last executing test programs: 950.180653ms ago: executing program 1 (id=1003): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@ieee802154={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x80, &(0x7f0000000480)=[{&(0x7f00000007c0)="27031c0016001400020000000000000006e1f0000000890900000002ee1680ca82973d2bd4b836", 0x27}, {&(0x7f0000001980)="7d586d16062b1e1b9685b88189e0093982f6994b8df2fe56386ed999f1b34b06f2f69618bf033adc88f5360397a115", 0x2f}], 0x2}, 0x24000008) 885.119037ms ago: executing program 1 (id=1006): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001600)=@base={0x9, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x4}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 802.135811ms ago: executing program 1 (id=1010): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=@newqdisc={0x138, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}, {0xf1ff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "5243b1dd58d59f23dcf1b8a59c7d2016a4c899bb6c33a6978eb40a4bce2ec9a71b7697faf8fa73d932c608d9517f460994c053f5930db0e060b92e6e21fe733a79d599c020f00ec7b2411afb26b114de144bd69e92d8a2af5956b434e4fcc85145987edb8ed41d4571d29c6efab5ff20e4b2f76ed4872426456fa398e7b655a8edf8628b887c2225690783d779a98506a3ec2fc52f97cc86a17a9b2f3939a1910f1fed943d11b3b714eb9e007e32897f25ce557e527ba14dcd9c8d71bfc0bbcc1e6fc3101a806948a4f1038dfd83ef68d8eb1afe750028b87b5090a393dcea08bd5fcda2f2a59ae5c291dad01eb8490314143841bce915bb0f1341126f0c4278"}]}}]}, 0x138}, 0x1, 0x0, 0x0, 0x800}, 0x20000040) 761.255043ms ago: executing program 1 (id=1012): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x68, 0x24, 0x1, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x5}, {0xffff, 0xffff}, {0x5}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x1ff, 0x9708, 0x2, 0x0, 0x5}}, {0x4}}, {{0x1c, 0x1, {0x1, 0x6, 0x5, 0x6, 0x2, 0x5, 0x1}}, {0x4}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="5c0100001000130700000000fcdbdf25e0000001000000000000000000000000ff02000000000000000000000000000100040b6e4e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc010000000000000000000000000000000004d632000000e0000002000000000000000000000000000000000000000000000000000000000100008000000000010000000000008001000000ffffffff0000000000000000010000800000000043050000000000000400000000000000ffffffffffffff7f0000000000000000fdffffffffffffff0000000000000000000000002cbd70000035000002000000500000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000060000000210466d38547aa140db9a200000000c538c7cb7a0c001c"], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 570.179672ms ago: executing program 0 (id=1019): bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000200000008500000095000000b70000000000000095000000000000"], &(0x7f0000000200)='GPL\x00', 0x2, 0x33, &(0x7f00000003c0)=""/4118, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) 560.434443ms ago: executing program 2 (id=1020): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000001180)=[{0x6, 0x5, 0x5, 0x7ffc0001}]}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x9}, 0x400, 0x1000, 0x20da, 0x0, 0xa, 0x6, 0xfff7, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) io_cancel(0x0, 0x0, 0x0) 558.503473ms ago: executing program 3 (id=1021): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x47, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x30040, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x1000, 0x6}, 0x6025, 0x4005, 0x4, 0x0, 0x80000000, 0x1, 0xa, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) syz_io_uring_setup(0x19f2, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3}, &(0x7f0000000140), &(0x7f0000000100)) 455.577458ms ago: executing program 0 (id=1023): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$IMDELTIMER(r0, 0x80044941, &(0x7f0000001000)=0x3) 432.843799ms ago: executing program 0 (id=1024): mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000028c0)='asymmetric\x00', &(0x7f0000002980)=@keyring) 410.4181ms ago: executing program 2 (id=1025): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d42400000000000000290000003b000000", 0xfe60) 394.462881ms ago: executing program 2 (id=1026): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000040)={0x1, 0x7, 0x1, 0x6}) 382.774371ms ago: executing program 4 (id=1027): ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) pwritev(r0, &(0x7f0000000340)=[{0x0}, {&(0x7f0000000140)=',', 0x1}], 0x2, 0x1000, 0x5) 355.389103ms ago: executing program 0 (id=1028): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd1, &(0x7f0000000000)=0x9, 0x4) ioctl$SIOCGETVIFCNT(r0, 0x89e0, &(0x7f0000000000)={0x1}) 333.425714ms ago: executing program 0 (id=1029): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x3, &(0x7f00000001c0)={{}, {0x0, 0x989680}}, 0x0) 283.567656ms ago: executing program 4 (id=1030): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000100)={0xdfffffce, 0xfff, 0x3, 0x9, 0x3, "04e70000000000c83cfdffff000800", 0x28, 0x1}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0xff) 249.624318ms ago: executing program 0 (id=1031): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000001800)=ANY=[], 0xfb, 0x1236, &(0x7f0000000600)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) 240.830978ms ago: executing program 1 (id=1032): io_setup(0x66, &(0x7f0000000400)=0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0xe, r1, &(0x7f0000000180)='-5', 0x2, 0x0, 0x0, 0x4}]) 240.700429ms ago: executing program 4 (id=1033): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/rpc\x00') getdents(r0, &(0x7f0000000080)=""/7, 0x49) getdents(r0, 0xffffffffffffffff, 0x5a) 223.186409ms ago: executing program 3 (id=1034): unshare(0x20000400) r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000000)=0xfffbffff, 0x4) 218.993529ms ago: executing program 2 (id=1035): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000c0000000c00008008"], 0x20}}, 0x40816) 181.212081ms ago: executing program 4 (id=1036): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = getpid() sendmsg$unix(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="10", 0x1}], 0x1, &(0x7f00000004c0)=[@cred={{0x1c, 0x1, 0x2, {r1}}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x38}, 0x8841) 181.113471ms ago: executing program 3 (id=1037): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) unshare(0x22020600) write$cgroup_pid(r0, 0x0, 0x0) 140.385283ms ago: executing program 2 (id=1038): r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fcntl$setlease(r0, 0x400, 0x1) lsetxattr$system_posix_acl(&(0x7f0000000280)='./bus\x00', &(0x7f0000000340)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) 139.436363ms ago: executing program 3 (id=1039): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x1, 0x70bd29, 0x2, {0x0, 0x0, 0x0, 0x0, 0x190c7}, [@IFLA_IFNAME={0x14, 0x3, 'hsr0\x00'}, @IFLA_MTU={0x8, 0x4, 0x43}]}, 0x3c}}, 0x0) 132.736254ms ago: executing program 4 (id=1040): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r0) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01082abd7000000000002a00000008005800080000000e0001006e657464657673696d0000000f0002"], 0x3c}, 0x1, 0x0, 0x0, 0xd4209235c937efa7}, 0x0) 85.293626ms ago: executing program 1 (id=1041): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, r1, 0x1, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4884) 79.665376ms ago: executing program 3 (id=1042): r0 = io_uring_setup(0x66a5, &(0x7f0000000100)={0x0, 0xbfb7, 0x800, 0xfffffffc, 0x87}) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000001580)={0x1, 0x0, 0x0, &(0x7f00000014c0)=[{0x0}], 0x0}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001a80)=[{0x0}, {0x0}], 0x0, 0x2}, 0x20) 63.366217ms ago: executing program 4 (id=1043): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) setpgid(0x0, r0) 45.706718ms ago: executing program 2 (id=1044): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000f0000001c0007800c000400002e0000000000000c0003"], 0x30}}, 0x0) 0s ago: executing program 3 (id=1045): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x18, r1, 0x30d, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x4}]}, 0x18}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.33' (ED25519) to the list of known hosts. [ 31.626421][ T28] audit: type=1400 audit(1773831324.256:62): avc: denied { mounton } for pid=3299 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 31.650045][ T28] audit: type=1400 audit(1773831324.276:63): avc: denied { mount } for pid=3299 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 31.650902][ T3299] cgroup: Unknown subsys name 'net' [ 31.678368][ T28] audit: type=1400 audit(1773831324.306:64): avc: denied { unmount } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 31.805771][ T3299] cgroup: Unknown subsys name 'cpuset' [ 31.812210][ T3299] cgroup: Unknown subsys name 'rlimit' [ 31.931484][ T28] audit: type=1400 audit(1773831324.556:65): avc: denied { setattr } for pid=3299 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 31.955561][ T28] audit: type=1400 audit(1773831324.556:66): avc: denied { create } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.976605][ T28] audit: type=1400 audit(1773831324.556:67): avc: denied { write } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.983741][ T3302] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 31.997164][ T28] audit: type=1400 audit(1773831324.556:68): avc: denied { read } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 32.028308][ T28] audit: type=1400 audit(1773831324.566:69): avc: denied { mounton } for pid=3299 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 32.053281][ T28] audit: type=1400 audit(1773831324.566:70): avc: denied { mount } for pid=3299 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 32.068664][ T3299] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 32.077863][ T28] audit: type=1400 audit(1773831324.646:71): avc: denied { read } for pid=3037 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 33.173610][ T3311] chnl_net:caif_netlink_parms(): no params data found [ 33.194122][ T3319] chnl_net:caif_netlink_parms(): no params data found [ 33.203319][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 33.308584][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.315866][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.323052][ T3311] bridge_slave_0: entered allmulticast mode [ 33.329606][ T3311] bridge_slave_0: entered promiscuous mode [ 33.336165][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 33.350347][ T3319] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.357678][ T3319] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.364862][ T3319] bridge_slave_0: entered allmulticast mode [ 33.371385][ T3319] bridge_slave_0: entered promiscuous mode [ 33.382593][ T3319] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.389794][ T3319] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.396945][ T3319] bridge_slave_1: entered allmulticast mode [ 33.403584][ T3319] bridge_slave_1: entered promiscuous mode [ 33.414390][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.421502][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.428777][ T3311] bridge_slave_1: entered allmulticast mode [ 33.435693][ T3311] bridge_slave_1: entered promiscuous mode [ 33.442781][ T3317] chnl_net:caif_netlink_parms(): no params data found [ 33.481025][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.488378][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.495692][ T3312] bridge_slave_0: entered allmulticast mode [ 33.502063][ T3312] bridge_slave_0: entered promiscuous mode [ 33.509516][ T3319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.519810][ T3319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.540671][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.550043][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.557316][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.564632][ T3312] bridge_slave_1: entered allmulticast mode [ 33.571117][ T3312] bridge_slave_1: entered promiscuous mode [ 33.599947][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.622915][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.634908][ T3319] team0: Port device team_slave_0 added [ 33.646996][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.654146][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.661372][ T3318] bridge_slave_0: entered allmulticast mode [ 33.667749][ T3318] bridge_slave_0: entered promiscuous mode [ 33.675288][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.685292][ T3319] team0: Port device team_slave_1 added [ 33.694059][ T3311] team0: Port device team_slave_0 added [ 33.699716][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.706850][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.713976][ T3318] bridge_slave_1: entered allmulticast mode [ 33.720569][ T3318] bridge_slave_1: entered promiscuous mode [ 33.746238][ T3311] team0: Port device team_slave_1 added [ 33.761339][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.768546][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.775882][ T3317] bridge_slave_0: entered allmulticast mode [ 33.782361][ T3317] bridge_slave_0: entered promiscuous mode [ 33.793122][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.800248][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.807599][ T3317] bridge_slave_1: entered allmulticast mode [ 33.814078][ T3317] bridge_slave_1: entered promiscuous mode [ 33.829380][ T3312] team0: Port device team_slave_0 added [ 33.836137][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.846267][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.859402][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.866874][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.892943][ T3319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.908273][ T3312] team0: Port device team_slave_1 added [ 33.914329][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.921482][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.947697][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.971580][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.978670][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.004693][ T3319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.022797][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.029903][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.055794][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.067317][ T3318] team0: Port device team_slave_0 added [ 34.073995][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.088687][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.095660][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.121902][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.136471][ T3318] team0: Port device team_slave_1 added [ 34.143037][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.153415][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.160476][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.186623][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.233774][ T3317] team0: Port device team_slave_0 added [ 34.242057][ T3317] team0: Port device team_slave_1 added [ 34.254144][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.261222][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.287567][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.300678][ T3319] hsr_slave_0: entered promiscuous mode [ 34.306788][ T3319] hsr_slave_1: entered promiscuous mode [ 34.331260][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.338264][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.365042][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.383187][ T3312] hsr_slave_0: entered promiscuous mode [ 34.389378][ T3312] hsr_slave_1: entered promiscuous mode [ 34.395278][ T3312] debugfs: 'hsr0' already exists in 'hsr' [ 34.401006][ T3312] Cannot create hsr debugfs directory [ 34.408833][ T3311] hsr_slave_0: entered promiscuous mode [ 34.414725][ T3311] hsr_slave_1: entered promiscuous mode [ 34.420896][ T3311] debugfs: 'hsr0' already exists in 'hsr' [ 34.426804][ T3311] Cannot create hsr debugfs directory [ 34.440570][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.447581][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.473776][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.484991][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.491925][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.518124][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.559847][ T3318] hsr_slave_0: entered promiscuous mode [ 34.565980][ T3318] hsr_slave_1: entered promiscuous mode [ 34.572042][ T3318] debugfs: 'hsr0' already exists in 'hsr' [ 34.577900][ T3318] Cannot create hsr debugfs directory [ 34.631352][ T3317] hsr_slave_0: entered promiscuous mode [ 34.637797][ T3317] hsr_slave_1: entered promiscuous mode [ 34.644130][ T3317] debugfs: 'hsr0' already exists in 'hsr' [ 34.650016][ T3317] Cannot create hsr debugfs directory [ 34.806855][ T3319] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 34.817257][ T3319] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 34.825607][ T3319] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 34.834154][ T3319] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 34.858687][ T3312] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 34.869226][ T3312] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 34.878151][ T3312] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 34.887179][ T3312] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 34.926181][ T3311] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 34.942433][ T3311] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 34.951101][ T3311] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 34.967465][ T3311] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 35.000142][ T3318] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 35.009841][ T3318] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 35.020092][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.032207][ T3318] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 35.041565][ T3318] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 35.074721][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.082692][ T3319] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.101265][ T3317] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 35.110883][ T3317] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 35.120516][ T3317] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 35.130058][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.137182][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.151406][ T3317] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 35.161372][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.168498][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.192761][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.212022][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.220110][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.231210][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.238276][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.249202][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.271211][ T3319] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 35.306308][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.326961][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.334144][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.351379][ T127] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.358597][ T127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.390549][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.401922][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.411159][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.422055][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.431689][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.438866][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.450378][ T3311] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 35.462009][ T3311] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 35.479043][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.486240][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.514396][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.542957][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.550179][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.562816][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.570031][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.584602][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.599494][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.629496][ T3318] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 35.640098][ T3318] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 35.684615][ T3319] veth0_vlan: entered promiscuous mode [ 35.709339][ T3319] veth1_vlan: entered promiscuous mode [ 35.722924][ T3319] veth0_macvtap: entered promiscuous mode [ 35.749061][ T3319] veth1_macvtap: entered promiscuous mode [ 35.763945][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.789589][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.807798][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.828448][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.885763][ T3312] veth0_vlan: entered promiscuous mode [ 35.898089][ T30] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.909696][ T30] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.927463][ T3312] veth1_vlan: entered promiscuous mode [ 35.938061][ T30] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.964585][ T3311] veth0_vlan: entered promiscuous mode [ 35.971768][ T30] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.997518][ T3311] veth1_vlan: entered promiscuous mode [ 36.011636][ T3312] veth0_macvtap: entered promiscuous mode [ 36.035274][ T3318] veth0_vlan: entered promiscuous mode [ 36.043180][ T3312] veth1_macvtap: entered promiscuous mode [ 36.060651][ T3318] veth1_vlan: entered promiscuous mode [ 36.073137][ T3317] veth0_vlan: entered promiscuous mode [ 36.083459][ T3319] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 36.087983][ T3318] veth0_macvtap: entered promiscuous mode [ 36.109138][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.118482][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.129183][ T3318] veth1_macvtap: entered promiscuous mode [ 36.139122][ T3311] veth0_macvtap: entered promiscuous mode [ 36.150836][ T3481] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 36.156103][ T3311] veth1_macvtap: entered promiscuous mode [ 36.178591][ T3317] veth1_vlan: entered promiscuous mode [ 36.188762][ T43] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.205000][ T43] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.227463][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.236478][ T43] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.245752][ T3483] loop2: detected capacity change from 0 to 4096 [ 36.246407][ T43] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.269484][ T3483] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.284364][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.306781][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.320055][ T3317] veth0_macvtap: entered promiscuous mode [ 36.329978][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.332528][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.374812][ T3317] veth1_macvtap: entered promiscuous mode [ 36.384665][ T127] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.398922][ T127] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.431455][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.440590][ T127] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.463042][ T1399] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.466221][ T3495] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9'. [ 36.483538][ T3495] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9'. [ 36.501900][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.522071][ T1399] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.538772][ T3495] Zero length message leads to an empty skb [ 36.561853][ T1399] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.573800][ T3501] loop4: detected capacity change from 0 to 512 [ 36.582053][ T1399] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.615247][ T1399] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.637039][ T3501] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.645384][ T1399] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.659676][ T3501] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.698208][ T28] kauditd_printk_skb: 34 callbacks suppressed [ 36.698224][ T28] audit: type=1400 audit(1773831329.326:106): avc: denied { read append open } for pid=3500 comm="syz.4.11" path="/1/file1/blkio.bfq.io_queued_recursive" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 36.698844][ T3501] SELinux: Context is not valid (left unmapped). [ 36.714541][ T28] audit: type=1400 audit(1773831329.326:107): avc: denied { read write } for pid=3312 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 36.755127][ T1399] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.785050][ T1399] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.793835][ T1399] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.798722][ T3518] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'. [ 36.815228][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.820639][ T3520] capability: warning: `syz.1.17' uses 32-bit capabilities (legacy support in use) [ 36.830277][ T28] audit: type=1400 audit(1773831329.366:108): avc: denied { relabelto } for pid=3500 comm="syz.4.11" name="blkio.bfq.io_queued_recursive" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="" [ 36.971783][ T28] audit: type=1400 audit(1773831329.366:109): avc: denied { open } for pid=3312 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 37.061295][ T28] audit: type=1400 audit(1773831329.366:110): avc: denied { ioctl } for pid=3312 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 37.150124][ T28] audit: type=1400 audit(1773831329.416:111): avc: denied { create } for pid=3517 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 37.225842][ T28] audit: type=1400 audit(1773831329.416:112): avc: denied { write } for pid=3517 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 37.307019][ T28] audit: type=1400 audit(1773831329.526:113): avc: denied { map_create } for pid=3524 comm="syz.3.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 37.372401][ T28] audit: type=1400 audit(1773831329.526:114): avc: denied { map_read map_write } for pid=3524 comm="syz.3.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 37.424685][ T3581] netlink: 87 bytes leftover after parsing attributes in process `syz.0.46'. [ 37.455880][ T28] audit: type=1400 audit(1773831329.526:115): avc: denied { prog_load } for pid=3524 comm="syz.3.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 37.573050][ T3595] loop0: detected capacity change from 0 to 1024 [ 37.588482][ T3597] netlink: 12 bytes leftover after parsing attributes in process `syz.3.52'. [ 37.598005][ T3595] ======================================================= [ 37.598005][ T3595] WARNING: The mand mount option has been deprecated and [ 37.598005][ T3595] and is ignored by this kernel. Remove the mand [ 37.598005][ T3595] option from the mount to silence this warning. [ 37.598005][ T3595] ======================================================= [ 37.660689][ T3595] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.714517][ T3603] loop3: detected capacity change from 0 to 512 [ 37.722284][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.796734][ T3603] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.54: inode has both inline data and extents flags [ 37.822384][ T3603] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 37.824982][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 37.840686][ C1] EXT4-fs (loop3): initial error at time 2000000000: ext4_orphan_get:1391: inode 15 [ 37.845764][ T3603] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.54: couldn't read orphan inode 15 (err -117) [ 37.850321][ C1] EXT4-fs (loop3): last error at time 2000000000: ext4_orphan_get:1391: inode 15 [ 37.955037][ T3603] loop3: lost filesystem error report for type 5 error -117 [ 37.956120][ T3603] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.016139][ T3626] capability: warning: `syz.2.62' uses deprecated v2 capabilities in a way that may be insecure [ 38.016893][ C0] hrtimer: interrupt took 40821 ns [ 38.089134][ T3631] netlink: 56 bytes leftover after parsing attributes in process `syz.0.66'. [ 38.123951][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.182542][ T3639] loop0: detected capacity change from 0 to 1024 [ 38.235599][ T3639] EXT4-fs: inline encryption not supported [ 38.284580][ T3639] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.338351][ T3653] netlink: 4 bytes leftover after parsing attributes in process `syz.4.77'. [ 38.366729][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.438047][ T3665] loop0: detected capacity change from 0 to 512 [ 38.563145][ T3665] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 38.645609][ T3665] ext4 filesystem being mounted at /14/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.726037][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 38.812427][ T3680] loop0: detected capacity change from 0 to 1024 [ 39.016706][ T3641] syz.3.67 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 39.039027][ T3688] loop1: detected capacity change from 0 to 512 [ 39.042190][ T3680] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 39.067792][ T3641] CPU: 1 UID: 0 PID: 3641 Comm: syz.3.67 Not tainted syzkaller #0 PREEMPT(full) [ 39.067820][ T3641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 39.067840][ T3641] Call Trace: [ 39.067847][ T3641] [ 39.067856][ T3641] __dump_stack+0x1d/0x30 [ 39.067887][ T3641] dump_stack_lvl+0x95/0xd0 [ 39.067910][ T3641] dump_stack+0x15/0x1b [ 39.067955][ T3641] dump_header+0x80/0x240 [ 39.068052][ T3641] oom_kill_process+0x295/0x350 [ 39.068115][ T3641] out_of_memory+0x97d/0xb80 [ 39.068177][ T3641] try_charge_memcg+0x62e/0xa10 [ 39.068217][ T3641] obj_cgroup_charge_pages+0x23/0xc0 [ 39.068249][ T3641] __memcg_kmem_charge_page+0x9e/0x170 [ 39.068331][ T3641] __alloc_frozen_pages_noprof+0x18a/0x360 [ 39.068428][ T3641] alloc_pages_mpol+0xb3/0x260 [ 39.068462][ T3641] alloc_pages_noprof+0x8f/0x130 [ 39.068507][ T3641] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 39.068548][ T3641] __kvmalloc_node_noprof+0x3d4/0x650 [ 39.068579][ T3641] ? ip_set_alloc+0x24/0x30 [ 39.068652][ T3641] ? ip_set_alloc+0x24/0x30 [ 39.068683][ T3641] ? __kmalloc_cache_noprof+0x18a/0x410 [ 39.068712][ T3641] ip_set_alloc+0x24/0x30 [ 39.068852][ T3641] hash_netiface_create+0x282/0x740 [ 39.068945][ T3641] ? __pfx_hash_netiface_create+0x10/0x10 [ 39.069042][ T3641] ip_set_create+0x3cf/0x970 [ 39.069076][ T3641] ? __nla_parse+0x40/0x60 [ 39.069110][ T3641] nfnetlink_rcv_msg+0x509/0x5d0 [ 39.069218][ T3641] netlink_rcv_skb+0x123/0x220 [ 39.069329][ T3641] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 39.069438][ T3641] nfnetlink_rcv+0x167/0x1720 [ 39.069468][ T3641] ? __kfree_skb+0x109/0x150 [ 39.069495][ T3641] ? nlmon_xmit+0x4f/0x60 [ 39.069518][ T3641] ? consume_skb+0x4b/0x160 [ 39.069557][ T3641] ? nlmon_xmit+0x4f/0x60 [ 39.069577][ T3641] ? dev_hard_start_xmit+0x3b9/0x3f0 [ 39.069719][ T3641] ? __dev_queue_xmit+0x136c/0x1f20 [ 39.069751][ T3641] ? __dev_queue_xmit+0x148/0x1f20 [ 39.069785][ T3641] ? ref_tracker_alloc+0x52/0x2f0 [ 39.069823][ T3641] ? ref_tracker_free+0x37d/0x3e0 [ 39.069855][ T3641] ? __netlink_deliver_tap+0x4dc/0x500 [ 39.069894][ T3641] netlink_unicast+0x5c0/0x690 [ 39.069928][ T3641] netlink_sendmsg+0x5c8/0x6f0 [ 39.070024][ T3641] ? __pfx_netlink_sendmsg+0x10/0x10 [ 39.070053][ T3641] ____sys_sendmsg+0x563/0x5b0 [ 39.070085][ T3641] ___sys_sendmsg+0x195/0x1e0 [ 39.070183][ T3641] __x64_sys_sendmsg+0xd4/0x160 [ 39.070299][ T3641] x64_sys_call+0x194c/0x3020 [ 39.070329][ T3641] do_syscall_64+0x12c/0x370 [ 39.070380][ T3641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.070402][ T3641] RIP: 0033:0x7efe82d3c799 [ 39.070428][ T3641] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 39.070445][ T3641] RSP: 002b:00007efe81797028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 39.070533][ T3641] RAX: ffffffffffffffda RBX: 00007efe82fb5fa0 RCX: 00007efe82d3c799 [ 39.070547][ T3641] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000004 [ 39.070560][ T3641] RBP: 00007efe82dd2c99 R08: 0000000000000000 R09: 0000000000000000 [ 39.070578][ T3641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 39.070591][ T3641] R13: 00007efe82fb6038 R14: 00007efe82fb5fa0 R15: 00007ffcbf8861d8 [ 39.070611][ T3641] [ 39.107354][ T3641] memory: usage 307200kB, limit 307200kB, failcnt 243 [ 39.154689][ T3688] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 39.201219][ T3641] memory+swap: usage 307376kB, limit 9007199254740988kB, failcnt 0 [ 39.231863][ T3688] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 39.247643][ T3700] loop4: detected capacity change from 0 to 512 [ 39.260675][ T3641] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 39.426820][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 39.433558][ T3641] Memory cgroup stats for /syz3: [ 39.465319][ T3641] cache 0 [ 39.474083][ T3641] rss 0 [ 39.482365][ T3641] shmem 0 [ 39.485456][ T3641] mapped_file 0 [ 39.488929][ T3641] dirty 0 [ 39.491990][ T3641] writeback 0 [ 39.495335][ T3641] workingset_refault_anon 10 [ 39.500128][ T3641] workingset_refault_file 0 [ 39.504822][ T3641] swap 180224 [ 39.508215][ T3641] swapcached 184320 [ 39.512063][ T3641] pgpgin 845 [ 39.515470][ T3641] pgpgout 844 [ 39.518764][ T3641] pgfault 1436 [ 39.521578][ T3700] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 39.522130][ T3641] pgmajfault 6 [ 39.522140][ T3641] inactive_anon 0 [ 39.538163][ T3688] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 39.543579][ T3641] active_anon 4096 [ 39.558959][ T3700] ext4 filesystem being mounted at /23/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.565373][ T3688] EXT4-fs (loop1): 1 truncate cleaned up [ 39.580254][ T3688] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.620571][ T3641] inactive_file 0 [ 39.626724][ T3700] EXT4-fs warning (device loop4): ext4_group_add:1715: Can't resize non-sparse filesystem further [ 39.641950][ T3641] active_file 0 [ 39.652431][ T3641] unevictable 0 [ 39.666661][ T3641] hierarchical_memory_limit 314572800 [ 39.677338][ T3641] hierarchical_memsw_limit 9223372036854771712 [ 39.698354][ T3641] total_cache 0 [ 39.701897][ T3641] total_rss 0 [ 39.705613][ T3641] total_shmem 0 [ 39.709095][ T3641] total_mapped_file 0 [ 39.713363][ T3641] total_dirty 0 [ 39.717552][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 39.725803][ T3688] EXT4-fs warning (device loop1): verify_group_input:137: Cannot add at group 7 (only 1 groups) [ 39.737168][ T3641] total_writeback 0 [ 39.737179][ T3641] total_workingset_refault_anon 10 [ 39.737189][ T3641] total_workingset_refault_file 0 [ 39.765354][ T3641] total_swap 180224 [ 39.774247][ T3641] total_swapcached 184320 [ 39.784310][ T3641] total_pgpgin 845 [ 39.793734][ T3641] total_pgpgout 844 [ 39.804032][ T3641] total_pgfault 1436 [ 39.808207][ T3641] total_pgmajfault 6 [ 39.813584][ T3641] total_inactive_anon 0 [ 39.815931][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.819096][ T3641] total_active_anon 4096 [ 39.835215][ T3719] netlink: 12 bytes leftover after parsing attributes in process `syz.2.104'. [ 39.840229][ T3641] total_inactive_file 0 [ 39.859492][ T3641] total_active_file 0 [ 39.863535][ T3641] total_unevictable 0 [ 39.867873][ T3641] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.67,pid=3640,uid=0 [ 39.906219][ T3641] Memory cgroup out of memory: Killed process 3640 (syz.3.67) total-vm:96080kB, anon-rss:1232kB, file-rss:22148kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 39.982446][ T3640] syz.3.67 (3640) used greatest stack depth: 9944 bytes left [ 40.024396][ T3738] loop0: detected capacity change from 0 to 512 [ 40.085194][ T3738] EXT4-fs (loop0): 1 truncate cleaned up [ 40.091312][ T3738] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.254713][ T3641] syz.3.67 (3641) used greatest stack depth: 6264 bytes left [ 40.264336][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.348341][ T3759] xt_hashlimit: size too large, truncated to 1048576 [ 40.489649][ T3772] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 40.605322][ T3772] ext4 filesystem being mounted at /26/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 40.700457][ T3312] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 41.236644][ T3815] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.359768][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.418748][ T3830] netlink: 228 bytes leftover after parsing attributes in process `syz.3.151'. [ 41.567834][ T3842] ieee802154 phy0 wpan0: encryption failed: -22 [ 41.607146][ T3844] ip6tnl1: entered allmulticast mode [ 41.837704][ T3866] set_capacity_and_notify: 2 callbacks suppressed [ 41.837723][ T3866] loop4: detected capacity change from 0 to 512 [ 41.865384][ T3866] EXT4-fs: Ignoring removed nobh option [ 41.888734][ T3866] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 41.904653][ T28] kauditd_printk_skb: 66 callbacks suppressed [ 41.904670][ T28] audit: type=1400 audit(2000000004.550:182): avc: denied { write } for pid=3872 comm="syz.1.173" path="socket:[6492]" dev="sockfs" ino=6492 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 41.960943][ T3866] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842e02c, mo2=0002] [ 41.972238][ T28] audit: type=1400 audit(2000000004.630:183): avc: denied { read write } for pid=3880 comm="syz.3.175" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 41.995912][ T28] audit: type=1400 audit(2000000004.630:184): avc: denied { open } for pid=3880 comm="syz.3.175" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 42.019687][ T3866] EXT4-fs (loop4): orphan cleanup on readonly fs [ 42.027936][ T28] audit: type=1400 audit(2000000004.630:185): avc: denied { ioctl } for pid=3880 comm="syz.3.175" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 42.073802][ T3866] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.168: bg 0: block 273: padding at end of block bitmap is not set [ 42.125957][ T3866] loop4: lost filesystem error report for type 5 error -117 [ 42.128628][ T28] audit: type=1326 audit(2000000004.780:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3887 comm="syz.1.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f1324c799 code=0x7ffc0000 [ 42.136035][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 42.136055][ C0] EXT4-fs (loop4): initial error at time 2000000004: ext4_validate_block_bitmap:441 [ 42.136089][ C0] EXT4-fs (loop4): last error at time 2000000004: ext4_validate_block_bitmap:441 [ 42.188194][ T3866] EXT4-fs (loop4): Remounting filesystem read-only [ 42.248849][ T28] audit: type=1326 audit(2000000004.800:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3887 comm="syz.1.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f6f1324c799 code=0x7ffc0000 [ 42.293358][ T3866] EXT4-fs (loop4): 1 truncate cleaned up [ 42.305433][ T3866] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 42.319166][ T28] audit: type=1326 audit(2000000004.830:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3887 comm="syz.1.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f1324c799 code=0x7ffc0000 [ 42.380052][ T3895] loop1: detected capacity change from 0 to 128 [ 42.405918][ T28] audit: type=1326 audit(2000000004.920:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3887 comm="syz.1.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f1324c799 code=0x7ffc0000 [ 42.513277][ T28] audit: type=1326 audit(2000000004.930:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3887 comm="syz.1.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=86 compat=0 ip=0x7f6f1324c799 code=0x7ffc0000 [ 42.600360][ T28] audit: type=1326 audit(2000000004.930:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3887 comm="syz.1.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f1324c799 code=0x7ffc0000 [ 42.637104][ T3899] sg_write: data in/out 406492/50 bytes for SCSI command 0x0-- guessing data in; [ 42.637104][ T3899] program syz.1.183 not setting count and/or reply_len properly [ 42.655695][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 42.895706][ T3920] tipc: Started in network mode [ 42.913215][ T3920] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711 [ 42.942863][ T3920] tipc: Enabling of bearer rejected, failed to enable media [ 43.341675][ T3952] loop1: detected capacity change from 0 to 128 [ 43.380398][ T3952] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 43.426163][ T3952] ext4 filesystem being mounted at /56/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 43.488407][ T3952] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 43.744277][ T3976] SELinux: failed to load policy [ 43.755173][ T3974] loop3: detected capacity change from 0 to 1024 [ 43.783080][ T3974] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 43.791415][ T3974] System zones: 0-1, 3-36 [ 43.800794][ T3974] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.217: bad orphan inode 134217728 [ 43.825028][ T3974] loop3: lost filesystem error report for type 5 error -117 [ 43.827630][ T3974] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.854649][ T3982] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=170 sclass=netlink_route_socket pid=3982 comm=syz.2.219 [ 43.872298][ T3982] netlink: 4 bytes leftover after parsing attributes in process `syz.2.219'. [ 43.894838][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.974195][ T3990] loop2: detected capacity change from 0 to 128 [ 43.986596][ T3990] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 44.014957][ T3990] ext4 filesystem being mounted at /44/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 44.134798][ T3319] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 44.170755][ T3999] loop2: detected capacity change from 0 to 512 [ 44.171834][ T3999] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 44.176012][ T3999] EXT4-fs (loop2): 1 truncate cleaned up [ 44.176620][ T3999] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.207399][ T4002] can0: slcan on ptm0. [ 44.246740][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.273188][ T4001] can0 (unregistered): slcan off ptm0. [ 44.321662][ T9] IPVS: starting estimator thread 0... [ 44.405058][ T4011] IPVS: using max 2400 ests per chain, 120000 per kthread [ 44.526693][ T4040] netlink: 20 bytes leftover after parsing attributes in process `syz.2.247'. [ 44.610388][ T4048] loop3: detected capacity change from 0 to 1024 [ 44.624297][ T4048] EXT4-fs: inline encryption not supported [ 44.654350][ T4048] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.703794][ T4058] loop4: detected capacity change from 0 to 512 [ 44.726387][ T4059] loop0: detected capacity change from 0 to 512 [ 44.751275][ T4059] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 44.771297][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.782221][ T4058] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.795078][ T4058] ext4 filesystem being mounted at /49/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 44.813215][ T4058] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #2: comm syz.4.254: corrupted inode contents [ 44.830892][ T4059] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 44.852303][ T4059] System zones: 1-12 [ 44.858368][ T4058] EXT4-fs error (device loop4): ext4_dirty_inode:6450: inode #2: comm syz.4.254: mark_inode_dirty error [ 44.879415][ T4059] EXT4-fs (loop0): 1 truncate cleaned up [ 44.885089][ T4058] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #2: comm syz.4.254: corrupted inode contents [ 44.889438][ T4075] netlink: 8 bytes leftover after parsing attributes in process `syz.1.260'. [ 44.905739][ T4059] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.925231][ T4058] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #2: comm syz.4.254: mark_inode_dirty error [ 44.965115][ T4058] EXT4-fs warning (device loop4): ext4_es_cache_extent:1082: inode #2: comm syz.4.254: ES cache extent failed: add [0,1,22,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 44.965115][ T4058] [ 44.991049][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.039058][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.167344][ T4108] loop0: detected capacity change from 0 to 512 [ 45.205758][ T4108] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 45.239897][ T4108] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.255043][ T4115] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 45.276184][ T4108] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 45.305965][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.345167][ T4129] netlink: 16146 bytes leftover after parsing attributes in process `syz.1.283'. [ 45.345992][ T4127] debugfs: Bad value for 'uid' [ 45.373160][ T4127] debugfs: Bad value for 'uid' [ 45.467677][ T4145] netlink: 'syz.2.291': attribute type 21 has an invalid length. [ 45.482881][ T4144] netlink: 'syz.1.290': attribute type 1 has an invalid length. [ 45.616461][ T4167] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 45.634570][ T4167] EXT4-fs (loop1): 1 truncate cleaned up [ 45.644580][ T4167] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.723244][ T4179] netlink: 28 bytes leftover after parsing attributes in process `syz.3.309'. [ 45.732844][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.819933][ T4191] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 45.858893][ T4191] EXT4-fs (loop2): 1 truncate cleaned up [ 45.881510][ T4191] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.927737][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.044622][ T4224] netlink: 4 bytes leftover after parsing attributes in process `syz.4.328'. [ 46.095574][ T4224] veth3: entered promiscuous mode [ 46.206301][ T4241] EXT4-fs: Ignoring removed orlov option [ 46.501952][ T4258] netlink: 60 bytes leftover after parsing attributes in process `syz.1.342'. [ 46.532278][ T4258] netlink: 60 bytes leftover after parsing attributes in process `syz.1.342'. [ 46.542585][ T4241] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.672817][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.692596][ T4270] xt_CT: You must specify a L4 protocol and not use inversions on it [ 46.711104][ T4271] EXT4-fs: Ignoring removed orlov option [ 46.737085][ T4271] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.847700][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.911275][ T28] kauditd_printk_skb: 47 callbacks suppressed [ 46.911346][ T28] audit: type=1400 audit(2000000009.560:239): avc: denied { bind } for pid=4295 comm="syz.4.354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 46.978312][ T28] audit: type=1400 audit(2000000009.610:240): avc: denied { add_name } for pid=4281 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 47.013953][ T28] audit: type=1400 audit(2000000009.620:241): avc: denied { write } for pid=4295 comm="syz.4.354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 47.058404][ T28] audit: type=1400 audit(2000000009.660:242): avc: denied { remove_name } for pid=4301 comm="rm" name="resolv.conf.sl0.link" dev="tmpfs" ino=2226 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 47.099669][ T28] audit: type=1400 audit(2000000009.670:243): avc: denied { bpf } for pid=4302 comm="syz.1.357" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 47.291227][ T28] audit: type=1400 audit(2000000009.940:244): avc: denied { map } for pid=4335 comm="syz.3.364" path="socket:[7307]" dev="sockfs" ino=7307 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 47.358714][ T28] audit: type=1400 audit(2000000009.940:245): avc: denied { accept } for pid=4335 comm="syz.3.364" path="socket:[7307]" dev="sockfs" ino=7307 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 47.430560][ T28] audit: type=1400 audit(2000000010.080:246): avc: denied { perfmon } for pid=4348 comm="syz.2.372" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 47.576983][ T28] audit: type=1400 audit(2000000010.230:247): avc: denied { map } for pid=4370 comm="syz.1.383" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=7365 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 47.612332][ T28] audit: type=1400 audit(2000000010.230:248): avc: denied { read write } for pid=4370 comm="syz.1.383" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=7365 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 47.683281][ T4380] netlink: 64 bytes leftover after parsing attributes in process `syz.2.386'. [ 47.794310][ T4401] netlink: 8 bytes leftover after parsing attributes in process `syz.4.395'. [ 47.803877][ T4401] netlink: 4 bytes leftover after parsing attributes in process `syz.4.395'. [ 47.812874][ T4401] netlink: 'syz.4.395': attribute type 14 has an invalid length. [ 47.999052][ T4434] set_capacity_and_notify: 4 callbacks suppressed [ 47.999070][ T4434] loop0: detected capacity change from 0 to 512 [ 48.028526][ T4434] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.048809][ T4434] ext4 filesystem being mounted at /66/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.129054][ T4452] xt_hashlimit: size too large, truncated to 1048576 [ 48.141071][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.245535][ T4460] netlink: 26 bytes leftover after parsing attributes in process `syz.0.424'. [ 48.898941][ T4540] loop3: detected capacity change from 0 to 2048 [ 48.923931][ T4550] loop0: detected capacity change from 0 to 1024 [ 48.939326][ T4550] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 48.952720][ T4550] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 48.974717][ T4540] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.991160][ T4550] JBD2: no valid journal superblock found [ 49.005477][ T4550] EXT4-fs (loop0): Could not load journal inode [ 49.016664][ T4557] netlink: 8 bytes leftover after parsing attributes in process `syz.1.468'. [ 49.054850][ T4540] EXT4-fs error (device loop3): ext4_ext_precache:631: inode #2: comm syz.3.461: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 49.092237][ T4562] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4562 comm=syz.0.470 [ 49.155979][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.163294][ T4568] loop1: detected capacity change from 0 to 512 [ 49.195708][ T4568] EXT4-fs (loop1): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 49.250247][ T4568] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 49.296880][ T4577] loop2: detected capacity change from 0 to 1024 [ 49.330674][ T3312] EXT4-fs (loop1): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 49.331487][ T4585] netlink: 12 bytes leftover after parsing attributes in process `syz.0.481'. [ 49.340494][ T4583] loop3: detected capacity change from 0 to 164 [ 49.383443][ T4577] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.436786][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.487646][ T4603] loop4: detected capacity change from 0 to 256 [ 49.610780][ T4616] netlink: 8 bytes leftover after parsing attributes in process `syz.0.494'. [ 49.639862][ T4620] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 49.781767][ T4640] loop3: detected capacity change from 0 to 512 [ 49.797901][ T4644] loop4: detected capacity change from 0 to 136 [ 49.843880][ T4640] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.506: inode has both inline data and extents flags [ 49.851913][ T4644] iso9660: Corrupted directory entry in block 2 of inode 1472 [ 49.857409][ T4640] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 49.866715][ T4640] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.506: couldn't read orphan inode 15 (err -117) [ 49.876044][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 49.876065][ C1] EXT4-fs (loop3): initial error at time 2000000012: ext4_orphan_get:1391: inode 15 [ 49.876106][ C1] EXT4-fs (loop3): last error at time 2000000012: ext4_orphan_get:1391: inode 15 [ 49.915571][ T4640] loop3: lost filesystem error report for type 5 error -117 [ 49.916260][ T4640] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.960869][ T4640] EXT4-fs: Cannot specify journal on remount [ 49.992595][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.028691][ T4667] netlink: 'syz.3.518': attribute type 1 has an invalid length. [ 50.062368][ T4669] loop2: detected capacity change from 0 to 512 [ 50.096634][ T4669] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 50.109968][ T4669] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #13: comm syz.2.520: iget: bad i_size value: 12154757448730 [ 50.118023][ T35] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 50.124839][ T4669] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 50.130747][ T4669] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.520: couldn't read orphan inode 13 (err -117) [ 50.139299][ T35] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 50.140396][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 50.166164][ T35] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 50.166381][ C0] EXT4-fs (loop2): initial error at time 2000000012: ext4_orphan_get:1391: inode 13 [ 50.182631][ T35] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 50.183217][ C0] EXT4-fs (loop2): last error at time 2000000012: ext4_orphan_get:1391: inode 13 [ 50.199992][ T35] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 50.201933][ T4669] loop2: lost filesystem error report for type 5 error -117 [ 50.208249][ T4669] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.215076][ T35] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 50.255337][ T35] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 50.255359][ T4669] EXT4-fs warning (device loop2): ext4_lookup:1797: Inconsistent encryption contexts: 2/12 [ 50.262911][ T35] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 50.289430][ T4669] EXT4-fs warning (device loop2): ext4_lookup:1797: Inconsistent encryption contexts: 2/12 [ 50.303492][ T35] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 50.321723][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.330845][ T35] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 50.354592][ T35] hid-generic 0000:0000:0004.0001: hidraw0: HID v0.03 Device [syz0] on syz1 [ 50.354829][ T4682] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 50.396512][ T4682] EXT4-fs (loop2): 1 truncate cleaned up [ 50.411365][ T4682] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.442922][ T4683] fido_id[4683]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 50.482173][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.512194][ T4692] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.529: bg 0: block 5: invalid block bitmap [ 50.514161][ T4695] EXT4-fs: dax option not supported [ 50.560335][ T4692] loop2: lost filesystem error report for type 5 error -117 [ 50.560534][ T4692] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 50.568061][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 50.568085][ C1] EXT4-fs (loop2): initial error at time 2000000013: ext4_validate_block_bitmap:432 [ 50.568121][ C1] EXT4-fs (loop2): last error at time 2000000013: ext4_validate_block_bitmap:432 [ 50.625360][ T4692] loop2: lost filesystem error report for type 5 error -117 [ 50.625478][ T4692] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.529: invalid indirect mapped block 3 (level 2) [ 50.664657][ T4692] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 50.687009][ T4692] EXT4-fs (loop2): 1 orphan inode deleted [ 50.702253][ T4692] EXT4-fs (loop2): 1 truncate cleaned up [ 50.857718][ T4728] EXT4-fs: inline encryption not supported [ 50.951757][ T4728] ext4 filesystem being mounted at /93/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 51.013305][ T4752] SELinux: failed to load policy [ 51.286129][ T4791] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 51.440422][ T4807] netlink: 4 bytes leftover after parsing attributes in process `syz.0.586'. [ 51.470283][ T4809] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 51.498400][ T4809] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 51.525234][ T4815] tipc: Enabling of bearer rejected, failed to enable media [ 51.530166][ T4809] JBD2: no valid journal superblock found [ 51.548854][ T4809] EXT4-fs (loop2): Could not load journal inode [ 51.716341][ T4835] EXT4-fs: Ignoring removed nobh option [ 51.751356][ T4835] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 51.792729][ T4835] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.598: iget: bad i_size value: 38620345925642 [ 51.815353][ T4849] program syz.0.601 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 51.828643][ T4835] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 51.835910][ T4852] netlink: 36 bytes leftover after parsing attributes in process `syz.2.605'. [ 51.844956][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 51.861266][ C0] EXT4-fs (loop1): initial error at time 2000000014: ext4_orphan_get:1391: inode 15 [ 51.863955][ T4835] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.598: couldn't read orphan inode 15 (err -117) [ 51.870868][ C0] EXT4-fs (loop1): last error at time 2000000014: ext4_orphan_get:1391: inode 15 [ 51.892054][ T4854] program syz.0.601 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 51.903157][ T4835] loop1: lost filesystem error report for type 5 error -117 [ 51.932088][ T4835] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.598: invalid indirect mapped block 3973251072 (level 0) [ 51.953548][ T28] kauditd_printk_skb: 105 callbacks suppressed [ 51.953610][ T28] audit: type=1400 audit(2000000014.600:354): avc: denied { listen } for pid=4861 comm="syz.2.609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 51.962729][ T4860] netlink: 36 bytes leftover after parsing attributes in process `syz.3.607'. [ 52.032772][ T28] audit: type=1326 audit(2000000014.650:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4855 comm="syz.4.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fa84cf7c799 code=0x7ffc0000 [ 52.056521][ T28] audit: type=1400 audit(2000000014.680:356): avc: denied { checkpoint_restore } for pid=4865 comm="syz.4.611" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 52.300987][ T4896] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a842c128, mo2=0003] [ 52.309363][ T4896] System zones: 0-7 [ 52.317563][ T4896] EXT4-fs error (device loop3): ext4_find_extent:939: inode #2: comm syz.3.626: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 52.334847][ T4896] EXT4-fs (loop3): Remounting filesystem read-only [ 52.377721][ T4908] netlink: 16 bytes leftover after parsing attributes in process `syz.4.631'. [ 52.387032][ T4904] EXT4-fs: Ignoring removed orlov option [ 52.404718][ T4904] EXT4-fs: Ignoring removed nobh option [ 52.483554][ T4920] ext4 filesystem being mounted at /134/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.515834][ T28] audit: type=1400 audit(2000000015.160:357): avc: denied { setattr } for pid=4917 comm="syz.4.636" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 52.570764][ T4936] netlink: 12 bytes leftover after parsing attributes in process `syz.1.641'. [ 52.891785][ T4957] EXT4-fs: Ignoring removed nobh option [ 52.901655][ T4957] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 52.920879][ T4957] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.653: iget: bad i_size value: 38620345925642 [ 52.934298][ T4957] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 52.934485][ T4957] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.653: couldn't read orphan inode 15 (err -117) [ 52.943772][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 52.943807][ C1] EXT4-fs (loop3): initial error at time 2000000015: ext4_orphan_get:1391: inode 15 [ 52.943836][ C1] EXT4-fs (loop3): last error at time 2000000015: ext4_orphan_get:1391: inode 15 [ 52.983177][ T4957] loop3: lost filesystem error report for type 5 error -117 [ 52.987561][ T4957] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.653: invalid indirect mapped block 3973251072 (level 0) [ 53.039012][ T4960] set_capacity_and_notify: 14 callbacks suppressed [ 53.039031][ T4960] loop1: detected capacity change from 0 to 2048 [ 53.192390][ T28] audit: type=1400 audit(2000000015.840:358): avc: denied { name_bind } for pid=4971 comm="syz.3.659" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 53.217309][ T28] audit: type=1400 audit(2000000015.840:359): avc: denied { node_bind } for pid=4971 comm="syz.3.659" saddr=fe80::aa src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 53.290882][ T4978] netlink: 'syz.3.662': attribute type 1 has an invalid length. [ 53.492240][ T4984] loop1: detected capacity change from 0 to 256 [ 53.531677][ T4984] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 196) [ 53.540158][ T4984] FAT-fs (loop1): Filesystem has been set read-only [ 53.565079][ T4988] tipc: Enabling of bearer rejected, failed to enable media [ 53.573872][ T3312] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 196) [ 53.675346][ T5002] netlink: 12 bytes leftover after parsing attributes in process `syz.3.674'. [ 53.705245][ T5002] netlink: 12 bytes leftover after parsing attributes in process `syz.3.674'. [ 53.740827][ T5009] loop1: detected capacity change from 0 to 512 [ 53.767762][ T5007] loop4: detected capacity change from 0 to 1024 [ 53.790833][ T5007] EXT4-fs: Ignoring removed i_version option [ 53.803704][ T5007] EXT4-fs: Ignoring removed bh option [ 53.809316][ T5007] EXT4-fs: inline encryption not supported [ 53.828874][ T5007] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 53.859652][ T28] audit: type=1400 audit(2000000016.500:360): avc: denied { nlmsg_read } for pid=5020 comm="syz.3.682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 53.922203][ T5007] EXT4-fs error (device loop4): ext4_map_blocks:776: inode #3: block 2: comm syz.4.676: lblock 2 mapped to illegal pblock 2 (length 1) [ 53.959794][ T5007] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 53.964958][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 53.980585][ C0] EXT4-fs (loop4): initial error at time 2000000016: ext4_map_blocks:776: inode 3: block 2 [ 53.990647][ C0] EXT4-fs (loop4): last error at time 2000000016: ext4_map_blocks:776: inode 3: block 2 [ 54.005472][ T5007] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 54.013746][ T5007] EXT4-fs error (device loop4): ext4_map_blocks:776: inode #3: block 48: comm syz.4.676: lblock 0 mapped to illegal pblock 48 (length 1) [ 54.029590][ T5007] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 54.032387][ T5007] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 54.056442][ T28] audit: type=1400 audit(2000000016.710:361): avc: denied { create } for pid=5032 comm="syz.3.687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 54.062303][ T5007] EXT4-fs error (device loop4): ext4_acquire_dquot:7001: comm syz.4.676: Failed to acquire dquot type 0 [ 54.095142][ T5007] loop4: lost filesystem error report for type 5 error -117 [ 54.095310][ T5007] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 54.120600][ T5007] loop4: lost filesystem error report for type 5 error -117 [ 54.121454][ T5007] EXT4-fs error (device loop4): ext4_evict_inode:255: inode #11: comm syz.4.676: mark_inode_dirty error [ 54.140542][ T5007] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 54.142463][ T5007] EXT4-fs warning (device loop4): ext4_evict_inode:258: couldn't mark inode dirty (err -117) [ 54.175276][ T5007] EXT4-fs (loop4): 1 orphan inode deleted [ 54.220648][ T57] EXT4-fs error (device loop4): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 54.248586][ T57] EXT4-fs error (device loop4): ext4_release_dquot:7037: comm kworker/u8:4: Failed to release dquot type 0 [ 54.300543][ T5057] loop0: detected capacity change from 0 to 512 [ 54.302355][ T5007] EXT4-fs error (device loop4): __ext4_get_inode_loc:4782: comm syz.4.676: Invalid inode table block 1 in block_group 0 [ 54.427074][ T5007] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 54.455141][ T5073] netlink: 'syz.2.707': attribute type 4 has an invalid length. [ 54.570099][ T12] EXT4-fs error (device loop4): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 54.604713][ T12] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 54.604826][ T12] EXT4-fs error (device loop4): ext4_release_dquot:7037: comm kworker/u8:0: Failed to release dquot type 0 [ 54.623407][ T5097] netlink: 'syz.0.719': attribute type 10 has an invalid length. [ 54.653940][ T12] loop4: lost filesystem error report for type 5 error -117 [ 54.655004][ T3311] EXT4-fs error (device loop4): __ext4_get_inode_loc:4782: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 54.707876][ T3311] loop4: lost filesystem error report for type 5 error -117 [ 54.708035][ T3311] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 54.744588][ T5107] loop0: detected capacity change from 0 to 4096 [ 54.766532][ T3311] EXT4-fs error (device loop4): ext4_quota_off:7285: inode #3: comm syz-executor: mark_inode_dirty error [ 54.798996][ T3311] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 54.841772][ T5123] loop3: detected capacity change from 0 to 512 [ 54.858919][ T5123] EXT4-fs: Ignoring removed orlov option [ 54.885499][ T5123] EXT4-fs: Ignoring removed mblk_io_submit option [ 54.948276][ T5123] EXT4-fs error (device loop3): ext4_iget_extra_inode:5025: inode #15: comm syz.3.732: corrupted in-inode xattr: e_value size too large [ 54.981176][ T5123] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 54.981402][ T5123] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.732: couldn't read orphan inode 15 (err -117) [ 54.981430][ T5123] fserror_report: 1 callbacks suppressed [ 54.981439][ T5123] loop3: lost filesystem error report for type 5 error -117 [ 54.981849][ T5139] loop2: detected capacity change from 0 to 512 [ 54.982189][ T5139] EXT4-fs: Ignoring removed nobh option [ 54.982285][ T5139] EXT4-fs: Ignoring removed orlov option [ 55.005459][ T5139] EXT4-fs error (device loop2): __ext4_iget:5378: inode #11: block 1: comm syz.2.739: invalid block [ 55.005489][ T5139] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 55.005734][ T5139] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.739: couldn't read orphan inode 11 (err -117) [ 55.005763][ T5139] loop2: lost filesystem error report for type 5 error -117 [ 55.066276][ T5133] loop4: detected capacity change from 0 to 8192 [ 55.197352][ T5158] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 55.218189][ T5156] netlink: 16 bytes leftover after parsing attributes in process `syz.2.747'. [ 55.292306][ T5164] 9p: p9: multiple sources not supported [ 55.343943][ T5167] netem: change failed [ 55.484437][ T5168] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.491720][ T5168] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.548951][ T5168] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 55.570121][ T5199] netlink: 56 bytes leftover after parsing attributes in process `syz.1.765'. [ 55.776428][ T5232] tipc: Enabled bearer , priority 10 [ 56.112590][ T5291] netlink: 8 bytes leftover after parsing attributes in process `syz.3.802'. [ 56.195549][ T5307] netlink: 20 bytes leftover after parsing attributes in process `syz.3.808'. [ 56.302581][ T5324] netlink: 'syz.2.812': attribute type 83 has an invalid length. [ 56.421715][ T5343] loop2: detected capacity change from 0 to 512 [ 56.451920][ T5343] ext4 filesystem being mounted at /177/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.811975][ T5376] Driver unsupported XDP return value 0 on prog (id 51) dev N/A, expect packet loss! [ 56.895138][ T9] tipc: Node number set to 4278255617 [ 56.905795][ T5390] netlink: 'syz.3.845': attribute type 10 has an invalid length. [ 56.916247][ T5390] __nla_validate_parse: 1 callbacks suppressed [ 56.916262][ T5390] netlink: 256 bytes leftover after parsing attributes in process `syz.3.845'. [ 56.944689][ T5394] bridge0: entered promiscuous mode [ 57.041970][ T5406] sch_tbf: burst 4 is lower than device lo mtu (65550) ! [ 57.172983][ T5422] tipc: Started in network mode [ 57.186907][ T5422] tipc: Node identity fe80000000000000000000000000002, cluster identity 4711 [ 57.197189][ T5422] tipc: Enabled bearer , priority 10 [ 57.274433][ T28] kauditd_printk_skb: 57 callbacks suppressed [ 57.274448][ T28] audit: type=1400 audit(2000000019.920:417): avc: denied { cpu } for pid=5434 comm="syz.2.867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 57.307131][ T5436] EXT4-fs: Ignoring removed orlov option [ 57.359835][ T5436] EXT4-fs (loop2): stripe (9) is not aligned with cluster size (16), stripe is disabled [ 57.486844][ T5453] EXT4-fs: Ignoring removed bh option [ 57.516856][ T28] audit: type=1400 audit(2000000020.170:418): avc: denied { bind } for pid=5454 comm="syz.4.875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 57.517885][ T5453] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #15: comm syz.0.874: corrupted inode contents [ 57.549036][ T5453] EXT4-fs (loop0): Remounting filesystem read-only [ 57.615905][ T43] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 57.636628][ T43] Quota error (device loop0): write_blk: dquota write failed [ 57.652840][ T43] Quota error (device loop0): free_dqentry: Can't write quota data block 5 [ 57.682784][ T5461] ext4 filesystem being mounted at /150/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.864282][ T28] audit: type=1400 audit(2000000020.510:419): avc: denied { create } for pid=5487 comm="syz.4.889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 57.941482][ T28] audit: type=1400 audit(2000000020.550:420): avc: denied { bind } for pid=5487 comm="syz.4.889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 57.999405][ T5490] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 58.042533][ T5507] netlink: 4 bytes leftover after parsing attributes in process `syz.0.899'. [ 58.116619][ T28] audit: type=1400 audit(2000000020.770:421): avc: denied { append } for pid=5509 comm="syz.4.901" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 58.140675][ T5514] set_capacity_and_notify: 6 callbacks suppressed [ 58.140689][ T5514] loop0: detected capacity change from 0 to 1024 [ 58.165485][ T5519] mmap: syz.1.903 (5519) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 58.209900][ T5524] loop4: detected capacity change from 0 to 512 [ 58.228391][ T28] audit: type=1400 audit(2000000020.860:422): avc: denied { rename } for pid=5513 comm="syz.0.904" name="file0" dev="loop0" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 58.263118][ T5524] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 58.321959][ T1032] tipc: Node number set to 4269801504 [ 58.332060][ T5524] EXT4-fs (loop4): 1 truncate cleaned up [ 58.370276][ T5532] sch_tbf: burst 4 is lower than device lo mtu (65550) ! [ 58.518751][ T5543] loop2: detected capacity change from 0 to 512 [ 58.538815][ T5543] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.914: inode has both inline data and extents flags [ 58.555973][ T5548] netlink: 810 bytes leftover after parsing attributes in process `syz.4.917'. [ 58.575006][ T5543] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 58.577165][ T5550] loop0: detected capacity change from 0 to 1024 [ 58.586531][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 58.586552][ C1] EXT4-fs (loop2): initial error at time 2000000021: ext4_orphan_get:1391: inode 15 [ 58.586586][ C1] EXT4-fs (loop2): last error at time 2000000021: ext4_orphan_get:1391: inode 15 [ 58.630268][ T5543] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.914: couldn't read orphan inode 15 (err -117) [ 58.636009][ T5550] EXT4-fs: inline encryption not supported [ 58.651049][ T5550] EXT4-fs: Ignoring removed i_version option [ 58.658093][ T5543] loop2: lost filesystem error report for type 5 error -117 [ 58.719817][ T28] audit: type=1400 audit(2000000021.370:423): avc: denied { name_bind } for pid=5559 comm="syz.1.923" src=20007 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 58.751715][ T5543] syz_tun: entered promiscuous mode [ 58.763358][ T5556] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 58.793524][ T5558] loop4: detected capacity change from 0 to 1024 [ 58.817697][ T5558] EXT4-fs: Ignoring removed orlov option [ 58.831787][ T28] audit: type=1400 audit(2000000021.470:424): avc: denied { read } for pid=5549 comm="syz.0.918" path="/161/file1/bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 58.835120][ T5558] EXT4-fs (loop4): stripe (9) is not aligned with cluster size (16), stripe is disabled [ 58.887632][ T5558] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a843c118, mo2=0002] [ 58.906832][ T5558] System zones: 0-1, 3-12 [ 58.914264][ T5577] loop2: detected capacity change from 0 to 512 [ 58.940368][ T5577] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 59.119003][ T5597] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 59.158492][ T5597] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 59.174482][ T5597] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 59.250436][ T5610] loop0: detected capacity change from 0 to 1024 [ 59.285388][ T5610] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #11: comm syz.0.946: missing EA_INODE flag [ 59.318131][ T5610] EXT4-fs (loop0): Remounting filesystem read-only [ 59.351739][ T5628] loop2: detected capacity change from 0 to 1024 [ 59.370845][ T5628] EXT4-fs: Ignoring removed orlov option [ 59.401340][ T5633] netlink: 8 bytes leftover after parsing attributes in process `syz.0.956'. [ 59.415076][ T5628] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a002c018, mo2=0002] [ 59.429196][ T5635] netlink: 32 bytes leftover after parsing attributes in process `syz.3.957'. [ 59.442779][ T5628] System zones: 0-1, 3-12 [ 59.484207][ T5644] loop0: detected capacity change from 0 to 764 [ 59.508420][ T5644] Symlink component flag not implemented [ 59.545920][ T5644] Symlink component flag not implemented [ 59.571160][ T5644] Symlink component flag not implemented (128) [ 59.578238][ T5644] Symlink component flag not implemented (122) [ 59.596623][ T5654] loop3: detected capacity change from 0 to 164 [ 59.641508][ T5654] ISOFS: unable to read i-node block [ 59.659439][ T5654] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 59.707712][ T5664] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 59.720638][ T5664] FAT-fs (loop2): Filesystem has been set read-only [ 59.740583][ T5668] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 59.795503][ T5673] EXT4-fs: Ignoring removed orlov option [ 59.825540][ T5673] EXT4-fs (loop3): stripe (9) is not aligned with cluster size (16), stripe is disabled [ 59.874981][ T5673] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a843c118, mo2=0002] [ 59.902523][ T5673] System zones: 0-1, 3-12 [ 59.981455][ T5692] netlink: 368 bytes leftover after parsing attributes in process `syz.0.982'. [ 60.006334][ T5694] tipc: Invalid UDP bearer configuration [ 60.006347][ T5694] tipc: Enabling of bearer rejected, failed to enable media [ 60.146732][ T5712] EXT4-fs: Ignoring removed orlov option [ 60.166725][ T5712] EXT4-fs (loop1): stripe (9) is not aligned with cluster size (16), stripe is disabled [ 60.186676][ T5714] ext4 filesystem being mounted at /199/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 60.207506][ T5712] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a843c118, mo2=0002] [ 60.230027][ T5712] System zones: 0-1, 3-12 [ 60.237502][ T5714] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #2: comm syz.3.993: corrupted inode contents [ 60.256966][ T5714] EXT4-fs error (device loop3): ext4_dirty_inode:6450: inode #2: comm syz.3.993: mark_inode_dirty error [ 60.268881][ T5714] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #2: comm syz.3.993: corrupted inode contents [ 60.281258][ T5714] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #2: comm syz.3.993: mark_inode_dirty error [ 60.301023][ T5727] EXT4-fs warning (device loop3): ext4_es_cache_extent:1082: inode #2: comm syz.3.993: ES cache extent failed: add [0,1,22,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 60.301023][ T5727] [ 60.364384][ T5738] random: crng reseeded on system resumption [ 60.760916][ T5794] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 60.779492][ T5794] FAT-fs (loop0): Filesystem has been set read-only [ 60.880769][ T5803] Symlink component flag not implemented [ 60.890483][ T5803] Symlink component flag not implemented (116) [ 61.090803][ T5824] ext4 filesystem being mounted at /227/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 61.360538][ T3304] ================================================================== [ 61.368666][ T3304] BUG: KCSAN: data-race in _copy_to_iter / fat16_ent_put [ 61.375797][ T3304] [ 61.378213][ T3304] write to 0xffff888135980568 of 2 bytes by task 5836 on cpu 0: [ 61.386100][ T3304] fat16_ent_put+0x28/0x60 [ 61.390540][ T3304] fat_alloc_clusters+0x57b/0xc50 [ 61.395580][ T3304] fat_get_block+0x258/0x5e0 [ 61.400235][ T3304] __block_write_begin_int+0x400/0xf90 [ 61.405819][ T3304] cont_write_begin+0x5fe/0x970 [ 61.410705][ T3304] fat_write_begin+0x4f/0xe0 [ 61.415321][ T3304] generic_perform_write+0x183/0x490 [ 61.420721][ T3304] __generic_file_write_iter+0x9e/0x120 [ 61.426312][ T3304] generic_file_write_iter+0x8d/0x310 [ 61.431689][ T3304] vfs_write+0x5a6/0x9f0 [ 61.435942][ T3304] ksys_write+0xdc/0x1a0 [ 61.440274][ T3304] __x64_sys_write+0x40/0x50 [ 61.444890][ T3304] x64_sys_call+0x27e1/0x3020 [ 61.449589][ T3304] do_syscall_64+0x12c/0x370 [ 61.454181][ T3304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.460106][ T3304] [ 61.462432][ T3304] read to 0xffff888135980400 of 1024 bytes by task 3304 on cpu 1: [ 61.470328][ T3304] _copy_to_iter+0x130/0xea0 [ 61.474942][ T3304] copy_page_to_iter+0x18f/0x2d0 [ 61.480041][ T3304] filemap_read+0x407/0xa10 [ 61.484563][ T3304] blkdev_read_iter+0x22d/0x2e0 [ 61.489433][ T3304] vfs_read+0x6c0/0x7f0 [ 61.493647][ T3304] ksys_read+0xdc/0x1a0 [ 61.497814][ T3304] __x64_sys_read+0x40/0x50 [ 61.502310][ T3304] x64_sys_call+0x2886/0x3020 [ 61.506983][ T3304] do_syscall_64+0x12c/0x370 [ 61.511581][ T3304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.517509][ T3304] [ 61.520529][ T3304] Reported by Kernel Concurrency Sanitizer on: [ 61.526884][ T3304] CPU: 1 UID: 0 PID: 3304 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 61.536266][ T3304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 61.546680][ T3304] ==================================================================