T13417] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 133.265874][T13417] EXT4-fs error (device loop2): ext4_truncate:4635: inode #11: comm syz.2.4297: mark_inode_dirty error [ 133.277615][T13417] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 133.289298][T13417] EXT4-fs error (device loop2): __ext4_get_inode_loc:4830: comm syz.2.4297: Invalid inode table block 0 in block_group 0 [ 133.302426][T13417] EXT4-fs (loop2): 1 truncate cleaned up [ 133.309061][T13417] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.326321][T13417] EXT4-fs error (device loop2): __ext4_get_inode_loc:4830: comm syz.2.4297: Invalid inode table block 0 in block_group 0 [ 133.339406][T13417] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 133.357377][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.